last executing test programs: 4m34.995722151s ago: executing program 32 (id=142): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r1}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 3m51.753846842s ago: executing program 1 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x4a9) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x8500017e) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') 3m50.707911798s ago: executing program 1 (id=326): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd=r0, 0x1000, 0x0, 0x0, 0xa, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m48.910198789s ago: executing program 1 (id=336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) setresuid(0xee01, 0xee01, 0xee00) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 3m48.101165377s ago: executing program 1 (id=342): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0) 3m47.612101271s ago: executing program 1 (id=345): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x10001, 0x28d, {{0x18, 0x4, 0x3, 0x8, 0x60, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x4c, 0xf, 0x1, 0xd, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xfffffffe}, {@remote, 0x7ff}, {@empty, 0x45d}, {@loopback, 0x1}, {@loopback, 0x8}, {@broadcast, 0x9}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 3m39.221935159s ago: executing program 1 (id=376): socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pselect6(0x40, &(0x7f0000000600)={0xe, 0x40, 0x3c92, 0x0, 0x1ff, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={[0x0, 0x9]}, 0x8}) 3m38.282817767s ago: executing program 33 (id=376): socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pselect6(0x40, &(0x7f0000000600)={0xe, 0x40, 0x3c92, 0x0, 0x1ff, 0x6, 0x0, 0x1}, 0x0, 0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={[0x0, 0x9]}, 0x8}) 3m22.702283103s ago: executing program 4 (id=457): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, 0x0, 0x32600) 3m22.281289567s ago: executing program 4 (id=459): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x4) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m20.951540035s ago: executing program 4 (id=464): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x20000001}) 3m20.183457209s ago: executing program 4 (id=468): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000480)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@umask={'umask', 0x3d, 0x3}}, {@keep_last_dots}, {}, {@umask={'umask', 0x3d, 0x7f}}, {@discard}, {@fmask={'fmask', 0x3d, 0x8}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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") mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a95005, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 3m19.01120405s ago: executing program 4 (id=475): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000009, 0x204031, 0xffffffffffffffff, 0xd0c6f000) mlock(&(0x7f00001d3000/0x3000)=nil, 0x3000) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000151000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000000c000/0x3000)=nil) 3m18.360599701s ago: executing program 4 (id=476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x3720, &(0x7f0000000ac0)={0x0, 0x22e8, 0x40, 0x2, 0x31}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000040), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) 3m15.737710379s ago: executing program 34 (id=476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x3720, &(0x7f0000000ac0)={0x0, 0x22e8, 0x40, 0x2, 0x31}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000040), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) 2m31.216967244s ago: executing program 6 (id=736): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) fcntl$getflags(r1, 0x401) 2m29.974141591s ago: executing program 6 (id=741): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="8ae91834b509f865917cb233e9d2f03eb6a5661ddf1b3e7e2db876ac4712c52f327ee646cb3e8cc0a4fc4b09bd6ab754e474", 0x32}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f00000002c0)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5, 0x0, 0x0, 0xf2ff}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001080)="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", 0x155}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f0000000cc0), 0x34}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000480)="7cb4ed8d75b2bf3112799fd6df65ec2e59789849019ba02cf53691cc6a3861c12a7561473f42faa934fbade4b821748f020274d96c341c767249d5c73a686846b2277104adaec1988872649bfc0b166d57f560d39595e97c35abc2e5ab6e198601eb33839b2423b4ddfda82faca046d05d68", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) 2m29.610022254s ago: executing program 6 (id=745): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b937600000000000000000000000000000000000000000002000000000000000100"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x1, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 2m28.812728691s ago: executing program 6 (id=749): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180), 0xff, 0x4a9, &(0x7f0000000580)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m28.115675566s ago: executing program 6 (id=753): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) cachestat(r0, &(0x7f0000000080)={0xeaa6, 0x7}, &(0x7f00000000c0), 0x0) 2m27.511140302s ago: executing program 6 (id=756): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xb, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000057c000/0x2000)=nil, 0x2000}, 0x1}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2m25.758819991s ago: executing program 35 (id=756): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xb, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000057c000/0x2000)=nil, 0x2000}, 0x1}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m22.441834398s ago: executing program 3 (id=1105): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'a', ' *:* ', 'rw\x00'}, 0x5) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0xa) 1m21.881606895s ago: executing program 3 (id=1109): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 1m20.916024331s ago: executing program 3 (id=1117): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0xa6d47960d1d42ccf, 0x41, &(0x7f0000000640)=""/65}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000280)=0x1) 1m20.42072716s ago: executing program 3 (id=1120): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 1m19.729601283s ago: executing program 3 (id=1124): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x3c, 0x0, 0x0, 0xc0000}, {0x6, 0x0, 0x6b, 0xfffffffe}]}, 0x8) 1m18.867308169s ago: executing program 3 (id=1128): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000007c0)="e5184b5c4c0a", 0x6) 1m17.173060019s ago: executing program 36 (id=1128): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000007c0)="e5184b5c4c0a", 0x6) 1m14.57863123s ago: executing program 8 (id=1143): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}], 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r2, 0xf}, 0x8) 1m13.402435972s ago: executing program 8 (id=1149): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m12.560210343s ago: executing program 8 (id=1153): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0xc, r2, 0x1, 0xc, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) 1m10.533377409s ago: executing program 8 (id=1159): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$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") r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0xb54, &(0x7f0000000080)={0x0, 0x28ba1, 0x1000, 0x3, 0x1ad}) ptrace(0x10, r0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 1m9.538321917s ago: executing program 8 (id=1165): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, 0x0, 0x0) 1m8.582688727s ago: executing program 8 (id=1170): r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 1m6.929100412s ago: executing program 37 (id=1170): r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 11.404106037s ago: executing program 7 (id=1458): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015000100000000000000df25fe88000000000000000000000000010100000000000000000000000000000001"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 10.643994628s ago: executing program 7 (id=1464): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00004dc000/0x1000)=nil, 0x1000}, 0x2}) 10.297482916s ago: executing program 7 (id=1468): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=0x3, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94172000) 8.632284775s ago: executing program 7 (id=1479): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="f89fcfb587a4792b", 0x8) 7.457039052s ago: executing program 7 (id=1483): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.806177929s ago: executing program 7 (id=1504): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) 4.032090139s ago: executing program 0 (id=1509): r0 = gettid() r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.592927065s ago: executing program 0 (id=1512): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000000000090581034000000000090582"], 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) 3.185036062s ago: executing program 2 (id=1515): socket$inet6(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 2.860196299s ago: executing program 9 (id=1517): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2.465534113s ago: executing program 9 (id=1519): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xfffffffd}, 0x1c) 2.44212308s ago: executing program 2 (id=1520): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) r1 = epoll_create1(0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0xc0000008}) 2.231412888s ago: executing program 5 (id=1521): socket$netlink(0x10, 0x3, 0x0) creat(0x0, 0xecf86c37d53049cc) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="80020000160001000000001000000000fe8000000000000000000000000000aaff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000a0000000000000000000000000000000000000008001f00010000000c0015005c0735"], 0x280}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000100000000000000003300000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000820000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xf8}}, 0x0) 2.075896763s ago: executing program 9 (id=1522): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.822525244s ago: executing program 9 (id=1523): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000002180)={[0xfffffffffffffff7]}, 0x8, 0x80000) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r1 = getpgrp(0xffffffffffffffff) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x8, &(0x7f0000002380)={0x2a, 0x1, 0x4}) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 1.787624153s ago: executing program 5 (id=1524): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x10) 1.568819651s ago: executing program 9 (id=1525): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000001000000000000"], 0xfc}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.419908674s ago: executing program 0 (id=1526): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 1.332196726s ago: executing program 5 (id=1527): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 1.241454698s ago: executing program 2 (id=1528): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000000), 0x3, r1, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x9, r3, r1}) 1.10172688s ago: executing program 0 (id=1529): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) 907.669047ms ago: executing program 2 (id=1530): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 881.087921ms ago: executing program 5 (id=1531): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00') 632.200229ms ago: executing program 0 (id=1532): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 472.159799ms ago: executing program 2 (id=1533): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) 463.804221ms ago: executing program 5 (id=1534): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000900)='./file1\x00', 0x200050, &(0x7f0000000180)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000", @ANYRESDEC=0x0], 0x1, 0x2e4, &(0x7f0000000200)="$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") r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x48c0) 236.328112ms ago: executing program 9 (id=1535): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) rmdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 169.741273ms ago: executing program 0 (id=1536): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x68}}, 0x0) 94.361196ms ago: executing program 2 (id=1537): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8008a73, 0x100, 0x22, 0x1b7, 0x0, r0}, &(0x7f0000000300)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=1538): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200260b0a000200aaaaaaaaaabb000008000f"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): a found [ 319.733116][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.775735][ T24] usb write operation failed. (-71) [ 319.796560][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 319.808261][ T24] dvbdev: DVB: registering new adapter (Terratec H7) [ 319.815366][ T24] usb 3-1: media controller created [ 319.859223][ T7500] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 319.872563][ T6876] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.883399][ T24] usb read operation failed. (-71) [ 319.925335][ T5819] Bluetooth: hci2: command tx timeout [ 319.934208][ T24] usb write operation failed. (-71) [ 319.957350][ T24] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 319.985494][ T24] usb 3-1: USB disconnect, device number 4 [ 320.016468][ T6876] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.040398][ T6876] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.070702][ T6876] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.552439][ T7481] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.560174][ T7481] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.573335][ T7481] bridge_slave_0: entered allmulticast mode [ 321.583056][ T7481] bridge_slave_0: entered promiscuous mode [ 321.678167][ T7481] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.685887][ T7481] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.693579][ T7481] bridge_slave_1: entered allmulticast mode [ 321.704324][ T7481] bridge_slave_1: entered promiscuous mode [ 321.761527][ T30] audit: type=1804 audit(1755470832.779:40): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.497" name="/newroot/126/bus" dev="tmpfs" ino=674 res=1 errno=0 [ 321.976802][ T7481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.004908][ T5819] Bluetooth: hci2: command tx timeout [ 322.047113][ T7481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.154898][ T7481] team0: Port device team_slave_0 added [ 322.184954][ T7481] team0: Port device team_slave_1 added [ 322.429381][ T7481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.436690][ T7481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.463203][ T7481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.589093][ T7481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.596573][ T7481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.623061][ T7481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.871898][ T7481] hsr_slave_0: entered promiscuous mode [ 322.884385][ T7481] hsr_slave_1: entered promiscuous mode [ 322.893587][ T7481] debugfs: 'hsr0' already exists in 'hsr' [ 322.900566][ T7481] Cannot create hsr debugfs directory [ 323.073102][ T7539] loop3: detected capacity change from 0 to 256 [ 323.361228][ T7542] IPv6: sit1: Disabled Multicast RS [ 323.371409][ T7542] sit1: entered allmulticast mode [ 323.419087][ T7539] FAT-fs (loop3): Directory bread(block 64) failed [ 323.426539][ T7539] FAT-fs (loop3): Directory bread(block 65) failed [ 323.433421][ T7539] FAT-fs (loop3): Directory bread(block 66) failed [ 323.441294][ T7539] FAT-fs (loop3): Directory bread(block 67) failed [ 323.449289][ T7539] FAT-fs (loop3): Directory bread(block 68) failed [ 323.457284][ T7539] FAT-fs (loop3): Directory bread(block 69) failed [ 323.465186][ T7539] FAT-fs (loop3): Directory bread(block 70) failed [ 323.471902][ T7539] FAT-fs (loop3): Directory bread(block 71) failed [ 323.479657][ T7539] FAT-fs (loop3): Directory bread(block 72) failed [ 323.487574][ T7539] FAT-fs (loop3): Directory bread(block 73) failed [ 323.765753][ T30] audit: type=1800 audit(1755470834.779:41): pid=7539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.502" name="bus" dev="loop3" ino=1048625 res=0 errno=0 [ 324.034658][ T7550] loop2: detected capacity change from 0 to 256 [ 324.090262][ T5819] Bluetooth: hci2: command tx timeout [ 324.117491][ T7550] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 324.130685][ T7550] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 324.249954][ T7550] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 324.389742][ T7481] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 324.484791][ T7481] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 324.498561][ T7555] loop3: detected capacity change from 0 to 128 [ 324.534760][ T7555] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 324.549425][ T7481] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 324.576161][ T7555] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 324.588646][ T7481] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 324.794821][ T11] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 324.916480][ T4152] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 324.978889][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 325.009957][ T11] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.019516][ T11] usb 6-1: config 0 has no interface number 0 [ 325.091116][ T11] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 325.101828][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.110340][ T11] usb 6-1: Product: syz [ 325.114793][ T11] usb 6-1: Manufacturer: syz [ 325.119640][ T11] usb 6-1: SerialNumber: syz [ 325.196399][ T11] usb 6-1: config 0 descriptor?? [ 325.221245][ T11] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 325.726264][ T7481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.923507][ T7481] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.961445][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.969066][ T4152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.123924][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.131425][ T4152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.170612][ T5819] Bluetooth: hci2: command tx timeout [ 326.296963][ T11] gspca_spca1528: reg_w err -71 [ 326.302241][ T11] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 326.365311][ T11] usb 6-1: USB disconnect, device number 2 [ 326.378724][ T6881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.386903][ T6881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.585026][ T7575] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005 [ 326.703951][ T4002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.712206][ T4002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.889054][ T7578] loop3: detected capacity change from 0 to 256 [ 327.183079][ T7578] FAT-fs (loop3): Directory bread(block 64) failed [ 327.190673][ T7578] FAT-fs (loop3): Directory bread(block 65) failed [ 327.199229][ T7578] FAT-fs (loop3): Directory bread(block 66) failed [ 327.206141][ T7578] FAT-fs (loop3): Directory bread(block 67) failed [ 327.213008][ T7578] FAT-fs (loop3): Directory bread(block 68) failed [ 327.220027][ T7578] FAT-fs (loop3): Directory bread(block 69) failed [ 327.227111][ T7578] FAT-fs (loop3): Directory bread(block 70) failed [ 327.234068][ T7578] FAT-fs (loop3): Directory bread(block 71) failed [ 327.242001][ T7578] FAT-fs (loop3): Directory bread(block 72) failed [ 327.249256][ T7578] FAT-fs (loop3): Directory bread(block 73) failed [ 327.930151][ T7481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.358549][ T7601] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.521'. [ 328.408223][ T7600] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.521'. [ 328.487137][ T7606] warning: `syz.5.522' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 329.994317][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 330.091592][ T7481] veth0_vlan: entered promiscuous mode [ 330.177071][ T7481] veth1_vlan: entered promiscuous mode [ 330.432413][ T7481] veth0_macvtap: entered promiscuous mode [ 330.519048][ T7481] veth1_macvtap: entered promiscuous mode [ 330.681558][ T7481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.765447][ T7481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.865217][ T3690] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.905755][ T3690] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.962947][ T4284] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.046199][ T4284] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.752633][ T7662] loop3: detected capacity change from 0 to 256 [ 331.845800][ T7662] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 333.888885][ T7696] loop6: detected capacity change from 0 to 1024 [ 334.246216][ T7704] loop2: detected capacity change from 0 to 512 [ 334.300885][ T3690] hfsplus: b-tree write err: -5, ino 4 [ 334.379974][ T7704] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 334.390622][ T7704] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 334.486716][ T7704] EXT4-fs (loop2): mount failed [ 334.876215][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 335.114709][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.126181][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 335.171521][ T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 335.182600][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 335.191048][ T24] usb 7-1: SerialNumber: syz [ 335.536144][ T24] usb 7-1: 0:2 : does not exist [ 335.615618][ T24] usb 7-1: USB disconnect, device number 2 [ 336.036002][ T3690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.044453][ T3690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.251395][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.259623][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.972616][ T7742] netlink: 'syz.2.571': attribute type 6 has an invalid length. [ 337.775721][ T7750] loop3: detected capacity change from 0 to 4096 [ 337.964597][ T7761] bridge0: port 3(vlan2) entered blocking state [ 337.971372][ T7761] bridge0: port 3(vlan2) entered disabled state [ 337.978754][ T7761] vlan2: entered allmulticast mode [ 337.984329][ T7761] bond0: entered allmulticast mode [ 337.989632][ T7761] bond_slave_0: entered allmulticast mode [ 338.000233][ T7761] bond_slave_1: entered allmulticast mode [ 338.012890][ T7761] vlan2: entered promiscuous mode [ 338.018379][ T7761] bond0: entered promiscuous mode [ 338.023589][ T7761] bond_slave_0: entered promiscuous mode [ 338.030811][ T7761] bond_slave_1: entered promiscuous mode [ 338.199090][ T7750] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 338.224420][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 338.437134][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.447738][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 338.519390][ T24] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 338.530927][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.539433][ T24] usb 3-1: Product: syz [ 338.543997][ T24] usb 3-1: Manufacturer: syz [ 338.548781][ T24] usb 3-1: SerialNumber: syz [ 338.590968][ T5822] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22. [ 338.666967][ T24] usb 3-1: config 0 descriptor?? [ 338.731374][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 338.781964][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 338.821430][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 338.830560][ T24] usb 3-1: media controller created [ 338.916865][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.048050][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 339.229349][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.7.589'. [ 339.329057][ T24] DVB: Unable to find symbol tda10046_attach() [ 339.335898][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 339.344828][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 339.374265][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 339.401093][ T9] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 339.409807][ T9] usb 7-1: config 0 has no interface number 0 [ 339.416352][ T9] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.482115][ T9] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 339.492022][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.500475][ T9] usb 7-1: Product: syz [ 339.504919][ T9] usb 7-1: Manufacturer: syz [ 339.509686][ T9] usb 7-1: SerialNumber: syz [ 339.567788][ T9] usb 7-1: config 0 descriptor?? [ 339.599003][ T9] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 339.610362][ T9] em28xx 7-1:0.132: Video interface 132 found: [ 340.032441][ T24] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 340.047238][ T9] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 340.087147][ T24] usb 3-1: USB disconnect, device number 5 [ 340.502029][ T9] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 340.515249][ T9] em28xx 7-1:0.132: board has no eeprom [ 340.615588][ T9] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 340.624050][ T9] em28xx 7-1:0.132: analog set to bulk mode. [ 340.634511][ T11] em28xx 7-1:0.132: Registering V4L2 extension [ 340.735209][ T9] usb 7-1: USB disconnect, device number 3 [ 340.742870][ T9] em28xx 7-1:0.132: Disconnecting em28xx [ 341.007215][ T7804] loop2: detected capacity change from 0 to 64 [ 341.160493][ T30] audit: type=1800 audit(1755470852.179:42): pid=7804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.598" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 341.596769][ T11] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 341.604725][ T11] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 341.612045][ T11] em28xx 7-1:0.132: No AC97 audio processor [ 341.669586][ T11] usb 7-1: Decoder not found [ 341.674677][ T11] em28xx 7-1:0.132: failed to create media graph [ 341.683625][ T11] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 341.748596][ T11] em28xx 7-1:0.132: Remote control support is not available for this card. [ 341.801064][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.602'. [ 341.820046][ T9] em28xx 7-1:0.132: Closing input extension [ 341.861201][ T9] em28xx 7-1:0.132: Freeing device [ 341.868206][ T7819] netlink: 452 bytes leftover after parsing attributes in process `syz.5.602'. [ 341.877731][ T7819] netlink: 452 bytes leftover after parsing attributes in process `syz.5.602'. [ 342.343673][ T7829] 9pnet: p9_errstr2errno: server reported unknown error Ü°K [ 342.391391][ T7831] syzkaller1: entered promiscuous mode [ 342.401257][ T7831] syzkaller1: entered allmulticast mode [ 342.514293][ T7835] loop3: detected capacity change from 0 to 1 [ 342.532503][ T7835] Dev loop3: unable to read RDB block 1 [ 342.535745][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.609'. [ 342.538623][ T7835] loop3: unable to read partition table [ 342.595483][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.609'. [ 342.615790][ T7835] loop3: partition table beyond EOD, truncated [ 342.622283][ T7835] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 343.224661][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 343.470086][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 343.483447][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.494753][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.505071][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 343.609358][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 343.619066][ T24] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 343.628675][ T24] usb 6-1: Manufacturer: syz [ 343.638936][ T24] usb 6-1: config 0 descriptor?? [ 344.102569][ T24] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 344.143223][ T24] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 344.421850][ T24] usb 6-1: USB disconnect, device number 3 [ 344.793070][ T7868] loop2: detected capacity change from 0 to 512 [ 344.899228][ T7868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.912407][ T7868] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.993439][ T7868] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.622: corrupted inode contents [ 345.014336][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 345.059932][ T7868] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.622: mark_inode_dirty error [ 345.072261][ T7873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.108382][ T7868] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.622: corrupted inode contents [ 345.148384][ T7868] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.622: mark_inode_dirty error [ 345.197783][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 345.228471][ T9] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 345.237239][ T9] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 345.245732][ T9] usb 7-1: config 0 has no interface number 0 [ 345.252028][ T9] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.266572][ T9] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 345.279499][ T9] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 345.312514][ T7873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.358240][ T9] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 345.371100][ T9] usb 7-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 345.381213][ T9] usb 7-1: Product: syz [ 345.401734][ T9] usb 7-1: config 0 descriptor?? [ 345.409747][ T7869] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 345.475693][ T7873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.505905][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.770320][ T7873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.068734][ T4284] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.090151][ T9] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.21/input/input9 [ 346.274516][ T4284] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.324513][ C0] keyspan_remote 7-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 346.334392][ T9] usb 7-1: USB disconnect, device number 4 [ 346.346112][ T7889] loop7: detected capacity change from 0 to 256 [ 346.365556][ T4284] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.377437][ T7889] exfat: Deprecated parameter 'namecase' [ 346.392914][ T4284] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.460669][ T7889] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 346.595073][ T7893] netlink: 'syz.5.632': attribute type 12 has an invalid length. [ 346.603108][ T7893] netlink: 'syz.5.632': attribute type 29 has an invalid length. [ 346.611310][ T7893] netlink: 148 bytes leftover after parsing attributes in process `syz.5.632'. [ 346.620711][ T7893] netlink: 'syz.5.632': attribute type 1 has an invalid length. [ 346.628793][ T7893] netlink: 'syz.5.632': attribute type 2 has an invalid length. [ 348.227013][ T9] IPVS: starting estimator thread 0... [ 348.336438][ T7925] IPVS: using max 192 ests per chain, 9600 per kthread [ 348.571419][ T7928] loop7: detected capacity change from 0 to 512 [ 348.705560][ T7928] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.719477][ T7928] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.843603][ T7928] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.648: corrupted inode contents [ 348.872582][ T7928] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.648: mark_inode_dirty error [ 348.925672][ T7928] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.648: corrupted inode contents [ 349.014531][ T7928] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.648: mark_inode_dirty error [ 349.119981][ T7939] input: syz0 as /devices/virtual/input/input10 [ 349.578045][ T7481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.217204][ T7983] option changes via remount are deprecated (pid=7982 comm=syz.2.671) [ 351.522052][ T11] libceph: connect (1)[c::]:6789 error -101 [ 351.529262][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 351.598776][ T7998] loop2: detected capacity change from 0 to 256 [ 351.668993][ T7998] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 351.821475][ T9] libceph: connect (1)[c::]:6789 error -101 [ 351.828328][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 351.933272][ T11] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 352.114867][ T11] usb 7-1: Using ep0 maxpacket: 8 [ 352.140445][ T11] usb 7-1: config 0 has no interfaces? [ 352.146526][ T11] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 352.156284][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.186600][ T11] usb 7-1: config 0 descriptor?? [ 352.285868][ T7991] ceph: No mds server is up or the cluster is laggy [ 352.355179][ T11] libceph: connect (1)[c::]:6789 error -101 [ 352.361525][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 352.454477][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.467332][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.471076][ T8008] bridge0: port 3(syz_tun) entered blocking state [ 352.482450][ T8008] bridge0: port 3(syz_tun) entered disabled state [ 352.489574][ T8008] syz_tun: entered allmulticast mode [ 352.498469][ T8008] syz_tun: entered promiscuous mode [ 352.506165][ T8008] bridge0: port 3(syz_tun) entered blocking state [ 352.513023][ T8008] bridge0: port 3(syz_tun) entered forwarding state [ 352.555632][ T11] usb 7-1: USB disconnect, device number 5 [ 352.599784][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.606716][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.708688][ T8008] syz_tun: left allmulticast mode [ 352.715861][ T8008] syz_tun: left promiscuous mode [ 352.726552][ T8008] bridge0: port 3(syz_tun) entered disabled state [ 352.815886][ T8008] bridge_slave_0: left allmulticast mode [ 352.821753][ T8008] bridge_slave_0: left promiscuous mode [ 352.828783][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.877751][ T8008] bridge_slave_1: left allmulticast mode [ 352.884823][ T8008] bridge_slave_1: left promiscuous mode [ 352.892887][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.940591][ T8008] bond0: (slave bond_slave_0): Releasing backup interface [ 353.016242][ T8008] bond0: (slave bond_slave_1): Releasing backup interface [ 353.085841][ T8008] team0: Port device team_slave_0 removed [ 353.164105][ T8008] team0: Port device team_slave_1 removed [ 353.175566][ T8008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.185667][ T8008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.240036][ T8008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.247871][ T8008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.694062][ T30] audit: type=1326 audit(1755470864.709:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.3.686" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x0 [ 353.771265][ T8025] loop6: detected capacity change from 0 to 512 [ 353.896797][ T8025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.910156][ T8025] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.955614][ T8025] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.687: corrupted inode contents [ 353.982058][ T8025] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.687: mark_inode_dirty error [ 353.995866][ T8025] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.687: corrupted inode contents [ 354.016866][ T8025] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.687: mark_inode_dirty error [ 354.080706][ T8034] loop2: detected capacity change from 0 to 512 [ 354.124779][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 354.210622][ T30] audit: type=1326 audit(1755470865.219:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8036 comm="syz.7.690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 354.234215][ T30] audit: type=1326 audit(1755470865.219:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8036 comm="syz.7.690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 354.256459][ T30] audit: type=1326 audit(1755470865.219:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8036 comm="syz.7.690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 354.279431][ T30] audit: type=1326 audit(1755470865.219:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8036 comm="syz.7.690" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 354.310284][ T7160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.411273][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.423672][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.434662][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 354.447895][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 354.457328][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.489355][ T24] usb 6-1: config 0 descriptor?? [ 354.744764][ T8029] Bluetooth: hci0: too big key_count value 16384 [ 354.794292][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 354.800876][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 354.835901][ T24] usb 6-1: USB disconnect, device number 4 [ 355.627068][ T8060] bridge0: port 4(syz_tun) entered blocking state [ 355.634144][ T8060] bridge0: port 4(syz_tun) entered disabled state [ 355.641348][ T8060] syz_tun: entered allmulticast mode [ 355.650344][ T8060] syz_tun: entered promiscuous mode [ 355.657938][ T8060] bridge0: port 4(syz_tun) entered blocking state [ 355.664911][ T8060] bridge0: port 4(syz_tun) entered forwarding state [ 355.793443][ T8060] syz_tun: left allmulticast mode [ 355.799621][ T8060] syz_tun: left promiscuous mode [ 355.805979][ T8060] bridge0: port 4(syz_tun) entered disabled state [ 355.949437][ T8060] bridge_slave_0: left allmulticast mode [ 355.955659][ T8060] bridge_slave_0: left promiscuous mode [ 355.962483][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.040016][ T8060] bridge_slave_1: left allmulticast mode [ 356.046622][ T8060] bridge_slave_1: left promiscuous mode [ 356.053275][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.221233][ T8060] bond0: (slave bond_slave_0): Releasing backup interface [ 356.261808][ T8060] bond_slave_0: left promiscuous mode [ 356.268965][ T8060] bond_slave_0: left allmulticast mode [ 356.274861][ T8066] loop7: detected capacity change from 0 to 1024 [ 356.347833][ T8060] bond0: (slave bond_slave_1): Releasing backup interface [ 356.390051][ T8066] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.403145][ T8066] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.441539][ T30] audit: type=1800 audit(1755470867.459:48): pid=8066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.702" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 356.478657][ T8060] bond_slave_1: left promiscuous mode [ 356.485620][ T8060] bond_slave_1: left allmulticast mode [ 356.580210][ T8060] team0: Port device team_slave_0 removed [ 356.706889][ T8060] team0: Port device team_slave_1 removed [ 356.718494][ T8060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.726622][ T8060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.819792][ T8060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.827737][ T8060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.899517][ T8076] loop5: detected capacity change from 0 to 256 [ 356.930360][ T8060] vlan2: left allmulticast mode [ 356.936799][ T8060] bond0: left allmulticast mode [ 356.942216][ T8060] vlan2: left promiscuous mode [ 356.947436][ T8060] bond0: left promiscuous mode [ 356.954874][ T8060] bridge0: port 3(vlan2) entered disabled state [ 357.117979][ T7481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.152020][ T8076] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 357.933585][ T8095] netlink: 'syz.3.713': attribute type 4 has an invalid length. [ 357.970232][ T8094] 9pnet: p9_errstr2errno: server reported unknown error 0000000000,group_i00000000000000000000Š=H [ 357.997795][ T8095] netlink: 'syz.3.713': attribute type 4 has an invalid length. [ 358.285601][ T8100] netlink: 96 bytes leftover after parsing attributes in process `syz.5.715'. [ 358.578157][ T8105] netlink: 'syz.3.718': attribute type 1 has an invalid length. [ 358.670027][ T8105] bond1: entered promiscuous mode [ 358.681091][ T8105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.754490][ T8113] bond1: (slave bridge1): making interface the new active one [ 358.762252][ T8113] bridge1: entered promiscuous mode [ 358.771699][ T8113] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 359.524065][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 359.728542][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 359.740241][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 359.750739][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 359.760206][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.825866][ T8119] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 359.854128][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 360.120353][ T11] usb 7-1: USB disconnect, device number 6 [ 360.130543][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 360.134775][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.7.728'. [ 360.326650][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.337273][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 360.392072][ T9] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 360.402424][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.412330][ T9] usb 4-1: Product: syz [ 360.419186][ T9] usb 4-1: Manufacturer: syz [ 360.424918][ T9] usb 4-1: SerialNumber: syz [ 360.513355][ T9] usb 4-1: config 0 descriptor?? [ 360.549191][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 360.585726][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 360.612110][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 360.624883][ T9] usb 4-1: media controller created [ 360.745596][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.154777][ T9] DVB: Unable to find symbol tda10046_attach() [ 361.161284][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 361.172189][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 361.916702][ T9] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 361.958067][ T9] usb 4-1: USB disconnect, device number 8 [ 362.574069][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 362.785354][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 362.815292][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 362.827593][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 362.829927][ T8170] netlink: 72 bytes leftover after parsing attributes in process `syz.6.745'. [ 362.901212][ T24] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 362.910974][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.925932][ T24] usb 8-1: Product: syz [ 362.931085][ T24] usb 8-1: Manufacturer: syz [ 362.936491][ T24] usb 8-1: SerialNumber: syz [ 362.985693][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.745'. [ 362.996654][ T24] usb 8-1: config 0 descriptor?? [ 363.028172][ T24] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 363.037938][ T24] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 363.643340][ T24] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 363.656180][ T24] em28xx 8-1:0.0: Config register raw data: 0x24 [ 363.662932][ T24] em28xx 8-1:0.0: I2S Audio (1 sample rate(s)) [ 363.670192][ T24] em28xx 8-1:0.0: No AC97 audio processor [ 363.715634][ T8181] loop6: detected capacity change from 0 to 512 [ 363.784257][ T5867] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 363.785259][ T8181] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.749: corrupted in-inode xattr: overlapping e_value [ 363.857847][ T8181] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.749: couldn't read orphan inode 15 (err -117) [ 363.877788][ T8181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.880629][ T8185] loop5: detected capacity change from 0 to 128 [ 363.942788][ T8185] ext4: Bad value for 'resgid' [ 363.948320][ T8185] ext4: Bad value for 'resgid' [ 363.970372][ T8181] EXT4-fs (loop6): shut down requested (1) [ 363.986031][ T8181] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only [ 363.996499][ T8181] overlayfs: failed to get uuid (/file0, err=-5); falling back to uuid=null. [ 364.016445][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 364.032458][ T5867] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 364.042458][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.072797][ T24] usb 8-1: USB disconnect, device number 2 [ 364.090231][ T5867] usb 3-1: config 0 descriptor?? [ 364.127849][ T5867] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 364.304588][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 364.519862][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 364.558057][ T9] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 364.567391][ T9] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 364.576433][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.586954][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 364.596214][ T9] usb 6-1: config 0 has no interface number 0 [ 364.602515][ T9] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 364.617507][ T9] usb 6-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 364.631725][ T9] usb 6-1: config 0 interface 125 has no altsetting 0 [ 364.714546][ T7160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.756740][ T14] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.861446][ T9] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 364.872312][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.881241][ T9] usb 6-1: Product: syz [ 364.886312][ T9] usb 6-1: Manufacturer: syz [ 364.891097][ T9] usb 6-1: SerialNumber: syz [ 364.983200][ T14] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.001455][ T9] usb 6-1: config 0 descriptor?? [ 365.159846][ T14] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.280395][ T9] usb 6-1: USB disconnect, device number 5 [ 365.360505][ T14] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.418333][ T5867] gspca_vc032x: reg_w err -71 [ 365.423445][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.429040][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.435859][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.441294][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.447424][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.452847][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.458344][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.463860][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.469280][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.474889][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.480321][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.485997][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.491449][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.497026][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.502451][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.508388][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.513960][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.519499][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 365.525070][ T5867] gspca_vc032x: Unknown sensor... [ 365.530485][ T5867] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 365.557880][ T5867] usb 3-1: USB disconnect, device number 6 [ 366.144923][ T14] bond0 (unregistering): Released all slaves [ 366.593220][ T14] hsr_slave_0: left promiscuous mode [ 366.601703][ T14] hsr_slave_1: left promiscuous mode [ 366.637765][ T14] veth1_macvtap: left promiscuous mode [ 366.643492][ T14] veth0_macvtap: left promiscuous mode [ 366.665726][ T14] veth1_vlan: left promiscuous mode [ 366.671300][ T14] veth0_vlan: left promiscuous mode [ 367.775709][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.788095][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.798467][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.816054][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.865039][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 367.880994][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.254108][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 368.332885][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.344418][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.354635][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 368.364008][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.410498][ T24] usb 3-1: config 0 descriptor?? [ 368.482201][ T14] IPVS: stop unused estimator thread 0... [ 368.581592][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.7.766'. [ 369.944003][ T5826] Bluetooth: hci0: command tx timeout [ 370.565316][ T8214] chnl_net:caif_netlink_parms(): no params data found [ 371.626577][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 371.633161][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 371.726655][ T24] usb 3-1: USB disconnect, device number 7 [ 371.770283][ T8214] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.779486][ T8214] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.790131][ T8214] bridge_slave_0: entered allmulticast mode [ 371.799750][ T8214] bridge_slave_0: entered promiscuous mode [ 371.856906][ T8214] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.863157][ T8242] loop7: detected capacity change from 0 to 256 [ 371.864742][ T8214] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.878364][ T8214] bridge_slave_1: entered allmulticast mode [ 371.890801][ T8214] bridge_slave_1: entered promiscuous mode [ 371.901449][ T8242] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 371.912815][ T8242] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 372.004758][ T5826] Bluetooth: hci0: command tx timeout [ 372.023205][ T8242] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 372.099784][ T8245] loop2: detected capacity change from 0 to 2048 [ 372.110677][ T8245] EXT4-fs: Ignoring removed mblk_io_submit option [ 372.118265][ T8245] EXT4-fs: Ignoring removed nobh option [ 372.250450][ T8214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.340318][ T8245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.410891][ T8214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.664035][ T8214] team0: Port device team_slave_0 added [ 372.705308][ T8214] team0: Port device team_slave_1 added [ 372.800332][ T8251] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 372.890045][ T8251] EXT4-fs (loop2): Remounting filesystem read-only [ 372.968746][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.991400][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.000347][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.026794][ T8214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.131521][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.139860][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.166963][ T8214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.526487][ T8214] hsr_slave_0: entered promiscuous mode [ 373.537040][ T8214] hsr_slave_1: entered promiscuous mode [ 373.546194][ T8214] debugfs: 'hsr0' already exists in 'hsr' [ 373.552105][ T8214] Cannot create hsr debugfs directory [ 373.795665][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 374.014184][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 374.032087][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 374.042405][ T9] usb 3-1: config 0 has no interface number 0 [ 374.082277][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 374.091766][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.100947][ T9] usb 3-1: Product: syz [ 374.105414][ T9] usb 3-1: Manufacturer: syz [ 374.110174][ T9] usb 3-1: SerialNumber: syz [ 374.150270][ T5826] Bluetooth: hci0: command tx timeout [ 374.267017][ T9] usb 3-1: config 0 descriptor?? [ 374.307296][ T9] smsc95xx v2.0.0 [ 374.699865][ T8214] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 374.760934][ T8214] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 374.778355][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 374.792092][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 374.860648][ T8214] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 374.959344][ T8214] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 375.045402][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 375.063610][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 375.566765][ T8214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.670001][ T8214] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.727973][ T3840] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.735552][ T3840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.805028][ T3840] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.812655][ T3840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.006644][ T8282] loop3: detected capacity change from 0 to 4096 [ 376.113179][ T8285] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.169916][ T5819] Bluetooth: hci0: command tx timeout [ 376.671118][ T9] usb 3-1: USB disconnect, device number 8 [ 376.859110][ T8294] netlink: 52 bytes leftover after parsing attributes in process `syz.3.790'. [ 376.953029][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 376.992823][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 377.518811][ T8303] vlan2: entered allmulticast mode [ 377.525038][ T8303] bridge_slave_0: entered allmulticast mode [ 377.532414][ T8303] bridge0: port 1(vlan2) entered blocking state [ 377.542688][ T8303] bridge0: port 1(vlan2) entered disabled state [ 377.553623][ T8303] vlan2: entered promiscuous mode [ 377.558978][ T8303] bridge_slave_0: entered promiscuous mode [ 377.660485][ T8214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.699087][ T8306] loop3: detected capacity change from 0 to 512 [ 377.755234][ T8306] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 377.768902][ T8306] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 377.881100][ T8306] EXT4-fs (loop3): 1 truncate cleaned up [ 377.892705][ T8306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.047518][ T8306] syz.3.795 (pid 8306) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 378.467532][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.085157][ T8335] netlink: 'syz.7.804': attribute type 4 has an invalid length. [ 379.160107][ T8335] netlink: 'syz.7.804': attribute type 4 has an invalid length. [ 379.374870][ T30] audit: type=1326 audit(1755470890.389:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 379.384844][ T8341] loop5: detected capacity change from 0 to 512 [ 379.397228][ T30] audit: type=1326 audit(1755470890.389:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 379.506251][ T30] audit: type=1326 audit(1755470890.479:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 379.529978][ T30] audit: type=1326 audit(1755470890.479:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 379.552250][ T30] audit: type=1326 audit(1755470890.479:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 379.574618][ T30] audit: type=1326 audit(1755470890.479:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 379.596935][ T30] audit: type=1326 audit(1755470890.489:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 379.619895][ T30] audit: type=1326 audit(1755470890.509:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 379.642160][ T30] audit: type=1326 audit(1755470890.509:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 379.664621][ T30] audit: type=1326 audit(1755470890.529:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8340 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 379.738293][ T8214] veth0_vlan: entered promiscuous mode [ 379.746226][ T8341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.760342][ T8341] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 379.852728][ T8214] veth1_vlan: entered promiscuous mode [ 380.163403][ T8214] veth0_macvtap: entered promiscuous mode [ 380.253299][ T8214] veth1_macvtap: entered promiscuous mode [ 380.365454][ T6359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.440654][ T8214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.500651][ T8214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.615449][ T4002] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.645909][ T4002] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.672692][ T4002] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.730668][ T6881] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.588114][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.826'. [ 383.654721][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.826'. [ 385.599797][ T8435] loop7: detected capacity change from 0 to 512 [ 385.675508][ T8435] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 385.731690][ T8435] EXT4-fs warning (device loop7): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 385.743046][ T8435] EXT4-fs warning (device loop7): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 386.240013][ T3840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.248230][ T3840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.412213][ T8442] loop3: detected capacity change from 0 to 64 [ 386.434495][ T3840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.442634][ T3840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.639750][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 386.639828][ T30] audit: type=1804 audit(1755470897.659:63): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.839" name="/newroot/187/file1/file1" dev="loop3" ino=21 res=1 errno=0 [ 386.707287][ T8447] syz.3.839: attempt to access beyond end of device [ 386.707287][ T8447] loop3: rw=2049, sector=160, nr_sectors = 7 limit=64 [ 387.333580][ T8459] netlink: 'syz.2.845': attribute type 10 has an invalid length. [ 387.365548][ T8459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.380982][ T8459] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 387.428911][ T8462] netlink: 'syz.2.845': attribute type 10 has an invalid length. [ 387.437590][ T8462] netlink: 40 bytes leftover after parsing attributes in process `syz.2.845'. [ 387.447022][ T8462] batadv0: entered promiscuous mode [ 387.455187][ T8462] batadv0: entered allmulticast mode [ 387.491839][ T8462] bond0: (slave batadv0): Releasing backup interface [ 387.525887][ T8462] bridge0: port 2(batadv0) entered blocking state [ 387.532825][ T8462] bridge0: port 2(batadv0) entered disabled state [ 387.791965][ T3840] batman_adv: batadv0: IGMP Querier appeared [ 387.798418][ T3840] batman_adv: batadv0: MLD Querier appeared [ 388.484276][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 388.802392][ T9] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 388.811873][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.820451][ T9] usb 4-1: Product: syz [ 388.824904][ T9] usb 4-1: Manufacturer: syz [ 388.829672][ T9] usb 4-1: SerialNumber: syz [ 388.920813][ T9] usb 4-1: config 0 descriptor?? [ 388.957706][ T9] ch341 4-1:0.0: ch341-uart converter detected [ 390.219740][ T9] ch341-uart ttyUSB0: failed to read break control: -71 [ 390.227349][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 390.314111][ T9] usb 4-1: USB disconnect, device number 9 [ 390.328433][ T9] ch341 4-1:0.0: device disconnected [ 392.578855][ T8540] 9pnet: p9_errstr2errno: server reported unknown error  [ 394.629244][ T8573] netlink: 28 bytes leftover after parsing attributes in process `syz.5.892'. [ 394.760253][ T8575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.893'. [ 395.716632][ T8589] netlink: 20 bytes leftover after parsing attributes in process `syz.5.900'. [ 396.676511][ T8604] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.802332][ T8604] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.948585][ T8604] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.110251][ T8604] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.462366][ T8615] overlayfs: failed to resolve './bus': -2 [ 397.506263][ T6876] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.554978][ T6876] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.623301][ T6876] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.675883][ T6876] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.459383][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 398.705811][ T8630] netlink: 'syz.3.914': attribute type 2 has an invalid length. [ 398.716181][ T8630] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 398.724873][ T8630] netlink: 'syz.3.914': attribute type 8 has an invalid length. [ 398.732697][ T8630] netlink: 44 bytes leftover after parsing attributes in process `syz.3.914'. [ 399.958865][ T8643] IPVS: Scheduler module ip_vs_sip not found [ 399.993274][ T8647] IPVS: length: 24 != 156917672664 [ 400.519850][ T8661] loop7: detected capacity change from 0 to 512 [ 400.638065][ T8661] EXT4-fs: quotafile must be on filesystem root [ 400.969465][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.925'. [ 402.538069][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.944'. [ 402.547479][ T8706] netlink: 'syz.3.944': attribute type 15 has an invalid length. [ 402.555559][ T8706] netlink: 'syz.3.944': attribute type 18 has an invalid length. [ 402.590427][ T8706] vxlan0: entered promiscuous mode [ 402.604651][ T4002] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.629793][ T4002] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.658992][ T4002] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.669913][ T4002] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.156965][ T8714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.602779][ T8719] vlan2: entered allmulticast mode [ 403.609595][ T8719] erspan0: entered allmulticast mode [ 405.050600][ T4002] Bluetooth: hci5: Frame reassembly failed (-84) [ 407.045032][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 407.051647][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 407.095183][ T8795] netlink: 'syz.3.980': attribute type 4 has an invalid length. [ 407.103038][ T8795] netlink: 17 bytes leftover after parsing attributes in process `syz.3.980'. [ 407.268507][ T8795] loop3: detected capacity change from 0 to 8 [ 407.310804][ T8795] Major/Minor mismatch, trying to mount newer 4.2 filesystem [ 407.320778][ T8795] Please update your kernel [ 407.581622][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 407.621808][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 407.654144][ T5871] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 407.683201][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 407.716538][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 407.805540][ T5871] usb 4-1: device descriptor read/64, error -71 [ 407.824522][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 408.030121][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.043544][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.054539][ T24] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 408.064018][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.071694][ T8812] batadv_slave_0: entered promiscuous mode [ 408.081744][ T5871] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 408.125939][ T24] usb 8-1: config 0 descriptor?? [ 408.167509][ T8814] Bluetooth: MGMT ver 1.23 [ 408.198816][ T8815] netlink: 64 bytes leftover after parsing attributes in process `syz.5.989'. [ 408.223552][ T8810] batadv_slave_0: left promiscuous mode [ 408.285110][ T5871] usb 4-1: device descriptor read/64, error -71 [ 408.412075][ T5871] usb usb4-port1: attempt power cycle [ 408.617730][ T24] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 408.625697][ T24] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 408.682297][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.0006/input/input11 [ 408.734325][ T24] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 408.814199][ T5871] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 408.860871][ T8803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.870565][ T8803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.876312][ T5871] usb 4-1: device descriptor read/8, error -71 [ 408.963655][ T8826] loop5: detected capacity change from 0 to 512 [ 408.981989][ T5868] usb 8-1: USB disconnect, device number 3 [ 409.024073][ T8826] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.994: casefold flag without casefold feature [ 409.074861][ T8826] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.994: couldn't read orphan inode 15 (err -117) [ 409.090664][ T8826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.124150][ T5871] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 409.176651][ T5871] usb 4-1: device descriptor read/8, error -71 [ 409.239787][ T6359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.285785][ T5871] usb usb4-port1: unable to enumerate USB device [ 410.538589][ T8850] loop8: detected capacity change from 0 to 128 [ 411.131836][ T8863] loop3: detected capacity change from 0 to 1024 [ 411.185366][ T5871] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 411.205868][ T8863] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 411.326393][ T8863] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1006: Invalid block bitmap block 0 in block_group 0 [ 411.360281][ T8863] EXT4-fs (loop3): Remounting filesystem read-only [ 411.385494][ T8863] Quota error (device loop3): write_blk: dquota write failed [ 411.393363][ T8863] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 411.404521][ T8863] EXT4-fs (loop3): 1 orphan inode deleted [ 411.415503][ T8863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.451662][ T5871] usb 8-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 411.461384][ T5871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.515990][ T5871] usb 8-1: config 0 descriptor?? [ 411.776732][ T5871] kaweth 8-1:0.0: Firmware present in device. [ 411.812931][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.994302][ T5871] kaweth 8-1:0.0: Statistics collection: 0 [ 412.000533][ T5871] kaweth 8-1:0.0: Multicast filter limit: 0 [ 412.007232][ T5871] kaweth 8-1:0.0: MTU: 0 [ 412.011672][ T5871] kaweth 8-1:0.0: Read MAC address 00:00:00:00:00:00 [ 412.618723][ T5871] kaweth 8-1:0.0: kaweth interface created at eth17 [ 412.819768][ T5871] usb 8-1: USB disconnect, device number 4 [ 413.504513][ T5871] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 413.714233][ T5871] usb 6-1: Using ep0 maxpacket: 8 [ 413.804325][ T5871] usb 6-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 413.813966][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.822260][ T5871] usb 6-1: Product: syz [ 413.827610][ T5871] usb 6-1: Manufacturer: syz [ 413.832404][ T5871] usb 6-1: SerialNumber: syz [ 413.906743][ T5871] usb 6-1: config 0 descriptor?? [ 413.937970][ T5871] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 414.040506][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.047320][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.224407][ T5868] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 414.480152][ T5868] usb 4-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 414.494681][ T5868] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 414.506708][ T5868] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 127, setting to 64 [ 414.517948][ T5868] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 5853, setting to 64 [ 414.534931][ T5868] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 414.544567][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.580114][ T5871] gspca_zc3xx: reg_w_i err -71 [ 414.710316][ T8905] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 414.734551][ T8905] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 414.752125][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 414.779532][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 414.825706][ T5868] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.836193][ T5868] usb 4-1: invalid MIDI in EP 0 [ 415.062482][ T5868] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 415.135665][ T5868] usb 4-1: USB disconnect, device number 14 [ 415.217751][ T8922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1031'. [ 415.219906][ T8920] loop7: detected capacity change from 0 to 512 [ 415.227340][ T8922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1031'. [ 415.229889][ T8922] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 415.364192][ T5871] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 415.367896][ T8920] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.370829][ T5871] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 415.384058][ T8920] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 415.398027][ T5871] usb 6-1: USB disconnect, device number 6 [ 416.048165][ T8934] mmap: syz.3.1036 (8934) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 416.088371][ T7481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.724439][ T5871] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 416.893997][ T5871] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.904669][ T5871] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 416.916197][ T5871] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 416.927203][ T5871] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 417.089950][ T5871] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 417.099791][ T5871] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 417.108180][ T5871] usb 8-1: Manufacturer: syz [ 417.187869][ T5871] usb 8-1: config 0 descriptor?? [ 417.614076][ T5868] usb 8-1: USB disconnect, device number 5 [ 417.684187][ T5871] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 417.868329][ T5871] usb 9-1: Using ep0 maxpacket: 8 [ 417.905819][ T5871] usb 9-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 417.915488][ T5871] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.923701][ T5871] usb 9-1: Product: syz [ 417.928297][ T5871] usb 9-1: Manufacturer: syz [ 417.933159][ T5871] usb 9-1: SerialNumber: syz [ 417.953509][ T5871] usb 9-1: config 0 descriptor?? [ 417.978007][ T5871] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 418.434888][ T8975] bridge0: entered allmulticast mode [ 418.483135][ T8975] pim6reg: entered allmulticast mode [ 418.635134][ T5868] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 418.690160][ T5871] gspca_zc3xx: reg_w_i err -71 [ 418.821760][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.833244][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.843485][ T5868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 418.857614][ T5868] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 418.867059][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.988064][ T5868] usb 6-1: config 0 descriptor?? [ 419.484340][ T5871] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 419.491026][ T5871] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 419.526702][ T5871] usb 9-1: USB disconnect, device number 2 [ 419.563379][ T5868] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 420.174739][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 420.181497][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 420.645378][ T8998] loop8: detected capacity change from 0 to 512 [ 420.782212][ T8998] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.795866][ T8998] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.616644][ T8214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.666828][ T24] usb 6-1: USB disconnect, device number 7 [ 422.705756][ T5868] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 422.884530][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 422.929330][ T5868] usb 4-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 422.939142][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.947599][ T5868] usb 4-1: Product: syz [ 422.951946][ T5868] usb 4-1: Manufacturer: syz [ 422.956868][ T5868] usb 4-1: SerialNumber: syz [ 423.055966][ T5868] usb 4-1: config 0 descriptor?? [ 423.102439][ T5868] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 423.847809][ T5868] gspca_zc3xx: reg_w_i err -71 [ 424.594249][ T5868] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 424.600942][ T5868] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 424.684201][ T5868] usb 4-1: USB disconnect, device number 15 [ 426.949645][ T9056] loop5: detected capacity change from 0 to 512 [ 426.985255][ T9056] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 427.139483][ T9056] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1088: invalid block [ 427.195531][ T9056] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1088: invalid indirect mapped block 4294967295 (level 1) [ 427.264387][ T9056] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1088: invalid indirect mapped block 4294967295 (level 1) [ 427.328365][ T9056] EXT4-fs (loop5): 2 truncates cleaned up [ 427.336540][ T9056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.743654][ T6359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.769087][ T9077] loop8: detected capacity change from 0 to 4096 [ 428.911104][ T9077] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.241882][ T8214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.157696][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1104'. [ 430.532657][ T9110] loop8: detected capacity change from 0 to 512 [ 430.843687][ T9110] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.857288][ T9110] ext4 filesystem being mounted at /57/ supports timestamps until 2038-01-19 (0x7fffffff) [ 431.283271][ T8214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.351756][ T9120] loop5: detected capacity change from 0 to 4096 [ 431.402099][ T9120] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 432.196902][ T9141] loop3: detected capacity change from 0 to 1024 [ 432.223193][ T9141] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 432.233695][ T9141] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 432.244698][ T9141] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 432.283512][ T9141] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #5: comm syz.3.1120: unexpected bad inode w/o EXT4_IGET_BAD [ 432.317755][ T9141] EXT4-fs (loop3): no journal found [ 432.323346][ T9141] EXT4-fs (loop3): can't get journal size [ 432.349406][ T9141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 432.515257][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 432.645406][ T5822] EXT4-fs error (device loop3): __ext4_iget:5464: inode #15: block 1803188595: comm syz-executor: invalid block [ 432.694427][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 432.705474][ T5822] EXT4-fs error (device loop3): __ext4_iget:5464: inode #15: block 1803188595: comm syz-executor: invalid block [ 432.722226][ T24] usb 9-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 432.731935][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.740255][ T24] usb 9-1: Product: syz [ 432.744786][ T24] usb 9-1: Manufacturer: syz [ 432.749562][ T24] usb 9-1: SerialNumber: syz [ 432.823663][ T24] usb 9-1: config 0 descriptor?? [ 433.085626][ T24] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 433.091679][ T8879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.353135][ T6876] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.363939][ T6876] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.558805][ T6876] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.569191][ T6876] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.721464][ T6876] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.732374][ T6876] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.868584][ T6876] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.878956][ T6876] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.220701][ T24] gspca_sunplus: reg_w_riv err -71 [ 434.221310][ T6876] bridge_slave_1: left allmulticast mode [ 434.226342][ T24] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 434.240326][ T6876] bridge_slave_1: left promiscuous mode [ 434.248984][ T24] usb 9-1: USB disconnect, device number 3 [ 434.249691][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.282967][ T6876] bridge_slave_0: left allmulticast mode [ 434.289008][ T6876] bridge_slave_0: left promiscuous mode [ 434.295837][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.825391][ T6876] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 434.833708][ T6876] bridge1 (unregistering): left promiscuous mode [ 434.932181][ T6876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.957278][ T6876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.986466][ T6876] bond0 (unregistering): Released all slaves [ 435.009670][ T6876] bond1 (unregistering): Released all slaves [ 435.601021][ T6876] hsr_slave_0: left promiscuous mode [ 435.622921][ T6876] hsr_slave_1: left promiscuous mode [ 435.634374][ T6876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.641951][ T6876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.696129][ T6876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.703983][ T6876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.762859][ T6876] veth1_vlan: left promiscuous mode [ 435.771710][ T6876] veth0_vlan: left promiscuous mode [ 436.395694][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 436.408874][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.419004][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 436.432406][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 436.447162][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 436.589120][ T6876] team0 (unregistering): Port device team_slave_1 removed [ 436.628471][ T6876] team0 (unregistering): Port device team_slave_0 removed [ 437.929705][ T9171] chnl_net:caif_netlink_parms(): no params data found [ 438.233336][ T9200] loop8: detected capacity change from 0 to 1024 [ 438.291980][ T9200] EXT4-fs: Ignoring removed nobh option [ 438.299395][ T9200] EXT4-fs: Ignoring removed bh option [ 438.516600][ T9200] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.567812][ T5819] Bluetooth: hci4: command tx timeout [ 438.972401][ T8214] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.332498][ T9219] Bluetooth: hci0: unsupported parameter 32767 [ 439.339441][ T9219] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 439.451065][ T9171] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.459453][ T9171] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.467348][ T9171] bridge_slave_0: entered allmulticast mode [ 439.479807][ T9171] bridge_slave_0: entered promiscuous mode [ 439.519286][ T9171] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.527263][ T9171] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.535647][ T9171] bridge_slave_1: entered allmulticast mode [ 439.545353][ T9171] bridge_slave_1: entered promiscuous mode [ 439.820276][ T9171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.842074][ T9171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.075261][ T9171] team0: Port device team_slave_0 added [ 440.145000][ T9171] team0: Port device team_slave_1 added [ 441.138069][ T5826] Bluetooth: hci4: command tx timeout [ 441.545543][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.552787][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.579203][ T9171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.618285][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.629383][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.656691][ T9171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.764307][ T5819] Bluetooth: hci2: command 0x0406 tx timeout [ 441.856775][ T9171] hsr_slave_0: entered promiscuous mode [ 441.868139][ T9171] hsr_slave_1: entered promiscuous mode [ 442.050794][ T9244] loop8: detected capacity change from 0 to 512 [ 442.122149][ T9244] EXT4-fs: Ignoring removed nobh option [ 442.190057][ T9244] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.1159: iget: bad i_size value: 38620345925642 [ 442.239917][ T9244] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1159: couldn't read orphan inode 15 (err -117) [ 442.295162][ T9244] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.690303][ T9255] loop7: detected capacity change from 0 to 1024 [ 443.159377][ T9171] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 443.204846][ T5819] Bluetooth: hci4: command tx timeout [ 443.231975][ T9171] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 443.266484][ T9171] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 443.313663][ T9171] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 443.386460][ T14] hfsplus: b-tree write err: -5, ino 3 [ 443.613468][ T4284] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.632783][ T9252] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.712304][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 443.759641][ T4284] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.930203][ T24] usb 6-1: config 0 has an invalid interface number: 204 but max is 0 [ 443.939720][ T24] usb 6-1: config 0 has no interface number 0 [ 443.962387][ T4284] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.011414][ T24] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 444.020966][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.031038][ T24] usb 6-1: Product: syz [ 444.036244][ T24] usb 6-1: Manufacturer: syz [ 444.041030][ T24] usb 6-1: SerialNumber: syz [ 444.113189][ T24] usb 6-1: config 0 descriptor?? [ 444.132224][ T4284] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.157501][ T24] ems_usb 6-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 444.170029][ T24] ems_usb 6-1:0.204: probe with driver ems_usb failed with error -22 [ 444.402853][ T9] usb 6-1: USB disconnect, device number 8 [ 444.529254][ T4284] bridge_slave_1: left allmulticast mode [ 444.535273][ T4284] bridge_slave_1: left promiscuous mode [ 444.541936][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.558783][ T4284] bridge_slave_0: left allmulticast mode [ 444.565000][ T4284] bridge_slave_0: left promiscuous mode [ 444.571500][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.055674][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.095589][ T4284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.129925][ T4284] bond0 (unregistering): Released all slaves [ 445.262897][ T9171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.286477][ T5819] Bluetooth: hci4: command tx timeout [ 445.489606][ T9171] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.619526][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.627133][ T6876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.722406][ T4284] hsr_slave_0: left promiscuous mode [ 445.777285][ T4284] hsr_slave_1: left promiscuous mode [ 445.785992][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.793573][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.866707][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.874513][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.025391][ T4284] veth1_macvtap: left promiscuous mode [ 446.031137][ T4284] veth0_macvtap: left promiscuous mode [ 446.038916][ T4284] veth1_vlan: left promiscuous mode [ 446.044647][ T4284] veth0_vlan: left promiscuous mode [ 446.850292][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 446.876601][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 446.951001][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 447.026208][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.036149][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 447.052453][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 447.075364][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 447.324186][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.331707][ T6876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.725329][ T9295] pimreg: entered allmulticast mode [ 447.822888][ T9295] pimreg: left allmulticast mode [ 448.977482][ T9288] chnl_net:caif_netlink_parms(): no params data found [ 449.077745][ T9171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.286961][ T5826] Bluetooth: hci0: command tx timeout [ 449.300648][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1188'. [ 450.105399][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 450.302500][ T9288] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.311992][ T9288] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.320007][ T9288] bridge_slave_0: entered allmulticast mode [ 450.329786][ T9288] bridge_slave_0: entered promiscuous mode [ 450.352505][ T9288] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.361115][ T9288] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.369112][ T9288] bridge_slave_1: entered allmulticast mode [ 450.378906][ T9288] bridge_slave_1: entered promiscuous mode [ 450.390286][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 450.411877][ T24] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 450.421137][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.432005][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.497078][ T24] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 450.506708][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.515056][ T24] usb 8-1: Product: syz [ 450.519400][ T24] usb 8-1: Manufacturer: syz [ 450.524374][ T24] usb 8-1: SerialNumber: syz [ 450.649198][ T9288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.735993][ T9288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.003424][ T9288] team0: Port device team_slave_0 added [ 451.012896][ T24] usb 8-1: 0:2 : does not exist [ 451.052059][ T9288] team0: Port device team_slave_1 added [ 451.269081][ T9288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.276875][ T9288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.303253][ T9288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.366781][ T5826] Bluetooth: hci0: command tx timeout [ 451.461774][ T9288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.469641][ T9288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.496246][ T9288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.689236][ T9171] veth0_vlan: entered promiscuous mode [ 451.728967][ T24] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 451.862556][ T24] usb 8-1: USB disconnect, device number 6 [ 451.980278][ T9288] hsr_slave_0: entered promiscuous mode [ 451.990630][ T9288] hsr_slave_1: entered promiscuous mode [ 451.999730][ T9288] debugfs: 'hsr0' already exists in 'hsr' [ 452.006750][ T9288] Cannot create hsr debugfs directory [ 452.041722][ T9171] veth1_vlan: entered promiscuous mode [ 452.665127][ T9171] veth0_macvtap: entered promiscuous mode [ 452.880649][ T9171] veth1_macvtap: entered promiscuous mode [ 453.076337][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1200'. [ 453.324211][ T9171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.447792][ T5826] Bluetooth: hci0: command tx timeout [ 453.512543][ T9171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.710555][ T6881] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.783525][ T6881] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.868239][ T14] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.949363][ T9288] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 453.986292][ T14] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.035694][ T9288] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 454.129722][ T9288] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 454.213598][ T9288] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 454.978452][ T9390] loop7: detected capacity change from 0 to 1024 [ 455.209842][ T9396] ipvlan2: entered promiscuous mode [ 455.215407][ T9396] ipvlan2: entered allmulticast mode [ 455.220893][ T9396] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 455.513110][ T9288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.550621][ T5826] Bluetooth: hci0: command tx timeout [ 455.690980][ T9288] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.875472][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.882992][ T4152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.942113][ T3690] hfsplus: b-tree write err: -5, ino 4 [ 455.966564][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.974185][ T4152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.201643][ T9422] 9pnet_fd: Insufficient options for proto=fd [ 458.273722][ T9288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.816665][ T9288] veth0_vlan: entered promiscuous mode [ 458.956105][ T9288] veth1_vlan: entered promiscuous mode [ 459.321579][ T9288] veth0_macvtap: entered promiscuous mode [ 459.467429][ T9288] veth1_macvtap: entered promiscuous mode [ 459.674699][ T9288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.780764][ T9288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.950381][ T6876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.024663][ T3690] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.033682][ T3690] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.094821][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.568080][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'. [ 460.639517][ T9482] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1229'. [ 461.261457][ T6881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.269672][ T6881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.434630][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.442741][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.627571][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1231'. [ 461.652984][ T9489] hsr_slave_0: left promiscuous mode [ 461.721097][ T9489] hsr_slave_1: left promiscuous mode [ 462.988125][ T9515] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1237'. [ 462.997744][ T9515] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1237'. [ 463.642029][ T30] audit: type=1326 audit(1755470974.639:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.9.1241" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f96539 code=0x0 [ 464.354541][ T9536] loop5: detected capacity change from 0 to 4096 [ 464.535499][ T9547] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 464.649405][ T30] audit: type=1326 audit(1755470975.669:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 464.770817][ T30] audit: type=1326 audit(1755470975.699:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 464.793281][ T30] audit: type=1326 audit(1755470975.739:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 464.818559][ T30] audit: type=1326 audit(1755470975.739:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 464.842249][ T30] audit: type=1326 audit(1755470975.739:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 464.866226][ T30] audit: type=1326 audit(1755470975.749:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 464.889601][ T30] audit: type=1326 audit(1755470975.749:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 464.912327][ T30] audit: type=1326 audit(1755470975.749:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 464.934949][ T30] audit: type=1326 audit(1755470975.749:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.2.1246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f85539 code=0x7ffc0000 [ 467.067427][ T6881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.075720][ T6881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.215127][ T4152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.224992][ T4152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.433265][ T9650] Invalid ELF header len 8 [ 471.099132][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 471.182391][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 471.225606][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1278'. [ 471.355698][ T9672] loop9: detected capacity change from 0 to 64 [ 471.404256][ T9663] nbd: socks must be embedded in a SOCK_ITEM attr [ 471.716095][ T9675] tipc: Started in network mode [ 471.721161][ T9675] tipc: Node identity 48, cluster identity 117 [ 471.730933][ T9675] tipc: Node number set to 72 [ 471.947790][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1284'. [ 472.060372][ T9680] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1285'. [ 472.893696][ T9699] veth0: entered promiscuous mode [ 472.935012][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1292'. [ 473.997809][ T9706] loop0: detected capacity change from 0 to 512 [ 474.066739][ T9706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 474.075657][ T9706] EXT4-fs (loop0): fragment/cluster size (4096) != block size (2048) [ 474.572298][ T9714] loop9: detected capacity change from 0 to 4096 [ 474.784245][ T9727] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 475.502561][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.510213][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 476.372423][ T9754] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1311'. [ 476.382333][ T9754] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1311'. [ 476.392437][ T9754] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1311'. [ 476.403397][ T9754] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1311'. [ 476.413190][ T9754] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1311'. [ 476.714945][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1312'. [ 476.735054][ T9756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1313'. [ 476.747489][ T9756] netlink: 'syz.2.1313': attribute type 7 has an invalid length. [ 476.757223][ T9756] netlink: 'syz.2.1313': attribute type 8 has an invalid length. [ 476.762734][ T9763] input: syz0 as /devices/virtual/input/input12 [ 476.765256][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1313'. [ 477.745778][ T9781] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1321'. [ 477.946359][ T1662] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 478.001881][ T9789] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1321'. [ 478.013311][ T9789] nbd: device at index 64 is going down [ 478.150647][ T1662] usb 1-1: Using ep0 maxpacket: 32 [ 478.201486][ T1662] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.213916][ T1662] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.224191][ T1662] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 478.233481][ T1662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.405502][ T1662] usb 1-1: config 0 descriptor?? [ 478.446857][ T1662] hub 1-1:0.0: USB hub found [ 478.661066][ T1662] hub 1-1:0.0: 1 port detected [ 478.701374][ T9797] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.916116][ T9797] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.080049][ T9797] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.317854][ T1662] hub 1-1:0.0: activate --> -90 [ 479.465058][ T9797] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.677163][ T9812] vxlan0: entered promiscuous mode [ 479.694396][ T3638] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.740088][ T1662] usb 1-1-port1: config error [ 479.747073][ T9] usb 1-1: USB disconnect, device number 3 [ 479.786396][ T3638] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.837394][ T3638] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.883143][ T3638] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.996161][ T14] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.053371][ T14] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.102154][ T14] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.146065][ T14] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.326587][ T9825] loop0: detected capacity change from 0 to 4096 [ 482.660645][ T9857] loop9: detected capacity change from 0 to 128 [ 482.777547][ T9857] __nla_validate_parse: 2 callbacks suppressed [ 482.777630][ T9857] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1347'. [ 483.200750][ T9866] overlayfs: failed to resolve './file0': -2 [ 483.757935][ T9869] tipc: Started in network mode [ 483.763107][ T9869] tipc: Node identity ac141413, cluster identity 4711 [ 483.775296][ T9869] tipc: Enabling of bearer rejected, failed to enable media [ 483.908534][ T9871] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.923234][ T9871] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.424549][ T9871] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.440382][ T9871] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.669839][ T9871] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.670044][ T9871] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.878621][ T9871] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.878818][ T9871] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.353502][ T9890] loop5: detected capacity change from 0 to 256 [ 485.359037][ T3638] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.359217][ T3638] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.370121][ T3638] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.370301][ T3638] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.371897][ T3638] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.372069][ T3638] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.373547][ T3638] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.373712][ T3638] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.376468][ T9890] exfat: Deprecated parameter 'utf8' [ 485.519505][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 485.519588][ T30] audit: type=1326 audit(1755470996.529:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9880 comm="syz.2.1357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7fc00000 [ 486.666804][ T9911] loop0: detected capacity change from 0 to 8 [ 486.718995][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 486.726939][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 486.735667][ T30] audit: type=1800 audit(1755470997.759:203): pid=9911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1367" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 486.780251][ T9911] SQUASHFS error: Failed to read block 0x6e6: -5 [ 486.791272][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 486.799422][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 486.806769][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 486.813551][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 486.821204][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 486.828796][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 486.835768][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 486.843228][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 486.850618][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 486.857527][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 486.865119][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 486.872301][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 486.879307][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 486.889071][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 486.896975][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 486.904053][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 486.911520][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 486.918952][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 486.925905][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 486.933359][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 486.940760][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 486.947984][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 486.955569][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 486.962768][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 486.973088][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 486.985182][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 486.992384][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.001075][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.009126][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.016460][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.023263][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.030930][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.038357][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.045393][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.052847][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.060252][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.067168][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.074769][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.081945][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.090511][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.098467][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.106315][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.113096][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.120691][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.128053][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.135044][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.142503][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.149862][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.156794][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.164450][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.171622][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.178594][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.186161][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.195150][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.201930][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.210105][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.217436][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.224320][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.231798][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.239158][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.246132][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.253612][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.260943][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.268169][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.269101][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1369'. [ 487.275719][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.276037][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.300989][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.308587][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.315952][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.322752][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.330484][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.337802][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.344823][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.352280][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.359660][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.366603][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.374417][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.381590][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.388651][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.397923][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.405691][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.412469][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.420192][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.427527][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.434474][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.441933][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.449482][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.456472][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.464096][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.471284][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.478244][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.485913][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.493098][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.501631][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.509643][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.516975][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.524009][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.531466][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.538994][ T9911] SQUASHFS error: Failed to read block 0x4de: -5 [ 487.546033][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.553489][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 487.560859][ T9911] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 487.568543][ T9911] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.142401][ T9925] Set syz1 is full, maxelem 1038 reached [ 488.149611][ T9929] loop9: detected capacity change from 0 to 512 [ 488.284630][ T9929] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.1375: casefold flag without casefold feature [ 488.300746][ T9929] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.1375: couldn't read orphan inode 15 (err -117) [ 488.304415][ T9929] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.482265][ T9929] evm: overlay not supported [ 488.911090][ T9171] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.379181][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1384'. [ 490.057548][ T1662] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 490.251115][ T1662] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 490.263030][ T1662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.295636][ T1662] usb 1-1: config 0 descriptor?? [ 490.309490][ T1662] cp210x 1-1:0.0: cp210x converter detected [ 490.932403][ T1662] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 490.941063][ T1662] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 491.019710][ T1662] usb 1-1: cp210x converter now attached to ttyUSB0 [ 491.045797][ T9973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1392'. [ 491.059809][ T1662] usb 1-1: USB disconnect, device number 4 [ 491.105544][ T1662] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 491.114778][ T1662] cp210x 1-1:0.0: device disconnected [ 491.260591][ T3690] batman_adv: batadv0: MLD Querier disappeared - multicast optimizations disabled [ 491.700458][ T9983] loop5: detected capacity change from 0 to 64 [ 491.793687][ T14] batman_adv: batadv0: IGMP Querier disappeared - multicast optimizations disabled [ 491.840356][ T9983] overlayfs: upper fs needs to support d_type. [ 491.875800][ T9983] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 491.883263][ T9983] overlayfs: failed to set xattr on upper [ 491.889547][ T9983] overlayfs: ...falling back to redirect_dir=nofollow. [ 491.896719][ T9983] overlayfs: ...falling back to index=off. [ 491.904314][ T9983] overlayfs: ...falling back to uuid=null. [ 492.174175][ T5871] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 492.386215][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 492.414269][ T5871] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 492.422602][ T5871] usb 1-1: config 0 has no interface number 0 [ 492.430428][ T5871] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 492.440635][ T5871] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 492.450883][ T5871] usb 1-1: config 0 interface 41 has no altsetting 0 [ 492.500303][ T5871] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 492.511392][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.521446][ T5871] usb 1-1: Product: syz [ 492.526298][ T5871] usb 1-1: Manufacturer: syz [ 492.531098][ T5871] usb 1-1: SerialNumber: syz [ 492.545391][ T5871] usb 1-1: config 0 descriptor?? [ 492.552936][ T9985] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.575175][ T9985] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.652525][ T6359] Trying to free block not in datazone [ 492.679259][ T6359] Trying to free block not in datazone [ 492.729797][ T6359] Trying to free block not in datazone [ 492.779653][ T4152] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.863735][ T9985] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.871730][ T4152] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.914686][ T4152] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.926715][ T9985] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.955063][ T4152] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.276803][ T6876] Bluetooth: hci5: Frame reassembly failed (-84) [ 493.576676][ T5871] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 493.798412][ T5871] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 493.809999][ T5871] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 493.821074][ T5871] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 493.840446][ T5871] usb 1-1: USB disconnect, device number 5 [ 494.964434][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 495.144807][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 495.253443][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 495.275501][ T9] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 495.285930][ T9] usb 8-1: can't read configurations, error -71 [ 495.295241][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 495.301622][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 496.274624][ T1662] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 496.470682][ T1662] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 496.482813][ T1662] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 496.494610][ T1662] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 496.581449][ T1662] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 496.591011][ T1662] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.600073][ T1662] usb 10-1: Product: syz [ 496.604865][ T1662] usb 10-1: Manufacturer: syz [ 496.612116][ T1662] usb 10-1: SerialNumber: syz [ 496.650042][T10038] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 496.937165][T10038] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 496.971750][T10038] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 497.636381][ C1] hrtimer: interrupt took 292297 ns [ 497.647892][T10038] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 497.677678][T10038] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 497.931854][ T1662] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 497.939154][ T1662] cdc_ncm 10-1:1.0: setting rx_max = 16384 [ 498.159628][ T1662] cdc_ncm 10-1:1.0: setting tx_max = 184 [ 498.189672][ T1662] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 498.257991][ T1662] usb 10-1: USB disconnect, device number 2 [ 498.267177][ T1662] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 498.348160][T10073] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.465038][T10073] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.604749][T10073] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.735633][T10073] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.990232][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1442'. [ 499.078973][T10085] bond0: (slave bond_slave_1): Releasing backup interface [ 499.093179][T10087] loop9: detected capacity change from 0 to 65 [ 499.139345][T10087] BFS-fs: bfs_fill_super(): NOTE: filesystem loop9 was created with 512 inodes, the real maximum is 511, mounting anyway [ 499.186096][ T4152] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.280221][ T6876] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.330272][ T6876] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.383939][ T6876] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.430167][ T30] audit: type=1804 audit(1755471010.449:204): pid=10087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1443" name=2F6E6577726F6F742F33362FE91F7189591E9233614B2F66696C6530 dev="loop9" ino=3 res=1 errno=0 [ 499.937765][T10096] loop7: detected capacity change from 0 to 512 [ 499.951315][T10098] overlayfs: failed to clone upperpath [ 500.039723][T10096] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1448: bg 0: block 5: invalid block bitmap [ 500.127091][T10096] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 500.265545][T10096] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1448: invalid indirect mapped block 3 (level 2) [ 500.310120][T10096] EXT4-fs (loop7): 2 truncates cleaned up [ 500.325847][T10096] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.526210][T10096] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.7.1448: path /181/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 500.943567][ T7481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.271173][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1458'. [ 501.335037][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1458'. [ 501.375392][T10122] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1458'. [ 501.385378][T10122] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1458'. [ 501.959118][T10127] loop0: detected capacity change from 0 to 4096 [ 502.419484][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1470'. [ 502.463622][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1470'. [ 502.503060][T10145] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1470'. [ 502.512969][T10145] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1470'. [ 503.488036][ T1662] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 503.654388][ T1662] usb 10-1: Using ep0 maxpacket: 32 [ 503.809757][ T1662] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 503.818459][ T1662] usb 10-1: config 0 has no interface number 0 [ 503.911086][ T1662] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 503.921151][ T1662] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.929703][ T1662] usb 10-1: Product: syz [ 503.934374][ T1662] usb 10-1: Manufacturer: syz [ 503.939244][ T1662] usb 10-1: SerialNumber: syz [ 504.043607][ T1662] usb 10-1: config 0 descriptor?? [ 504.065948][ T1662] smsc95xx v2.0.0 [ 504.532968][ T1662] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 504.544643][ T1662] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 505.066446][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 505.194096][ T1662] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 505.206526][ T1662] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 505.282194][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 505.291786][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.300408][ T9] usb 1-1: Product: syz [ 505.304889][ T9] usb 1-1: Manufacturer: syz [ 505.309662][ T9] usb 1-1: SerialNumber: syz [ 505.319497][ T5868] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 505.336054][ T1662] usb 10-1: USB disconnect, device number 3 [ 505.354927][ T9] usb 1-1: config 0 descriptor?? [ 505.530471][ T5868] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 505.540625][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.549072][ T5868] usb 8-1: Product: syz [ 505.553411][ T5868] usb 8-1: Manufacturer: syz [ 505.558368][ T5868] usb 8-1: SerialNumber: syz [ 505.605397][ T1662] usb 1-1: USB disconnect, device number 6 [ 505.638741][ T5868] usb 8-1: config 0 descriptor?? [ 505.905465][ T5868] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 506.729204][ T5868] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 506.778927][ T5868] usb 8-1: USB disconnect, device number 9 [ 507.381342][T10217] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 509.366229][ T5871] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 509.554249][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 509.585866][ T5871] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.596422][ T5871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.607725][ T5871] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 509.619163][ T5871] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 509.695410][ T5871] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 509.704866][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 509.713072][ T5871] usb 1-1: SerialNumber: syz [ 509.758970][ T5871] hub 1-1:1.0: bad descriptor, ignoring hub [ 509.765435][ T5871] hub 1-1:1.0: probe with driver hub failed with error -5 [ 509.775083][ T5871] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 510.222138][T10248] raw-gadget.0 gadget.0: fail, usb_ep_set_wedge returned -11 [ 510.300797][T10267] netlink: 396 bytes leftover after parsing attributes in process `syz.5.1521'. [ 510.326963][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1521'. [ 510.355166][ T5868] usb 1-1: USB disconnect, device number 7 [ 510.964844][T10275] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1525'. [ 512.363431][T10293] loop9: detected capacity change from 0 to 1024 [ 512.402494][T10295] batadv_slave_0: entered promiscuous mode [ 512.489212][T10295] batadv_slave_0: left promiscuous mode [ 512.496693][T10293] ===================================================== [ 512.496889][T10293] BUG: KMSAN: uninit-value in hfsplus_cat_case_cmp_key+0xd9/0x190 [ 512.497041][T10293] hfsplus_cat_case_cmp_key+0xd9/0x190 [ 512.497187][T10293] hfs_find_rec_by_key+0xab/0x240 [ 512.497349][T10293] __hfsplus_brec_find+0x274/0x840 [ 512.497512][T10293] hfsplus_brec_find+0x4df/0x9f0 [ 512.497669][T10293] hfsplus_delete_cat+0x3ff/0x13d0 [ 512.497804][T10293] hfsplus_unlink+0x526/0xd70 [ 512.497934][T10293] hfsplus_rename+0x157/0x2f0 [ 512.549051][T10293] vfs_rename+0x1f51/0x2530 [ 512.553925][T10293] do_renameat2+0x1484/0x1a50 [ 512.558813][T10293] __ia32_sys_rename+0xd7/0x140 [ 512.565461][T10293] ia32_sys_call+0x351c/0x4310 [ 512.570401][T10293] __do_fast_syscall_32+0xb0/0x150 [ 512.576080][T10293] do_fast_syscall_32+0x38/0x80 [ 512.581186][T10293] do_SYSENTER_32+0x1f/0x30 [ 512.587658][T10293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.595500][T10293] [ 512.597906][T10293] Uninit was created at: [ 512.602382][T10293] __kmalloc_noprof+0x95f/0x1310 [ 512.607635][T10293] hfsplus_find_init+0x90/0x1d0 [ 512.612708][T10293] hfsplus_delete_cat+0xed/0x13d0 [ 512.618075][T10293] hfsplus_unlink+0x526/0xd70 [ 512.623719][T10293] hfsplus_rename+0x157/0x2f0 [ 512.629014][T10293] vfs_rename+0x1f51/0x2530 [ 512.633724][T10293] do_renameat2+0x1484/0x1a50 [ 512.638805][T10293] __ia32_sys_rename+0xd7/0x140 [ 512.644625][T10293] ia32_sys_call+0x351c/0x4310 [ 512.649617][T10293] __do_fast_syscall_32+0xb0/0x150 [ 512.655213][T10293] do_fast_syscall_32+0x38/0x80 [ 512.660254][T10293] do_SYSENTER_32+0x1f/0x30 [ 512.665070][T10293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.671595][T10293] [ 512.674175][T10293] CPU: 1 UID: 0 PID: 10293 Comm: syz.9.1535 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(none) [ 512.688041][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.698695][T10293] ===================================================== [ 512.705834][T10293] Disabling lock debugging due to kernel taint [ 512.712088][T10293] Kernel panic - not syncing: kmsan.panic set ... [ 512.718656][T10293] CPU: 1 UID: 0 PID: 10293 Comm: syz.9.1535 Tainted: G B 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(none) [ 512.732494][T10293] Tainted: [B]=BAD_PAGE [ 512.736739][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.746935][T10293] Call Trace: [ 512.750338][T10293] [ 512.753370][T10293] __dump_stack+0x26/0x30 [ 512.757903][T10293] dump_stack_lvl+0x53/0x270 [ 512.762701][T10293] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 512.768720][T10293] dump_stack+0x1e/0x25 [ 512.773086][T10293] vpanic+0x361/0xc50 [ 512.777285][T10293] panic+0x15d/0x160 [ 512.781420][T10293] kmsan_report+0x31c/0x320 [ 512.786113][T10293] ? __msan_warning+0x1b/0x30 [ 512.790957][T10293] ? hfsplus_cat_case_cmp_key+0xd9/0x190 [ 512.796795][T10293] ? hfs_find_rec_by_key+0xab/0x240 [ 512.802209][T10293] ? __hfsplus_brec_find+0x274/0x840 [ 512.807712][T10293] ? hfsplus_brec_find+0x4df/0x9f0 [ 512.813058][T10293] ? hfsplus_delete_cat+0x3ff/0x13d0 [ 512.818548][T10293] ? hfsplus_unlink+0x526/0xd70 [ 512.823601][T10293] ? hfsplus_rename+0x157/0x2f0 [ 512.828645][T10293] ? vfs_rename+0x1f51/0x2530 [ 512.833523][T10293] ? do_renameat2+0x1484/0x1a50 [ 512.838566][T10293] ? __ia32_sys_rename+0xd7/0x140 [ 512.843787][T10293] ? ia32_sys_call+0x351c/0x4310 [ 512.848892][T10293] ? __do_fast_syscall_32+0xb0/0x150 [ 512.854393][T10293] ? do_fast_syscall_32+0x38/0x80 [ 512.859615][T10293] ? do_SYSENTER_32+0x1f/0x30 [ 512.864496][T10293] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.871198][T10293] ? stack_depot_save_flags+0x615/0x7b0 [ 512.876964][T10293] ? kmsan_get_metadata+0xfb/0x160 [ 512.882253][T10293] ? kmsan_get_metadata+0xfb/0x160 [ 512.887552][T10293] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 512.893555][T10293] ? kmsan_get_metadata+0xfb/0x160 [ 512.898867][T10293] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 512.905317][T10293] ? kmsan_get_metadata+0xfb/0x160 [ 512.910633][T10293] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 512.917070][T10293] ? kmsan_get_metadata+0xfb/0x160 [ 512.922422][T10293] __msan_warning+0x1b/0x30 [ 512.927092][T10293] hfsplus_cat_case_cmp_key+0xd9/0x190 [ 512.932784][T10293] hfs_find_rec_by_key+0xab/0x240 [ 512.938052][T10293] ? __pfx_hfsplus_cat_case_cmp_key+0x10/0x10 [ 512.944351][T10293] __hfsplus_brec_find+0x274/0x840 [ 512.949694][T10293] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 512.955582][T10293] hfsplus_brec_find+0x4df/0x9f0 [ 512.960735][T10293] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 512.966639][T10293] hfsplus_delete_cat+0x3ff/0x13d0 [ 512.971964][T10293] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 512.977971][T10293] ? stack_depot_save_flags+0x615/0x7b0 [ 512.983769][T10293] ? kmsan_get_metadata+0xfb/0x160 [ 512.989089][T10293] hfsplus_unlink+0x526/0xd70 [ 512.994007][T10293] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 513.000026][T10293] hfsplus_rename+0x157/0x2f0 [ 513.004920][T10293] ? __pfx_hfsplus_rename+0x10/0x10 [ 513.010329][T10293] vfs_rename+0x1f51/0x2530 [ 513.015041][T10293] ? end_current_label_crit_section+0x112/0x290 [ 513.021557][T10293] do_renameat2+0x1484/0x1a50 [ 513.026524][T10293] __ia32_sys_rename+0xd7/0x140 [ 513.031605][T10293] ia32_sys_call+0x351c/0x4310 [ 513.036549][T10293] __do_fast_syscall_32+0xb0/0x150 [ 513.041892][T10293] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 513.047879][T10293] do_fast_syscall_32+0x38/0x80 [ 513.052957][T10293] do_SYSENTER_32+0x1f/0x30 [ 513.057663][T10293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 513.064219][T10293] RIP: 0023:0xf7f96539 [ 513.068424][T10293] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 513.088209][T10293] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000026 [ 513.096810][T10293] RAX: ffffffffffffffda RBX: 0000000080000600 RCX: 0000000080000f40 [ 513.104928][T10293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 513.113025][T10293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 513.121132][T10293] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 513.129235][T10293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 513.137373][T10293] [ 513.140822][T10293] Kernel Offset: disabled [ 513.145200][T10293] Rebooting in 86400 seconds..