last executing test programs: 3m54.935711911s ago: executing program 2 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) open_by_handle_at(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00000005"], 0x1) r7 = openat$cgroup_ro(r4, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) preadv(r7, &(0x7f00000000c0), 0x0, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000914010000007c0000000000080001"], 0x18}}, 0x0) 3m53.790141817s ago: executing program 2 (id=496): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x2, 0x241, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1000000, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) 3m51.800897224s ago: executing program 2 (id=499): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0x8, &(0x7f00000003c0)=ANY=[], 0x4, 0x1c0, &(0x7f0000000440)="$eJzslT+PEkEYxp+ZxQWMn8DGQhKxcNld1NiQQGNlYeIfYmEikYWgixjYQkiM8RPY21n4MUy09UMYtNEGq7t6L/NnlzkC3EHY45J7fwnvPrsz8/LOO8kzIAjiwvLn9+E0Pqj9LQC4ghLy+vs/az6HG/N/Ff6///HgfvPT868/81OnuCxnHJ/+/3MAvjcsROna46tL+vkYPNVPwHFT6yYYHK1fgOOp1gEYnmn9ytADMd9xOr0wcF4OwrYQrgieCL4I1cX6Zh8Z2kZ9zBgfjSevW2EYDDMUJ/Vv1uCoGfWZ5+VAVesa/fPA4WldBcMjre8hn/RGtcTY/9XcPL+1dv82drr/TpadtQFstxxgZ3L2GQsLUiQnuvd6di6QOxdlZCy+1dX5JV/iD+p9szz1FUP2hnl051N/ir8w3DD8SVnJZ3nVVKL+28poPLnV67e6QTd44/vVu+5t173jV6QRqbjG/4rSny7P8y+9kwQ2s/GuFUVDT8X03VdxmeNy6X8c5eu4JN6Fm9oLeQuGZvrH5VOosrWyeIIgiD1yDUx6svTlROjbJB2IY//hnuskCIIgCIIgCIIgCGJ7jgIAAP//nx9gWA==") socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r3, r3, 0x0, 0x40008) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x880, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 3m49.839733603s ago: executing program 2 (id=503): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x24000040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 3m48.997908754s ago: executing program 2 (id=507): openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x18220, 0x60) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x20048000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, 0x0, 0x24000004) writev(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000006cc0)={0x0, 0x0, &(0x7f0000006c80)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000121401"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8090) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[@ANYBLOB='btree_node_prefetch,fsck_memory_usCge_percent=0x0000000000000038,norecovery,fsck,errors=continue,nocow,fix_errors=yes,reconstruct_alloc,nocow,\x00'], 0x3, 0x595f, &(0x7f0000005a80)="$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") 3m43.852210445s ago: executing program 2 (id=515): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 3m27.825536926s ago: executing program 32 (id=515): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 7.7350097s ago: executing program 3 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) eventfd2(0x7d3, 0x80001) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socketpair(0x2b, 0x2, 0x4, &(0x7f0000000080)) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000040)) 7.061232565s ago: executing program 1 (id=1022): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00') openat2(r5, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x18) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000001800), 0x0, 0x0) setsockopt(r6, 0x84, 0x83, &(0x7f00000002c0)="1a00", 0x2) 7.057143127s ago: executing program 4 (id=1023): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x72, 0x0) listen(r3, 0x5) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000380), 0xfffffffffffffcbf) mkdir(0x0, 0x0) 6.95403768s ago: executing program 3 (id=1024): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) 5.928919783s ago: executing program 1 (id=1025): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/98, 0x62}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) 5.468984129s ago: executing program 4 (id=1026): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$inet6(0xa, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 5.463288506s ago: executing program 0 (id=1027): socket(0x400000000010, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x130, 0x26010000, 0x170, 0x130, 0x260, 0x220, 0x220, 0x260, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x170, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00], 0x4e24, 0x4e22, 0x4e22, 0x4e22, 0xbe, 0x1, 0x2, 0x4, 0x6}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f00000001c0)=':,^]+*@', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x72, 0x0) listen(0xffffffffffffffff, 0x5) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000380), 0xfffffffffffffcbf) mkdir(0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5.298925325s ago: executing program 3 (id=1029): r0 = socket$nl_generic(0x10, 0x3, 0x10) getpid() sendmsg$nl_generic(r0, 0x0, 0xc000) 5.297995594s ago: executing program 4 (id=1030): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) mq_open(&(0x7f0000000400)='+\'\x00', 0x40, 0x9, &(0x7f0000000440)={0x2000000020, 0x8001, 0x500947db, 0x5}) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x40) write$cgroup_int(r1, &(0x7f00000003c0)=0xd9d, 0x12) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=ANY=[@ANYBLOB="0111"], 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) 5.186012001s ago: executing program 0 (id=1031): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000580), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f0000000540)=ANY=[@ANYRES8=r0], 0x4, 0x339, &(0x7f0000000140)="$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") socket$vsock_stream(0x28, 0x1, 0x0) mprotect(&(0x7f000027f000/0x3000)=nil, 0x3000, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000d00)=ANY=[], 0x3, 0xaa0, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000003c0)={0x48}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x48804, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="0524060000000001300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) 5.083129339s ago: executing program 3 (id=1032): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f00000000c0), 0x18) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000040)=@can={0x1d, 0x0, 0xc7}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="077eba", 0x3}, {0x0}], 0x2}}], 0x1, 0x0) 4.38817156s ago: executing program 4 (id=1033): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000017c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001800)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}}, 0x20000010) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000040)={{@local, 0x210001}, @hyper, 0x8, 0x6, 0x347, 0x80000004, 0x24b, 0x1, 0xffff9aa6}) 4.238124166s ago: executing program 3 (id=1035): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) 3.18736722s ago: executing program 5 (id=1036): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r2, 0x0, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x72, 0x0) listen(r3, 0x5) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000380), 0xfffffffffffffcbf) mkdir(0x0, 0x0) 2.979233233s ago: executing program 4 (id=1037): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x5a2}], 0x1, 0x102, 0x0) sendto$inet(r0, &(0x7f0000000380)="d7", 0x1, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "fffffffffffffff9", "241ac1eb797f3647a51ed8fb51ee710f00214de279c9b7e07a696756a31d83d7", "f8a2e06d", "00000400000100"}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) 2.952464671s ago: executing program 0 (id=1038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00') openat2(r5, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x18) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000001800), 0x0, 0x0) setsockopt(r6, 0x84, 0x83, &(0x7f00000002c0)="1a00", 0x2) 2.914160041s ago: executing program 3 (id=1039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 2.20206289s ago: executing program 5 (id=1040): syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @multicast1, {[@generic={0x7, 0x7, "0441b613a3"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1.990585043s ago: executing program 1 (id=1041): socket(0x400000000010, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x130, 0x26010000, 0x170, 0x130, 0x260, 0x220, 0x220, 0x260, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x170, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00], 0x4e24, 0x4e22, 0x4e22, 0x4e22, 0xbe, 0x1, 0x2, 0x4, 0x6}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f00000001c0)=':,^]+*@', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x72, 0x0) listen(0xffffffffffffffff, 0x5) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000380), 0xfffffffffffffcbf) mkdir(0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.718988468s ago: executing program 5 (id=1042): r0 = socket$nl_generic(0x10, 0x3, 0x10) getpid() sendmsg$nl_generic(r0, 0x0, 0xc000) 1.330141178s ago: executing program 4 (id=1043): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, 0x0) chown(0x0, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000060000008000000042"], 0x48) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file1\x00', 0x200800, &(0x7f00000009c0)={[{@filestreams}, {@pquota}, {@qnoenforce}, {@ikeep}]}, 0x1, 0x9606, &(0x7f0000009680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r5, 0x20, 0x0, 0x8000) 1.209862352s ago: executing program 0 (id=1044): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) mq_open(&(0x7f0000000400)='+\'\x00', 0x40, 0x9, &(0x7f0000000440)={0x2000000020, 0x8001, 0x500947db, 0x5}) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x40) write$cgroup_int(r1, &(0x7f00000003c0)=0xd9d, 0x12) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=ANY=[@ANYBLOB="0111"], 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) 1.123311988s ago: executing program 1 (id=1045): socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b, 0x0, 0x0, 0xffffffff}}, 0x50) socket(0x1, 0x803, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x4, @local, 'wlan0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000280)=0x1) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) 1.032157325s ago: executing program 5 (id=1046): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 783.170757ms ago: executing program 1 (id=1047): timer_create(0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 629.996556ms ago: executing program 0 (id=1048): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bind$packet(r0, &(0x7f0000000300)={0x11, 0xf6, r1, 0x1, 0x0, 0x6, @remote}, 0x14) close(r0) 442.088277ms ago: executing program 5 (id=1049): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) 366.707396ms ago: executing program 1 (id=1050): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r2, 0x0, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x72, 0x0) listen(r3, 0x5) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000380), 0xfffffffffffffcbf) mkdir(0x0, 0x0) 365.145009ms ago: executing program 0 (id=1051): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000003440)="172cd448287c5a6c", 0x8, 0x20000000, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@acquire={0x168, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in=@multicast2, {@in6=@dev, @in6=@dev, 0x0, 0x1}, {{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x6}}}, [@tmpl={0x44, 0x8, [{{@in=@local}, 0x0, @in=@loopback}]}]}, 0x168}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 0s ago: executing program 5 (id=1052): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r0, 0x49, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa, 0x8000, 0x1c, "339f020bbe82b3000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b4d741dd17c1c50d38ef2a6771cb2d3323691c58d6650000b700", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0xfffffffffffffffc]}}) kernel console output (not intermixed with test programs): le the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.541499][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.603351][ T5850] hsr_slave_0: entered promiscuous mode [ 91.610771][ T5850] hsr_slave_1: entered promiscuous mode [ 91.617486][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.625686][ T5850] Cannot create hsr debugfs directory [ 91.663767][ T5834] hsr_slave_0: entered promiscuous mode [ 91.670899][ T5834] hsr_slave_1: entered promiscuous mode [ 91.677461][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.685127][ T5834] Cannot create hsr debugfs directory [ 91.946633][ T5837] hsr_slave_0: entered promiscuous mode [ 91.953159][ T5837] hsr_slave_1: entered promiscuous mode [ 91.959582][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.967363][ T5837] Cannot create hsr debugfs directory [ 92.098370][ T917] cfg80211: failed to load regulatory.db [ 92.388132][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.401133][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.432310][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.443950][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.504017][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.521144][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.549367][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.563436][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.658696][ T5845] Bluetooth: hci0: command tx timeout [ 92.658808][ T5852] Bluetooth: hci1: command tx timeout [ 92.664235][ T51] Bluetooth: hci3: command tx timeout [ 92.676091][ T5849] Bluetooth: hci2: command tx timeout [ 92.688141][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.703426][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.741890][ T5845] Bluetooth: hci4: command tx timeout [ 92.749061][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.762414][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.869499][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.882222][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.921092][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.933433][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.985751][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.072355][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.091793][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.114164][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.121596][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.144987][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.162984][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.170247][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.199324][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.243796][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.251039][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.267726][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.304039][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.311618][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.333608][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.383376][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.390651][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.446897][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.500398][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.507838][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.523632][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.530969][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.682773][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.808593][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.841808][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.870914][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.878295][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.948684][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.956114][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.009275][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.048230][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.055566][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.140512][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.148034][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.292680][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.342006][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.374322][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.609169][ T5832] veth0_vlan: entered promiscuous mode [ 94.664057][ T5832] veth1_vlan: entered promiscuous mode [ 94.737900][ T5845] Bluetooth: hci1: command tx timeout [ 94.749338][ T5845] Bluetooth: hci0: command tx timeout [ 94.749358][ T5849] Bluetooth: hci2: command tx timeout [ 94.749396][ T5849] Bluetooth: hci3: command tx timeout [ 94.782734][ T5850] veth0_vlan: entered promiscuous mode [ 94.825902][ T5849] Bluetooth: hci4: command tx timeout [ 94.840491][ T5850] veth1_vlan: entered promiscuous mode [ 94.918516][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.948450][ T5832] veth0_macvtap: entered promiscuous mode [ 94.994943][ T5832] veth1_macvtap: entered promiscuous mode [ 95.017452][ T5850] veth0_macvtap: entered promiscuous mode [ 95.073478][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.090761][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.107100][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.129826][ T5850] veth1_macvtap: entered promiscuous mode [ 95.145082][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.154631][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.163706][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.172702][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.223622][ T5831] veth0_vlan: entered promiscuous mode [ 95.258396][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.308827][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.333889][ T5831] veth1_vlan: entered promiscuous mode [ 95.355743][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.364591][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.374719][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.386384][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.454470][ T5834] veth0_vlan: entered promiscuous mode [ 95.478339][ T5837] veth0_vlan: entered promiscuous mode [ 95.497820][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.507733][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.581756][ T5837] veth1_vlan: entered promiscuous mode [ 95.592988][ T5834] veth1_vlan: entered promiscuous mode [ 95.621888][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.639013][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.693298][ T5831] veth0_macvtap: entered promiscuous mode [ 95.701337][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.712456][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.774121][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.779711][ T5837] veth0_macvtap: entered promiscuous mode [ 95.802076][ T5831] veth1_macvtap: entered promiscuous mode [ 95.851919][ T5913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.858437][ T5837] veth1_macvtap: entered promiscuous mode [ 95.878553][ T5913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.915970][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.928256][ T5834] veth0_macvtap: entered promiscuous mode [ 95.968272][ T5895] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.974413][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.000550][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.021871][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.026655][ T5895] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.046137][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.055072][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.071697][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.111009][ T5834] veth1_macvtap: entered promiscuous mode [ 96.158205][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.200636][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.241227][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.271631][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.295408][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.414835][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.484679][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.493331][ T5924] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.546887][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.571208][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.585181][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.597194][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.644875][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.657375][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 96.665198][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.682922][ T5924] usb 4-1: config 0 has an invalid interface number: 199 but max is 0 [ 96.712645][ T5924] usb 4-1: config 0 has no interface number 0 [ 96.720420][ T5924] usb 4-1: config 0 interface 199 altsetting 10 bulk endpoint 0xB has invalid maxpacket 1023 [ 96.734937][ T5924] usb 4-1: config 0 interface 199 has no altsetting 0 [ 96.763252][ T5924] usb 4-1: New USB device found, idVendor=0499, idProduct=101d, bcdDevice=21.fe [ 96.781424][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.793700][ T5924] usb 4-1: Product: syz [ 96.799353][ T5924] usb 4-1: Manufacturer: syz [ 96.804145][ T5924] usb 4-1: SerialNumber: syz [ 96.825605][ T51] Bluetooth: hci2: command tx timeout [ 96.831180][ T51] Bluetooth: hci1: command tx timeout [ 96.838154][ T5845] Bluetooth: hci3: command tx timeout [ 96.844240][ T5849] Bluetooth: hci0: command tx timeout [ 96.863510][ T5924] usb 4-1: config 0 descriptor?? [ 96.896580][ T5849] Bluetooth: hci4: command tx timeout [ 96.919252][ T5930] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.977277][ T5924] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.024471][ T5913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.038089][ T5913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.453471][ T5913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.549468][ T5913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.671588][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.714773][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.909234][ T5913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.995461][ T5913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.022692][ T5924] snd-usb-audio 4-1:0.199: probe with driver snd-usb-audio failed with error -2 [ 98.044826][ T5924] usb 4-1: USB disconnect, device number 2 [ 98.307763][ T5940] loop3: detected capacity change from 0 to 128 [ 98.381742][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.199/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.451766][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.930692][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.466891][ T5940] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.515840][ T5946] loop1: detected capacity change from 0 to 1764 [ 99.554972][ T5940] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.776437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.733833][ T5850] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.255877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.576716][ T5849] Bluetooth: hci2: command tx timeout [ 102.737812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.746903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.614181][ T5988] sctp: failed to load transform for md5: -2 [ 103.946875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 104.383801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 104.393035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 104.401999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 104.410878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 104.419641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 104.965699][ T6004] loop0: detected capacity change from 0 to 512 [ 106.099633][ T6016] loop3: detected capacity change from 0 to 64 [ 106.255662][ T30] audit: type=1800 audit(1749165446.785:2): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.22" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 106.289794][ T6004] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.20: bg 0: block 248: padding at end of block bitmap is not set [ 106.630537][ T6004] Quota error (device loop0): write_blk: dquota write failed [ 106.704356][ T6004] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 106.841058][ T6004] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.20: Failed to acquire dquot type 1 [ 106.942812][ T6004] EXT4-fs (loop0): 1 truncate cleaned up [ 106.977891][ T5849] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 106.987244][ T5849] Bluetooth: hci0: Injecting HCI hardware error event [ 107.010000][ T5849] Bluetooth: hci0: hardware error 0x00 [ 107.041426][ T6004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.058082][ T6019] overlayfs: missing 'lowerdir' [ 107.099632][ T6004] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.374540][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.388885][ T6008] loop1: detected capacity change from 0 to 1024 [ 107.494962][ T6028] fuse: Bad value for 'fd' [ 107.641845][ T6028] loop3: detected capacity change from 0 to 8 [ 107.671323][ T6028] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 107.716604][ T6028] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.762420][ T6032] loop0: detected capacity change from 0 to 16 [ 107.821693][ T30] audit: type=1326 audit(1749165448.365:3): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099f58e929 code=0x7ffc0000 [ 108.007351][ T6032] erofs (device loop0): mounted with root inode @ nid 36. [ 108.025533][ T30] audit: type=1326 audit(1749165448.365:4): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f099f58e929 code=0x7ffc0000 [ 108.055820][ T30] audit: type=1326 audit(1749165448.365:5): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f099f58e963 code=0x7ffc0000 [ 109.055461][ T30] audit: type=1326 audit(1749165449.605:6): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f099f58d3df code=0x7ffc0000 [ 109.165410][ T5948] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.232493][ T5849] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 109.287237][ T1159] hfsplus: b-tree write err: -5, ino 4 [ 109.441496][ T6043] loop0: detected capacity change from 0 to 1764 [ 109.556842][ T6043] fuse: Bad value for 'fd' [ 109.624477][ T5948] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 109.807959][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.948909][ T5948] usb 3-1: config 0 descriptor?? [ 110.065358][ T5833] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.078683][ T30] audit: type=1326 audit(1749165450.635:7): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f099f58e9b7 code=0x7ffc0000 [ 110.148804][ T6045] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.173248][ T30] audit: type=1326 audit(1749165450.725:8): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f099f58d290 code=0x7ffc0000 [ 110.234463][ T30] audit: type=1326 audit(1749165450.755:9): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=6026 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f099f58d58a code=0x7ffc0000 [ 110.269732][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.302002][ T5833] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 110.361707][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.411298][ T5925] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.450272][ T5833] usb 5-1: config 0 descriptor?? [ 110.685436][ T5925] usb 1-1: device descriptor read/64, error -71 [ 110.961287][ T5833] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 111.104772][ T6039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.132681][ T5833] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input5 [ 111.155003][ T6039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.245058][ T5925] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.329840][ T5948] usb 3-1: Cannot set autoneg [ 111.335134][ T5948] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 111.368668][ T5948] usb 3-1: USB disconnect, device number 2 [ 111.414372][ T5833] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 111.430368][ T5925] usb 1-1: device descriptor read/64, error -71 [ 111.653914][ T5925] usb usb1-port1: attempt power cycle [ 111.677957][ T5833] usb 5-1: USB disconnect, device number 2 [ 112.690936][ T6054] fido_id[6054]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 112.712211][ T5925] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.891066][ T5925] usb 1-1: device descriptor read/8, error -71 [ 113.285532][ T5925] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.501851][ T6065] loop2: detected capacity change from 0 to 128 [ 113.512014][ T6065] ======================================================= [ 113.512014][ T6065] WARNING: The mand mount option has been deprecated and [ 113.512014][ T6065] and is ignored by this kernel. Remove the mand [ 113.512014][ T6065] option from the mount to silence this warning. [ 113.512014][ T6065] ======================================================= [ 113.540107][ T5925] usb 1-1: device descriptor read/8, error -71 [ 113.696271][ T5925] usb usb1-port1: unable to enumerate USB device [ 113.807805][ T6075] loop4: detected capacity change from 0 to 64 [ 113.833200][ T6075] hfs: Unknown parameter '' [ 114.731964][ T6082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.758190][ T6082] Zero length message leads to an empty skb [ 114.769716][ T6082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.44'. [ 114.778948][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 117.485460][ T5948] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.706280][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 117.721128][ T5948] usb 2-1: no configurations [ 117.735395][ T5948] usb 2-1: can't read configurations, error -22 [ 117.880160][ T5948] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.040266][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 118.050417][ T6118] netlink: 'syz.2.56': attribute type 4 has an invalid length. [ 118.058176][ T6118] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.56'. [ 118.905547][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 118.912453][ T5948] usb 2-1: no configurations [ 118.917284][ T5948] usb 2-1: can't read configurations, error -22 [ 118.938374][ T5948] usb usb2-port1: attempt power cycle [ 119.296190][ T5948] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.369195][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 119.402697][ T5948] usb 2-1: no configurations [ 119.428360][ T6129] loop3: detected capacity change from 0 to 128 [ 119.438620][ T5948] usb 2-1: can't read configurations, error -22 [ 119.606078][ T5948] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.875341][ T5948] usb 2-1: device not accepting address 5, error -71 [ 119.908806][ T5948] usb usb2-port1: unable to enumerate USB device [ 120.405478][ T5948] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.869780][ T6139] loop4: detected capacity change from 0 to 64 [ 120.892280][ T6139] hfs: Unknown parameter '' [ 121.005386][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 121.024851][ T5948] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 121.051893][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.063422][ T6139] loop4: detected capacity change from 0 to 2048 [ 121.091051][ T5948] usb 2-1: Product: syz [ 121.103628][ T5948] usb 2-1: Manufacturer: syz [ 121.125014][ T5948] usb 2-1: SerialNumber: syz [ 121.845548][ T6143] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.972008][ T5948] usb 2-1: config 0 descriptor?? [ 122.117398][ T6144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.239386][ T6144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.64'. [ 122.249771][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 122.475855][ T5948] usb 2-1: selecting invalid altsetting 3 [ 122.524456][ T5948] comedi comedi0: could not set alternate setting 3 in high speed [ 122.576103][ T5948] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 122.630171][ T5948] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 122.992357][ T6151] loop0: detected capacity change from 0 to 512 [ 123.736887][ T6151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 123.749630][ T6151] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.828496][ T5835] usb 2-1: USB disconnect, device number 6 [ 124.070070][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 124.453238][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 124.464758][ T6169] netlink: 'syz.1.69': attribute type 4 has an invalid length. [ 124.472572][ T6169] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.69'. [ 125.503289][ T5925] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.671683][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.735899][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.766050][ T5925] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 125.792675][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.807204][ T5925] usb 5-1: config 0 descriptor?? [ 125.905477][ T5833] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.076307][ T5833] usb 2-1: Using ep0 maxpacket: 8 [ 126.106064][ T5833] usb 2-1: no configurations [ 126.117692][ T5833] usb 2-1: can't read configurations, error -22 [ 126.132204][ T6157] loop2: detected capacity change from 0 to 32768 [ 126.958640][ T5925] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 126.984543][ T5925] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 127.013959][ T6157] (syz.2.68,6157,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.015366][ T5833] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 127.081368][ T6157] (syz.2.68,6157,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.115729][ T5925] cp2112 0003:10C4:EA90.0003: Part Number: 0xE0 Device Version: 0xF8 [ 127.191569][ T6157] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 127.193934][ T6157] (syz.2.68,6157,0):ocfs2_initialize_super:2229 ERROR: status = -12 [ 127.262553][ T6157] (syz.2.68,6157,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 127.315538][ T5833] usb 2-1: Using ep0 maxpacket: 8 [ 127.322447][ T5833] usb 2-1: no configurations [ 127.341264][ T5925] cp2112 0003:10C4:EA90.0003: error requesting SMBus config [ 127.359340][ T5833] usb 2-1: can't read configurations, error -22 [ 127.404296][ T5833] usb usb2-port1: attempt power cycle [ 127.434728][ T5925] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71 [ 127.758523][ T6186] loop0: detected capacity change from 0 to 256 [ 128.134102][ T5925] usb 5-1: USB disconnect, device number 3 [ 128.220250][ T6186] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d) [ 128.466615][ T5833] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 128.600375][ T5833] usb 2-1: Using ep0 maxpacket: 8 [ 128.619117][ T5833] usb 2-1: no configurations [ 128.655680][ T5833] usb 2-1: can't read configurations, error -22 [ 128.918599][ T6191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.77'. [ 128.929966][ T6192] loop4: detected capacity change from 0 to 64 [ 128.984074][ T6192] hfs: Unknown parameter '' [ 130.571500][ T6203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.610848][ T6203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.78'. [ 130.620079][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 131.647103][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 131.724120][ T6213] netlink: 'syz.2.82': attribute type 4 has an invalid length. [ 131.731838][ T6213] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.82'. [ 133.140111][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.158491][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.105450][ T5833] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 134.267238][ T5833] usb 2-1: Using ep0 maxpacket: 8 [ 134.292692][ T5833] usb 2-1: no configurations [ 134.317781][ T5833] usb 2-1: can't read configurations, error -22 [ 134.532329][ T5833] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 135.496892][ T6239] loop4: detected capacity change from 0 to 32768 [ 135.524299][ T6239] XFS: ikeep mount option is deprecated. [ 135.575317][ T5833] usb 2-1: Using ep0 maxpacket: 8 [ 135.588461][ T5833] usb 2-1: no configurations [ 135.594822][ T6239] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.442794][ T5833] usb 2-1: can't read configurations, error -22 [ 136.451574][ T5833] usb usb2-port1: attempt power cycle [ 136.588829][ T6239] XFS (loop4): Ending clean mount [ 136.600881][ T6239] XFS (loop4): Quotacheck needed: Please wait. [ 136.601112][ T6253] loop2: detected capacity change from 0 to 64 [ 136.675641][ T6253] hfs: Unknown parameter '' [ 136.683874][ T6239] XFS (loop4): Quotacheck: Done. [ 136.818015][ T5833] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 136.845497][ T6254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.886879][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.94'. [ 136.896921][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 137.638925][ T5833] usb 2-1: device descriptor read/8, error -71 [ 137.694182][ T5834] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.216767][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 138.226458][ T6265] netlink: 'syz.3.96': attribute type 4 has an invalid length. [ 138.234060][ T6265] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.96'. [ 139.080473][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 139.452787][ T6273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.100'. [ 139.473842][ T6273] process 'syz.3.100' launched '/dev/fd/7' with NULL argv: empty string added [ 139.541243][ T6273] loop3: detected capacity change from 0 to 128 [ 139.552853][ T6273] ufs: Unknown parameter 'onerrt' [ 140.354709][ T6261] loop2: detected capacity change from 0 to 32768 [ 140.513792][ T6261] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 140.628511][ T6285] loop4: detected capacity change from 0 to 512 [ 140.654903][ T6285] EXT4-fs: Ignoring removed oldalloc option [ 141.008895][ T6285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.256502][ T6285] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.500223][ T5837] ocfs2: Unmounting device (7,2) on (node local) [ 141.718164][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.953365][ T6305] loop2: detected capacity change from 0 to 64 [ 142.990785][ T6305] hfs: Unknown parameter '' [ 144.236109][ T6310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.264580][ T6310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.109'. [ 144.273806][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 144.631975][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.112'. [ 144.946434][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 144.958358][ T6319] netlink: 'syz.4.110': attribute type 4 has an invalid length. [ 144.966266][ T6319] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.110'. [ 146.977679][ T6327] loop0: detected capacity change from 0 to 64 [ 150.692753][ T6346] loop2: detected capacity change from 0 to 4096 [ 150.727933][ T6346] ntfs3: Unknown parameter './file0' [ 150.885739][ T6356] loop0: detected capacity change from 0 to 64 [ 151.756687][ T6356] hfs: Unknown parameter 'ÿ' [ 152.021191][ T6364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.110809][ T6365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.124'. [ 152.260568][ T6367] loop4: detected capacity change from 0 to 16 [ 152.587561][ T6367] erofs (device loop4): mounted with root inode @ nid 36. [ 153.216802][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 153.226492][ T6377] netlink: 'syz.3.125': attribute type 4 has an invalid length. [ 153.234162][ T6377] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.125'. [ 154.245337][ T6385] loop2: detected capacity change from 0 to 64 [ 156.174063][ T6396] veth3: entered promiscuous mode [ 157.026752][ T6411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.138'. [ 157.312559][ T6414] loop0: detected capacity change from 0 to 64 [ 157.502091][ T6414] hfs: Unknown parameter 'ÿ' [ 158.365025][ T6417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.968851][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 161.676890][ T6442] loop3: detected capacity change from 0 to 64 [ 162.598458][ T6445] loop2: detected capacity change from 0 to 764 [ 162.739192][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.149'. [ 162.923968][ T6445] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 163.526143][ T6454] netlink: zone id is out of range [ 163.568136][ T6454] netlink: zone id is out of range [ 163.598615][ T6454] netlink: zone id is out of range [ 163.604027][ T6454] netlink: zone id is out of range [ 163.633426][ T6454] netlink: zone id is out of range [ 163.643570][ T6454] netlink: zone id is out of range [ 163.699440][ T6454] netlink: zone id is out of range [ 163.735318][ T6454] netlink: zone id is out of range [ 163.765425][ T6454] netlink: zone id is out of range [ 163.773367][ T6454] netlink: zone id is out of range [ 163.902514][ T6460] loop2: detected capacity change from 0 to 64 [ 163.943923][ T6460] hfs: Unknown parameter 'ÿ' [ 164.296984][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'. [ 165.133446][ T6463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.189198][ T6467] veth3: entered promiscuous mode [ 166.413729][ T6476] overlayfs: missing 'lowerdir' [ 166.638527][ T6484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.161'. [ 172.059584][ T6509] loop3: detected capacity change from 0 to 64 [ 172.186103][ T6509] hfs: Unknown parameter '' [ 172.290171][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 172.712685][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057329800: rx timeout, send abort [ 172.722652][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805732a800: rx timeout, send abort [ 172.735413][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057329800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 172.750948][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805732a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 172.898676][ T6512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.526207][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.169'. [ 173.542338][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 173.583115][ T6518] veth3: entered promiscuous mode [ 173.806269][ T5923] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 175.644349][ T5923] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.741021][ T5923] usb 1-1: config 0 has no interfaces? [ 176.005761][ T5923] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 176.712637][ T6543] overlayfs: missing 'lowerdir' [ 176.980264][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.068451][ T5923] usb 1-1: config 0 descriptor?? [ 177.559391][ T5923] usb 1-1: can't set config #0, error -71 [ 177.675641][ T5923] usb 1-1: USB disconnect, device number 6 [ 179.125633][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 179.228221][ T6569] loop4: detected capacity change from 0 to 64 [ 179.249477][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 179.444944][ T6569] hfs: Unknown parameter '' [ 179.918880][ T6580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.806658][ T6569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.183'. [ 180.836257][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 181.185354][ T5835] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 181.193218][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 181.456823][ T5835] usb 2-1: device descriptor read/64, error -32 [ 182.375408][ T5835] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 183.018233][ T5835] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.125698][ T6603] loop0: detected capacity change from 0 to 64 [ 183.720800][ T5835] usb 2-1: config 0 has no interfaces? [ 183.762000][ T5835] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 183.809420][ T6605] loop3: detected capacity change from 0 to 128 [ 183.845373][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.878269][ T6605] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 183.909205][ T5835] usb 2-1: config 0 descriptor?? [ 183.964155][ T5835] usb 2-1: can't set config #0, error -71 [ 184.157764][ T6605] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.194703][ T5835] usb 2-1: USB disconnect, device number 16 [ 184.288579][ T6605] ext2 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.317935][ T6616] net_ratelimit: 23 callbacks suppressed [ 184.317983][ T6616] netlink: ct family unspecified [ 184.328898][ T6616] openvswitch: netlink: Actions may not be safe on all matching packets [ 184.853631][ T6605] overlayfs: missing 'lowerdir' [ 185.194819][ T5850] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.223151][ T6623] loop4: detected capacity change from 0 to 64 [ 185.246913][ T6623] hfs: Unknown parameter '' [ 185.461410][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 185.987495][ T6629] veth3: entered promiscuous mode [ 186.337460][ T6623] loop4: detected capacity change from 0 to 2048 [ 186.523586][ T6639] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.602094][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.202'. [ 186.649877][ T30] audit: type=1800 audit(1749165527.145:10): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.201" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 187.509623][ T6646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.598870][ T6646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.201'. [ 187.610886][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.201'. [ 188.247431][ T6654] loop0: detected capacity change from 0 to 4096 [ 188.522950][ T6666] loop0: detected capacity change from 0 to 64 [ 188.534509][ T6666] hfs: Bad value for 'gid' [ 188.806055][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 189.058873][ T5948] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 189.241154][ T6663] loop3: detected capacity change from 0 to 1764 [ 189.307972][ T5948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.343144][ T5948] usb 5-1: config 0 has no interfaces? [ 189.412889][ T5948] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 189.431256][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.473313][ T5948] usb 5-1: config 0 descriptor?? [ 189.864629][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 189.941571][ T6682] veth5: entered promiscuous mode [ 190.216496][ T5925] usb 5-1: USB disconnect, device number 4 [ 194.083017][ T6713] loop0: detected capacity change from 0 to 1764 [ 194.284062][ T6712] loop4: detected capacity change from 0 to 4096 [ 194.504722][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 194.715472][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.722355][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.493652][ T6723] overlayfs: missing 'lowerdir' [ 195.907380][ T6729] veth5: entered promiscuous mode [ 195.982220][ T6735] veth0_vlan: entered allmulticast mode [ 196.036044][ T6735] veth0_vlan: left promiscuous mode [ 196.049673][ T6735] veth0_vlan: entered promiscuous mode [ 197.153881][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 201.668535][ T6772] loop0: detected capacity change from 0 to 4096 [ 202.037599][ T6786] loop0: detected capacity change from 0 to 64 [ 202.045138][ T6786] hfs: Bad value for 'gid' [ 202.785852][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 203.015368][ T5833] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 203.185299][ T5833] usb 2-1: Using ep0 maxpacket: 8 [ 203.472692][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'. [ 205.273083][ T5833] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 205.314310][ T5833] usb 2-1: can't read configurations, error -71 [ 205.386606][ T6798] loop2: detected capacity change from 0 to 1764 [ 207.455062][ T6820] loop4: detected capacity change from 0 to 1764 [ 208.677977][ T6823] loop3: detected capacity change from 0 to 64 [ 209.748771][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 211.145599][ T978] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 211.396072][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 211.556700][ T978] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.815315][ T978] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.853524][ T6839] loop4: detected capacity change from 0 to 4096 [ 211.862804][ T978] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 211.922788][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.962851][ T978] usb 3-1: config 0 descriptor?? [ 212.135038][ T6852] veth7: entered promiscuous mode [ 212.174236][ T6845] loop3: detected capacity change from 0 to 4096 [ 212.186070][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 212.186913][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 212.192496][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 212.192571][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 212.213924][ T6845] ntfs3: Unknown parameter './file0' [ 212.564452][ T6859] loop0: detected capacity change from 0 to 128 [ 212.660031][ T6859] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 212.812842][ T6859] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.884703][ T6859] ext2 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.979512][ T6720] ntfs3(loop4): ino=5, mi_enum_attr [ 213.139359][ T6866] overlayfs: missing 'lowerdir' [ 213.590561][ T6870] loop3: detected capacity change from 0 to 1764 [ 213.907996][ T5831] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.559211][ T978] usb 3-1: USB disconnect, device number 3 [ 214.596627][ T6873] loop4: detected capacity change from 0 to 1764 [ 215.597986][ T6885] loop1: detected capacity change from 0 to 64 [ 217.797858][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 218.507275][ T6897] loop0: detected capacity change from 0 to 64 [ 218.556547][ T6897] hfs: Unknown parameter '' [ 219.057444][ T6904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.278'. [ 219.066850][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 220.905625][ T5835] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 221.307525][ T6911] loop3: detected capacity change from 0 to 4096 [ 221.358580][ T6911] ntfs3: Unknown parameter './file0' [ 221.525480][ T5835] usb 5-1: Using ep0 maxpacket: 32 [ 221.534724][ T5835] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 221.544603][ T5835] usb 5-1: config 0 has no interface number 0 [ 221.560792][ T5835] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 221.803135][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.896378][ T5835] usb 5-1: Product: syz [ 221.939063][ T5835] usb 5-1: Manufacturer: syz [ 221.985907][ T5835] usb 5-1: SerialNumber: syz [ 222.164209][ T6924] sctp: failed to load transform for md5: -2 [ 222.182948][ T5835] usb 5-1: config 0 descriptor?? [ 222.241245][ T5835] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 222.492837][ T5835] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 222.609231][ T5835] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 222.909810][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 222.923819][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 222.925558][ T43] usb 5-1: USB disconnect, device number 5 [ 224.303674][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 224.422671][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 224.448880][ T43] quatech2 5-1:0.51: device disconnected [ 224.480791][ T6952] loop1: detected capacity change from 0 to 64 [ 224.512195][ T6950] loop0: detected capacity change from 0 to 1764 [ 224.556392][ T6952] hfs: Unknown parameter '' [ 225.287257][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.294'. [ 225.298280][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 225.499760][ T30] audit: type=1800 audit(1749165566.055:11): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.293" name="file0" dev="loop0" ino=1923 res=0 errno=0 [ 226.960430][ T6976] netlink: 'syz.1.300': attribute type 10 has an invalid length. [ 227.017799][ T6976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.049483][ T6976] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 227.952839][ T6976] syz.1.300 (6976) used greatest stack depth: 18504 bytes left [ 228.708197][ T6972] loop4: detected capacity change from 0 to 4096 [ 228.730595][ T6972] ntfs3: Unknown parameter './file0' [ 229.476209][ T6992] netlink: 'syz.1.303': attribute type 13 has an invalid length. [ 229.484329][ T6992] macvtap0: entered promiscuous mode [ 229.500955][ T6992] macvtap0: refused to change device tx_queue_len [ 230.066521][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'. [ 235.812286][ T7033] loop0: detected capacity change from 0 to 32768 [ 235.819985][ T7033] XFS: ikeep mount option is deprecated. [ 236.091091][ T7038] ALSA: mixer_oss: invalid index 40000 [ 236.435486][ T7033] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop0": -EINTR [ 237.834834][ T7050] loop4: detected capacity change from 0 to 64 [ 237.928670][ T7050] hfs: Unknown parameter '' [ 238.761138][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 239.432510][ T7050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.537914][ T7050] netlink: 28 bytes leftover after parsing attributes in process `syz.4.321'. [ 239.546935][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 242.473190][ T7087] loop1: detected capacity change from 0 to 32768 [ 242.480697][ T7087] XFS: ikeep mount option is deprecated. [ 242.571215][ T7089] loop4: detected capacity change from 0 to 4096 [ 242.591601][ T7087] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 242.687605][ T7087] XFS (loop1): Ending clean mount [ 242.702171][ T7087] XFS (loop1): Quotacheck needed: Please wait. [ 242.788634][ T7087] XFS (loop1): Quotacheck: Done. [ 243.582891][ T30] audit: type=1800 audit(1749165583.585:12): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.330" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 243.603125][ T30] audit: type=1800 audit(1749165583.585:13): pid=7087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.330" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 243.709536][ T5832] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 243.947610][ T7108] ntfs3(loop4): ino=24, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ntfs_rename [ 244.052047][ T7112] loop0: detected capacity change from 0 to 64 [ 244.086619][ T7112] hfs: Unknown parameter '' [ 244.224020][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.336'. [ 244.852811][ T7112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.882043][ T7112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.337'. [ 244.891184][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'. [ 247.541324][ T7144] overlayfs: missing 'lowerdir' [ 248.489921][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'. [ 249.519667][ T7162] kvm: pic: non byte write [ 249.549066][ T7159] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 249.754186][ T7165] loop0: detected capacity change from 0 to 4096 [ 249.901594][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 253.117826][ T7193] veth0_vlan: left promiscuous mode [ 253.130800][ T7193] veth0_vlan: entered promiscuous mode [ 254.651243][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.361'. [ 255.482897][ T7210] loop1: detected capacity change from 0 to 64 [ 256.049611][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.058519][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.122818][ T7222] loop4: detected capacity change from 0 to 4096 [ 258.197769][ T7225] loop3: detected capacity change from 0 to 64 [ 258.317035][ T7225] hfs: Unknown parameter '' [ 258.468484][ T7231] loop4: detected capacity change from 0 to 64 [ 258.478353][ T7231] hfs: Bad value for 'gid' [ 258.495105][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'. [ 259.357134][ T7225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.369607][ T7225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.370'. [ 259.378827][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 259.774387][ T7238] overlayfs: missing 'lowerdir' [ 261.022144][ T7250] veth0_vlan: entered allmulticast mode [ 261.072033][ T7250] veth0_vlan: left promiscuous mode [ 261.084761][ T7250] veth0_vlan: entered promiscuous mode [ 262.210407][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 262.288366][ T7258] loop1: detected capacity change from 0 to 64 [ 262.875866][ T7259] loop2: detected capacity change from 0 to 16 [ 262.962031][ T7259] erofs (device loop2): mounted with root inode @ nid 36. [ 267.762110][ T7287] loop1: detected capacity change from 0 to 4096 [ 269.411146][ T7303] veth0_vlan: left promiscuous mode [ 269.428168][ T7303] veth0_vlan: entered promiscuous mode [ 269.815968][ T7304] loop1: detected capacity change from 0 to 64 [ 269.828171][ T7304] hfs: Bad value for 'gid' [ 269.851562][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 270.099531][ T7297] loop4: detected capacity change from 0 to 4096 [ 270.187785][ T7297] ntfs3: Unknown parameter './file0' [ 270.374992][ T7311] loop0: detected capacity change from 0 to 16 [ 270.465502][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 270.573137][ T7311] erofs (device loop0): mounted with root inode @ nid 36. [ 272.214956][ T7321] netlink: ct family unspecified [ 272.220215][ T7321] openvswitch: netlink: Actions may not be safe on all matching packets [ 272.754649][ T7324] loop4: detected capacity change from 0 to 128 [ 272.836140][ T7324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.843184][ T7324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.975512][ T7324] EXT4-fs (loop4): Test dummy encryption mode enabled [ 273.634263][ T7324] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 273.678281][ T7324] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 274.953124][ T5834] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 275.599294][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 277.262294][ T7351] loop0: detected capacity change from 0 to 4096 [ 277.269943][ T7351] ntfs3: Unknown parameter './file0' [ 279.366064][ T7373] loop2: detected capacity change from 0 to 128 [ 279.373536][ T7373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.435304][ T7373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.719712][ T7373] EXT4-fs (loop2): Test dummy encryption mode enabled [ 279.958710][ T7380] loop1: detected capacity change from 0 to 64 [ 280.013679][ T7380] hfs: Unknown parameter 'ÿ' [ 280.048619][ T7373] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 280.088840][ T7373] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 280.953934][ T5837] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.980507][ T7383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.868335][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 283.651002][ T7408] Bluetooth: MGMT ver 1.23 [ 283.886613][ T7408] loop2: detected capacity change from 0 to 4096 [ 284.712805][ T7412] loop1: detected capacity change from 0 to 64 [ 285.379616][ T7415] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.689015][ T30] audit: type=1800 audit(1749165626.185:14): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.422" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 287.155652][ T7426] veth0_vlan: left promiscuous mode [ 287.168925][ T7426] veth0_vlan: entered promiscuous mode [ 290.256623][ T7427] veth7: entered promiscuous mode [ 292.037416][ T7440] loop2: detected capacity change from 0 to 32768 [ 292.076567][ T7440] XFS: ikeep mount option is deprecated. [ 292.134293][ T7440] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 292.210355][ T7440] XFS (loop2): Ending clean mount [ 292.218788][ T7440] XFS (loop2): Quotacheck needed: Please wait. [ 292.400379][ T7440] XFS (loop2): Quotacheck: Done. [ 292.712063][ T7450] overlayfs: missing 'lowerdir' [ 292.897225][ T5837] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 293.977767][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.434'. [ 295.699293][ T7466] loop2: detected capacity change from 0 to 1764 [ 296.173078][ T7472] veth0_vlan: left promiscuous mode [ 296.202672][ T7472] veth0_vlan: entered promiscuous mode [ 296.774578][ T7469] loop3: detected capacity change from 0 to 1764 [ 298.343681][ T7486] netlink: ct family unspecified [ 298.349228][ T7486] openvswitch: netlink: Actions may not be safe on all matching packets [ 298.626861][ T7488] loop2: detected capacity change from 0 to 64 [ 298.666160][ T7488] hfs: Unknown parameter '' [ 298.723520][ T7488] loop2: detected capacity change from 0 to 2048 [ 298.774180][ T7489] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.977822][ T7491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.188935][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.441'. [ 299.231685][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 300.224605][ T7507] veth9: entered promiscuous mode [ 300.341691][ T7508] overlayfs: missing 'lowerdir' [ 305.895795][ T7541] loop2: detected capacity change from 0 to 64 [ 306.031113][ T7541] hfs: Unknown parameter '' [ 306.683093][ T7541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.692726][ T7541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.454'. [ 306.702238][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 308.447126][ T7563] loop2: detected capacity change from 0 to 64 [ 311.300557][ T7583] veth0_vlan: entered allmulticast mode [ 311.348774][ T7583] veth0_vlan: left promiscuous mode [ 311.361657][ T7583] veth0_vlan: entered promiscuous mode [ 312.281942][ T7587] overlayfs: missing 'lowerdir' [ 312.363011][ T7594] loop4: detected capacity change from 0 to 64 [ 312.554189][ T7594] hfs: Unknown parameter '' [ 313.243206][ T7594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.280367][ T7597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.469'. [ 313.289405][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 314.565769][ T7612] loop1: detected capacity change from 0 to 64 [ 314.629692][ T7612] hfs: Unknown parameter '' [ 314.742173][ T7612] loop1: detected capacity change from 0 to 2048 [ 314.857005][ T7618] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.493503][ T7624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.590975][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.474'. [ 315.600752][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 317.376942][ T7642] veth0_vlan: left promiscuous mode [ 317.389819][ T7642] veth0_vlan: entered promiscuous mode [ 317.429888][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.440405][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.180923][ T5835] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 318.335269][ T5835] usb 5-1: device descriptor read/64, error -71 [ 318.606784][ T5835] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 318.805498][ T5835] usb 5-1: device descriptor read/64, error -71 [ 318.968673][ T5835] usb usb5-port1: attempt power cycle [ 319.284738][ T7650] loop1: detected capacity change from 0 to 64 [ 319.341256][ T7650] hfs: Unknown parameter '' [ 319.398764][ T7650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.425475][ T5835] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 320.357574][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.483'. [ 320.366996][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'. [ 320.497664][ T7657] loop2: detected capacity change from 0 to 16 [ 320.520780][ T7657] erofs (device loop2): mounted with root inode @ nid 36. [ 320.539596][ T5835] usb 5-1: device descriptor read/8, error -71 [ 324.331445][ T7689] overlayfs: missing 'lowerdir' [ 325.389567][ T7699] loop2: detected capacity change from 0 to 128 [ 325.397899][ T7699] EXT4-fs: Ignoring removed nomblk_io_submit option [ 325.404912][ T7699] EXT4-fs: Ignoring removed nomblk_io_submit option [ 325.467566][ T7699] EXT4-fs (loop2): Test dummy encryption mode enabled [ 325.558249][ T7699] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 325.680084][ T7699] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 326.937588][ T5924] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 327.105338][ T5924] usb 2-1: device descriptor read/64, error -71 [ 327.156160][ T5837] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.366002][ T5924] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 327.380531][ T7711] loop2: detected capacity change from 0 to 16 [ 327.499157][ T7711] erofs (device loop2): mounted with root inode @ nid 36. [ 327.527685][ T5924] usb 2-1: device descriptor read/64, error -71 [ 327.655756][ T5924] usb usb2-port1: attempt power cycle [ 329.145782][ T5924] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 329.197752][ T5924] usb 2-1: device descriptor read/8, error -71 [ 329.508028][ T5924] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 329.826883][ T5924] usb 2-1: device descriptor read/8, error -71 [ 330.005739][ T5924] usb usb2-port1: unable to enumerate USB device [ 331.289282][ T7740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 331.689340][ T7744] loop4: detected capacity change from 0 to 128 [ 331.755264][ T7745] loop2: detected capacity change from 0 to 32768 [ 332.030145][ T7745] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,fsck,fix_errors=yes,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 332.030145][ T7745] allowing incompatible features above 0.0: (unknown version) [ 332.030145][ T7745] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 332.073642][ T7745] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 332.083538][ T7745] bcachefs (loop2): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: no devices in entry free: 0/0 [], fixing [ 332.104356][ T7745] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 332.112730][ T7745] bcachefs (loop2): Version upgrade required: [ 332.112730][ T7745] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 332.112730][ T7745] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 332.112730][ T7745] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 332.187315][ T7745] bcachefs (loop2): dropping and reconstructing all alloc info [ 332.241977][ T7744] EXT4-fs: Ignoring removed nomblk_io_submit option [ 332.367939][ T7744] EXT4-fs: Ignoring removed nomblk_io_submit option [ 332.413769][ T7745] bcachefs (loop2): btree node read error at btree xattrs level 0/0 [ 332.413815][ T7745] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 332.413833][ T7745] loop2 node offset 8/16 bset u64s 0: empty bset [ 332.413845][ T7745] repair success (rewriting node) [ 332.452705][ T7745] bcachefs (loop2): accounting_read... [ 332.454782][ T7744] EXT4-fs (loop4): Test dummy encryption mode enabled [ 332.522009][ T7745] done [ 332.524867][ T7745] bcachefs (loop2): alloc_read... done [ 332.531078][ T7745] bcachefs (loop2): snapshots_read... done [ 332.537853][ T7745] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 332.548000][ T7745] bcachefs (loop2): done starting filesystem [ 332.602038][ T7744] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.663378][ T7744] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.979295][ T5834] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.298208][ T7762] loop0: detected capacity change from 0 to 16 [ 335.123415][ T7762] erofs (device loop0): mounted with root inode @ nid 36. [ 335.305340][ T7766] overlayfs: missing 'lowerdir' [ 335.336623][ T5837] bcachefs (loop2): shutting down [ 337.248097][ T5837] bcachefs (loop2): shutdown complete [ 337.258909][ T7776] loop1: detected capacity change from 0 to 32768 [ 337.266538][ T7776] XFS: ikeep mount option is deprecated. [ 337.410995][ T7776] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 337.723149][ T7783] loop4: detected capacity change from 0 to 64 [ 337.907160][ T7776] XFS (loop1): Ending clean mount [ 337.918999][ T7776] XFS (loop1): Quotacheck needed: Please wait. [ 337.942857][ T7783] hfs: Unknown parameter '' [ 338.234716][ T7776] XFS (loop1): Quotacheck: Done. [ 339.110039][ T7783] loop4: detected capacity change from 0 to 2048 [ 339.171294][ T5832] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 339.493970][ T7801] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 339.913166][ T30] audit: type=1800 audit(1749165680.465:15): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.519" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 340.077648][ T7806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.496240][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.4.519'. [ 340.579886][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'. [ 340.669319][ T7812] loop1: detected capacity change from 0 to 128 [ 340.778583][ T7812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 340.815323][ T7812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 340.847571][ T7812] EXT4-fs (loop1): Test dummy encryption mode enabled [ 340.973685][ T7812] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.054015][ T7813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.525'. [ 341.064700][ T7812] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 342.360692][ T5832] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.384810][ T7828] loop0: detected capacity change from 0 to 64 [ 342.434166][ T7828] hfs: Unknown parameter '' [ 342.526480][ T7828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.539330][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.528'. [ 342.548443][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 343.412233][ T7838] loop0: detected capacity change from 0 to 256 [ 343.869708][ T7838] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 348.245100][ T7867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.538'. [ 349.263422][ T7869] loop1: detected capacity change from 0 to 32768 [ 349.378427][ T7869] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,fsck,fix_errors=yes,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 349.378427][ T7869] allowing incompatible features above 0.0: (unknown version) [ 349.378427][ T7869] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 349.422591][ T7869] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 349.431141][ T7869] bcachefs (loop1): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: no devices in entry free: 0/0 [], fixing [ 349.448388][ T7869] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 349.457424][ T7869] bcachefs (loop1): Version upgrade required: [ 349.457424][ T7869] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 349.457424][ T7869] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 349.457424][ T7869] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 349.531832][ T7869] bcachefs (loop1): dropping and reconstructing all alloc info [ 349.576149][ T7869] bcachefs (loop1): btree node read error at btree xattrs level 0/0 [ 349.576165][ T7869] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 349.576174][ T7869] loop1 node offset 8/16 bset u64s 0: empty bset [ 349.576179][ T7869] repair success (rewriting node) [ 349.619223][ T7869] bcachefs (loop1): accounting_read... done [ 349.636067][ T7869] bcachefs (loop1): alloc_read... done [ 349.641790][ T7869] bcachefs (loop1): snapshots_read... done [ 349.647962][ T7869] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 349.658802][ T7869] bcachefs (loop1): done starting filesystem [ 349.686174][ T5925] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 349.855100][ T5925] usb 3-1: device descriptor read/64, error -71 [ 349.869799][ T5832] bcachefs (loop1): shutting down [ 350.013833][ T7874] loop0: detected capacity change from 0 to 128 [ 350.014828][ T5832] bcachefs (loop1): shutdown complete [ 350.037335][ T7874] EXT4-fs: Ignoring removed nomblk_io_submit option [ 350.094786][ T7874] EXT4-fs: Ignoring removed nomblk_io_submit option [ 350.145273][ T5925] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 350.159614][ T7874] EXT4-fs (loop0): Test dummy encryption mode enabled [ 350.271698][ T7874] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 350.340012][ T5925] usb 3-1: device descriptor read/64, error -71 [ 350.348394][ T7874] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 350.485505][ T5925] usb usb3-port1: attempt power cycle [ 351.147565][ T5831] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.157972][ T5925] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 351.765564][ T7887] loop0: detected capacity change from 0 to 64 [ 351.790955][ T7887] hfs: Unknown parameter '' [ 352.736920][ T7890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.779781][ T7890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.545'. [ 352.887027][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 353.214320][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.923215][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.936809][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.946910][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.987305][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.060070][ T5925] usb 3-1: device descriptor read/8, error -71 [ 354.393919][ T7905] overlayfs: missing 'lowerdir' [ 354.454093][ T7904] loop0: detected capacity change from 0 to 4096 [ 354.895761][ T7904] loop0: detected capacity change from 0 to 64 [ 354.902781][ T7904] hfs: Bad value for 'gid' [ 355.120002][ T6720] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.313256][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.550'. [ 356.255375][ T5845] Bluetooth: hci3: command tx timeout [ 356.396573][ T7913] loop3: detected capacity change from 0 to 32768 [ 356.431222][ T7915] loop0: detected capacity change from 0 to 256 [ 356.473061][ T7913] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,fsck,fix_errors=yes,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 356.473061][ T7913] allowing incompatible features above 0.0: (unknown version) [ 356.473061][ T7913] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 356.516745][ T7913] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 356.525935][ T7913] bcachefs (loop3): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: no devices in entry free: 0/0 [], fixing [ 356.543623][ T7913] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 356.552306][ T7913] bcachefs (loop3): Version upgrade required: [ 356.552306][ T7913] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 356.552306][ T7913] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 356.552306][ T7913] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 356.561166][ T7915] exfat: Deprecated parameter 'namecase' [ 356.626521][ T7913] bcachefs (loop3): dropping and reconstructing all alloc info [ 356.666089][ T7917] loop1: detected capacity change from 0 to 64 [ 356.671756][ T7903] loop4: detected capacity change from 0 to 32768 [ 356.679058][ T7913] bcachefs (loop3): btree node read error at btree xattrs level 0/0 [ 356.679077][ T7913] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 356.679092][ T7913] loop3 node offset 8/16 bset u64s 0: empty bset [ 356.679102][ T7913] repair success (rewriting node) [ 356.696136][ T7917] hfs: Unknown parameter '' [ 356.705936][ T7913] bcachefs (loop3): accounting_read... [ 356.727349][ T7903] XFS: ikeep mount option is deprecated. [ 356.750012][ T7913] done [ 356.752855][ T7913] bcachefs (loop3): alloc_read... done [ 356.759259][ T7913] bcachefs (loop3): snapshots_read... done [ 356.765738][ T7913] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 356.776143][ T7913] bcachefs (loop3): done starting filesystem [ 356.859775][ T6720] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.871085][ T7903] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 356.899405][ T7915] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc473957f, utbl_chksum : 0xe619d30d) [ 356.904302][ T7917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.027740][ T5850] bcachefs (loop3): shutting down [ 357.038280][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.540'. [ 357.047307][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 358.317907][ T6720] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.362319][ T5845] Bluetooth: hci3: command tx timeout [ 358.625500][ T7903] XFS (loop4): Ending clean mount [ 358.709013][ T5850] bcachefs (loop3): shutdown complete [ 358.748463][ T7903] XFS (loop4): Quotacheck needed: Please wait. [ 359.598214][ T7935] loop0: detected capacity change from 0 to 4096 [ 359.651776][ T7935] ntfs3: Unknown parameter './file0' [ 359.719708][ T7903] XFS (loop4): Quotacheck: Done. [ 359.792979][ T6720] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.416695][ T5845] Bluetooth: hci3: command tx timeout [ 360.823011][ T7945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.885479][ T5834] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 360.985078][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.0.557'. [ 361.003468][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'. [ 361.215290][ T5925] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 361.299034][ T7895] chnl_net:caif_netlink_parms(): no params data found [ 361.375334][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 361.392488][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.413750][ T5925] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 361.440082][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.490815][ T5925] usb 2-1: config 0 descriptor?? [ 361.550164][ T5925] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 361.649033][ T7952] loop0: detected capacity change from 0 to 4096 [ 361.879039][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 362.507456][ T5845] Bluetooth: hci3: command tx timeout [ 362.683961][ T7895] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.914382][ T7895] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.942178][ T7895] bridge_slave_0: entered allmulticast mode [ 362.949021][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.561'. [ 362.962292][ T7895] bridge_slave_0: entered promiscuous mode [ 362.972301][ T7965] loop4: detected capacity change from 0 to 64 [ 362.975542][ T6720] bridge_slave_1: left allmulticast mode [ 362.985273][ T6720] bridge_slave_1: left promiscuous mode [ 362.992415][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.994396][ T7965] hfs: Unknown parameter '' [ 363.759763][ T6720] bridge_slave_0: left allmulticast mode [ 363.849858][ T7966] loop0: detected capacity change from 0 to 32768 [ 363.857429][ T5925] gspca_vc032x: reg_r err -32 [ 363.862463][ T5925] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 363.888657][ T7965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 363.898125][ T6720] bridge_slave_0: left promiscuous mode [ 363.904061][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.913997][ T7965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.562'. [ 363.923098][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.562'. [ 364.025709][ T7966] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,fsck,fix_errors=yes,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 364.025709][ T7966] allowing incompatible features above 0.0: (unknown version) [ 364.025709][ T7966] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 364.069201][ T7966] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 364.077970][ T7966] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: no devices in entry free: 0/0 [], fixing [ 364.095451][ T7966] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 364.103703][ T7966] bcachefs (loop0): Version upgrade required: [ 364.103703][ T7966] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 364.103703][ T7966] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 364.103703][ T7966] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 364.177383][ T7966] bcachefs (loop0): dropping and reconstructing all alloc info [ 364.230155][ T7966] bcachefs (loop0): btree node read error at btree xattrs level 0/0 [ 364.230177][ T7966] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 364.230192][ T7966] loop0 node offset 8/16 bset u64s 0: empty bset [ 364.230203][ T7966] repair success (rewriting node) [ 364.270734][ T7966] bcachefs (loop0): accounting_read... done [ 364.292240][ T7966] bcachefs (loop0): alloc_read... done [ 364.298748][ T7966] bcachefs (loop0): snapshots_read... done [ 364.305663][ T7966] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 364.315629][ T7966] bcachefs (loop0): done starting filesystem [ 364.583532][ T5831] bcachefs (loop0): shutting down [ 364.709475][ T5831] bcachefs (loop0): shutdown complete [ 365.144406][ T5835] usb 2-1: USB disconnect, device number 23 [ 367.161929][ T6720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.181041][ T6720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.967816][ T6720] bond0 (unregistering): Released all slaves [ 367.985365][ T7895] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.996628][ T7895] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.007214][ T7895] bridge_slave_1: entered allmulticast mode [ 368.035517][ T7895] bridge_slave_1: entered promiscuous mode [ 368.087194][ T7977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.552'. [ 368.127793][ T7977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.552'. [ 368.171251][ T7978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.552'. [ 368.180614][ T7978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.552'. [ 368.961724][ T8010] loop3: detected capacity change from 0 to 64 [ 369.035758][ T8010] hfs: Unknown parameter '' [ 369.198729][ T8010] loop3: detected capacity change from 0 to 2048 [ 369.240347][ T8000] veth0_vlan: entered allmulticast mode [ 369.259081][ T8001] veth0_vlan: left promiscuous mode [ 369.267956][ T8001] veth0_vlan: entered promiscuous mode [ 369.351512][ T8013] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 369.473210][ T8015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 369.482410][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 369.630854][ T8012] loop1: detected capacity change from 0 to 4096 [ 369.703045][ T30] audit: type=1800 audit(1749165709.895:16): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.569" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 369.889557][ T8018] loop1: detected capacity change from 0 to 64 [ 369.906207][ T8018] hfs: Bad value for 'gid' [ 369.933549][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 370.274647][ T8020] loop1: detected capacity change from 0 to 4096 [ 370.300677][ T8020] NILFS (loop1): invalid segment: Checksum error in segment payload [ 370.313377][ T8020] NILFS (loop1): trying rollback from an earlier position [ 370.383101][ T8020] NILFS (loop1): recovery complete [ 370.460843][ T7895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.477416][ T8021] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 370.536053][ T7895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.583646][ T30] audit: type=1800 audit(1749165711.135:17): pid=8020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.572" name="bus" dev="loop1" ino=12 res=0 errno=0 [ 370.654082][ T30] audit: type=1800 audit(1749165711.165:18): pid=8020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.572" name="bus" dev="loop1" ino=12 res=0 errno=0 [ 371.614438][ T7895] team0: Port device team_slave_0 added [ 371.781809][ T7895] team0: Port device team_slave_1 added [ 372.612334][ T7895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.646204][ T7895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.755281][ T7895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.821261][ T8042] loop4: detected capacity change from 0 to 64 [ 372.846525][ T8042] hfs: Unknown parameter '' [ 372.870571][ T6720] hsr_slave_0: left promiscuous mode [ 372.888262][ T8042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.899829][ T8042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.577'. [ 372.909023][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 372.941040][ T6720] hsr_slave_1: left promiscuous mode [ 372.967702][ T6720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.988798][ T6720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.014312][ T6720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.042120][ T6720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.151343][ T6720] veth1_macvtap: left promiscuous mode [ 373.177156][ T6720] veth0_macvtap: left promiscuous mode [ 373.183137][ T6720] veth1_vlan: left promiscuous mode [ 373.189528][ T6720] veth0_vlan: left promiscuous mode [ 374.784315][ T8056] loop3: detected capacity change from 0 to 4096 [ 374.911652][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 375.284979][ T8059] loop3: detected capacity change from 0 to 2048 [ 375.340120][ T8060] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 375.353342][ T6720] team0 (unregistering): Port device team_slave_1 removed [ 375.362018][ T30] audit: type=1800 audit(1749165715.915:19): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.582" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 375.424393][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.582'. [ 375.433980][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.582'. [ 376.191187][ T6720] team0 (unregistering): Port device team_slave_0 removed [ 376.653967][ T7895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.664872][ T7895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.691675][ T7895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.731158][ T8044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.578'. [ 376.756180][ T8044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.578'. [ 376.776473][ T8045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.578'. [ 376.813209][ T8045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.578'. [ 376.867514][ T8054] veth0_vlan: left promiscuous mode [ 376.874696][ T8054] veth0_vlan: entered promiscuous mode [ 377.073383][ T8067] netlink: 'syz.4.583': attribute type 10 has an invalid length. [ 378.601969][ T8067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.655062][ T8067] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 378.820925][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.827632][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.742443][ T7895] hsr_slave_0: entered promiscuous mode [ 379.783336][ T7895] hsr_slave_1: entered promiscuous mode [ 379.834756][ T7895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.863756][ T7895] Cannot create hsr debugfs directory [ 380.048281][ T8097] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 380.161364][ T8103] loop4: detected capacity change from 0 to 64 [ 380.186642][ T8103] hfs: Unknown parameter '' [ 380.234288][ T8103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.268179][ T8103] netlink: 28 bytes leftover after parsing attributes in process `syz.4.592'. [ 380.277249][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'. [ 381.153116][ T8109] veth0_vlan: left promiscuous mode [ 381.160603][ T8109] veth0_vlan: entered promiscuous mode [ 383.211596][ T8125] overlayfs: failed to resolve './file0': -2 [ 384.452336][ T7895] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 384.665003][ T8128] loop0: detected capacity change from 0 to 4096 [ 384.875268][ T8128] ntfs3: Unknown parameter './file0' [ 385.396373][ T7895] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 385.414949][ T7895] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 385.515743][ T7895] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 386.924208][ T7895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.667889][ T8166] veth0_vlan: entered allmulticast mode [ 387.728274][ T8168] veth0_vlan: left promiscuous mode [ 387.734665][ T8168] veth0_vlan: entered promiscuous mode [ 387.969193][ T7895] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.057426][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.065268][ T6720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.578323][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.585679][ T6720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.629954][ T8176] Driver unsupported XDP return value 0 on prog (id 61) dev N/A, expect packet loss! [ 388.957844][ T7895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.000426][ T7895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.335862][ T8186] Cannot find add_set index 0 as target [ 389.374032][ T30] audit: type=1326 audit(1749165729.855:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099f58e929 code=0x7ffc0000 [ 389.926563][ T30] audit: type=1326 audit(1749165729.855:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099f58e929 code=0x7ffc0000 [ 395.005503][ T8206] overlayfs: failed to resolve './file0': -2 [ 395.136952][ T30] audit: type=1326 audit(1749165729.865:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099f58e929 code=0x7ffc0000 [ 395.235982][ T30] audit: type=1326 audit(1749165729.865:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099f58e929 code=0x7ffc0000 [ 395.258825][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.500454][ T30] audit: type=1326 audit(1749165729.865:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099f58e929 code=0x7ffc0000 [ 395.522845][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.696807][ T30] audit: type=1326 audit(1749165729.865:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099f58e929 code=0x7ffc0000 [ 395.722544][ T8206] loop1: detected capacity change from 0 to 4096 [ 395.744224][ T7895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.754036][ T30] audit: type=1326 audit(1749165729.865:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099f58e929 code=0x7ffc0000 [ 395.787037][ T8206] ntfs3: Unknown parameter './file0' [ 395.830868][ T30] audit: type=1326 audit(1749165729.865:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099f58e929 code=0x7ffc0000 [ 396.019930][ T8223] veth0_vlan: left promiscuous mode [ 396.091558][ T8223] veth0_vlan: entered promiscuous mode [ 396.545399][ T30] audit: type=1326 audit(1749165729.865:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099f58e929 code=0x7ffc0000 [ 396.805310][ T30] audit: type=1326 audit(1749165729.875:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099f58e929 code=0x7ffc0000 [ 396.828677][ T30] audit: type=1326 audit(1749165729.875:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f099f58e929 code=0x7ffc0000 [ 396.851189][ T30] audit: type=1326 audit(1749165729.875:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099f58e929 code=0x7ffc0000 [ 396.982531][ T8225] loop0: detected capacity change from 0 to 64 [ 398.300957][ T8244] overlayfs: missing 'lowerdir' [ 398.667008][ T7895] veth0_vlan: entered promiscuous mode [ 399.509058][ T7895] veth1_vlan: entered promiscuous mode [ 399.582320][ T7895] veth0_macvtap: entered promiscuous mode [ 399.608581][ T7895] veth1_macvtap: entered promiscuous mode [ 399.683690][ T7895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.733457][ T7895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.782419][ T7895] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.845539][ T7895] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.854945][ T7895] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.883584][ T7895] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.331207][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.142308][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.219945][ T8279] overlayfs: failed to resolve './file0': -2 [ 402.306817][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.314899][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.504335][ T8283] loop0: detected capacity change from 0 to 4096 [ 402.554281][ T8283] ntfs3: Unknown parameter './file0' [ 404.226707][ T8306] fuse: Bad value for 'fd' [ 405.237286][ T8311] block nbd4: NBD_DISCONNECT [ 405.553348][ T8321] 9pnet_fd: Insufficient options for proto=fd [ 406.561085][ T8326] loop1: detected capacity change from 0 to 64 [ 407.476164][ T8341] loop4: detected capacity change from 0 to 4096 [ 407.496807][ T8341] ntfs3: Unknown parameter './file0' [ 408.101610][ T8330] loop5: detected capacity change from 0 to 32768 [ 408.146843][ T8330] XFS: ikeep mount option is deprecated. [ 408.408557][ T8330] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 409.294614][ T8352] binder: 8351:8352 ioctl c0306201 200000000640 returned -22 [ 409.439455][ T8330] XFS (loop5): Ending clean mount [ 409.462609][ T8330] XFS (loop5): Quotacheck needed: Please wait. [ 410.340044][ T8330] XFS (loop5): Quotacheck: Done. [ 412.107741][ T5835] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 412.171635][ T7895] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 412.292072][ T8390] netlink: 48 bytes leftover after parsing attributes in process `syz.0.654'. [ 412.305345][ T5835] usb 5-1: device descriptor read/64, error -71 [ 413.343978][ T5835] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 414.064214][ T8414] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 417.327467][ T8426] netlink: 'syz.4.662': attribute type 7 has an invalid length. [ 417.376893][ T5948] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 417.389019][ T5948] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 424.320114][ T8497] loop3: detected capacity change from 0 to 64 [ 424.374602][ T8497] hfs: Unknown parameter '' [ 424.451585][ T8502] overlayfs: missing 'lowerdir' [ 425.137102][ T8497] loop3: detected capacity change from 0 to 2048 [ 425.295522][ T8510] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 425.335232][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 425.335251][ T30] audit: type=1800 audit(1749165765.885:45): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.680" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 425.373016][ T8497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.481919][ T8527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'. [ 427.493648][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 429.753533][ T8548] veth0_vlan: entered allmulticast mode [ 429.805851][ T8548] veth0_vlan: left promiscuous mode [ 429.818466][ T8548] veth0_vlan: entered promiscuous mode [ 432.227130][ T8576] loop1: detected capacity change from 0 to 32768 [ 432.234694][ T8576] XFS: ikeep mount option is deprecated. [ 432.334276][ T8576] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 432.637581][ T8576] XFS (loop1): Ending clean mount [ 432.647262][ T8576] XFS (loop1): Quotacheck needed: Please wait. [ 433.301651][ T8591] loop5: detected capacity change from 0 to 1764 [ 433.679288][ T8576] XFS (loop1): Quotacheck: Done. [ 434.505294][ T30] audit: type=1800 audit(1749165775.055:46): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.702" name="file0" dev="loop5" ino=1923 res=0 errno=0 [ 434.582253][ T5832] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 436.502533][ T8644] loop1: detected capacity change from 0 to 64 [ 436.513561][ T8644] hfs: Unknown parameter '' [ 437.113723][ T8644] loop1: detected capacity change from 0 to 2048 [ 437.735214][ T917] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 437.799998][ T8660] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 437.861583][ T30] audit: type=1800 audit(1749165778.415:47): pid=8644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.717" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 437.939390][ T8644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.964962][ T8644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.717'. [ 437.975359][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'. [ 437.991612][ T917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.053941][ T917] usb 4-1: config 0 has no interfaces? [ 438.094034][ T917] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 438.104092][ T8664] loop5: detected capacity change from 0 to 64 [ 438.115182][ T917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.167122][ T917] usb 4-1: config 0 descriptor?? [ 438.176530][ T8664] hfs: Unknown parameter '' [ 438.332076][ T8671] veth0_vlan: left promiscuous mode [ 438.344551][ T8671] veth0_vlan: entered promiscuous mode [ 439.059150][ T8673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.317015][ T8664] netlink: 28 bytes leftover after parsing attributes in process `syz.5.719'. [ 439.326165][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.719'. [ 440.822100][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.828572][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.037322][ T917] usb 4-1: USB disconnect, device number 3 [ 441.075788][ T8696] veth5: entered promiscuous mode [ 442.234515][ T8723] loop1: detected capacity change from 0 to 64 [ 442.257106][ T8723] hfs: Unknown parameter '' [ 442.409888][ T8723] loop1: detected capacity change from 0 to 2048 [ 442.551947][ T8735] loop5: detected capacity change from 0 to 64 [ 442.576082][ T917] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 442.625449][ T8735] hfs: Unknown parameter '' [ 443.317585][ T8745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.421606][ T8741] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 443.463957][ T8746] netlink: 28 bytes leftover after parsing attributes in process `syz.5.737'. [ 443.475362][ T30] audit: type=1800 audit(1749165784.025:48): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.734" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 443.508280][ T8723] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 443.521473][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.737'. [ 443.554932][ T8723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.734'. [ 443.565332][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 443.621059][ T917] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 443.655473][ T917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 443.704289][ T8748] loop3: detected capacity change from 0 to 1764 [ 443.737998][ T917] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 443.759985][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.810327][ T917] usb 1-1: Product: syz [ 443.824534][ T917] usb 1-1: Manufacturer: syz [ 444.065317][ T917] usb 1-1: SerialNumber: syz [ 444.100497][ T917] usb 1-1: config 0 descriptor?? [ 444.970728][ T917] usb 1-1: selecting invalid altsetting 0 [ 445.293238][ T5835] usb 1-1: USB disconnect, device number 7 [ 445.339164][ T8763] veth3: entered promiscuous mode [ 446.857543][ T8786] loop1: detected capacity change from 0 to 64 [ 446.887541][ T8786] hfs: Unknown parameter '' [ 446.984192][ T8786] loop1: detected capacity change from 0 to 2048 [ 447.076405][ T8796] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 447.104149][ T30] audit: type=1800 audit(1749165787.655:49): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.751" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 447.171278][ T8786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.217096][ T8786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.751'. [ 447.226145][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 447.430625][ T8805] loop4: detected capacity change from 0 to 1764 [ 447.621978][ T8806] batadv0: entered promiscuous mode [ 447.627736][ T8806] batadv0: entered allmulticast mode [ 448.913847][ T8814] netlink: zone id is out of range [ 448.931471][ T8814] netlink: zone id is out of range [ 448.959707][ T8814] netlink: zone id is out of range [ 448.982539][ T8814] netlink: zone id is out of range [ 449.010599][ T8814] netlink: zone id is out of range [ 449.030890][ T8814] netlink: zone id is out of range [ 449.066042][ T8814] netlink: zone id is out of range [ 449.866293][ T8814] netlink: zone id is out of range [ 449.871499][ T8814] netlink: zone id is out of range [ 449.923199][ T8814] netlink: zone id is out of range [ 450.114066][ T8830] overlayfs: missing 'lowerdir' [ 453.396653][ T8856] loop4: detected capacity change from 0 to 1764 [ 455.468419][ T8881] lo speed is unknown, defaulting to 1000 [ 455.485142][ T8881] lo speed is unknown, defaulting to 1000 [ 455.496109][ T8881] lo speed is unknown, defaulting to 1000 [ 456.319105][ T8881] infiniband syz2: set active [ 456.324132][ T8881] infiniband syz2: added lo [ 456.341856][ T5835] lo speed is unknown, defaulting to 1000 [ 456.473980][ T8881] RDS/IB: syz2: added [ 456.478868][ T8881] smc: adding ib device syz2 with port count 1 [ 456.485463][ T8881] smc: ib device syz2 port 1 has pnetid [ 456.504593][ T8881] lo speed is unknown, defaulting to 1000 [ 456.669903][ T8881] lo speed is unknown, defaulting to 1000 [ 456.809571][ T8881] lo speed is unknown, defaulting to 1000 [ 456.951980][ T8881] lo speed is unknown, defaulting to 1000 [ 457.094597][ T8881] lo speed is unknown, defaulting to 1000 [ 457.279349][ T5835] lo speed is unknown, defaulting to 1000 [ 457.791505][ T8887] veth9: entered promiscuous mode [ 459.803819][ T8921] loop1: detected capacity change from 0 to 1764 [ 460.895537][ T917] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 461.077170][ T917] usb 6-1: unable to get BOS descriptor or descriptor too short [ 461.085824][ T917] usb 6-1: not running at top speed; connect to a high speed hub [ 461.162469][ T917] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 461.210515][ T917] usb 6-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.259532][ T917] usb 6-1: config 1 interface 0 has no altsetting 0 [ 461.309165][ T917] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.40 [ 461.363193][ T917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.554023][ T917] usb 6-1: Product: syz [ 461.560105][ T917] usb 6-1: Manufacturer: syz [ 461.564914][ T917] usb 6-1: SerialNumber: syz [ 461.707335][ T8924] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 462.008646][ T917] usbhid 6-1:1.0: can't add hid device: -71 [ 462.028202][ T917] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 462.057088][ T917] usb 6-1: USB disconnect, device number 2 [ 463.354294][ T8937] syz.1.789 (8937) used greatest stack depth: 16592 bytes left [ 463.707717][ T8960] netlink: 'syz.0.791': attribute type 10 has an invalid length. [ 463.716637][ T8960] batadv0: left promiscuous mode [ 463.721733][ T8960] batadv0: left allmulticast mode [ 463.746341][ T8960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.774687][ T8960] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 464.730512][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.793'. [ 464.789614][ T8971] IPv6: Can't replace route, no match found [ 465.949085][ T8986] loop5: detected capacity change from 0 to 1764 [ 468.203875][ T9005] trusted_key: encrypted_key: insufficient parameters specified [ 468.473547][ T9014] netlink: 36 bytes leftover after parsing attributes in process `syz.5.805'. [ 468.522517][ T9014] netlink: 16 bytes leftover after parsing attributes in process `syz.5.805'. [ 468.576001][ T9014] netlink: 36 bytes leftover after parsing attributes in process `syz.5.805'. [ 468.612986][ T9014] netlink: 36 bytes leftover after parsing attributes in process `syz.5.805'. [ 468.649150][ T9013] veth11: entered promiscuous mode [ 470.124823][ T9035] netlink: 'syz.4.807': attribute type 10 has an invalid length. [ 471.865367][ T30] audit: type=1326 audit(1749165812.405:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a1c98e929 code=0x7ffc0000 [ 471.925309][ T30] audit: type=1326 audit(1749165812.405:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a1c98e929 code=0x7ffc0000 [ 471.998537][ T30] audit: type=1326 audit(1749165812.415:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f7a1c98e929 code=0x7ffc0000 [ 472.085372][ T30] audit: type=1326 audit(1749165812.415:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a1c98e929 code=0x7ffc0000 [ 472.155218][ T30] audit: type=1326 audit(1749165812.415:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9048 comm="syz.4.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a1c98e929 code=0x7ffc0000 [ 472.159629][ T9053] loop4: detected capacity change from 0 to 4096 [ 472.555373][ T9058] new mount options do not match the existing superblock, will be ignored [ 473.362949][ T9059] loop4: detected capacity change from 0 to 64 [ 473.379940][ T9059] hfs: Bad value for 'gid' [ 473.401049][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 473.831353][ T9069] batadv0: entered promiscuous mode [ 473.839269][ T9069] batadv0: entered allmulticast mode [ 475.160443][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 477.819754][ T9093] loop1: detected capacity change from 0 to 32768 [ 477.827430][ T9093] XFS: ikeep mount option is deprecated. [ 477.891282][ T9093] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 478.254509][ T9093] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop1": -EINTR [ 478.256184][ T9093] XFS (loop1): log mount failed [ 478.403582][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 479.425585][ T9119] input: syz0 as /devices/virtual/input/input6 [ 481.372415][ T9136] batadv0: entered promiscuous mode [ 481.381729][ T9136] batadv0: entered allmulticast mode [ 481.434907][ T9128] loop1: detected capacity change from 0 to 4096 [ 481.612154][ T9141] loop1: detected capacity change from 0 to 64 [ 481.619856][ T9141] hfs: Bad value for 'gid' [ 481.640903][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 483.170001][ T9150] loop0: detected capacity change from 0 to 32768 [ 483.177736][ T9150] XFS: ikeep mount option is deprecated. [ 483.713995][ T9150] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 483.802386][ T9150] XFS (loop0): Ending clean mount [ 483.810574][ T9150] XFS (loop0): Quotacheck needed: Please wait. [ 483.849656][ T9150] XFS (loop0): Quotacheck: Done. [ 484.162750][ T5831] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 485.356016][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 486.697885][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'. [ 486.906220][ T9208] netlink: 180 bytes leftover after parsing attributes in process `syz.1.853'. [ 488.113465][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.855'. [ 489.614574][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.858'. [ 490.054040][ T9238] netlink: 64 bytes leftover after parsing attributes in process `syz.5.860'. [ 490.214968][ T9244] overlayfs: missing 'lowerdir' [ 490.365333][ T5925] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 490.483074][ T9251] loop4: detected capacity change from 0 to 4096 [ 490.490747][ T9251] ntfs3: Unknown parameter './file0' [ 491.406599][ T9256] veth7: entered promiscuous mode [ 491.497283][ T5925] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 491.511064][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 491.523072][ T5925] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 491.717791][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.726882][ T5925] usb 4-1: Product: syz [ 491.731364][ T5925] usb 4-1: Manufacturer: syz [ 491.736513][ T5925] usb 4-1: SerialNumber: syz [ 491.744407][ T5925] usb 4-1: config 0 descriptor?? [ 491.771980][ T5925] usb 4-1: selecting invalid altsetting 0 [ 491.933399][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 492.283370][ T978] usb 4-1: USB disconnect, device number 4 [ 495.770435][ T9298] JFS: discard option not supported on device [ 495.779640][ T9298] Mount JFS Failure: -22 [ 495.783952][ T9298] jfs_mount failed w/return code = -22 [ 496.619226][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 497.941864][ T9317] veth11: entered promiscuous mode [ 498.814516][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 498.905510][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 500.597118][ T9341] loop0: detected capacity change from 0 to 32768 [ 500.605231][ T9341] XFS: ikeep mount option is deprecated. [ 501.170015][ T9349] trusted_key: encrypted_key: key user:syz not found [ 501.186738][ T9341] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 501.659727][ T9341] XFS (loop0): Ending clean mount [ 501.674534][ T9341] XFS (loop0): Quotacheck needed: Please wait. [ 501.703713][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.710542][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.753985][ T9341] XFS (loop0): Quotacheck: Done. [ 502.037734][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.896'. [ 502.552679][ T5831] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 503.003405][ T9373] syz.1.901 uses old SIOCAX25GETINFO [ 508.258018][ T9402] loop4: detected capacity change from 0 to 32768 [ 508.265781][ T9402] XFS: ikeep mount option is deprecated. [ 508.721025][ T9402] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 508.741040][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.913'. [ 508.914486][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.910'. [ 509.658374][ T9425] misc userio: Invalid payload size [ 509.667656][ T9425] misc userio: No port type given on /dev/userio [ 509.675665][ T9425] misc userio: The device must be registered before sending interrupts [ 509.841947][ T9402] XFS (loop4): Ending clean mount [ 509.852243][ T9402] XFS (loop4): Quotacheck needed: Please wait. [ 510.078617][ T9402] XFS (loop4): Quotacheck: Done. [ 510.246759][ T5834] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 510.966440][ T5948] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 511.145358][ T5948] usb 4-1: Using ep0 maxpacket: 8 [ 511.160918][ T5948] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.179556][ T5948] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.204879][ T5948] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 511.221826][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.230402][ T5948] usb 4-1: Product: syz [ 511.234750][ T5948] usb 4-1: Manufacturer: syz [ 511.246216][ T5948] usb 4-1: SerialNumber: syz [ 511.494300][ T5948] usbhid 4-1:1.0: can't add hid device: -22 [ 511.513650][ T5948] usbhid 4-1:1.0: probe with driver usbhid failed with error -22 [ 511.570843][ T5948] usb 4-1: USB disconnect, device number 5 [ 511.647010][ T9427] loop1: detected capacity change from 0 to 32768 [ 511.654616][ T9427] XFS: ikeep mount option is deprecated. [ 512.452703][ T9427] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 512.853531][ T9427] XFS (loop1): Ending clean mount [ 512.906539][ T9427] XFS (loop1): Quotacheck needed: Please wait. [ 513.070875][ T9427] XFS (loop1): Quotacheck: Done. [ 513.081432][ T9472] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 513.130165][ T9472] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 513.262997][ T9472] loop3: detected capacity change from 0 to 4096 [ 513.270335][ T9472] ntfs3: Unknown parameter './file0' [ 513.352959][ T5832] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 514.804873][ T9484] loop5: detected capacity change from 0 to 32768 [ 514.818895][ T9484] XFS: ikeep mount option is deprecated. [ 514.863387][ T9484] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 515.025883][ T9494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.929'. [ 515.119777][ T9484] XFS (loop5): Ending clean mount [ 515.128394][ T9484] XFS (loop5): Quotacheck needed: Please wait. [ 515.536961][ T9484] XFS (loop5): Quotacheck: Done. [ 515.909243][ T7895] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 519.671132][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.944'. [ 520.448444][ T9542] overlayfs: missing 'lowerdir' [ 520.449775][ T9524] loop5: detected capacity change from 0 to 32768 [ 520.484874][ T9524] XFS: ikeep mount option is deprecated. [ 520.734896][ T9542] loop3: detected capacity change from 0 to 4096 [ 520.746480][ T9542] ntfs3: Unknown parameter './file0' [ 520.761733][ T9524] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 520.905227][ T917] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 521.031254][ T9524] XFS (loop5): Ending clean mount [ 521.075245][ T917] usb 2-1: Using ep0 maxpacket: 8 [ 521.171933][ T9524] XFS (loop5): Quotacheck needed: Please wait. [ 521.221399][ T917] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 521.381942][ T917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.454848][ T917] usb 2-1: Product: syz [ 521.474110][ T917] usb 2-1: Manufacturer: syz [ 521.494188][ T9524] XFS (loop5): Quotacheck: Done. [ 521.503021][ T917] usb 2-1: SerialNumber: syz [ 521.578993][ T917] usb 2-1: config 0 descriptor?? [ 522.916319][ T917] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -110 [ 522.923976][ T917] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 523.076380][ T7895] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 525.265930][ T5925] usb 2-1: USB disconnect, device number 24 [ 525.376529][ T9596] overlayfs: missing 'lowerdir' [ 525.604572][ T9596] loop3: detected capacity change from 0 to 4096 [ 525.646459][ T9596] ntfs3: Unknown parameter './file0' [ 528.044944][ T9599] loop1: detected capacity change from 0 to 32768 [ 528.068370][ T9599] XFS: ikeep mount option is deprecated. [ 529.112320][ T9599] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop1": -EINTR [ 531.253308][ T9651] loop1: detected capacity change from 0 to 1764 [ 531.341062][ T9652] bridge0: port 3(netdevsim0) entered blocking state [ 531.349807][ T9652] bridge0: port 3(netdevsim0) entered disabled state [ 531.358489][ T9652] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 531.384550][ T9652] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 531.396461][ T9652] bridge0: port 3(netdevsim0) entered blocking state [ 531.404299][ T9652] bridge0: port 3(netdevsim0) entered forwarding state [ 532.351051][ T9659] loop4: detected capacity change from 0 to 64 [ 532.899544][ T917] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 533.385468][ T917] usb 6-1: Using ep0 maxpacket: 8 [ 533.415742][ T917] usb 6-1: config 0 interface 0 has no altsetting 0 [ 533.494005][ T917] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 533.521108][ T917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.560818][ T917] usb 6-1: Product: syz [ 533.578218][ T917] usb 6-1: Manufacturer: syz [ 533.611844][ T917] usb 6-1: SerialNumber: syz [ 533.879844][ T9668] loop3: detected capacity change from 0 to 4096 [ 533.956388][ T917] usb 6-1: config 0 descriptor?? [ 538.500904][ T917] usb 6-1: can't set config #0, error -71 [ 538.502172][ T9678] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 538.519771][ T917] usb 6-1: USB disconnect, device number 3 [ 539.652284][ T9702] overlayfs: missing 'lowerdir' [ 542.619244][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.997'. [ 543.424405][ T9739] loop4: detected capacity change from 0 to 4096 [ 545.161677][ T9740] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 545.627398][ T9746] bridge0: port 3(team0) entered blocking state [ 545.634977][ T9746] bridge0: port 3(team0) entered disabled state [ 545.642707][ T9746] team0: entered allmulticast mode [ 545.648168][ T9746] team_slave_0: entered allmulticast mode [ 545.654250][ T9746] team_slave_1: entered allmulticast mode [ 545.674607][ T9746] team0: entered promiscuous mode [ 545.679993][ T9746] team_slave_0: entered promiscuous mode [ 545.687272][ T9746] team_slave_1: entered promiscuous mode [ 545.698288][ T9746] bridge0: port 3(team0) entered blocking state [ 545.705126][ T9746] bridge0: port 3(team0) entered forwarding state [ 548.175179][ T9748] Bluetooth: hci3: command 0x0406 tx timeout [ 548.196476][ T9769] loop7: detected capacity change from 0 to 16384 [ 548.805460][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'. [ 548.818403][ T9781] loop7: detected capacity change from 16384 to 0 [ 548.848292][ C1] I/O error, dev loop7, sector 384 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 549.113134][ T9769] hfs: unable to load iocharset "io#harset" [ 549.324916][ T9798] loop3: detected capacity change from 0 to 64 [ 549.343112][ T9798] hfs: Unknown parameter '' [ 549.412747][ T9798] loop3: detected capacity change from 0 to 2048 [ 549.504803][ T9800] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 549.535935][ T30] audit: type=1800 audit(1749165890.095:55): pid=9798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1017" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 549.806433][ T9801] overlayfs: missing 'lowerdir' [ 549.823083][ T9804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1017'. [ 549.832620][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 551.005815][ T9810] loop5: detected capacity change from 0 to 64 [ 553.763368][ T9836] loop5: detected capacity change from 0 to 4096 [ 553.888180][ T9842] loop0: detected capacity change from 0 to 64 [ 553.920490][ T9842] hfs: Unknown parameter '' [ 554.011129][ T9840] overlayfs: missing 'lowerdir' [ 554.109516][ T9846] loop5: detected capacity change from 0 to 64 [ 554.123594][ T9846] hfs: Bad value for 'gid' [ 554.149346][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1028'. [ 554.552138][ T9842] loop0: detected capacity change from 0 to 2048 [ 554.627812][ T9849] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 554.684031][ T30] audit: type=1800 audit(1749165895.235:56): pid=9842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1031" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 555.600505][ T9854] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 555.689645][ T9856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1031'. [ 555.705291][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 556.608411][ T9865] tipc: Started in network mode [ 556.636960][ T9865] tipc: Node identity 96a6b2992427, cluster identity 4711 [ 556.648189][ T9865] tipc: Enabled bearer , priority 0 [ 556.964043][ T9867] syzkaller0: entered promiscuous mode [ 556.969871][ T9867] syzkaller0: entered allmulticast mode [ 556.976869][ T9867] tipc: Resetting bearer [ 557.211340][ T9864] tipc: Resetting bearer [ 557.657906][ T9501] tipc: Node number set to 2994844313 [ 558.087040][ T9881] overlayfs: missing 'lowerdir' [ 558.543117][ T9884] loop4: detected capacity change from 0 to 32768 [ 558.550805][ T9884] XFS: ikeep mount option is deprecated. [ 558.634462][ T9884] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 558.874304][ T9884] XFS (loop4): Ending clean mount [ 558.882862][ T9884] XFS (loop4): Quotacheck needed: Please wait. [ 558.917813][ T9907] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1051'. [ 558.930017][ T9907] siw: device registration error -23 [ 558.938349][ T9907] smc: removing ib device syz2 [ 559.736371][ T9907] ------------[ cut here ]------------ [ 559.741875][ T9907] WARNING: CPU: 0 PID: 9907 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x48/0x60 [ 559.752666][ T9907] Modules linked in: [ 559.757064][ T9907] CPU: 0 UID: 0 PID: 9907 Comm: syz.0.1051 Not tainted 6.15.0-next-20250605-syzkaller #0 PREEMPT(full) [ 559.768311][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 559.778422][ T9907] RIP: 0010:rxe_pool_cleanup+0x48/0x60 [ 559.783938][ T9907] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 d0 8f 83 f9 48 83 3b 00 75 0c e8 15 17 20 f9 5b c3 cc cc cc cc cc e8 09 17 20 f9 90 <0f> 0b 90 5b e9 4f 52 c9 02 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 559.803831][ T9907] RSP: 0018:ffffc90002fc7098 EFLAGS: 00010246 [ 559.810048][ T9907] RAX: ffffffff88a04787 RBX: ffff8880562613a0 RCX: 0000000000080000 [ 559.818258][ T9907] RDX: ffffc9000be69000 RSI: 000000000007ffff RDI: 0000000000080000 [ 559.826605][ T9907] RBP: ffff888056261080 R08: ffff888056260783 R09: 1ffff1100ac4c0f0 [ 559.835091][ T9907] R10: dffffc0000000000 R11: ffffffff889e84b0 R12: dffffc0000000000 [ 559.843113][ T9907] R13: dffffc0000000000 R14: ffffffff889e84b0 R15: dffffc0000000000 [ 559.851334][ T9907] FS: 00007f2e747f66c0(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 559.860558][ T9907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 559.867241][ T9907] CR2: 000055555c3d95c8 CR3: 0000000031c6e000 CR4: 00000000003526f0 [ 559.876063][ T9907] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 559.884038][ T9907] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 559.892048][ T9907] Call Trace: [ 559.895358][ T9907] [ 559.898295][ T9907] rxe_dealloc+0x27/0xc0 [ 559.902543][ T9907] ? __pfx_rxe_dealloc+0x10/0x10 [ 559.907539][ T9907] ib_dealloc_device+0x54/0x200 [ 559.912402][ T9907] __ib_unregister_device+0x393/0x3f0 [ 559.918030][ T9907] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 559.923958][ T9907] ib_unregister_device_and_put+0xb8/0xf0 [ 559.929969][ T9907] nldev_dellink+0x2d1/0x320 [ 559.934843][ T9907] ? __pfx_nldev_dellink+0x10/0x10 [ 559.941051][ T9907] ? rcu_is_watching+0x15/0xb0 [ 559.946212][ T9907] ? apparmor_capable+0x137/0x1b0 [ 559.951543][ T9907] ? bpf_lsm_capable+0x9/0x20 [ 559.956706][ T9907] ? security_capable+0x7e/0x2e0 [ 559.961718][ T9907] ? __pfx_nldev_dellink+0x10/0x10 [ 559.967316][ T9907] rdma_nl_rcv+0x6ab/0x980 [ 559.971914][ T9907] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 559.977088][ T9907] ? __lock_acquire+0xab9/0xd20 [ 559.982258][ T9907] ? netlink_deliver_tap+0x2e/0x1b0 [ 559.987812][ T9907] ? netlink_deliver_tap+0x2e/0x1b0 [ 559.993163][ T9907] netlink_unicast+0x75b/0x8d0 [ 559.998248][ T9907] netlink_sendmsg+0x805/0xb30 [ 560.003147][ T9907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.008704][ T9907] ? aa_sock_msg_perm+0xf1/0x1d0 [ 560.013835][ T9907] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 560.020063][ T9907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.025711][ T9907] __sock_sendmsg+0x219/0x270 [ 560.030525][ T9907] ____sys_sendmsg+0x505/0x830 [ 560.035734][ T9907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 560.041664][ T9907] ? import_iovec+0x74/0xa0 [ 560.046592][ T9907] ___sys_sendmsg+0x21f/0x2a0 [ 560.051425][ T9907] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.056994][ T9907] ? __fget_files+0x2a/0x420 [ 560.061751][ T9907] ? __fget_files+0x3a0/0x420 [ 560.066715][ T9907] __x64_sys_sendmsg+0x19b/0x260 [ 560.071826][ T9907] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 560.077592][ T9907] ? rcu_is_watching+0x15/0xb0 [ 560.082604][ T9907] ? do_syscall_64+0xbe/0x3b0 [ 560.087519][ T9907] do_syscall_64+0xfa/0x3b0 [ 560.092114][ T9907] ? lockdep_hardirqs_on+0x9c/0x150 [ 560.098170][ T9907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.104340][ T9907] ? clear_bhb_loop+0x60/0xb0 [ 560.109302][ T9907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.115403][ T9907] RIP: 0033:0x7f2e7698e929 [ 560.119937][ T9907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.141110][ T9907] RSP: 002b:00007f2e747f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.149724][ T9907] RAX: ffffffffffffffda RBX: 00007f2e76bb5fa0 RCX: 00007f2e7698e929 [ 560.157842][ T9907] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 560.165998][ T9907] RBP: 00007f2e76a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 560.174032][ T9907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.182555][ T9907] R13: 0000000000000000 R14: 00007f2e76bb5fa0 R15: 00007ffe6e631308 [ 560.190929][ T9907] [ 560.194070][ T9907] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 560.201519][ T9907] CPU: 0 UID: 0 PID: 9907 Comm: syz.0.1051 Not tainted 6.15.0-next-20250605-syzkaller #0 PREEMPT(full) [ 560.212717][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 560.222778][ T9907] Call Trace: [ 560.226137][ T9907] [ 560.229100][ T9907] dump_stack_lvl+0x99/0x250 [ 560.233824][ T9907] ? __asan_memcpy+0x40/0x70 [ 560.238429][ T9907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 560.243909][ T9907] ? __pfx__printk+0x10/0x10 [ 560.248609][ T9907] panic+0x2db/0x790 [ 560.252691][ T9907] ? __pfx_panic+0x10/0x10 [ 560.257128][ T9907] __warn+0x31b/0x4b0 [ 560.261140][ T9907] ? rxe_pool_cleanup+0x48/0x60 [ 560.266010][ T9907] ? rxe_pool_cleanup+0x48/0x60 [ 560.270950][ T9907] report_bug+0x2be/0x4f0 [ 560.275421][ T9907] ? rxe_pool_cleanup+0x48/0x60 [ 560.280383][ T9907] ? rxe_pool_cleanup+0x48/0x60 [ 560.285345][ T9907] ? rxe_pool_cleanup+0x4a/0x60 [ 560.290227][ T9907] handle_bug+0x84/0x160 [ 560.294487][ T9907] exc_invalid_op+0x1a/0x50 [ 560.299017][ T9907] asm_exc_invalid_op+0x1a/0x20 [ 560.303962][ T9907] RIP: 0010:rxe_pool_cleanup+0x48/0x60 [ 560.310199][ T9907] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 d0 8f 83 f9 48 83 3b 00 75 0c e8 15 17 20 f9 5b c3 cc cc cc cc cc e8 09 17 20 f9 90 <0f> 0b 90 5b e9 4f 52 c9 02 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 560.330270][ T9907] RSP: 0018:ffffc90002fc7098 EFLAGS: 00010246 [ 560.336531][ T9907] RAX: ffffffff88a04787 RBX: ffff8880562613a0 RCX: 0000000000080000 [ 560.344534][ T9907] RDX: ffffc9000be69000 RSI: 000000000007ffff RDI: 0000000000080000 [ 560.352617][ T9907] RBP: ffff888056261080 R08: ffff888056260783 R09: 1ffff1100ac4c0f0 [ 560.360595][ T9907] R10: dffffc0000000000 R11: ffffffff889e84b0 R12: dffffc0000000000 [ 560.369111][ T9907] R13: dffffc0000000000 R14: ffffffff889e84b0 R15: dffffc0000000000 [ 560.377097][ T9907] ? __pfx_rxe_dealloc+0x10/0x10 [ 560.382087][ T9907] ? __pfx_rxe_dealloc+0x10/0x10 [ 560.387041][ T9907] ? rxe_pool_cleanup+0x47/0x60 [ 560.391989][ T9907] ? rxe_pool_cleanup+0x47/0x60 [ 560.396855][ T9907] rxe_dealloc+0x27/0xc0 [ 560.401231][ T9907] ? __pfx_rxe_dealloc+0x10/0x10 [ 560.406289][ T9907] ib_dealloc_device+0x54/0x200 [ 560.411308][ T9907] __ib_unregister_device+0x393/0x3f0 [ 560.416894][ T9907] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 560.422887][ T9907] ib_unregister_device_and_put+0xb8/0xf0 [ 560.428613][ T9907] nldev_dellink+0x2d1/0x320 [ 560.433220][ T9907] ? __pfx_nldev_dellink+0x10/0x10 [ 560.438453][ T9907] ? rcu_is_watching+0x15/0xb0 [ 560.443274][ T9907] ? apparmor_capable+0x137/0x1b0 [ 560.448395][ T9907] ? bpf_lsm_capable+0x9/0x20 [ 560.453070][ T9907] ? security_capable+0x7e/0x2e0 [ 560.458011][ T9907] ? __pfx_nldev_dellink+0x10/0x10 [ 560.463129][ T9907] rdma_nl_rcv+0x6ab/0x980 [ 560.467556][ T9907] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 560.472681][ T9907] ? __lock_acquire+0xab9/0xd20 [ 560.477567][ T9907] ? netlink_deliver_tap+0x2e/0x1b0 [ 560.482862][ T9907] ? netlink_deliver_tap+0x2e/0x1b0 [ 560.488190][ T9907] netlink_unicast+0x75b/0x8d0 [ 560.492971][ T9907] netlink_sendmsg+0x805/0xb30 [ 560.497814][ T9907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.503313][ T9907] ? aa_sock_msg_perm+0xf1/0x1d0 [ 560.508268][ T9907] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 560.513557][ T9907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.518847][ T9907] __sock_sendmsg+0x219/0x270 [ 560.523621][ T9907] ____sys_sendmsg+0x505/0x830 [ 560.528392][ T9907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 560.533684][ T9907] ? import_iovec+0x74/0xa0 [ 560.538295][ T9907] ___sys_sendmsg+0x21f/0x2a0 [ 560.543061][ T9907] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.548339][ T9907] ? __fget_files+0x2a/0x420 [ 560.553056][ T9907] ? __fget_files+0x3a0/0x420 [ 560.557740][ T9907] __x64_sys_sendmsg+0x19b/0x260 [ 560.562772][ T9907] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 560.568245][ T9907] ? rcu_is_watching+0x15/0xb0 [ 560.573407][ T9907] ? do_syscall_64+0xbe/0x3b0 [ 560.578272][ T9907] do_syscall_64+0xfa/0x3b0 [ 560.582784][ T9907] ? lockdep_hardirqs_on+0x9c/0x150 [ 560.587981][ T9907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.594064][ T9907] ? clear_bhb_loop+0x60/0xb0 [ 560.598761][ T9907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.604753][ T9907] RIP: 0033:0x7f2e7698e929 [ 560.609281][ T9907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.629258][ T9907] RSP: 002b:00007f2e747f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.637826][ T9907] RAX: ffffffffffffffda RBX: 00007f2e76bb5fa0 RCX: 00007f2e7698e929 [ 560.645894][ T9907] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 560.654050][ T9907] RBP: 00007f2e76a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 560.662026][ T9907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.670344][ T9907] R13: 0000000000000000 R14: 00007f2e76bb5fa0 R15: 00007ffe6e631308 [ 560.678375][ T9907] [ 560.681837][ T9907] Kernel Offset: disabled [ 560.686220][ T9907] Rebooting in 86400 seconds..