last executing test programs: 2m33.067929928s ago: executing program 0: r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x894b, 0x0) 2m32.943395828s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000400000008500000082000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m32.805180589s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="4401000010000100000000000000000000002000000000000000000000000001fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000006c000000ac1414bb00000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="00000000480003006465666c617465"], 0x144}}, 0x0) 2m32.609235669s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) unshare(0x22020400) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x9d) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 2m31.030769871s ago: executing program 0: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file1\x00', 0x2000000c, &(0x7f0000000100)={[{@errors_remount}, {@discard}, {@errors_continue}, {}, {@dmask}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x1, 0x14fd, &(0x7f0000002a80)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) read$ptp(r0, &(0x7f0000000100)=""/48, 0xfffffdef) read$FUSE(r0, &(0x7f0000004a40)={0x2020}, 0x2020) 2m31.030570621s ago: executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@dioread_lock}, {@dioread_nolock}]}, 0xfd, 0x55c, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x48, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x48}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) 2m31.015011313s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="4401000010000100000000000000000000002000000000000000000000000001fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000006c000000ac1414bb00000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="00000000480003006465666c617465"], 0x144}}, 0x0) 2m30.730215007s ago: executing program 0: syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800, &(0x7f0000000040)=ANY=[], 0x1, 0xda6, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001280)=""/4089, 0xff9) 2m30.714726069s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 2m30.671846806s ago: executing program 4: setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000), 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00'}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r3, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000040)=0x8, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e61, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) 2m30.575859701s ago: executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={0x0}) 2m30.340011516s ago: executing program 4: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x800, &(0x7f00000009c0)={[{@fat=@nfs_nostale_ro}, {@uni_xlate}, {@uni_xlate}, {@fat=@gid}, {@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@fat=@flush}]}, 0x1, 0x28d, &(0x7f0000000240)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 2m30.182891401s ago: executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0xffffffff}, 0xc) writev(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)="f9", 0x1}], 0x1) 2m30.082136016s ago: executing program 4: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file1\x00', 0x2000000c, &(0x7f0000000100)={[{@errors_remount}, {@discard}, {@errors_continue}, {}, {@dmask}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x1, 0x14fd, &(0x7f0000002a80)="$eJzs3HuYjlXbMPB1rrUuxjTpbpLNsM51XtxpsEySZJOQTZIkSZJdQtIkSUJiyC5pSEK2k2QzhGQzjUljv99knzR5pEmSkJBkfcf0PN/red6e9+19vuf5Psf3zPk7jnXc65zrOs97rTnnmPu6rj/u73qPadCqYd0WRCT+KfDnlxQhRIwQYoQQ4johRCCEqBJfJT7veCEFKf/cm7B/rYfTr/YK2NXE/c/fuP/5G/c/f+P+52/c//yN+5+/cf/zN+4/Y/nZznklrueRfwc//8/P+PP/30huxalfba54Y59/IIX7n79x//M37v+/K/gfncX9z9+4//kb9//fX53/5hj3P3/j/jOWn13t5888ru642n9/jDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbyhwv+Ci2EyHsNrvaiGGOMMcYYY4wx9i/lC17tFTDGGGOMMcYYY+z/PhBSKKFFIAqIgiJGFBKx4hoRJ64VhcV1IiKuF/HiBlFE3CiKimKiuCghEkRJUUoYgcIKEqEoLcqIqLhJlBU3i0RRTpQXFYQTFUWSuEVUEreKyuI2UUXcLqqKO0Q1UV3UEDXFnaKWuEvUFnVEXXG3qCfqiwaiobhHNBL3isbiPtFE3C+aigdEM/GgaC4eEi3Ew6KleES0Eo+K1uIx0Ua0Fe1Ee9Hh/yj/JdFfvCwGiIEiRQwSg8UrYogYKoaJ4WKEeFWMFK+JUeJ1kSpGizHiDTFWvCnGibfEeDFBTBRvi0lispgipoppYrpIE++IGeJdMVO8J2aJ2WKOmCvSxTwxX7wvFoiFYpH4QCwWH4olYqlYJpaLDPGRyBQrRJb4WKwUn4hssUqsFmvEWrFOrBcbxEaxSWwWW8RWsU1sFzvETvGp2CV2iz1ir9gn9osD4jNxUHwuDokvRI748h/MP/+f8vuAAAESJGjQUAAKQAzEQCzEQhzEQWEoDBGIQDzEQxEoAkWhKBSH4pAACVAKSgECAgFBaSgNUYhCWSgLiZAI5aE8OHCQBElQCW6FylAZqkAVqApVoRpUh+pQE2pCLagFtaE21IW6UA/qQQNoAPfAPXAvNIbG0ASaQFNoCs2gGTSH5tACWkBLaAmtoBW0htbQBtpAO2gHHaADdISO0Ak6QRfoAl2hK3SDbpAMydAdukMP6AE9oSf0gl7QG3pDH+gLfeEleAlehpdhINSTg2AwDIYhMASGwXAYDq/CSHgNXoPXIRVGwxh4A96AN2EcnIPxMAEmwkSoJSfDFJgKJKdDGqTBDJgBM2EmzILZMBvmQjrMg/kwHxbAQlgIH8Bi+BA+hKWwFJZDBmRAJqyALMiClXAesmEVrIY1sBbWwVrYABthA2yGLbAZtsE22AE74FP4FHbDbtgLe2E/7IfP4DP4HD6HVMiBHDgMh+EIHIGjcBRyIReOwTE4DsfhBJyAk3ASTsFpOAOn4SychXNwHi7ABbgIF+ESvJDwTcv95TalCplHSy0LyAIyRsbIWBkr42ScLCwLy4iMyHgZL4vIIrKoLCqLy+IyQSbIUrKURImSZChLy9IyKqOyrCwrE2WiLC/LSyedTJJJspKsJCvLyrKKvF1WlXfIarK67Oxqypqyluziass6sq6sK+vJ+rKBbCgbykaykWwsG8smsolsKpvKZvJB2VwOgmHwsMzrTCs5GlrLMdBGtpXtZHv5JjwuO8px0El2ll3kk3ICjIdusqNLls/I7nIK9JDPyanwvOwlp0Nv+aLsI/vKfvIl2V92cgPkQDkLBsnBci4MkUPlMDlcLoD6Mq9jDeTrMlWOlmPkG3I5vCnHybfkeDlBTpRvy0lyspwip8ppcrpMk+/IGfJdOVO+J2fJ2XKOnCvT5Tw5X74vF8iFcpH8QC6WH8olcqlcJpfLDPmRzJQrZJb8WK6Un8hsuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ulzvkTvmp3CV3yz1yr9wn98sD8jN5UH4uD8kvZI78Uh6Wf5JH5FfyqPxa5spv5DH5rTwuv5Mn5PfypPxBnpKn5Rn5ozwrf5Ln5Hl5Qf4sL8pf5CX5q7wsvRQKlFRKaRWoAqqgilGFVKy6RsWpa1VhdZ2KqOtVvLpBFVE3qqKqmCquSqgEVVKVUkahsopUqEqrMiqqblJl1c0qUZVT5VUF5VRFlaRuUZXUraqyuk1VUberquoOVU1VVzVUTXWnqqXuUrVVHVVX3a3qqfqqgWqo7lGN1L2qsbpPNVH3q6bqAdVMPaiaq4dUC/WwaqkeUa3Uo6q1eky1UW1VO9VedVCPq47qCdVJdVZd1JOqq3pKdVNPq2T1jOqunlU91HOqp3pe9VIvqN7qRdVH9VX91K/qsvJqgBqoUtQgNVi9ooaooWqYGq5GqFfVSPWaGqVeV6lqtBqj3lBj1ZtqnHpLjVcT1ET1tpqkJqspaqqapqarNPWOmqHeVTPVe2qWmq3mqLkqXc1Tw/5SadH/IP/dv5M/6rd336F2qk/VLrVb7VF71T61Xx1QB9RBdVAdUodUjspRh9VhdUQdUUfVUZWrctUxdUwdV8fVCXVCnVQn1Sl1Wv2sflRn1U/qnDqvzquf1UV1UV36y+9AaNBSK611oAvogjpGF9Kx+hodp6/VhfV1OqKv1/H6Bl1E36iL6mK6uC6hE3RJXUobjdpq0qEurcvoqL5Jl9U360RdTpfXFbTTFXWSvuWfzv+j9XXQHXRH3VF30p10F91Fd9VddTfdTSfrZN1dd9c9dA/dU/fUvXQv3Vv31n10H91P99P9dX89QA/QKTpFD9av6CF6qB6mh+sR+lU9Uo/Uo/QonapT9Rg9Ro/VY/U4PU6P1+P1RD1RT9KT9BQ9RU/T03SaTtMz9Aw9U8/Us/QsPUfP0ek6Xc/X8/UCvUAv0ov0Yr1YL9FL9DK9TGfoDJ2pM3WWztIr9UqdrVfpVXqNXqPX6XV6g96gN+lNeoveorfpbTpb79Q79S69S+/Re/Q+vU8f0Af0QX1QH9KHdI7O0Yf1YX1EH9FH9VGdq3P1MX1MH9fH9Ql9Qp/UJ/UpfUqf0Wf0WX1Wn9Pn9AV9QV/UF/UlfUlf1pfzLvsCGchABzooEBQIYoKYIDaIDeKCuKBwUDiIBJEgPogPigQ3BkWDYkHxoESQEJQMSgUmwMAGFIRB6aBMEA1uCsoGNweJQbmgfFAhcEHFICm4JagU3BpUDm4LqgS3B1WDO4JqQfWgRlAzuDOoFdwV1A7qBHWDu4N6Qf2gQdAwuCdoFNwbNA7uC5oE9wdNgweCZsGDQfPgoaBF8HDQMngkaBU8GrQOHgvaBG2DdoG/7P2/sr7354o94QaYgSbFDDKDzStmiBlqhpnhZoR51Yw0r5lR5nWTakabMeYNM9a8acaZt8x4M8FMNG+bSWaymWKmmmlmukkz75gZ5l0z07xnZpnZZo6Za9LNPDPfvG8WmIVmkfnALDYfmiVmqVlmlpsM85HJNCtMlvnYrDSfmGyzyqw2a8xas86sNxvMRrPJbDZbzFazzWw3O8xO86nZZXabPWav2Wf2mwPmM3PQfG4OmS9MjvnSHDZ/MkfMV+ao+drkmm/MMfOtOW6+MyfM9+ak+cGcMqfNGfOjOWt+MufMeXPB/Gwuml/MJfOruWx83sV93sc7atRYAAtgDMZgLMZiHMZhYSyMEYxgPMZjESyCRbEoFsfimIAJWApLYR5CwtJYGqMYxbJYFhMxEctjeXToMAmTsBJWwspYGatgFayKVbEaVsMaWAPvxDvxLrwL62AdvBvvxvpYHxtiQ2yEjbAxNsYm2ASbYlNshs2wOTbHFtgCW2JLbIWtsDW2xjbYBtthO+yAHbAjdsRO2Am7YBfsil2xG3bDZEzG7tgde2AP7Ik9sRf2wt7YG/tgH+yH/bA/9scBOABTMAUH42AcgkNwGA7DETgCR+JIHIWjMBVTcQyOwbE4FsfhOByPE3Aivo2TcDJOwak4DadjGqbhDJyBM3EmzsJZOAfnYDqm43ycjwtwAS7CRbgYF+MSXILLcBlmYAZmYiZmYRauxJWYjdm4GlfjWlyL63E9bsSNuBk341bcittxO+7EnbgLd+Ee3IP7cB8ewAN4EA/iITyEOZiDh/EwHsEjeBSPYi7m4jE8hsfxOJ7AE3gST+IpPIVn8AyexbN4Ds/hBbyAF/EXvIS/4mX0GGOliLXX2Dh7rS1sr7MxtpD967i4LWETbElbyhpb1Bb7mxittYm2nC1vK1hnK9oke8vv4mq2uq1ha9o7bS17l639u7iRvdc2tvfZJvZ+29De8zdxU/uAbWYftc3tY7aFbWtb2va2lX3UtraP2Ta2rW1n29uu9inbzT5tk+0ztrt99ndxpl1hN9pNdrPdYg/az+0F+7M9br+zF+0vdoAdaEfYV+1I+5odZV+3qXb07+KJ9m07yU62U+xUO81O/108x8616XaenW/ftwvswt/FGfYju9hm2SV2qV1ml/8W560py35sV9pPbLZdZVfbNXatXWfX2w3/sdY1dpvdbnfYA/Yzu8vutnvsXrvP7v8tztvHIfuFzbFf2mP2W3vEfmWP2hM2137zW5y3vxP2e3vS/mBP2dP2jP3RnrU/2XP2/G/7z9v7j/ZXe9l6KwhIkiJNARWgghRDhSiWrqE4upYK03UUoespnm6gInQjFaViVJxKUAKVpFJkCMkSUUilqQxF6SYqSzdTIpWj8lSBHFWkJLqFKtGtVJluoyp0O1WlO6gaVacaVJPupFp0F9WmOlSX7qZ6VJ8aUEO6hxrRvdSY7qMmdD81pQeoGT1IzekhakEPU0t6hFrRo9SaHqM21JbaUXvqQI9TR3qCOlFn6kJPUld6irrR05RMz1B3epZ60HPUk56nXvQC9aYXqQ/1pX70EvWnl2kADaQUGkSD6RUaQkNpGA2nEfQqjaTXaBS9Tqk0msbQGzSW3qRx9BaNpwk0kd6mSTSZptBUmkbTKY3eoRn0Ls2k92gWzaY5NJfSaR7Np/dpAS2kRfQBLaYPaQktpWW0nDLoI8qkFZRFH9NK+oSyaRWtpjW0ltbRetpAG2kTbaYttJW20XbaQTvpU9pFu2kP7aV9tJ8O0Gd0kD6nQ/QF5dCXdJj+REfoKzpKX1MufUPH6Fs6Tt/RCfqeTtIPdIpO0xn6kc7ST3SOztMF+pku0i90iX6ly+RJhBDKUIU6DMICYcEwJiwUxobXhHHhtWHh8LowEl4fxoc3hEXCG8OiYbGweFgiTAhLhqVCE2JoQwrDsHRYJoyGN4Vlw5vDxLBcWD6sELqwYpgU3hJWCm8NK4e3hVXC28Oq4R1htbB6+Oj9NcM7w1rhXWHtsE5YN7w7rBfWDxuEDcN7wkbhvWHj8L6wSXh/WDl8IGwWPhg2Dx8KW4QPhy3DR8JW4aNh6/CxsE3YNmwXtg87hI+HHcMnwk5h57BL+GTYNXwq7BY+HSaHz4Tdw2f/8HhKOCgcHL4SvhJ6f59aFl0ezYh+FM2MrohmRT+Orox+Es2Oroqujq6Jro2ui66PbohujG6Kbo5uiW6Nbotuj+6Iet+woHDgpFNOu8AVcAVdjCvkYt01Ls5d6wq761zEXe/i3Q2uiLvRFXXFXHFXwiW4kq6UMw6ddeRCV9qVcVF3kyvrbnaJrpwr7yo45yq6JNfedXAdXEf3hOvkOrsu7kn3pHvKPeWedk+7Z1x396zr4Z5zPd3zrpd7wb3gXnR9XF/Xz73k+ruX3QA30KW4FDfYDXZD3BA3zA1zI9wIN9KNdKPcKJfqUt0YN8aNdWPdODfOjXfj3UQ30U1yk9wUN8VNc9NcmktzM9wMN9PNdLPcLDfHzXHpLt3Nd/PdArfALXKL3OLExW6JW+KWuWUuw2W4TJfpslyWW+lWumyX7Va71W6tW+vWu/Vuo9voNrvNbqvb6ra77W6n2+l2uV1uj9vj9rl97oA74A66g+6QO+RyXI477A67I+6IO+q+drnuG3fMfeuOu+/cCfe9O+l+cKfcaXfG/ejOup/cOXfeXXA/u4vuF3fJ/eouO+/SIu9EZkTejcyMvBeZFZkdmROZG0mPzIvMj7wfWRBZGFkU+SCyOPJhZElkaWRZZHkkI/JRJDOyIpIV+TiyMvJJJDuyKrI6siayNrIu4n3JXaEv7cv4qL/Jl/U3+0Rfzpf3FbzzFX2Sv8VX8rf6yv42X8Xf7qv6O3w1X93X8I/5Nr6tb+fb+w7+cd/RP+E7+c6+i3/Sd/VP+W7+aZ/sn/Hd/bO+h3/O9/TP+17+Bd/bv+j7+L6+n3/J9/cv+wF+oE/xg/xg/4of4of6YX64H+Ff9SP9a36Uf92n+tF+jH/Dj/Vv+nH+LT/eT/AT/dt+kp/sp/ipfpqf7tP8O36Gf9fP9O/5WX62n+Pn+nQ/z8/37/sFfqFf5D/wi/2Hfolf6pf55T7Df+Qz/Qqf5T/2K/0nPtuv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dr/Tf+p3+d1+j9/r9/n9/oD/zB/0n/tD/guf47/0h/2f/BH/lT/qv/a5/ht/zH/rj/vv/An/vT/pf/Cn/Gl/xv/oz/qf/Dl/3l/wP/uL/hd/yf+adyPgr/aTdMYYY4yx/x+oPzg+6O/8TP5l5BkshLh2d4nc/1xza9E/z4fKhK4RIcQzA3s//L9HvXopKSl/OTdbiaDMUiFE5Ep+AXElXiW6iKdEsugsKv3d9Q2VfS/SH9SP3i5E7F/lxIgr8ZX6t/4X9R9/cmJm1fBC/H9Tf6kQiWWu5BQSV+Ir9Sv/F/WLdfyD9Rf6Kk2ITn+VEyeuxFfqJ4knxLMi+W/OZIwxxhhjjDHG/myorNHzj+6f8+7PE/SVnILiSvxH9+eMMcYYY4wxxhi7+p7v2+/px5OTO/fkCU94wpP/mFzt/0yMMcYYY4yxf7UrF/1XeyWMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlj+9f/i68Su9h4ZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxq+1/BQAA///QoDtv") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) read$ptp(r0, &(0x7f0000000100)=""/48, 0xfffffdef) read$FUSE(r0, &(0x7f0000004a40)={0x2020}, 0x2020) 2m29.878867017s ago: executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@dioread_lock}, {@dioread_nolock}]}, 0xfd, 0x55c, &(0x7f0000001100)="$eJzs3U9rHOUfAPDvbJL+//2aQinqQQI9WKndNIl/KnioR9FiQe9xSaahZNMt2U1pYsH2YC9epAgiFsQX4N1j8Q34KgpaKFKCHryszGY2XbO7+bPZNqn7+cAkzzMzm2e+O/N98sw+u2wAA2ss+1GIeDkivk4ijrdsG45849jafqtPbs1kSxL1+id/JJHk65r7J/nvo3nlpYj45cuIs4X2dqvLK/OlcjldzOvjtYXr49XllXNXF0pz6Vx6bXJq6sJbU5PvvvN222OnD/YW6+uX//ru4wcfXPjq9Oq3Pz06cS+Ji3Es39Yaxy7cbq2MxVj+nIzExQ07TvShsf0k2esDoCdDeZ6PRNYHHI+hPOuB/74vIqIODKhE/sOAao4Dmvf2fboPfmE8fn/tBqg9/uG110biUOPe6Mhq8q87o+x+d7QP7Wdt/Pz7/XvZEv17HQJgS7fvRMT54eH2/i/J+7/end/GPhvb0P/B8/MgG/+80Wn8U1gf/0SH8c/RDrnbi63zv/CoD810lY3/3us4/l2ftBodymv/a4z5RpIrV8tp1rf9PyLOxMjBrL7ZfM6F1Yf1bttax3/ZkrXfHAvmx/FoeMN812ypVtpNzK0e34l4peP4N1k//0mH8589H5fbQ+noVHr/1W7bto7/2ar/GPFax/P/dEYr2Xx+crxxPYw3r4p2f9499Wu39ncYf9+n2bLzf2Tz+EeT1vna6s7b+OHQ32m3bb1e/weSTxvlA/m6m6VabXEi4kDyUfv6yaePbdab+2fxnzm9ef/X6fo/HBGfbTP+uyfvdt11r6//LP7ZHZ3/nRcefvj5993a3975f7NROpOv2U7/t90D3M1zBwAAAAAAAPtNISKORVIorpcLhWJx7f0dJ+NIoVyp1s5eqSxdm43GZ2VHY6TQnOk+3vJ+iIn8/bDN+uSG+lREnIiIb4YON+rFmUp5dq+DBwAAAAAAAAAAAAAAAAAAgH3iaMShTp//z/w2tNdHBzxzvvIbBlf3/M+39OObnoB9yf9/GFzyHwaX/IfBJf9hcMl/GFzyHwaX/IfBJf8BAAAAAAAAAAAAAAAAAAAAAAAAAACgry5fupQt9dUnt2ay+uyN5aX5yo1zs2l1vriwNFOcqSxeL85VKnPltDhTWdjq75UrlesTk7F0c7yWVmvj1eWV6YXK0rXa9NWF0lw6nY48l6gAAAAAAAAAAAAAAAAAAADgxVJdXpkvlcvpooJCT4Xh/XEYCn0u7HXPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABP/RMAAP//5SI5Sg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x48, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x48}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) 2m29.617233867s ago: executing program 3: syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000480), 0xfd, 0x1117, &(0x7f00000024c0)="$eJzs2cFq1FAUBuD/JqPtbiTug6ALF1JaxgewC4XZutWNSEGwqw4Iiq/hG/gWvoJ25b50r4uCSyESM3GqDKh0KgjfB8k9OcnJyV3emwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvknwqyfUqacZclaQkbXs8P03Sjvlr7+sqJQ8P5ov7R7MHiyT198fLo6T0VX1Zmr2b282smTV7zd17+7c+LF6+ev7k8PDgaPmakjYnZxudRRlP9flc2WgPAAAA+G91FzbNmxd/0unqJfUHAAAAfmfT+wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6ubruJmDKokJWnb4/lpknZN3ZV/9H0AAADAxZVUeTxdlx+2AVbu5OO0/Mj345fSx7t5u6YeAAAAWHn27qfLbmsZnP+//rUb9Ovu25kM6/Lt4d6NTLKzM8TLIZ/3kzrJ7i+9Ts5ePx2P0tXJ1uXMCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBv7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//YwzhLg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4095, 0xfff) 2m28.831610077s ago: executing program 3: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file1\x00', 0x2000000c, &(0x7f0000000100)={[{@errors_remount}, {@discard}, {@errors_continue}, {}, {@dmask}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x1, 0x14fd, &(0x7f0000002a80)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) read$ptp(r0, &(0x7f0000000100)=""/48, 0xfffffdef) read$FUSE(r0, &(0x7f0000004a40)={0x2020}, 0x2020) 2m28.467242644s ago: executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={0x0}) 21.388198063s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x88, 0x64, 0x0, 0x749628756e966845) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0}, @fd}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) 20.232046221s ago: executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{}, {0x0, 0x0, 0x4, 0x4}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 20.097490492s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x85}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 19.990808758s ago: executing program 2: setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000040)={@private, @dev, 0x0, "1bcef6d71baf76d70a3e3048d1888399d5d7e4d7e5cf96d9aeff294fff790050", 0x0, 0x0, 0x0, 0x8001}, 0x3c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1404bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 19.891407073s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x0, 0x0, {0x2c}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 19.762669094s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000017c0)={0x2020}, 0x2020) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)) flistxattr(r1, &(0x7f0000003800)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000380)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x2, 0x0, &(0x7f0000000000)) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "4b0a00c13cd6cfef5df35e1d5c2cd83ec8331c81a09875c137d35494701f22acbd1c110c6ab4c8829dfb7154e1476a3cfeab3096b43788d7c435b4a89e2fdc93"}, 0x48, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) sendfile(0xffffffffffffffff, r1, &(0x7f0000000280)=0xffffffffffffffff, 0x8) keyctl$KEYCTL_MOVE(0x1d, r3, 0xfffffffffffffffe, r4, 0x0) r5 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r5, 0xee00, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x4002411) keyctl$chown(0x4, r5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f00000003c0)={'fscrypt:', @auto=[0x6b, 0x38, 0x38, 0x62, 0x33, 0x30, 0x63, 0x61, 0x31, 0x38, 0x39, 0x36, 0x35, 0x37, 0x37, 0x31]}, &(0x7f0000000400)={0x0, "73e73a3005c9b57dbd109d20dc4061f12972053cd20c6da8e8884926924e5f7f1a26a408a47b7eece79c2117ef00000000000056f784a6110efac0f054b14948", 0x40000013}, 0x48, r5) keyctl$setperm(0x5, 0x0, 0x1060141) getrlimit(0x0, &(0x7f0000000500)) socket$inet_udp(0x2, 0x2, 0x0) sync() 1.713495196s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000180)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@norecovery}, {@auto_da_alloc}, {@test_dummy_encryption}, {@nobarrier}, {@nombcache}, {@minixdf}, {@oldalloc}]}, 0x1, 0xbca, &(0x7f0000002380)="$eJzs3MtrXNcZAPDvXo0efrQjl1LqbqxSig2lY8lFpjYF28Wlmy4K7bZgIY+M0PiBpOJK1mLU/AMhyTqQTSCJSfAiXnuTQLbZJM42JouACYqVQAiJwp2HHtaMJNszurL1+8GZe86ce+d831xm7jkwdwLYt4ayhzTiaERcSiKKjefTiOir1QYiqvX9lpcWxr9dWhhPYmXlX18lkUTEo6WF8eZrJY3toUZjICI+/msSv3hp87gzc/NTY5VKebrRPjl79cbJmbn5P05eHbtSvlK+NnL6z6OnRk8PnxntWK7ffX7+7je//fsX1e/f/uH216++mcT5Ro4b8+iUoRhafU/WK0TEWKcHy0lPI5/1eSaFbQ5KuxwUAABtpevmcL+KYvTE2uStGB98kmtwAAAAQEes9ESsbKunuTcAAADwXEqs6gEAAOAF1/wdwKOlhfFmye/XCLvv4YWIGKznv9wo9Z5CVGvbgeiNiIOPklh/W2tSP+yZDUXEg8/OvJeV6NJ9yFupLkbEr1ud/6SW/2DtLu7N+acRMdyB8Yceaz9P+Z/vwPh55w/A/nTvQv1Ctvn6l67Of6LF9a/Q4tr1NPK+/jXnf8ub5n9r+fe0mf/9c4dj3Hrr9Zvt+rL8/3L3b+82SzZ+tn2mpJ7Aw8WI3xRa5Z+s5p+0yf/SDsco/niz3K4v7/xX3og4Hq3zb0q2/n+ikxOTlfJw/bHlGIsfjb7Tbvy888/O/8E2+W93/m/scIz/XLx4p11fi/x7Y0P+6Zd9yb9rteZ/Nf1vbHZ2eiSiL/nH5udPbR1Lc5/ma2T5n/jd1p//Vvln3wnVxvuQrQUWG9us/f/Hxjx3+9b7W+Wfrf3yPP+Xn/L8v7zDMX7/4Ssn2vWtX/9mJRv/QVJfC2+0ehMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPtQGhGHI0lLq/U0LZUiDkXEL+NgWrk+M/uHiev/vXY564sYjN50YrJSHo6IYr2dZO2RWn2tfeqx9p8i4khEvFY8UGuXxq9XLuedPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKsORcThSNJSRKQRsVxM01Ip76gAAACAzkrzDgAAAADYDYN5BwAAAAB0nfU/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXXbk2L37SURUzx6olUxfo68318iAbkvzDgDITU/eAQC5KeQdAJCbJ1zjmy7ACyhpbM+16R9oe2R/V+IBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYG86fvTe/SQiqmcP1Eqmr9HX2/KIY7sYHdBNad4BALnp2aqzsHtxALvPRxz2r9ZrfGA/SbbpH1jbp7qxp79rMQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw9xyulSQtRURaq6dpqRTxs4gYjN5kYrJSHo6In0fEp8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnlZR2Y1KUtgTYezJSpJ/GCNp8zsh728mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyMDM3PzVWqZSnZ/KOBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjbzNz81FilUp7eQeXOk+y8rpJ3jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5OenAAAA//8nwwRF") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105642, 0x0) 1.313770188s ago: executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x0) 1.164011151s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x18, 0x42, 0x109}, 0x18}}, 0x0) 1.049573339s ago: executing program 1: socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1a4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2a00000026000506"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700), 0x300, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005bc0), 0x0, 0x0) 123.319681ms ago: executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1d, 0x0, 0x2, {0x0, 0x0, 0x0, 0x2}}, 0x18, &(0x7f0000000080)={&(0x7f0000000180)="c3", 0x1}}, 0x0) 0s ago: executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x4048045) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x800c5011, &(0x7f00000001c0)) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'virt_wifi0\x00', &(0x7f0000000c40)=@ethtool_drvinfo={0x3, "6af47d71a88c0855f34ea5f38d11a7cc5040067cf0ad439507cd5f0374a71692", "f5de6bb45f00a1f7b6f310d076a7b2bc0ad5344f8a076505e5032e40dbabd19a", "9c98d0b496db700c165e3b48ef83761b0992657e2934206def7095d299c18c95", "aa5e0489fe633b62a915308583734b92e9539e362a908b00", "9c7fa9cef671388f693028c4a07dbb0060fc4375158db0c382649e1bd49044fd", "48cef603b4858dd0f6154721"}}) syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x5}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x15}, {0x15}, {0x6}]}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r5, 0x409, 0xd) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f00000010c0)="a7", 0x1, 0x20004010, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2, 0xfffffffe}, 0x1c) sendto$inet6(r7, &(0x7f0000000000)="9d", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @private2}, 0x1c) shutdown(r7, 0x1) getsockopt$bt_hci(r7, 0x84, 0x9, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) fcntl$setstatus(r5, 0x4, 0x40000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) preadv(r3, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/102, 0x66}], 0x1, 0x4b, 0x0) kernel console output (not intermixed with test programs): T26] audit: type=1326 audit(1718882853.117:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3711 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561067cf29 code=0x7ffc0000 [ 64.488176][ T26] audit: type=1326 audit(1718882853.117:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3711 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f561067cf29 code=0x7ffc0000 [ 64.539888][ T3566] EXT4-fs (loop4): unmounting filesystem. [ 64.556210][ T26] audit: type=1326 audit(1718882853.157:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3711 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561067cf29 code=0x7ffc0000 [ 64.564550][ T3732] loop2: detected capacity change from 0 to 8192 [ 64.608785][ T26] audit: type=1326 audit(1718882853.157:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3711 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f561067cf29 code=0x7ffc0000 [ 64.609769][ T3732] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 64.647243][ T3732] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 64.656624][ T3732] REISERFS (device loop2): using ordered data mode [ 64.663753][ T3732] reiserfs: using flush barriers [ 64.678671][ T3732] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.698738][ T3732] REISERFS (device loop2): checking transaction log (loop2) [ 64.719452][ T3732] REISERFS (device loop2): Using r5 hash to sort names [ 64.747262][ T3732] REISERFS (device loop2): using 3.5.x disk format [ 64.811503][ T3732] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 64.861389][ T3747] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 64.907673][ T3749] loop4: detected capacity change from 0 to 256 [ 65.156948][ T3760] loop4: detected capacity change from 0 to 256 [ 65.199289][ T3760] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010470, chksum : 0x23280b3e, utbl_chksum : 0xe619d30d) [ 65.229348][ T3762] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 65.863846][ T3773] loop3: detected capacity change from 0 to 8192 [ 65.897479][ T3773] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 66.022097][ T3773] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 66.065693][ T3773] REISERFS (device loop3): using ordered data mode [ 66.098936][ T3773] reiserfs: using flush barriers [ 66.127430][ T3773] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 66.174343][ T3773] REISERFS (device loop3): checking transaction log (loop3) [ 66.209216][ T3773] REISERFS (device loop3): Using r5 hash to sort names [ 66.233375][ T3773] REISERFS (device loop3): using 3.5.x disk format [ 66.240369][ T3773] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 66.504819][ T3790] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 66.522056][ T3792] loop3: detected capacity change from 0 to 256 [ 66.553102][ T3792] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010470, chksum : 0x23280b3e, utbl_chksum : 0xe619d30d) [ 66.799926][ T3797] loop1: detected capacity change from 0 to 1024 [ 66.865303][ T3797] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.027939][ T3797] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 67.155838][ T3565] EXT4-fs (loop1): unmounting filesystem. [ 67.474045][ T3808] Cannot find add_set index 0 as target [ 68.559619][ T3819] loop2: detected capacity change from 0 to 8192 [ 68.618006][ T3819] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 68.637327][ T3819] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 68.670747][ T3819] REISERFS (device loop2): using ordered data mode [ 68.712044][ T3819] reiserfs: using flush barriers [ 68.736953][ T3819] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 68.822664][ T3819] REISERFS (device loop2): checking transaction log (loop2) [ 68.859292][ T3819] REISERFS (device loop2): Using r5 hash to sort names [ 68.897806][ T3819] REISERFS (device loop2): using 3.5.x disk format [ 68.904744][ T3819] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 68.942221][ T3825] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 69.500447][ T3836] loop1: detected capacity change from 0 to 1024 [ 69.772147][ T3559] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.839913][ T3842] loop1: detected capacity change from 0 to 256 [ 70.287889][ T3846] Cannot find add_set index 0 as target [ 70.382668][ T3559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.494969][ T3559] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.657789][ T3559] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 71.031442][ T3559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.053751][ T3559] usb 3-1: config 0 descriptor?? [ 71.345433][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.352126][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.135578][ T3559] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 72.157027][ T3559] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 72.177482][ T3559] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0001/input/input5 [ 72.247134][ T3559] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 72.381825][ T153] usb 3-1: USB disconnect, device number 2 [ 73.058598][ T3869] loop1: detected capacity change from 0 to 8192 [ 73.110803][ T3869] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 73.142048][ T3869] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 73.163086][ T3869] REISERFS (device loop1): using ordered data mode [ 73.169614][ T3869] reiserfs: using flush barriers [ 73.271455][ T3869] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.352304][ T3869] REISERFS (device loop1): checking transaction log (loop1) [ 73.383678][ T3869] REISERFS (device loop1): Using r5 hash to sort names [ 73.390708][ T3869] REISERFS (device loop1): using 3.5.x disk format [ 73.427656][ T3869] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 73.910259][ T3877] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 73.954511][ T3877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 74.538596][ T3881] loop1: detected capacity change from 0 to 40427 [ 74.564804][ T3881] F2FS-fs (loop1): invalid crc value [ 74.625115][ T3881] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.702135][ T3881] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 74.741208][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 74.741224][ T26] audit: type=1800 audit(1718882864.967:76): pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 74.813375][ T26] audit: type=1800 audit(1718882865.007:77): pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 74.839427][ T3565] syz-executor.1: attempt to access beyond end of device [ 74.839427][ T3565] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 76.101263][ T3906] loop1: detected capacity change from 0 to 1024 [ 76.343565][ T3910] loop1: detected capacity change from 0 to 256 [ 76.396691][ T3910] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 76.460810][ T3908] loop2: detected capacity change from 0 to 8192 [ 76.469268][ T14] cfg80211: failed to load regulatory.db [ 76.475052][ T26] audit: type=1800 audit(1718882866.707:78): pid=3910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048610 res=0 errno=0 [ 76.545163][ T3908] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 76.617629][ T3908] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 76.722049][ T3908] REISERFS (device loop2): using ordered data mode [ 76.761985][ T3908] reiserfs: using flush barriers [ 76.802054][ T3908] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.852425][ T3908] REISERFS (device loop2): checking transaction log (loop2) [ 76.893557][ T3908] REISERFS (device loop2): Using r5 hash to sort names [ 76.900471][ T3908] REISERFS (device loop2): using 3.5.x disk format [ 76.965810][ T3908] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 77.283097][ T3910] loop1: detected capacity change from 256 to 0 [ 77.325237][ T3848] loop: Write error at byte offset 9223372036854857727, length 512. [ 77.364055][ C0] I/O error, dev loop1, sector 160 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 77.373980][ C0] Buffer I/O error on dev loop1, logical block 160, lost sync page write [ 77.382541][ T3848] loop: Write error at byte offset 9223372036854858239, length 512. [ 77.390628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!! [ 77.399625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #392!!! [ 77.413283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #392!!! [ 77.423278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #392!!! [ 77.431598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #392!!! [ 77.445432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #392!!! [ 77.454424][ C0] I/O error, dev loop1, sector 161 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 77.464220][ C0] Buffer I/O error on dev loop1, logical block 161, lost sync page write [ 77.639775][ C1] I/O error, dev loop1, sector 160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.649544][ C1] I/O error, dev loop1, sector 161 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.660461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 77.684257][ C1] I/O error, dev loop1, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.706682][ C1] I/O error, dev loop1, sector 161 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.737684][ T11] loop: Write error at byte offset 9223372036854882303, length 512. [ 77.755172][ C1] I/O error, dev loop1, sector 208 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 77.769259][ C1] I/O error, dev loop1, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.785301][ T3849] loop: Write error at byte offset 9223372036854775807, length 512. [ 77.805200][ C0] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 77.814668][ C0] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 77.824382][ C0] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 78.193884][ T3812] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.353286][ T3812] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.507177][ T3812] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.610568][ T3812] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.938656][ T3931] syz-executor.2 (pid 3931) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 79.088276][ T3582] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.100605][ T3582] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.109672][ T3582] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.142879][ T3582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.154832][ T3582] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.173341][ T3582] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.174221][ T3935] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.355699][ T3936] loop2: detected capacity change from 0 to 1024 [ 79.383996][ T3936] ======================================================= [ 79.383996][ T3936] WARNING: The mand mount option has been deprecated and [ 79.383996][ T3936] and is ignored by this kernel. Remove the mand [ 79.383996][ T3936] option from the mount to silence this warning. [ 79.383996][ T3936] ======================================================= [ 79.492157][ T3936] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.519130][ T3936] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.678999][ T3936] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 79.772137][ T3936] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 11 (err -117) [ 79.798730][ T3936] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 79.808155][ T3932] chnl_net:caif_netlink_parms(): no params data found [ 79.935407][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.971980][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.979415][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.032101][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.042877][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.050362][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.057858][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.057934][ T3812] device hsr_slave_0 left promiscuous mode [ 80.065281][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.065319][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.065340][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.065360][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.101046][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.108486][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.115971][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.123409][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.130839][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.138587][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.138999][ T3812] device hsr_slave_1 left promiscuous mode [ 80.146046][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.146070][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.146090][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.146111][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.146131][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.146151][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.146175][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.146195][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.146215][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.146235][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.146255][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.146275][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.242271][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.249688][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.257392][ T3812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.262830][ T14] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 80.272026][ T3812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.298857][ T14] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 80.304611][ T3812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.341282][ T3812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.374284][ T3812] device bridge_slave_1 left promiscuous mode [ 80.381724][ T3812] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.413591][ T3812] device bridge_slave_0 left promiscuous mode [ 80.419835][ T3812] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.471714][ T3812] device veth1_macvtap left promiscuous mode [ 80.513590][ T3812] device veth0_macvtap left promiscuous mode [ 80.520529][ T3812] device veth1_vlan left promiscuous mode [ 80.558750][ T3812] device veth0_vlan left promiscuous mode [ 80.571998][ T3559] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.952252][ T3559] usb 3-1: config 0 has no interfaces? [ 80.958241][ T3559] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 80.992042][ T3559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.013042][ T3559] usb 3-1: config 0 descriptor?? [ 81.145138][ T3812] team0 (unregistering): Port device team_slave_1 removed [ 81.178169][ T3812] team0 (unregistering): Port device team_slave_0 removed [ 81.216336][ T3812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.249947][ T3812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.262052][ T3582] Bluetooth: hci0: command tx timeout [ 81.401620][ T3935] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz-executor.2: Invalid block bitmap block 0 in block_group 0 [ 81.494174][ T3935] Quota error (device loop2): write_blk: dquota write failed [ 81.522086][ T3935] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 81.525283][ T3812] bond0 (unregistering): Released all slaves [ 81.562316][ T3935] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz-executor.2: Failed to acquire dquot type 0 [ 81.634743][ T3559] usb 3-1: USB disconnect, device number 3 [ 81.731317][ T3932] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.756326][ T3932] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.773181][ T3932] device bridge_slave_0 entered promiscuous mode [ 81.790471][ T3932] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.797735][ T3932] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.815291][ T3932] device bridge_slave_1 entered promiscuous mode [ 81.897450][ T3932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.954516][ T3932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.025406][ T3932] team0: Port device team_slave_0 added [ 82.033354][ T3932] team0: Port device team_slave_1 added [ 82.113046][ T3932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.120020][ T3932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.211958][ T3932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.243916][ T3932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.250492][ T3935] syz-executor.2 (3935) used greatest stack depth: 19616 bytes left [ 82.250871][ T3932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.382505][ T3932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.415123][ T3569] EXT4-fs (loop2): unmounting filesystem. [ 82.506862][ T3932] device hsr_slave_0 entered promiscuous mode [ 82.542818][ T3932] device hsr_slave_1 entered promiscuous mode [ 83.342008][ T3582] Bluetooth: hci0: command tx timeout [ 83.377810][ T3932] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.454753][ T3932] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.491260][ T3932] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.550389][ T3932] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.792908][ T3932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.830871][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.853736][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.864677][ T3932] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.921590][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.943301][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.951856][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.959021][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.012388][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.021180][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.072514][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.079636][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.112280][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.158770][ T3932] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.211992][ T3932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.238093][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.247952][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.283708][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.313021][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.332767][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.341841][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.392178][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.400674][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.440348][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.472689][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.481545][ T3957] loop2: detected capacity change from 0 to 512 [ 84.514330][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.535959][ T3957] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.563218][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.603242][ T3957] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 84.657226][ T3957] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz-executor.2: inode #15: comm syz-executor.2: iget: illegal inode # [ 84.726766][ T3957] EXT4-fs (loop2): Remounting filesystem read-only [ 84.772515][ T3957] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 84.827896][ T3957] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 84.897389][ T3957] EXT4-fs error (device loop2): ext4_lookup:1855: comm syz-executor.2: inode #15: comm syz-executor.2: iget: illegal inode # [ 84.938826][ T3957] EXT4-fs (loop2): Remounting filesystem read-only [ 85.024840][ T3569] EXT4-fs (loop2): unmounting filesystem. [ 85.153704][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.172873][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.194308][ T3932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.274576][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.298356][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.346205][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.369802][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.410856][ T3932] device veth0_vlan entered promiscuous mode [ 85.422809][ T3582] Bluetooth: hci0: command tx timeout [ 85.448128][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.488328][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.541850][ T3932] device veth1_vlan entered promiscuous mode [ 85.628360][ T3971] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 85.682179][ T3971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.723353][ T3932] device veth0_macvtap entered promiscuous mode [ 85.750854][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.771983][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.800666][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.830973][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.868692][ T3932] device veth1_macvtap entered promiscuous mode [ 85.890425][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.902875][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.919212][ T3932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.978555][ T3932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.010051][ T3932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.056667][ T3932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.099472][ T3932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.138656][ T3932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.201569][ T3932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.241796][ T3932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.273724][ T3932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.309406][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.318626][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.359441][ T3932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.391977][ T3932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.401827][ T3932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.451960][ T3932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.461812][ T3932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.511955][ T3932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.521809][ T3932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.627856][ T3932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.688758][ T3932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.755973][ T3982] loop2: detected capacity change from 0 to 40427 [ 86.758740][ T3932] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.787333][ T3982] F2FS-fs (loop2): invalid crc value [ 86.791610][ T3932] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.847737][ T3932] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.859465][ T3982] F2FS-fs (loop2): Found nat_bits in checkpoint [ 86.887052][ T3932] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.913442][ T3982] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 86.942215][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.951823][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.972248][ T26] audit: type=1800 audit(1718882877.197:79): pid=3982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 87.032541][ T3569] syz-executor.2: attempt to access beyond end of device [ 87.032541][ T3569] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.066181][ T26] audit: type=1800 audit(1718882877.227:80): pid=3982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 87.213670][ T3849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.221785][ T3849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.304497][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.353606][ T3849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.361720][ T3849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.424773][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.502089][ T3582] Bluetooth: hci0: command tx timeout [ 87.795598][ T3993] IPv6: sit1: Disabled Multicast RS [ 87.943654][ T3995] loop2: detected capacity change from 0 to 256 [ 87.955334][ T3997] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! [ 88.010459][ T3995] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 88.135533][ T26] audit: type=1800 audit(1718882878.367:81): pid=3995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048615 res=0 errno=0 [ 88.890418][ T3999] loop1: detected capacity change from 0 to 40427 [ 88.938626][ T3999] F2FS-fs (loop1): invalid crc value [ 88.989458][ T3999] F2FS-fs (loop1): Found nat_bits in checkpoint [ 89.057448][ T3999] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 89.079094][ T26] audit: type=1800 audit(1718882879.307:82): pid=3999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 89.134061][ T3932] syz-executor.1: attempt to access beyond end of device [ 89.134061][ T3932] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 89.476002][ T4008] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 89.871982][ T153] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.243189][ T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.264487][ T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.294895][ T153] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 90.325249][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.353720][ T153] usb 3-1: config 0 descriptor?? [ 90.833680][ T153] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 90.850186][ T153] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 90.873711][ T153] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0003/input/input6 [ 90.935952][ T153] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 91.064336][ T153] usb 3-1: USB disconnect, device number 4 [ 92.279955][ T26] audit: type=1326 audit(1718882882.507:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4052 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204587cf29 code=0x7ffc0000 [ 92.362045][ T26] audit: type=1326 audit(1718882882.507:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4052 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204587cf29 code=0x7ffc0000 [ 92.422187][ T26] audit: type=1326 audit(1718882882.527:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4052 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f204587cf29 code=0x7ffc0000 [ 92.472047][ T26] audit: type=1326 audit(1718882882.527:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4052 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204587cf29 code=0x7ffc0000 [ 92.521965][ T26] audit: type=1326 audit(1718882882.527:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4052 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204587cf29 code=0x7ffc0000 [ 92.565680][ T26] audit: type=1326 audit(1718882882.527:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4052 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f204587cf29 code=0x7ffc0000 [ 92.619066][ T26] audit: type=1326 audit(1718882882.557:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4052 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204587cf29 code=0x7ffc0000 [ 92.677831][ T26] audit: type=1326 audit(1718882882.557:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4052 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f204587cf29 code=0x7ffc0000 [ 92.734042][ T26] audit: type=1326 audit(1718882882.577:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4052 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f204587a6a7 code=0x7ffc0000 [ 92.803164][ T26] audit: type=1326 audit(1718882882.577:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4052 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2045840379 code=0x7ffc0000 [ 93.319733][ T4066] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 93.682560][ T4078] loop1: detected capacity change from 0 to 512 [ 93.698332][ T4078] EXT4-fs: Ignoring removed orlov option [ 93.746019][ T4078] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.824213][ T4078] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0002] [ 93.878900][ T4078] System zones: 1-12 [ 93.931632][ T4078] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 94.017616][ T4078] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.1: missing EA_INODE flag [ 94.052336][ T4078] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 12 err=-117 [ 94.092635][ T4078] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.163639][ T4078] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.1: missing EA_INODE flag [ 94.206695][ T4078] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 12 err=-117 [ 94.261314][ T4078] EXT4-fs (loop1): 1 orphan inode deleted [ 94.270288][ T4078] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 94.378334][ T3932] EXT4-fs (loop1): unmounting filesystem. [ 94.516407][ T4093] loop2: detected capacity change from 0 to 1024 [ 94.562976][ T4093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.609019][ T4093] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.654538][ T4093] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 94.744312][ T4093] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 11 (err -117) [ 94.777646][ T4093] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.833633][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 94.841075][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 94.868817][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 94.878925][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 94.899170][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 94.909264][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 94.926942][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 94.944602][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 94.964869][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 94.991990][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.019845][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.050258][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.060403][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.080657][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.097353][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.111963][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.139755][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.152923][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.211424][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.221591][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.248984][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.266751][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.291991][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.320305][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.340570][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.350698][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.370956][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.386517][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.408608][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.418562][ T4096] loop1: detected capacity change from 0 to 40427 [ 95.425199][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.457397][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.466282][ T153] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 95.479698][ T4096] F2FS-fs (loop1): invalid crc value [ 95.502143][ T153] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 95.524522][ T4096] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.659023][ T4096] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 95.730872][ T3932] syz-executor.1: attempt to access beyond end of device [ 95.730872][ T3932] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.792022][ T3559] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.149114][ T4086] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 96.222753][ T3559] usb 3-1: config 0 has no interfaces? [ 96.228376][ T3559] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 96.258733][ T3559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.291350][ T3559] usb 3-1: config 0 descriptor?? [ 96.647698][ T4093] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz-executor.2: Failed to acquire dquot type 0 [ 96.706441][ T3559] usb 3-1: USB disconnect, device number 5 [ 97.379047][ T3569] EXT4-fs (loop2): unmounting filesystem. [ 97.608512][ T4116] IPv6: Can't replace route, no match found [ 98.782846][ T4153] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 99.970300][ T4186] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 100.972696][ T4188] loop2: detected capacity change from 0 to 40427 [ 100.982201][ T4188] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 100.989977][ T4188] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 101.035500][ T4188] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.082923][ T4188] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 101.090282][ T4188] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.105161][ T4187] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 101.118339][ T4187] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 101.815123][ T4201] loop2: detected capacity change from 0 to 256 [ 101.841382][ T4201] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 101.885035][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 101.885051][ T26] audit: type=1800 audit(1718882892.117:153): pid=4201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048623 res=0 errno=0 [ 103.068882][ T4201] loop2: detected capacity change from 256 to 0 [ 103.186337][ T4214] Cannot find add_set index 0 as target [ 103.382702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.391310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.401938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.912749][ T96] loop: Write error at byte offset 9223372036854857727, length 512. [ 103.921201][ C1] I/O error, dev loop2, sector 160 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 103.930836][ C1] Buffer I/O error on dev loop2, logical block 160, lost sync page write [ 103.961959][ T96] loop: Write error at byte offset 9223372036854858239, length 512. [ 103.991884][ C1] I/O error, dev loop2, sector 161 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 104.001564][ C1] Buffer I/O error on dev loop2, logical block 161, lost sync page write [ 104.048581][ C0] I/O error, dev loop2, sector 160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.058365][ C0] I/O error, dev loop2, sector 161 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.100573][ C0] I/O error, dev loop2, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.110168][ C1] I/O error, dev loop2, sector 161 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.150593][ T11] loop: Write error at byte offset 9223372036854882303, length 512. [ 104.162420][ C1] I/O error, dev loop2, sector 208 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 104.200201][ C1] I/O error, dev loop2, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.228854][ T3857] loop: Write error at byte offset 9223372036854775807, length 512. [ 104.237451][ C1] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 104.246924][ C1] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 104.256331][ C1] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 104.649088][ T3812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.769351][ T3812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.873246][ T3812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.973858][ T3812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.562448][ T3571] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.571801][ T3571] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.579797][ T3571] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.588397][ T3571] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.611376][ T3571] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 105.619441][ T3571] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.181141][ T4231] chnl_net:caif_netlink_parms(): no params data found [ 106.246833][ T3812] device hsr_slave_0 left promiscuous mode [ 106.262759][ T3812] device hsr_slave_1 left promiscuous mode [ 106.282085][ T3812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.289515][ T3812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.310949][ T3812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.324053][ T3812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.346699][ T3812] device bridge_slave_1 left promiscuous mode [ 106.361128][ T3812] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.378676][ T3812] device bridge_slave_0 left promiscuous mode [ 106.392595][ T3812] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.412834][ T3812] device veth1_macvtap left promiscuous mode [ 106.425508][ T3812] device veth0_macvtap left promiscuous mode [ 106.438245][ T3812] device veth1_vlan left promiscuous mode [ 106.452910][ T3812] device veth0_vlan left promiscuous mode [ 106.943795][ T3812] team0 (unregistering): Port device team_slave_1 removed [ 106.982742][ T3812] team0 (unregistering): Port device team_slave_0 removed [ 107.014275][ T3812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.058432][ T3812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.277583][ T3812] bond0 (unregistering): Released all slaves [ 107.525661][ T4241] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.620297][ T4231] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.627600][ T4231] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.661066][ T4231] device bridge_slave_0 entered promiscuous mode [ 107.662067][ T3571] Bluetooth: hci1: command tx timeout [ 107.732702][ T4231] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.739824][ T4231] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.791096][ T4231] device bridge_slave_1 entered promiscuous mode [ 107.937600][ T4231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.964635][ T4231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.099317][ T4231] team0: Port device team_slave_0 added [ 108.125085][ T4231] team0: Port device team_slave_1 added [ 108.204041][ T4231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.211021][ T4231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.308009][ T4231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.348993][ T4251] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 108.377350][ T4251] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.403287][ T4251] bridge0: port 3(gretap0) entered blocking state [ 108.409799][ T4251] bridge0: port 3(gretap0) entered disabled state [ 108.453908][ T4251] device gretap0 entered promiscuous mode [ 108.460932][ T4251] bridge0: port 3(gretap0) entered blocking state [ 108.467671][ T4251] bridge0: port 3(gretap0) entered forwarding state [ 108.553441][ T4231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.560421][ T4231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.641982][ T4231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.775033][ T4231] device hsr_slave_0 entered promiscuous mode [ 108.793361][ T4231] device hsr_slave_1 entered promiscuous mode [ 108.824026][ T4231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.832041][ T4231] Cannot create hsr debugfs directory [ 109.959861][ T4255] loop1: detected capacity change from 0 to 40427 [ 109.967772][ T4255] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 109.975561][ T4255] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 109.984841][ T3571] Bluetooth: hci1: command tx timeout [ 110.057413][ T4255] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.117342][ T4255] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 110.124474][ T4255] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 110.157702][ T4254] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 110.170319][ T4254] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 110.762969][ T4231] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.816879][ T4231] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.854256][ T4231] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.902470][ T4231] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.152577][ T4231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.195986][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.222712][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.234661][ T4231] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.260891][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.282511][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.319121][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.326315][ T3657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.369062][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.381034][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.399872][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.418545][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.425708][ T3611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.449006][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.476928][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.516849][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.541557][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.559374][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.588395][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.638361][ T4231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.682011][ T4231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.735322][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.749836][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.789414][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.819086][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.846330][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.869620][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.047430][ T4266] loop1: detected capacity change from 0 to 256 [ 112.062561][ T3582] Bluetooth: hci1: command tx timeout [ 112.108021][ T4266] FAT-fs (loop1): Directory bread(block 64) failed [ 112.162049][ T4266] FAT-fs (loop1): Directory bread(block 65) failed [ 112.168687][ T4266] FAT-fs (loop1): Directory bread(block 66) failed [ 112.232193][ T4266] FAT-fs (loop1): Directory bread(block 67) failed [ 112.238892][ T4266] FAT-fs (loop1): Directory bread(block 68) failed [ 112.300787][ T4266] FAT-fs (loop1): Directory bread(block 69) failed [ 112.342251][ T4266] FAT-fs (loop1): Directory bread(block 70) failed [ 112.348823][ T4266] FAT-fs (loop1): Directory bread(block 71) failed [ 112.392071][ T4266] FAT-fs (loop1): Directory bread(block 72) failed [ 112.399201][ T4266] FAT-fs (loop1): Directory bread(block 73) failed [ 112.452042][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.459541][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.501520][ T4231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.573977][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.583701][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.615986][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.625032][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.645079][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.662864][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.689527][ T4231] device veth0_vlan entered promiscuous mode [ 112.732803][ T4231] device veth1_vlan entered promiscuous mode [ 112.791866][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.800664][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.836049][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.856757][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.887450][ T4231] device veth0_macvtap entered promiscuous mode [ 112.917069][ T4231] device veth1_macvtap entered promiscuous mode [ 112.979848][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.014040][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.045114][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.074075][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.109101][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.144113][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.177480][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.197640][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.240849][ T4231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.262602][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.287946][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.308652][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.348521][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.360100][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.396520][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.417020][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.456448][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.476412][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.516583][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.556389][ T4231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.584121][ T4231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.617766][ T4231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.645871][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.660453][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.688621][ T4231] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.720596][ T4231] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.743175][ T4231] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.776546][ T4231] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.944093][ T3812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.976181][ T3812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.051021][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.100688][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.124677][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.142676][ T3582] Bluetooth: hci1: command tx timeout [ 114.573726][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.576203][ T4290] 9pnet_fd: p9_fd_create_tcp (4290): problem connecting socket to 127.0.0.1 [ 116.567987][ T4300] loop2: detected capacity change from 0 to 1024 [ 116.613089][ T4300] hfsplus: invalid catalog max_key_len 256 [ 116.622713][ T4300] hfsplus: failed to load catalog file [ 117.950406][ T4307] loop1: detected capacity change from 0 to 40427 [ 117.959262][ T4307] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 117.967067][ T4307] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 118.046947][ T4307] F2FS-fs (loop1): Found nat_bits in checkpoint [ 118.112570][ T4307] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 118.119662][ T4307] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 118.154154][ T4306] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 118.167621][ T4306] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 118.998256][ T4317] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 119.030704][ T4313] loop2: detected capacity change from 0 to 32768 [ 119.139314][ T4313] XFS (loop2): Mounting V5 Filesystem [ 119.235726][ T4327] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 119.247220][ T4313] XFS (loop2): Ending clean mount [ 120.080624][ T4329] loop1: detected capacity change from 0 to 4096 [ 120.138049][ T4329] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 120.273077][ T4231] XFS (loop2): Unmounting Filesystem [ 120.310840][ T4329] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 120.360001][ T4329] ntfs3: loop1: Failed to load $Extend. [ 120.806177][ T4337] loop2: detected capacity change from 0 to 256 [ 120.852030][ T4337] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 120.910189][ T26] audit: type=1800 audit(1718882911.137:154): pid=4337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048633 res=0 errno=0 [ 121.050315][ T4341] process 'syz-executor.1' launched './file0' with NULL argv: empty string added [ 121.280955][ T4346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 121.741992][ T4337] loop2: detected capacity change from 256 to 0 [ 121.786108][ T3812] loop: Write error at byte offset 9223372036854857727, length 512. [ 121.812019][ C1] I/O error, dev loop2, sector 160 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 121.821638][ C1] Buffer I/O error on dev loop2, logical block 160, lost sync page write [ 121.830203][ T3812] loop: Write error at byte offset 9223372036854858239, length 512. [ 121.860593][ C1] I/O error, dev loop2, sector 161 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 121.870218][ C1] Buffer I/O error on dev loop2, logical block 161, lost sync page write [ 122.044214][ C1] I/O error, dev loop2, sector 160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.054005][ C1] I/O error, dev loop2, sector 161 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.062099][ C0] I/O error, dev loop2, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.082050][ C0] I/O error, dev loop2, sector 161 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.103376][ T3812] loop: Write error at byte offset 9223372036854882303, length 512. [ 122.127884][ C0] I/O error, dev loop2, sector 208 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 122.137371][ C0] I/O error, dev loop2, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.202987][ T3812] loop: Write error at byte offset 9223372036854775807, length 512. [ 122.242025][ C0] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 122.251454][ C0] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 122.260926][ C0] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 122.372648][ T4351] loop1: detected capacity change from 0 to 32768 [ 122.389811][ T4351] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4351) [ 122.419270][ T4351] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.437282][ T4351] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 122.477582][ T4351] BTRFS info (device loop1): using free space tree [ 122.653009][ T3847] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.722841][ T4351] BTRFS info (device loop1): enabling ssd optimizations [ 122.812327][ T3847] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.827758][ T3932] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.910524][ T3847] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.030076][ T3847] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.398164][ T4375] loop1: detected capacity change from 0 to 512 [ 123.468795][ T4375] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000079f) [ 123.512013][ T4375] FAT-fs (loop1): Filesystem has been set read-only [ 123.677874][ T3582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.689223][ T3582] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.702802][ T3582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.710663][ T3582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.718200][ T3582] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 123.726433][ T3582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.243024][ T3847] device hsr_slave_0 left promiscuous mode [ 125.252137][ T3847] device hsr_slave_1 left promiscuous mode [ 125.272210][ T3847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.296973][ T3847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.324158][ T3847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.331572][ T3847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.372140][ T3847] device bridge_slave_1 left promiscuous mode [ 125.378534][ T3847] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.399290][ T3847] device bridge_slave_0 left promiscuous mode [ 125.417727][ T3847] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.459650][ T3847] device veth1_macvtap left promiscuous mode [ 125.471486][ T3847] device veth0_macvtap left promiscuous mode [ 125.504042][ T3847] device veth1_vlan left promiscuous mode [ 125.509893][ T3847] device veth0_vlan left promiscuous mode [ 125.822287][ T3582] Bluetooth: hci1: command tx timeout [ 125.996252][ T3847] team0 (unregistering): Port device team_slave_1 removed [ 126.021016][ T3847] team0 (unregistering): Port device team_slave_0 removed [ 126.040610][ T3847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.088217][ T3847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.294360][ T3847] bond0 (unregistering): Released all slaves [ 126.375230][ T4377] chnl_net:caif_netlink_parms(): no params data found [ 126.427436][ T4399] loop1: detected capacity change from 0 to 64 [ 126.652959][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.660133][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.668317][ T4377] device bridge_slave_0 entered promiscuous mode [ 126.699204][ T4399] syz-executor.1: attempt to access beyond end of device [ 126.699204][ T4399] loop1: rw=34817, sector=4172, nr_sectors = 22 limit=64 [ 126.714213][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.733215][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.751611][ T4377] device bridge_slave_1 entered promiscuous mode [ 126.762755][ T4399] syz-executor.1: attempt to access beyond end of device [ 126.762755][ T4399] loop1: rw=34817, sector=4196, nr_sectors = 166 limit=64 [ 126.830531][ T4399] syz-executor.1: attempt to access beyond end of device [ 126.830531][ T4399] loop1: rw=34817, sector=4363, nr_sectors = 22 limit=64 [ 126.830705][ T4377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.912473][ T4399] syz-executor.1: attempt to access beyond end of device [ 126.912473][ T4399] loop1: rw=34817, sector=4388, nr_sectors = 29 limit=64 [ 126.915701][ T4377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.964254][ T4399] syz-executor.1: attempt to access beyond end of device [ 126.964254][ T4399] loop1: rw=34817, sector=4418, nr_sectors = 32 limit=64 [ 127.033158][ T4399] syz-executor.1: attempt to access beyond end of device [ 127.033158][ T4399] loop1: rw=34817, sector=4452, nr_sectors = 36 limit=64 [ 127.085787][ T4399] syz-executor.1: attempt to access beyond end of device [ 127.085787][ T4399] loop1: rw=34817, sector=4489, nr_sectors = 231 limit=64 [ 127.089189][ T4377] team0: Port device team_slave_0 added [ 127.178071][ T4377] team0: Port device team_slave_1 added [ 127.244711][ T3848] kworker/u4:9: attempt to access beyond end of device [ 127.244711][ T3848] loop1: rw=1, sector=65, nr_sectors = 1 limit=64 [ 127.282364][ T4377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.289341][ T4377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.315298][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.321976][ T3848] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 127.330518][ T3848] kworker/u4:9: attempt to access beyond end of device [ 127.330518][ T3848] loop1: rw=1, sector=66, nr_sectors = 1 limit=64 [ 127.391983][ T3848] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 127.400698][ T3848] kworker/u4:9: attempt to access beyond end of device [ 127.400698][ T3848] loop1: rw=1, sector=67, nr_sectors = 1 limit=64 [ 127.422155][ T4377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.448696][ T3848] Buffer I/O error on dev loop1, logical block 67, lost async page write [ 127.471984][ T3848] Buffer I/O error on dev loop1, logical block 68, lost async page write [ 127.474257][ T4377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.502085][ T3848] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 127.510602][ T3848] Buffer I/O error on dev loop1, logical block 73, lost async page write [ 127.512015][ T4377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.571996][ T3848] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 127.580519][ T3848] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 127.634813][ T4377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.760085][ T4377] device hsr_slave_0 entered promiscuous mode [ 127.802277][ T4377] device hsr_slave_1 entered promiscuous mode [ 127.812233][ T4377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.819835][ T4377] Cannot create hsr debugfs directory [ 127.898407][ T4406] loop1: detected capacity change from 0 to 256 [ 127.905005][ T3582] Bluetooth: hci1: command tx timeout [ 127.997635][ T4406] FAT-fs (loop1): Directory bread(block 64) failed [ 128.024205][ T4406] FAT-fs (loop1): Directory bread(block 65) failed [ 128.030883][ T4406] FAT-fs (loop1): Directory bread(block 66) failed [ 128.072024][ T4406] FAT-fs (loop1): Directory bread(block 67) failed [ 128.078692][ T4406] FAT-fs (loop1): Directory bread(block 68) failed [ 128.103141][ T4406] FAT-fs (loop1): Directory bread(block 69) failed [ 128.109949][ T4406] FAT-fs (loop1): Directory bread(block 70) failed [ 128.143116][ T4406] FAT-fs (loop1): Directory bread(block 71) failed [ 128.149754][ T4406] FAT-fs (loop1): Directory bread(block 72) failed [ 128.203035][ T4406] FAT-fs (loop1): Directory bread(block 73) failed [ 128.658457][ T4408] loop1: detected capacity change from 0 to 2048 [ 128.694426][ T4377] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 128.723851][ T4377] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 128.754875][ T4377] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 128.797280][ T4377] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 128.817331][ T4409] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.893586][ T4408] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 128.944262][ T4408] Remounting filesystem read-only [ 129.057619][ T3932] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 129.080267][ T4377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.107570][ T3932] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 129.117969][ T3932] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.135734][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.149268][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.162458][ T3932] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.171333][ T3932] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.190564][ T4377] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.213679][ T3932] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 129.231182][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.243550][ T3932] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 129.246221][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.250258][ T3932] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.302484][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.309607][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.342307][ T3932] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.351212][ T3932] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 129.372160][ T3932] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 129.383133][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.391217][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.432832][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.441343][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.448462][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.495972][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.515314][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.538413][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.568156][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.583861][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.611695][ T4412] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.620862][ T4412] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.629644][ T4412] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.638433][ T4412] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.708729][ T4412] device vxlan0 entered promiscuous mode [ 129.748576][ T4377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.785622][ T4377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.811259][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.828271][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.849582][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.877203][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.897247][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.928338][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.946814][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.982037][ T3582] Bluetooth: hci1: command tx timeout [ 129.984689][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.585857][ T4377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.608385][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.637691][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.668618][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.693600][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.759544][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.769178][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.788097][ T4377] device veth0_vlan entered promiscuous mode [ 130.803574][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.818350][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.838100][ T4377] device veth1_vlan entered promiscuous mode [ 130.892284][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.900810][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.933350][ T4377] device veth0_macvtap entered promiscuous mode [ 130.953760][ T4377] device veth1_macvtap entered promiscuous mode [ 131.028890][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.065871][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.097929][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.129825][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.160171][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.190208][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.220998][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.256351][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.286558][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.327756][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.341568][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.362771][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.384020][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.406190][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.442008][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.451866][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.516383][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.541994][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.572272][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.592007][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.611974][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.638048][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.667729][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.693229][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.726362][ T4377] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.771313][ T4377] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.794175][ T4377] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.817525][ T4377] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.030371][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.062459][ T3582] Bluetooth: hci1: command tx timeout [ 132.078054][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.877065][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883423][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.936664][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.955513][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.010760][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.074220][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.407550][ T4435] 9pnet_fd: p9_fd_create_tcp (4435): problem connecting socket to 127.0.0.1 [ 135.413120][ T4441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.840465][ T4434] loop2: detected capacity change from 0 to 32768 [ 136.595809][ T4462] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.315026][ T4460] loop1: detected capacity change from 0 to 32768 [ 137.347077][ T4460] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.367380][ T4460] lbmIODone: I/O error in JFS log [ 137.378315][ T4460] *** Log Format Error ! *** [ 137.384175][ T4460] lmLogInit: exit(-22) [ 137.432870][ T4460] lmLogOpen: exit(-22) [ 138.192056][ T4371] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 138.256481][ T4476] loop2: detected capacity change from 0 to 32768 [ 138.552211][ T4371] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 138.581959][ T4371] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 138.591002][ T4371] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 138.651971][ T4371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.311702][ T4482] loop2: detected capacity change from 0 to 32768 [ 139.362076][ T4371] usb 2-1: string descriptor 0 read error: -71 [ 139.377918][ T4371] usb 2-1: USB disconnect, device number 2 [ 139.407062][ T4482] XFS (loop2): Mounting V5 Filesystem [ 139.487169][ T4482] XFS (loop2): Ending clean mount [ 139.663089][ T4377] XFS (loop2): Unmounting Filesystem [ 141.466847][ T4517] loop1: detected capacity change from 0 to 256 [ 141.522939][ T4517] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.819709][ T4525] loop1: detected capacity change from 0 to 1024 [ 142.844846][ T4527] loop2: detected capacity change from 0 to 64 [ 142.930941][ T4527] bio_check_eod: 6 callbacks suppressed [ 142.930958][ T4527] syz-executor.2: attempt to access beyond end of device [ 142.930958][ T4527] loop2: rw=34817, sector=4172, nr_sectors = 22 limit=64 [ 142.960021][ T11] hfsplus: b-tree write err: -5, ino 4 [ 142.990775][ T4527] syz-executor.2: attempt to access beyond end of device [ 142.990775][ T4527] loop2: rw=34817, sector=4196, nr_sectors = 166 limit=64 [ 143.053666][ T4527] syz-executor.2: attempt to access beyond end of device [ 143.053666][ T4527] loop2: rw=34817, sector=4363, nr_sectors = 22 limit=64 [ 143.103440][ T4527] syz-executor.2: attempt to access beyond end of device [ 143.103440][ T4527] loop2: rw=34817, sector=4388, nr_sectors = 29 limit=64 [ 143.142541][ T4527] syz-executor.2: attempt to access beyond end of device [ 143.142541][ T4527] loop2: rw=34817, sector=4418, nr_sectors = 32 limit=64 [ 143.171760][ T4527] syz-executor.2: attempt to access beyond end of device [ 143.171760][ T4527] loop2: rw=34817, sector=4452, nr_sectors = 36 limit=64 [ 143.210874][ T4527] syz-executor.2: attempt to access beyond end of device [ 143.210874][ T4527] loop2: rw=34817, sector=4489, nr_sectors = 231 limit=64 [ 143.319442][ T3849] kworker/u4:10: attempt to access beyond end of device [ 143.319442][ T3849] loop2: rw=1, sector=65, nr_sectors = 1 limit=64 [ 143.362146][ T3849] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 143.407159][ T3849] kworker/u4:10: attempt to access beyond end of device [ 143.407159][ T3849] loop2: rw=1, sector=66, nr_sectors = 1 limit=64 [ 143.447820][ T3849] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 143.467499][ T3849] kworker/u4:10: attempt to access beyond end of device [ 143.467499][ T3849] loop2: rw=1, sector=67, nr_sectors = 1 limit=64 [ 143.501648][ T3849] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 143.536232][ T3849] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 143.556697][ T3849] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 143.692627][ T3849] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 143.762005][ T3849] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 143.797198][ T3849] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 143.857073][ T4537] 9pnet_fd: p9_fd_create_tcp (4537): problem connecting socket to 127.0.0.1 [ 144.867145][ T4545] loop1: detected capacity change from 0 to 4096 [ 144.921983][ T4545] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 145.065167][ T26] audit: type=1800 audit(1718882935.297:155): pid=4545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 145.142232][ T26] audit: type=1800 audit(1718882935.347:156): pid=4545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 145.398573][ T4543] loop2: detected capacity change from 0 to 32768 [ 145.436565][ T4548] loop1: detected capacity change from 0 to 256 [ 145.449831][ T4543] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.482033][ T4543] lbmIODone: I/O error in JFS log [ 145.487127][ T4543] *** Log Format Error ! *** [ 145.498803][ T4548] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.502107][ T4543] lmLogInit: exit(-22) [ 145.521954][ T4543] lmLogOpen: exit(-22) [ 146.149475][ T26] audit: type=1800 audit(1718882936.377:157): pid=4554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="overlay" ino=1948 res=0 errno=0 [ 147.638147][ T4568] loop2: detected capacity change from 0 to 1024 [ 147.714132][ T46] hfsplus: b-tree write err: -5, ino 4 [ 147.922831][ T4572] loop2: detected capacity change from 0 to 1024 [ 147.942540][ T4561] loop1: detected capacity change from 0 to 40427 [ 147.961984][ T4572] hfsplus: invalid btree flag [ 147.966959][ T4572] hfsplus: failed to load extents file [ 148.012890][ T4561] F2FS-fs (loop1): Found nat_bits in checkpoint [ 148.125649][ T4561] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 148.185239][ T4561] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 148.824136][ T4586] loop1: detected capacity change from 0 to 512 [ 148.992518][ T4586] EXT4-fs: Ignoring removed oldalloc option [ 149.000905][ T4586] EXT4-fs (loop1): Test dummy encryption mode enabled [ 149.022343][ T4586] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 149.058641][ T4586] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.130680][ T4582] loop2: detected capacity change from 0 to 32768 [ 149.135775][ T4586] EXT4-fs (loop1): 1 truncate cleaned up [ 149.147755][ T4582] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.190958][ T4582] lbmIODone: I/O error in JFS log [ 149.192025][ T4586] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 149.211168][ T4582] *** Log Format Error ! *** [ 149.235127][ T4582] lmLogInit: exit(-22) [ 149.239344][ T4582] lmLogOpen: exit(-22) [ 149.431479][ T4586] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 149.445134][ T4586] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 149.521066][ T4586] EXT4-fs (loop1): Remounting filesystem read-only [ 149.609192][ T3932] EXT4-fs (loop1): unmounting filesystem. [ 150.030811][ T4607] loop2: detected capacity change from 0 to 512 [ 150.115814][ T4607] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 150.192401][ T4607] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 150.545749][ T4610] loop2: detected capacity change from 0 to 2048 [ 150.632115][ T4610] hpfs: filesystem error: invalid number of hotfixes: 0, used: 1; already mounted read-only [ 150.662420][ T4610] hpfs: filesystem error: improperly stopped [ 150.668441][ T4610] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 150.711996][ T4610] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 154.564670][ T4635] loop2: detected capacity change from 0 to 512 [ 154.617530][ T4635] EXT4-fs: Ignoring removed oldalloc option [ 154.624247][ T4635] EXT4-fs (loop2): Test dummy encryption mode enabled [ 154.631043][ T4635] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 154.724296][ T4635] EXT4-fs (loop2): 1 truncate cleaned up [ 154.782059][ T4635] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 154.884245][ T4635] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 154.954384][ T4642] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 154.974193][ T4635] EXT4-fs (loop2): Remounting filesystem read-only [ 155.037888][ T4377] EXT4-fs (loop2): unmounting filesystem. [ 155.326596][ T4645] loop1: detected capacity change from 0 to 8192 [ 155.684426][ T4652] loop2: detected capacity change from 0 to 2048 [ 156.029841][ T4655] loop2: detected capacity change from 0 to 1024 [ 156.130041][ T3857] hfsplus: b-tree write err: -5, ino 4 [ 156.565975][ T4662] loop2: detected capacity change from 0 to 2048 [ 156.606805][ T4665] loop1: detected capacity change from 0 to 64 [ 156.639469][ T4662] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 156.676485][ T4662] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 156.801738][ T4662] loop2: detected capacity change from 0 to 1024 [ 156.822654][ T4662] EXT4-fs: quotafile must be on filesystem root [ 157.875685][ T4673] loop2: detected capacity change from 0 to 1024 [ 157.902004][ T4371] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 157.940457][ T4673] hfsplus: invalid btree flag [ 157.960221][ T4673] hfsplus: failed to load extents file [ 158.402047][ T4371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 158.489581][ T4679] hub 9-0:1.0: USB hub found [ 158.496396][ T4679] hub 9-0:1.0: 8 ports detected [ 158.598682][ T4371] usb 2-1: New USB device found, idVendor=1803, idProduct=5510, bcdDevice=7c.1b [ 158.748794][ T4371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.877359][ T4371] usb 2-1: Product: syz [ 158.947444][ T4371] usb 2-1: Manufacturer: syz [ 159.207664][ T4371] usb 2-1: SerialNumber: syz [ 159.233073][ T4371] usb 2-1: config 0 descriptor?? [ 159.512498][ T4371] cxacru 2-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 159.520297][ T4371] cxacru 2-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 159.558563][ T4371] cxacru: probe of 2-1:0.0 failed with error -22 [ 159.588594][ T4371] usb 2-1: USB disconnect, device number 3 [ 161.073870][ T4689] loop1: detected capacity change from 0 to 16 [ 162.814444][ T4713] loop2: detected capacity change from 0 to 2048 [ 162.840062][ T4713] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 162.907342][ T4713] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 162.928571][ T4714] 9pnet_fd: p9_fd_create_tcp (4714): problem connecting socket to 127.0.0.1 [ 163.755784][ T4713] loop2: detected capacity change from 0 to 1024 [ 163.788020][ T4713] EXT4-fs: quotafile must be on filesystem root [ 164.919316][ T4730] loop1: detected capacity change from 0 to 1024 [ 164.928415][ T4728] loop2: detected capacity change from 0 to 512 [ 164.986152][ T4730] hfsplus: request for non-existent node 2048 in B*Tree [ 165.002016][ T4730] hfsplus: request for non-existent node 2048 in B*Tree [ 165.016560][ T4728] EXT4-fs (loop2): 1 orphan inode deleted [ 165.024189][ T4730] hfsplus: request for non-existent node 2048 in B*Tree [ 165.042098][ T4730] hfsplus: request for non-existent node 2048 in B*Tree [ 165.053125][ T4728] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 165.110387][ T4728] ext4 filesystem being mounted at /root/syzkaller-testdir238910014/syzkaller.O6MpI7/60/file1 supports timestamps until 2038 (0x7fffffff) [ 165.181343][ T4735] loop1: detected capacity change from 0 to 512 [ 165.231165][ T4735] EXT4-fs: Ignoring removed oldalloc option [ 165.241406][ T4377] EXT4-fs (loop2): unmounting filesystem. [ 165.256057][ T4735] EXT4-fs (loop1): Test dummy encryption mode enabled [ 165.289105][ T4735] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.361217][ T4735] EXT4-fs (loop1): 1 truncate cleaned up [ 165.375377][ T4735] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 165.408862][ T4735] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 165.482443][ T4735] EXT4-fs (loop1): Remounting filesystem read-only [ 165.500086][ T4740] loop2: detected capacity change from 0 to 64 [ 165.602774][ T3932] EXT4-fs (loop1): unmounting filesystem. [ 165.627727][ T4740] bio_check_eod: 6 callbacks suppressed [ 165.627744][ T4740] syz-executor.2: attempt to access beyond end of device [ 165.627744][ T4740] loop2: rw=34817, sector=4172, nr_sectors = 22 limit=64 [ 165.672927][ T4740] syz-executor.2: attempt to access beyond end of device [ 165.672927][ T4740] loop2: rw=34817, sector=4196, nr_sectors = 166 limit=64 [ 165.712319][ T4740] syz-executor.2: attempt to access beyond end of device [ 165.712319][ T4740] loop2: rw=34817, sector=4363, nr_sectors = 22 limit=64 [ 165.772566][ T4740] syz-executor.2: attempt to access beyond end of device [ 165.772566][ T4740] loop2: rw=34817, sector=4388, nr_sectors = 29 limit=64 [ 165.812508][ T4740] syz-executor.2: attempt to access beyond end of device [ 165.812508][ T4740] loop2: rw=34817, sector=4418, nr_sectors = 32 limit=64 [ 165.873850][ T4740] syz-executor.2: attempt to access beyond end of device [ 165.873850][ T4740] loop2: rw=34817, sector=4452, nr_sectors = 36 limit=64 [ 165.972071][ T4740] syz-executor.2: attempt to access beyond end of device [ 165.972071][ T4740] loop2: rw=34817, sector=4489, nr_sectors = 231 limit=64 [ 166.043928][ T4744] hub 9-0:1.0: USB hub found [ 166.048924][ T4744] hub 9-0:1.0: 8 ports detected [ 166.892621][ T4292] kworker/u4:13: attempt to access beyond end of device [ 166.892621][ T4292] loop2: rw=1, sector=65, nr_sectors = 1 limit=64 [ 166.927638][ T4292] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 166.964434][ T4292] kworker/u4:13: attempt to access beyond end of device [ 166.964434][ T4292] loop2: rw=1, sector=66, nr_sectors = 1 limit=64 [ 167.000789][ T4292] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 167.031595][ T4292] kworker/u4:13: attempt to access beyond end of device [ 167.031595][ T4292] loop2: rw=1, sector=67, nr_sectors = 1 limit=64 [ 167.067264][ T4292] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 167.089763][ T4292] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 167.107705][ T4292] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 167.136682][ T4292] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 167.143054][ T4747] loop1: detected capacity change from 0 to 8192 [ 167.160102][ T4292] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 167.178812][ T4292] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 167.192927][ T4747] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 167.268065][ T4747] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 167.323888][ T4747] REISERFS (device loop1): using ordered data mode [ 167.330439][ T4747] reiserfs: using flush barriers [ 167.386338][ T4747] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 167.462380][ T4747] REISERFS (device loop1): checking transaction log (loop1) [ 167.499266][ T4747] REISERFS (device loop1): Using r5 hash to sort names [ 167.542331][ T4747] reiserfs: enabling write barrier flush mode [ 167.581638][ T4747] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 167.737782][ T26] audit: type=1804 audit(1718882957.967:158): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1015005043/syzkaller.8SVp2E/150/file0/file0" dev="loop1" ino=2 res=1 errno=0 [ 168.176139][ T4764] loop1: detected capacity change from 0 to 2048 [ 168.208607][ T4764] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 168.263205][ T4764] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 168.408979][ T4764] loop1: detected capacity change from 0 to 1024 [ 168.437945][ T4764] EXT4-fs: quotafile must be on filesystem root [ 169.614034][ T4780] loop1: detected capacity change from 0 to 64 [ 169.743086][ T3812] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 169.751602][ T3812] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 169.852523][ T4784] loop1: detected capacity change from 0 to 64 [ 170.361568][ T4789] 9pnet_fd: p9_fd_create_tcp (4789): problem connecting socket to 127.0.0.1 [ 171.271410][ T4785] loop2: detected capacity change from 0 to 2048 [ 171.409391][ T4798] device tunl0 entered promiscuous mode [ 171.453983][ T4785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 171.495190][ T4798] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 171.540969][ T4798] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.752694][ T4801] loop1: detected capacity change from 0 to 64 [ 172.355527][ T4377] EXT4-fs (loop2): unmounting filesystem. [ 173.080733][ T4818] loop2: detected capacity change from 0 to 64 [ 173.185011][ T26] audit: type=1326 audit(1718882963.417:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8f87cf29 code=0x0 [ 173.659022][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.111413][ T4837] loop1: detected capacity change from 0 to 128 [ 174.165233][ T4837] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 174.219070][ T4837] ext4 filesystem being mounted at /root/syzkaller-testdir1015005043/syzkaller.8SVp2E/163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 174.339511][ T4837] EXT4-fs warning (device loop1): dx_probe:832: inode #2: comm syz-executor.1: Unrecognised inode hash code 97 [ 174.381706][ T4837] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 174.470213][ T3932] EXT4-fs warning (device loop1): dx_probe:832: inode #2: comm syz-executor.1: Unrecognised inode hash code 97 [ 174.512498][ T3932] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 174.539185][ T3932] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 4: comm syz-executor.1: path (unknown): bad entry in directory: rec_len % 4 != 0 - offset=0, inode=1633771873, rec_len=24929, size=1024 fake=0 [ 174.607147][ T3932] EXT4-fs warning (device loop1): dx_probe:832: inode #2: comm syz-executor.1: Unrecognised inode hash code 97 [ 174.629552][ T3932] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 174.677616][ T3932] EXT4-fs warning (device loop1): dx_probe:832: inode #2: comm syz-executor.1: Unrecognised inode hash code 97 [ 174.702071][ T3932] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 174.743083][ T3932] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor.1: path (unknown): directory fails checksum at offset 1024 [ 174.784125][ T3932] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor.1: path (unknown): directory fails checksum at offset 8192 [ 174.812699][ T3932] EXT4-fs warning (device loop1): dx_probe:832: inode #2: comm syz-executor.1: Unrecognised inode hash code 97 [ 174.841994][ T3932] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 174.897827][ T3932] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor.1: Directory block failed checksum [ 174.930629][ T3932] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor.1: path (unknown): directory fails checksum at offset 1024 [ 174.963802][ T3932] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor.1: path (unknown): directory fails checksum at offset 8192 [ 174.996509][ T3932] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor.1: Directory block failed checksum [ 175.048208][ T3932] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor.1: path (unknown): directory fails checksum at offset 1024 [ 175.092392][ T3932] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor.1: path (unknown): directory fails checksum at offset 8192 [ 175.121712][ T3932] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor.1: Directory block failed checksum [ 175.858943][ T3932] EXT4-fs (loop1): unmounting filesystem. [ 175.950195][ T4387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.002001][ T4387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.159783][ T4387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.190037][ T4387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.336446][ T4387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.403212][ T4387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.510440][ T4387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.572002][ T4387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.596650][ T4858] loop2: detected capacity change from 0 to 32768 [ 176.688503][ T4858] XFS (loop2): Mounting V5 Filesystem [ 176.815964][ T3571] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.824902][ T3571] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.834933][ T3571] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.855231][ T3571] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.864252][ T4858] XFS (loop2): Ending clean mount [ 176.864360][ T3571] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 176.878126][ T3571] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.948407][ T4858] XFS (loop2): Quotacheck needed: Please wait. [ 177.067997][ T4858] XFS (loop2): Quotacheck: Done. [ 177.185882][ T26] audit: type=1800 audit(1718882967.417:160): pid=4858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1067 res=0 errno=0 [ 177.378803][ T4868] chnl_net:caif_netlink_parms(): no params data found [ 177.468786][ T4377] XFS (loop2): Unmounting Filesystem [ 177.477648][ T4387] bridge0: port 3(gretap0) entered disabled state [ 177.491615][ T4387] device gretap0 left promiscuous mode [ 177.521150][ T4387] bridge0: port 3(gretap0) entered disabled state [ 177.733670][ T4868] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.740838][ T4868] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.803862][ T4868] device bridge_slave_0 entered promiscuous mode [ 177.888272][ T4868] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.896349][ T4868] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.923188][ T4868] device bridge_slave_1 entered promiscuous mode [ 178.018582][ T4868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.058584][ T4387] device hsr_slave_0 left promiscuous mode [ 178.073338][ T4387] device hsr_slave_1 left promiscuous mode [ 178.092216][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.099637][ T4387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.117592][ T4387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.132043][ T4387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.157783][ T4387] device bridge_slave_1 left promiscuous mode [ 178.178612][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.203372][ T4387] device bridge_slave_0 left promiscuous mode [ 178.209731][ T4387] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.254013][ T4387] device veth1_macvtap left promiscuous mode [ 178.260082][ T4387] device veth0_macvtap left promiscuous mode [ 178.282127][ T4387] device veth1_vlan left promiscuous mode [ 178.287996][ T4387] device veth0_vlan left promiscuous mode [ 178.942088][ T3580] Bluetooth: hci0: command tx timeout [ 179.060287][ T4387] team0 (unregistering): Port device team_slave_1 removed [ 179.136094][ T4387] team0 (unregistering): Port device team_slave_0 removed [ 179.174501][ T4387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.235899][ T4387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.480301][ T4387] bond0 (unregistering): Released all slaves [ 179.599001][ T4868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.772434][ T4868] team0: Port device team_slave_0 added [ 179.809352][ T4868] team0: Port device team_slave_1 added [ 179.900573][ T4868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.931649][ T4868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.973686][ T4884] loop2: detected capacity change from 0 to 2048 [ 180.006770][ T4868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.070446][ T4868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.083729][ T4868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.155758][ T4884] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 180.171996][ T4868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.312899][ T4868] device hsr_slave_0 entered promiscuous mode [ 180.319907][ T4868] device hsr_slave_1 entered promiscuous mode [ 180.942218][ T3582] Bluetooth: hci3: command 0x0406 tx timeout [ 180.942215][ T3571] Bluetooth: hci2: command 0x0406 tx timeout [ 180.942254][ T3582] Bluetooth: hci4: command 0x0406 tx timeout [ 181.022010][ T3582] Bluetooth: hci0: command tx timeout [ 181.344378][ T4868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.395383][ T4868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.435070][ T4868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.465862][ T4868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.639836][ T4377] EXT4-fs (loop2): unmounting filesystem. [ 181.762491][ T4868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.765578][ T4892] overlayfs: unrecognized mount option "B: KEY=10000000000000 0 [ 181.765578][ T4892] [ 181.765578][ T4892] I: Bus=0019 Vendor=0000 Product=0003 Version=0000 [ 181.765578][ T4892] N: Name="Sleep Button" [ 181.765578][ T4892] P: Phys=LNXSLPBN/button/input0 [ 181.765578][ T4892] S: Sysfs=/devices/LNXSYSTM:00/LNXSLPBN:00/input/input1 [ 181.765578][ T4892] U: Uniq= [ 181.765578][ T4892] H: Handlers=kbd event1 [ 181.765578][ T4892] B: PROP=0 [ 181.765578][ T4892] B: EV=3 [ 181.765578][ T4892] B: KEY=4000 0 0 [ 181.765578][ T4892] [ 181.765578][ T4892] I: Bus=0011 Vendor=0001 Product=0001 Version=abba [ 181.765578][ T4892] N: Name="AT Translated Set 2 keyboard" [ 181.765578][ T4892] P: Phys=isa0060/serio0/input0 [ 181.765578][ T4892] S: Sysfs=/devices/platform/i8042/serio0/input/input2 [ 181.765578][ T4892] U: Uniq= [ 181.765578][ T4892] H: Handlers=kbd leds event2 [ 181.765578][ T4892] B: PROP=0 [ 181.765578][ T4892] B: EV=120013 [ 181.804673][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.984857][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.009425][ T4868] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.037453][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.051825][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.081032][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.088231][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.200525][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.224956][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.282121][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.297650][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.304800][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.355665][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.385706][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.408141][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.431197][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.469655][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.514953][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.556417][ T4868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.606344][ T4868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.636268][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.650156][ T4898] loop2: detected capacity change from 0 to 2048 [ 182.678286][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.688349][ T4898] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 182.698644][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.699341][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.725429][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.768882][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.803023][ T4898] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 182.958857][ T4898] loop2: detected capacity change from 0 to 1024 [ 183.012483][ T4898] EXT4-fs: quotafile must be on filesystem root [ 183.102913][ T3582] Bluetooth: hci0: command tx timeout [ 183.816417][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.872302][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.914441][ T4868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.013375][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.035855][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.109745][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.119317][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.155847][ T4868] device veth0_vlan entered promiscuous mode [ 184.174026][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.199065][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.235842][ T4868] device veth1_vlan entered promiscuous mode [ 184.308938][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.324446][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.357755][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.373742][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.391189][ T4868] device veth0_macvtap entered promiscuous mode [ 184.426255][ T4868] device veth1_macvtap entered promiscuous mode [ 184.499379][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.552792][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.581958][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.618834][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.631343][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.671935][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.681788][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.733325][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.754374][ T4868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.765026][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.789416][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.809803][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.834173][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.874681][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.917104][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.932237][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.952008][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.961855][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.992341][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.025579][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.057478][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.098612][ T4868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.133974][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.143697][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.179727][ T4868] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.182108][ T3580] Bluetooth: hci0: command tx timeout [ 185.201386][ T4868] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.251954][ T4868] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.260856][ T4868] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.455683][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.491983][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.525721][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.537254][ T3847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.572021][ T3847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.616838][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.738812][ T4913] Illegal XDP return value 4294967274 on prog (id 95) dev N/A, expect packet loss! [ 186.081236][ T4923] device tunl0 entered promiscuous mode [ 186.128931][ T4923] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 186.149476][ T4923] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.603855][ T4931] loop1: detected capacity change from 0 to 512 [ 186.947004][ T4933] loop1: detected capacity change from 0 to 256 [ 187.080164][ T4933] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 187.135575][ T4933] exFAT-fs (loop1): hint_cluster is invalid (17) [ 187.186614][ T4925] loop2: detected capacity change from 0 to 32768 [ 187.484850][ T4925] XFS (loop2): Mounting V5 Filesystem [ 187.638903][ T4925] XFS (loop2): Ending clean mount [ 187.670549][ T4925] XFS (loop2): Quotacheck needed: Please wait. [ 187.785609][ T4925] XFS (loop2): Quotacheck: Done. [ 187.867832][ T26] audit: type=1800 audit(1718882978.097:161): pid=4925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1067 res=0 errno=0 [ 188.112019][ T4377] XFS (loop2): Unmounting Filesystem [ 189.149294][ T4949] loop1: detected capacity change from 0 to 2048 [ 189.380391][ T4949] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 190.235049][ T26] audit: type=1326 audit(1718882980.467:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7aea7cf29 code=0x0 [ 190.444952][ T4868] EXT4-fs (loop1): unmounting filesystem. [ 190.639979][ T4975] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.669788][ T4975] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 191.922514][ T4990] loop2: detected capacity change from 0 to 1024 [ 192.042206][ T4990] hfsplus: b-tree write err: -5, ino 3 [ 194.226512][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.241940][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.793886][ T26] audit: type=1326 audit(1718882989.027:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5069 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabe787cf29 code=0x0 [ 200.547757][ T5075] loop1: detected capacity change from 0 to 40427 [ 200.603947][ T5075] F2FS-fs (loop1): Found nat_bits in checkpoint [ 200.712229][ T5075] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 200.738442][ T26] audit: type=1800 audit(1718882990.967:164): pid=5075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 200.812334][ T4868] bio_check_eod: 22 callbacks suppressed [ 200.812350][ T4868] syz-executor.1: attempt to access beyond end of device [ 200.812350][ T4868] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 202.414647][ T5085] loop1: detected capacity change from 0 to 2048 [ 202.455539][ T5085] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.566695][ T26] audit: type=1800 audit(1718882992.797:165): pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=8D dev="loop1" ino=1318 res=0 errno=0 [ 203.085129][ T5087] kvm [5086]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x3c00 [ 203.146874][ T5087] kvm [5086]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xe800 [ 203.172179][ T5087] kvm [5086]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xd800 [ 203.181276][ T5087] kvm [5086]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xb800 [ 203.227720][ T5087] kvm [5086]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7800 [ 203.252436][ T5087] kvm [5086]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf800 [ 203.261604][ T5087] kvm [5086]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf800 [ 203.282137][ T5087] kvm [5086]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf800 [ 203.302146][ T5087] kvm [5086]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf800 [ 203.322215][ T5087] kvm [5086]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf800 [ 204.439273][ T5102] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.468954][ T5102] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.495927][ T5102] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.536693][ T5102] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.575476][ T5102] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 205.538282][ T5107] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 205.916610][ T5113] loop1: detected capacity change from 0 to 512 [ 205.964215][ T5113] EXT4-fs (loop1): Test dummy encryption mode enabled [ 205.984080][ T5113] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 206.017569][ T5113] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (20423!=33349) [ 206.041980][ T5113] EXT4-fs (loop1): group descriptors corrupted! [ 206.116376][ T5113] EXT4-fs: journaled quota format not specified [ 207.776488][ T3613] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 208.167368][ T3613] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.188134][ T3613] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 208.306106][ T3613] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.331971][ T3613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 208.355143][ T3613] usb 2-1: SerialNumber: syz [ 208.416354][ T3613] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 208.739185][ T5123] loop1: detected capacity change from 0 to 1764 [ 208.986511][ T3613] usb 2-1: USB disconnect, device number 4 [ 209.600845][ T5126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.827057][ T5128] loop1: detected capacity change from 0 to 2048 [ 209.881803][ T5128] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 209.918508][ T5128] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 210.060946][ T5128] loop1: detected capacity change from 0 to 1024 [ 210.083174][ T5128] EXT4-fs: quotafile must be on filesystem root [ 211.117299][ T5132] loop1: detected capacity change from 0 to 512 [ 211.491718][ T5134] loop1: detected capacity change from 0 to 256 [ 211.573641][ T5134] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 211.651451][ T5134] exFAT-fs (loop1): hint_cluster is invalid (17) [ 212.284348][ T26] audit: type=1800 audit(1718883002.517:166): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 212.340951][ T26] audit: type=1800 audit(1718883002.537:167): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 212.382503][ T26] audit: type=1800 audit(1718883002.557:168): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 212.819541][ T5139] loop1: detected capacity change from 0 to 4096 [ 212.850438][ T5139] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 212.880660][ T5139] ntfs: (device loop1): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 212.899092][ T5139] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume. [ 213.598082][ T5147] loop1: detected capacity change from 0 to 4096 [ 213.628824][ T5147] EXT4-fs: Ignoring removed oldalloc option [ 213.652309][ T5147] EXT4-fs (loop1): Test dummy encryption mode enabled [ 213.699163][ T5147] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 213.726143][ T5147] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 213.774192][ T5147] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 213.786944][ T5147] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz-executor.1: Failed to acquire dquot type 0 [ 213.882953][ T4868] EXT4-fs (loop1): unmounting filesystem. [ 214.196021][ T5155] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.254149][ T5156] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.287286][ T5156] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.326495][ T5156] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.354543][ T5156] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.121345][ T5158] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 215.256908][ T26] audit: type=1326 audit(1718883005.487:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabe787cf29 code=0x0 [ 215.982309][ T27] INFO: task kworker/u4:5:3626 blocked for more than 143 seconds. [ 215.990255][ T27] Not tainted 6.1.94-syzkaller #0 [ 216.015328][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/20 11:30:06 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 216.087067][ T27] task:kworker/u4:5 state:D stack:24792 pid:3626 ppid:2 flags:0x00004000 [ 216.122066][ T27] Workqueue: writeback wb_workfn (flush-7:0) [ 216.128394][ T27] Call Trace: [ 216.131681][ T27] [ 216.177621][ T27] __schedule+0x142d/0x4550 [ 216.197446][ T27] ? __sched_text_start+0x8/0x8 [ 216.217480][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 216.226441][ T27] ? blk_check_plugged+0x250/0x250 [ 216.257440][ T27] ? wq_worker_sleeping+0x5f/0x270 [ 216.262640][ T27] schedule+0xbf/0x180 [ 216.266719][ T27] schedule_preempt_disabled+0xf/0x20 [ 216.297514][ T27] __mutex_lock+0x6b9/0xd80 [ 216.310277][ T27] ? __mutex_lock+0x53c/0xd80 [ 216.320659][ T27] ? exfat_write_inode+0x65/0x110 [ 216.325752][ T27] ? mutex_lock_nested+0x10/0x10 [ 216.357432][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 216.362747][ T27] exfat_write_inode+0x65/0x110 [ 216.367616][ T27] __writeback_single_inode+0x67d/0x11e0 [ 216.413103][ T27] writeback_sb_inodes+0xc2b/0x1b20 [ 216.418363][ T27] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 216.451321][ T27] ? queue_io+0x630/0x630 [ 216.455767][ T27] ? __writeback_inodes_wb+0x400/0x400 [ 216.461246][ T27] __writeback_inodes_wb+0x114/0x400 [ 216.493202][ T27] wb_writeback+0x4b1/0xe10 [ 216.497762][ T27] ? percpu_ref_tryget+0x260/0x260 [ 216.513116][ T27] ? _find_next_bit+0x11b/0x120 [ 216.518005][ T27] wb_workfn+0xc9e/0x1020 [ 216.548383][ T27] ? inode_wait_for_writeback+0x280/0x280 [ 216.566305][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 216.581934][ T27] ? print_irqtrace_events+0x210/0x210 [ 216.587417][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 216.641948][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 216.647188][ T27] ? process_one_work+0x7a9/0x11d0 [ 216.681942][ T27] process_one_work+0x8a9/0x11d0 [ 216.686931][ T27] ? worker_detach_from_pool+0x260/0x260 [ 216.717918][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 216.723548][ T27] ? kthread_data+0x4e/0xc0 [ 216.728072][ T27] ? wq_worker_running+0x97/0x190 [ 216.759162][ T27] worker_thread+0xa47/0x1200 [ 216.763927][ T27] ? __sched_text_start+0x8/0x8 [ 216.768813][ T27] kthread+0x28d/0x320 [ 216.797439][ T27] ? worker_clr_flags+0x190/0x190 [ 216.802519][ T27] ? kthread_blkcg+0xd0/0xd0 [ 216.807122][ T27] ret_from_fork+0x1f/0x30 [ 216.811565][ T27] [ 216.857487][ T27] INFO: task kworker/u4:6:3811 blocked for more than 144 seconds. [ 216.865568][ T27] Not tainted 6.1.94-syzkaller #0 [ 216.871119][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.