last executing test programs: 3m43.938466737s ago: executing program 1 (id=2): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'ip6tnl0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m43.716012482s ago: executing program 1 (id=9): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x20, 0xf, 0x0, 0xffff7038}, {0x6, 0x0, 0x83, 0xfffffffd}, {0x7, 0x1, 0x0, 0x4}]}, 0x10) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 3m41.442097484s ago: executing program 1 (id=25): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000140)=[{r1, 0xa180}, {r2, 0x110}], 0x2, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) 3m41.007978344s ago: executing program 1 (id=30): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0xf}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x87000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 3m39.798551402s ago: executing program 1 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000200850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x8040) 3m38.881764303s ago: executing program 1 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file7\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) chdir(&(0x7f0000000300)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 3m38.13184796s ago: executing program 32 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file7\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) chdir(&(0x7f0000000300)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 3m11.613685678s ago: executing program 2 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x6a040000) 3m10.838843926s ago: executing program 2 (id=178): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100002b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x3}}}}}}, 0x0) 3m10.512011433s ago: executing program 2 (id=181): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c5", 0x41}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xfffe}, &(0x7f0000000040)=0x20) 3m10.304546578s ago: executing program 2 (id=182): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5531, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x2000000, 0x2000003}) 3m8.168154137s ago: executing program 2 (id=197): setuid(0xee01) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) socket$unix(0x1, 0x1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xd) 3m6.168093733s ago: executing program 2 (id=207): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18f983, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2204806, &(0x7f0000000300)={[{@hide}, {@iocharset={'iocharset', 0x3d, 'cp860'}, 0x0}, {@mode={'mode', 0x3d, 0x1}}, {@nojoliet}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x800000000000056}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@unhide}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$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") 3m5.732452322s ago: executing program 33 (id=207): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18f983, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2204806, &(0x7f0000000300)={[{@hide}, {@iocharset={'iocharset', 0x3d, 'cp860'}, 0x0}, {@mode={'mode', 0x3d, 0x1}}, {@nojoliet}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x800000000000056}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@unhide}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$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") 2m11.76819116s ago: executing program 6 (id=545): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x40000000, {0x0, 0x0, 0x0, r3, {}, {0x6, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) 2m11.202147292s ago: executing program 6 (id=547): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 2m10.89654101s ago: executing program 6 (id=551): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 2m10.480918549s ago: executing program 6 (id=556): set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x207d) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x800) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x52588107, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008240)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x90, 0x0, 0x3, {0x3, 0x0, 0x7, 0x1, 0x0, 0x8, {0xfffffffffffffffb, 0x2, 0x8, 0x8000000000007, 0xc28d, 0x8000000000000004, 0x0, 0x6, 0x0, 0xa000, 0x48aa, r2, r3, 0x4c5, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m9.362865785s ago: executing program 6 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m9.039250233s ago: executing program 6 (id=573): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) 1m53.833500181s ago: executing program 34 (id=573): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) 4.77934316s ago: executing program 3 (id=1553): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) writev(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 4.708666002s ago: executing program 3 (id=1555): r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000001500), 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 4.199911914s ago: executing program 5 (id=1559): setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount$nfs4(&(0x7f0000000040)='/', 0x0, 0x0, 0x197841, 0x0) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082, 0x0, 0x0}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 3.857972841s ago: executing program 5 (id=1560): unshare(0x44040000) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='.\x00', 0x440, &(0x7f0000001880), 0x1, 0x9715, &(0x7f0000012ec0)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) close_range(r0, 0xffffffffffffffff, 0x0) 3.674270935s ago: executing program 7 (id=1563): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_clone(0x4800080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) tkill(r0, 0x36) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) 3.526090239s ago: executing program 3 (id=1564): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r1 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) unshare(0x24020400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) 3.176659417s ago: executing program 3 (id=1565): syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 3.176526517s ago: executing program 4 (id=1566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000050) 3.175863557s ago: executing program 0 (id=1575): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 3.03747901s ago: executing program 0 (id=1567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.013189001s ago: executing program 4 (id=1568): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x2}]}, @enum, @func={0x2, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x48, 0x0, 0x3}, 0x28) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/70, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0x3000, 0x1000, &(0x7f0000000400)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040)) 2.809378995s ago: executing program 4 (id=1569): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.806875376s ago: executing program 0 (id=1570): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) 2.652081529s ago: executing program 7 (id=1571): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0xa) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) shutdown(r1, 0x1) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x30000009}) 2.396013565s ago: executing program 5 (id=1572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x3, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x5) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r1, 0x305, 0x70bd26, 0x0, {0x7}}, 0x14}}, 0x24044080) 2.301854947s ago: executing program 7 (id=1573): r0 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001400)=""/4067, 0xfe3}], 0x37) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x844) ftruncate(r1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_open_procfs(0x0, 0x0) 2.086931392s ago: executing program 4 (id=1574): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x4, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.638691862s ago: executing program 3 (id=1576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) io_getevents(r1, 0x3, 0x3, &(0x7f0000000080)=[{}, {}, {}], 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) shutdown(r0, 0x0) 1.260081541s ago: executing program 5 (id=1577): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0xffff) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f0000000000)=r1, 0x4) 1.228638952s ago: executing program 4 (id=1578): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1.094313154s ago: executing program 0 (id=1579): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) 1.038910886s ago: executing program 5 (id=1580): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) splice(r2, 0x0, r5, 0x0, 0x6f, 0x0) write$binfmt_elf64(r1, &(0x7f0000001040)=ANY=[], 0xfffffe3e) 972.582857ms ago: executing program 4 (id=1581): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in=@rand_addr=0x64010102, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) 881.1702ms ago: executing program 7 (id=1582): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00000014"], 0x28}}, 0x0) 788.156202ms ago: executing program 0 (id=1583): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 691.224384ms ago: executing program 7 (id=1584): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 596.366536ms ago: executing program 0 (id=1585): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000018b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = io_uring_setup(0x7e81, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/4104, 0x440000}], 0x1f77) 340.056302ms ago: executing program 3 (id=1586): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) fchdir(r1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 337.982422ms ago: executing program 7 (id=1587): socket$netlink(0x10, 0x3, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026008f0900000800b70000000000000000"], 0x3c}}, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, 0x0, 0x0, r4) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 0s ago: executing program 5 (id=1588): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0xb20ca3, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x14000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [], 0x6b}}) chdir(&(0x7f0000000140)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x6000, 0x0) kernel console output (not intermixed with test programs): 84428][ T4802] Use struct sctp_sack_info instead [ 106.643599][ T4803] sctp: [Deprecated]: syz.0.117 (pid 4803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.643599][ T4803] Use struct sctp_sack_info instead [ 107.622340][ T4279] Bluetooth: hci0: command 0x0411 tx timeout [ 107.688051][ T4824] loop4: detected capacity change from 0 to 512 [ 107.754101][ T4824] EXT4-fs: Ignoring removed orlov option [ 107.759813][ T4824] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.401550][ T4824] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 108.471928][ T4829] validate_nla: 2 callbacks suppressed [ 108.471944][ T4829] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 108.479183][ T4812] loop0: detected capacity change from 0 to 32768 [ 108.531225][ T4823] device vlan2 entered promiscuous mode [ 108.581742][ T4823] device syz_tun entered promiscuous mode [ 108.670719][ T4812] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.119 (4812) [ 108.773787][ T4831] netlink: 'syz.2.122': attribute type 10 has an invalid length. [ 108.799631][ T4831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.122'. [ 108.831865][ T4831] device dummy0 entered promiscuous mode [ 108.870553][ T4812] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 108.906138][ T4812] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 108.951560][ T4812] BTRFS info (device loop0): using free space tree [ 109.340560][ T4812] BTRFS info (device loop0): enabling ssd optimizations [ 110.191011][ T4280] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 110.476762][ T4471] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop0 scanned by udevd (4471) [ 110.911178][ T4904] loop2: detected capacity change from 0 to 7 [ 110.952853][ T4904] Dev loop2: unable to read RDB block 7 [ 110.990178][ T4904] loop2: unable to read partition table [ 111.006453][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.032831][ T4904] loop2: partition table beyond EOD, truncated [ 111.050520][ T4904] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 111.216955][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 111.226879][ T4866] loop2: detected capacity change from 0 to 40427 [ 111.235300][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.243401][ T4866] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 111.266404][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.271409][ T4866] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 111.317986][ T22] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 111.396850][ T22] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.433830][ T4866] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.480303][ T22] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 111.543752][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.580781][ T22] usb 1-1: Product: syz [ 111.602587][ T22] usb 1-1: Manufacturer: syz [ 111.626047][ T22] usb 1-1: SerialNumber: syz [ 111.672114][ T4866] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 111.679470][ T4866] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 111.789274][ T4925] netlink: 'syz.3.138': attribute type 4 has an invalid length. [ 111.866502][ T4928] loop4: detected capacity change from 0 to 256 [ 111.884281][ T22] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 111.928600][ T4929] netlink: 'syz.3.138': attribute type 4 has an invalid length. [ 111.939755][ T22] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 111.975518][ T4928] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 112.295912][ T22] usb 1-1: 2:1 : bogus bTerminalLink 6 [ 112.549422][ T22] usb 1-1: USB disconnect, device number 2 [ 112.847944][ T4938] udevd[4938]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.286234][ T4954] input: syz0 as /devices/virtual/input/input5 [ 116.513060][ T5010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.161'. [ 117.054493][ T4986] loop0: detected capacity change from 0 to 40427 [ 117.110804][ T4986] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 117.129352][ T4986] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 117.156978][ T4986] F2FS-fs (loop0): invalid crc value [ 117.238094][ T4986] F2FS-fs (loop0): Found nat_bits in checkpoint [ 117.471656][ T4986] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 117.496097][ T4986] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 117.950098][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 117.950117][ T26] audit: type=1804 audit(1784686895.903:48): pid=4986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.155" name="/newroot/35/file0/bus" dev="loop0" ino=12 res=1 errno=0 [ 118.079514][ T5046] Set syz1 is full, maxelem 14 reached [ 118.460171][ T5068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.177'. [ 118.508800][ T5076] netlink: 'syz.4.179': attribute type 1 has an invalid length. [ 118.542063][ T5076] netlink: 'syz.4.179': attribute type 22 has an invalid length. [ 118.580833][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.591118][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.608604][ T5078] loop4: detected capacity change from 0 to 512 [ 118.697952][ T5078] EXT4-fs: quotafile must be on filesystem root [ 119.917913][ T5103] loop5: detected capacity change from 0 to 8192 [ 119.961580][ T5103] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 119.975440][ T5103] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 119.985285][ T5103] REISERFS (device loop5): using ordered data mode [ 119.992197][ T5103] reiserfs: using flush barriers [ 120.009511][ T5103] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.032827][ T5103] REISERFS (device loop5): checking transaction log (loop5) [ 120.063220][ T5088] loop2: detected capacity change from 0 to 40427 [ 120.096749][ T5088] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 120.117514][ T5088] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 120.128419][ T5103] REISERFS (device loop5): Using r5 hash to sort names [ 120.141930][ T5088] F2FS-fs (loop2): invalid crc value [ 120.169804][ T5088] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 120.204206][ T5103] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 120.445123][ T5088] F2FS-fs (loop2): Start checkpoint disabled! [ 120.497335][ T5088] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 120.521280][ T5088] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 120.833075][ T5088] loop2: detected capacity change from 40427 to 0 [ 121.003445][ T4284] F2FS-fs (loop2): Inconsistent error blkaddr:5633, sit bitmap:0 [ 121.029511][ T4284] CPU: 1 PID: 4284 Comm: syz-executor Not tainted syzkaller #0 [ 121.037185][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.047282][ T4284] Call Trace: [ 121.050061][ T5130] bridge0: port 3(syz_tun) entered blocking state [ 121.050673][ T4284] [ 121.050701][ T4284] dump_stack_lvl+0x188/0x24e [ 121.057936][ T5130] bridge0: port 3(syz_tun) entered disabled state [ 121.060658][ T4284] ? show_regs_print_info+0x12/0x12 [ 121.060699][ T4284] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 121.068801][ T5130] device syz_tun entered promiscuous mode [ 121.072259][ T4284] ? kernel_text_address+0x9c/0xd0 [ 121.072303][ T4284] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 121.079881][ T5130] bridge0: port 3(syz_tun) entered blocking state [ 121.083523][ T4284] f2fs_map_blocks+0xba8/0x36a0 [ 121.083591][ T4284] ? f2fs_get_block+0x140/0x140 [ 121.083619][ T4284] ? xa_load+0x60/0x2e0 [ 121.083640][ T4284] ? xa_load+0x2b3/0x2e0 [ 121.090069][ T5130] bridge0: port 3(syz_tun) entered forwarding state [ 121.095007][ T4284] ? xa_load+0x60/0x2e0 [ 121.095047][ T4284] ? page_index+0xe6/0x490 [ 121.095073][ T4284] f2fs_mpage_readpages+0xa40/0x2830 [ 121.146101][ T4284] ? dquot_release_reservation_block+0xa0/0xa0 [ 121.152573][ T4284] ? __mod_lruvec_page_state+0xa1/0x410 [ 121.158279][ T4284] ? f2fs_readahead+0x180/0x380 [ 121.163672][ T4284] ? blk_start_plug+0x94/0x110 [ 121.168448][ T4284] read_pages+0x187/0x860 [ 121.173052][ T4284] ? __lock_acquire+0x7c40/0x7c40 [ 121.178451][ T4284] ? page_cache_ra_unbounded+0x750/0x750 [ 121.184432][ T4284] ? folio_add_lru+0x319/0xcf0 [ 121.189556][ T4284] ? folio_add_lru+0x508/0xcf0 [ 121.194509][ T4284] ? filemap_add_folio+0x186/0x3d0 [ 121.199643][ T4284] page_cache_ra_unbounded+0x667/0x750 [ 121.205220][ T4284] f2fs_readdir+0x48b/0xa00 [ 121.209938][ T4284] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 121.215527][ T4284] ? mutex_lock_nested+0x10/0x10 [ 121.220481][ T4284] ? end_current_label_crit_section+0x14b/0x170 [ 121.226831][ T4284] ? iterate_dir+0x10d/0x550 [ 121.231606][ T4284] ? down_read_killable+0x1cc/0x340 [ 121.236897][ T4284] ? fsnotify_perm+0x248/0x550 [ 121.241936][ T4284] iterate_dir+0x213/0x550 [ 121.246487][ T4284] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 121.251882][ T4284] __se_sys_getdents64+0xf2/0x270 [ 121.256925][ T4284] ? __x64_sys_getdents64+0x80/0x80 [ 121.262159][ T4284] ? filldir+0x6f0/0x6f0 [ 121.266427][ T4284] ? lockdep_hardirqs_on+0x94/0x140 [ 121.271661][ T4284] do_syscall_64+0x4c/0xa0 [ 121.276183][ T4284] ? clear_bhb_loop+0x60/0xb0 [ 121.280971][ T4284] ? clear_bhb_loop+0x60/0xb0 [ 121.285923][ T4284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.291915][ T4284] RIP: 0033:0x7f5def5c6833 [ 121.296429][ T4284] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 121.316854][ T4284] RSP: 002b:00007fff0af02918 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 121.325284][ T4284] RAX: ffffffffffffffda RBX: 000055558f0f0a40 RCX: 00007f5def5c6833 [ 121.333278][ T4284] RDX: 0000000000008000 RSI: 000055558f0f0a70 RDI: 0000000000000005 [ 121.341260][ T4284] RBP: 000055558f0f0a70 R08: 00007f5def7f0e20 R09: 0000000000000001 [ 121.349612][ T4284] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558f0f0a44 [ 121.357775][ T4284] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007fff0af04bc0 [ 121.365774][ T4284] [ 121.716957][ T4284] F2FS-fs (loop2): Inconsistent error blkaddr:5633, sit bitmap:0 [ 121.727867][ T4284] CPU: 1 PID: 4284 Comm: syz-executor Not tainted syzkaller #0 [ 121.735489][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.745884][ T4284] Call Trace: [ 121.749205][ T4284] [ 121.752179][ T4284] dump_stack_lvl+0x188/0x24e [ 121.756905][ T4284] ? show_regs_print_info+0x12/0x12 [ 121.762180][ T4284] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 121.768153][ T4284] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 121.773843][ T4284] f2fs_get_read_data_page+0x40f/0x640 [ 121.779522][ T4284] ? f2fs_reserve_block+0x240/0x240 [ 121.784783][ T4284] f2fs_find_data_page+0x9b/0x3b0 [ 121.789850][ T4284] f2fs_readdir+0x4ba/0xa00 [ 121.794439][ T4284] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 121.799704][ T4284] ? mutex_lock_nested+0x10/0x10 [ 121.804960][ T4284] ? end_current_label_crit_section+0x14b/0x170 [ 121.811676][ T4284] ? iterate_dir+0x10d/0x550 [ 121.816325][ T4284] ? down_read_killable+0x1cc/0x340 [ 121.821646][ T4284] ? fsnotify_perm+0x248/0x550 [ 121.826547][ T4284] iterate_dir+0x213/0x550 [ 121.831014][ T4284] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 121.836270][ T4284] __se_sys_getdents64+0xf2/0x270 [ 121.841360][ T4284] ? __x64_sys_getdents64+0x80/0x80 [ 121.846623][ T4284] ? filldir+0x6f0/0x6f0 [ 121.850942][ T4284] ? lockdep_hardirqs_on+0x94/0x140 [ 121.856442][ T4284] do_syscall_64+0x4c/0xa0 [ 121.861040][ T4284] ? clear_bhb_loop+0x60/0xb0 [ 121.865866][ T4284] ? clear_bhb_loop+0x60/0xb0 [ 121.871208][ T4284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.877413][ T4284] RIP: 0033:0x7f5def5c6833 [ 121.882220][ T4284] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 121.902138][ T4284] RSP: 002b:00007fff0af02918 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 121.910631][ T4284] RAX: ffffffffffffffda RBX: 000055558f0f0a40 RCX: 00007f5def5c6833 [ 121.918660][ T4284] RDX: 0000000000008000 RSI: 000055558f0f0a70 RDI: 0000000000000005 [ 121.926767][ T4284] RBP: 000055558f0f0a70 R08: 00007f5def7f0e20 R09: 0000000000000001 [ 121.934874][ T4284] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558f0f0a44 [ 121.942893][ T4284] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007fff0af04bc0 [ 121.950916][ T4284] [ 122.307379][ T5149] loop0: detected capacity change from 0 to 2048 [ 122.399269][ T5149] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 122.451193][ T5149] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 122.503360][ T5149] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.892991][ T4345] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.118882][ T4345] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.273719][ T4345] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.302197][ T5165] netlink: 'syz.3.209': attribute type 2 has an invalid length. [ 123.310228][ T5165] netlink: 'syz.3.209': attribute type 9 has an invalid length. [ 123.318585][ T5165] netlink: 'syz.3.209': attribute type 10 has an invalid length. [ 123.326714][ T5165] netlink: 'syz.3.209': attribute type 11 has an invalid length. [ 123.341665][ T5165] netlink: 16 bytes leftover after parsing attributes in process `syz.3.209'. [ 123.556365][ T4345] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.609573][ T5172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 123.633931][ T5172] device syz_tun left promiscuous mode [ 123.650137][ T5172] bridge0: port 3(syz_tun) entered disabled state [ 123.686572][ T5172] device bridge_slave_1 left promiscuous mode [ 123.714045][ T5172] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.763573][ T5172] device bridge_slave_0 left promiscuous mode [ 123.790575][ T5172] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.005753][ T5177] netlink: 'syz.3.217': attribute type 1 has an invalid length. [ 124.111850][ T5177] device bond1 entered promiscuous mode [ 124.148017][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.168085][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.179652][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.190117][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.198245][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 124.201941][ T5177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.214233][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.256677][ T5192] loop5: detected capacity change from 0 to 512 [ 124.267833][ T5183] device macvlan2 entered promiscuous mode [ 124.287529][ T5192] EXT4-fs: quotafile must be on filesystem root [ 124.297250][ T5183] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 124.448776][ T5191] netlink: 'syz.5.218': attribute type 1 has an invalid length. [ 124.467198][ T5191] netlink: 'syz.5.218': attribute type 22 has an invalid length. [ 124.493946][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.501670][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.544500][ T5179] loop4: detected capacity change from 0 to 40427 [ 124.626124][ T5179] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 124.667292][ T5179] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 124.703326][ T5179] F2FS-fs (loop4): invalid crc value [ 124.750379][ T5179] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.842148][ T5202] netlink: 'syz.0.220': attribute type 1 has an invalid length. [ 124.973042][ T5202] device bond1 entered promiscuous mode [ 124.980279][ T5202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.035577][ T5179] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 125.043059][ T5179] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 125.149696][ T26] audit: type=1804 audit(1784686903.103:49): pid=5179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.215" name="/newroot/53/file0/bus" dev="loop4" ino=12 res=1 errno=0 [ 125.309922][ T5208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.326735][ T5208] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 125.356544][ T5208] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 125.388309][ T5208] bond1: (slave xfrm1): making interface the new active one [ 125.412073][ T5208] device xfrm1 entered promiscuous mode [ 125.480094][ T5208] device xfrm1 left promiscuous mode [ 126.251743][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 126.346767][ T5186] chnl_net:caif_netlink_parms(): no params data found [ 127.075671][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.104994][ T5186] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.142825][ T5186] device bridge_slave_0 entered promiscuous mode [ 127.294158][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.317321][ T5186] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.335517][ T5186] device bridge_slave_1 entered promiscuous mode [ 127.479420][ T5186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.566848][ T4279] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 127.776372][ T5186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.942371][ T5186] team0: Port device team_slave_0 added [ 128.203992][ T5186] team0: Port device team_slave_1 added [ 128.235081][ T5276] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.247'. [ 128.331547][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 128.355799][ T4345] device hsr_slave_0 left promiscuous mode [ 128.406299][ T4345] device hsr_slave_1 left promiscuous mode [ 128.435505][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.465847][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.496101][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.528044][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.592405][ T4345] device bridge_slave_1 left promiscuous mode [ 128.604048][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.640857][ T4345] device bridge_slave_0 left promiscuous mode [ 128.661030][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.764665][ T4345] device veth1_macvtap left promiscuous mode [ 128.787020][ T4345] device veth0_macvtap left promiscuous mode [ 128.804108][ T4345] device veth1_vlan left promiscuous mode [ 128.810039][ T4345] device veth0_vlan left promiscuous mode [ 129.219632][ T4325] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 129.413493][ T4325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.453302][ T4325] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.491515][ T4325] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 129.511006][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.537744][ T4325] usb 4-1: config 0 descriptor?? [ 129.559874][ T4325] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 130.181961][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 130.248027][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 130.322279][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.386896][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.421590][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 130.969612][ T4345] bond0 (unregistering): Released all slaves [ 131.082775][ T5186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.093499][ T5186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.122337][ T5186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.246340][ T5186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.266669][ T5186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.307279][ T5186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.570012][ T5186] device hsr_slave_0 entered promiscuous mode [ 131.601902][ T5186] device hsr_slave_1 entered promiscuous mode [ 131.625183][ T5186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.664888][ T5186] Cannot create hsr debugfs directory [ 131.800602][ T5327] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 132.014630][ T4342] usb 4-1: USB disconnect, device number 2 [ 132.382945][ T5186] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 132.465025][ T26] audit: type=1326 audit(1784686910.423:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5343 comm="syz.4.256" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa032b9de99 code=0x0 [ 132.489109][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.495662][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 132.526714][ T5186] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 132.538482][ T5348] loop4: detected capacity change from 0 to 256 [ 132.976930][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.985938][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.307803][ T5186] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 133.532239][ T5186] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 133.915584][ T5186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.966901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.985393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.020113][ T5186] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.053443][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.112464][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.148026][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.155517][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.223249][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.232587][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.256487][ T5373] loop5: detected capacity change from 0 to 256 [ 134.327671][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.373397][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.380610][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.414054][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.459772][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.489846][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.537972][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.547706][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.564677][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.596254][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.610380][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.628596][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.639680][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.657205][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.670889][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.826666][ T5389] loop0: detected capacity change from 0 to 512 [ 134.931304][ T5389] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 135.054107][ T5389] EXT4-fs error (device loop0): ext4_validate_block_bitmap:420: comm syz.0.270: bg 0: bad block bitmap checksum [ 135.056362][ T5361] loop3: detected capacity change from 0 to 40427 [ 135.143227][ T5361] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 135.179359][ T5389] Quota error (device loop0): write_blk: dquota write failed [ 135.227760][ T5389] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 135.281509][ T5389] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.270: Failed to acquire dquot type 1 [ 135.481103][ T5389] EXT4-fs (loop0): unmounting filesystem. [ 135.597062][ T5402] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 135.653261][ T5406] loop4: detected capacity change from 0 to 512 [ 135.742702][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.760602][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.827614][ T5406] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.844967][ T5186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.861918][ T5406] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.394904][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 137.241290][ T5449] loop5: detected capacity change from 0 to 256 [ 137.329553][ T5449] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 137.455990][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.492313][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.586712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.611101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.620680][ T5449] loop5: detected capacity change from 256 to 1 [ 137.671426][ T5186] device veth0_vlan entered promiscuous mode [ 137.677934][ T5455] syz.5.280: attempt to access beyond end of device [ 137.677934][ T5455] loop5: rw=2049, sector=136, nr_sectors = 1 limit=1 [ 137.703278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.730489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.765263][ T5186] device veth1_vlan entered promiscuous mode [ 137.782185][ T5455] Buffer I/O error on dev loop5, logical block 136, lost sync page write [ 137.886680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.945214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.982531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.025730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.074579][ T5186] device veth0_macvtap entered promiscuous mode [ 138.114118][ T5186] device veth1_macvtap entered promiscuous mode [ 138.200590][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.249848][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.285893][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.324821][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.371618][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.438401][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.501311][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.553623][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.585256][ T5186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.637452][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.751437][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.771491][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.791572][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.810053][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.850349][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.891245][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.922565][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.958192][ T5186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.020138][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.040452][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.068708][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.151490][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.267482][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.373478][ T5513] tmpfs: Unknown parameter 'quota' [ 139.460440][ T5476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.757200][ T5186] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.767190][ T5186] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.779165][ T5186] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.789318][ T5186] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.105013][ T5476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.127238][ T5476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.209254][ T5474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.235242][ T5476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.278814][ T5476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.316525][ T5474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.616044][ T5533] use of bytesused == 0 is deprecated and will be removed in the future, [ 140.675914][ T5533] use the actual size instead. [ 141.440586][ T5553] loop3: detected capacity change from 0 to 2048 [ 141.610817][ T5553] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 141.842986][ T5553] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 141.971506][ T5553] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 142.034427][ T4337] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 142.038638][ T5578] netlink: 24 bytes leftover after parsing attributes in process `syz.6.308'. [ 142.089051][ T4337] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 142.123580][ T5573] lo speed is unknown, defaulting to 1000 [ 142.138565][ T5573] lo speed is unknown, defaulting to 1000 [ 142.144962][ T4337] EXT4-fs (loop3): This should not happen!! Data will be lost [ 142.144962][ T4337] [ 142.181246][ T4337] EXT4-fs (loop3): Total free blocks count 0 [ 142.187356][ T5573] lo speed is unknown, defaulting to 1000 [ 142.219170][ T5573] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 142.222244][ T4337] EXT4-fs (loop3): Free/Dirty block details [ 142.263416][ T4337] EXT4-fs (loop3): free_blocks=4096 [ 142.297102][ T4337] EXT4-fs (loop3): dirty_blocks=16 [ 142.310259][ T5573] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 142.320740][ T4337] EXT4-fs (loop3): Block reservation details [ 142.340767][ T4337] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 142.451140][ T5573] lo speed is unknown, defaulting to 1000 [ 142.485671][ T5573] lo speed is unknown, defaulting to 1000 [ 142.519449][ T5573] lo speed is unknown, defaulting to 1000 [ 142.543182][ T5573] lo speed is unknown, defaulting to 1000 [ 142.579468][ T5573] lo speed is unknown, defaulting to 1000 [ 143.255169][ T5601] loop5: detected capacity change from 0 to 16 [ 143.327618][ T5601] erofs: (device loop5): mounted with root inode @ nid 36. [ 144.279870][ T4279] Bluetooth: Frame is too long (len 14, expected len 4) [ 144.538124][ T5634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.323'. [ 144.806611][ T5641] fuse: Bad value for 'fd' [ 145.775270][ T4279] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 145.784100][ T4279] Bluetooth: hci4: Injecting HCI hardware error event [ 145.795456][ T4285] Bluetooth: hci4: hardware error 0x00 [ 146.447978][ T5671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.331'. [ 147.934632][ T4285] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 148.050243][ T5710] loop4: detected capacity change from 0 to 512 [ 148.075669][ T5710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.139931][ T5710] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.617149][ T5710] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #4: block 44: comm syz.4.344: lblock 2 mapped to illegal pblock 44 (length 1) [ 148.786000][ T5736] siw: device registration error -23 [ 148.788338][ T5710] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 148.813528][ T5710] EXT4-fs error (device loop4): ext4_write_dquot:6821: comm syz.4.344: Failed to commit dquot type 1 [ 148.925102][ T5710] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Out of memory [ 148.970725][ T5710] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #18: comm syz.4.344: mark_inode_dirty error [ 149.040313][ T5710] EXT4-fs error (device loop4): ext4_get_group_desc:277: comm syz.4.344: block_group >= groups_count - block_group = 4294750097, groups_count = 1 [ 149.145528][ T5710] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #4: block 44: comm syz.4.344: lblock 2 mapped to illegal pblock 44 (length 1) [ 149.221862][ T5710] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 149.241903][ T5710] EXT4-fs error (device loop4): ext4_write_dquot:6821: comm syz.4.344: Failed to commit dquot type 1 [ 149.259665][ T5739] netlink: 168 bytes leftover after parsing attributes in process `syz.0.352'. [ 149.291433][ T5710] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Out of memory [ 149.359737][ T5710] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #18: comm syz.4.344: mark_inode_dirty error [ 149.393470][ T5710] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Out of memory [ 149.649788][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 149.881514][ T4373] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 150.096740][ T4373] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.120779][ T4373] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.145454][ T4373] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.176432][ T4373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.193534][ T26] audit: type=1326 audit(1784686928.153:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.3.357" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f357c79de99 code=0x0 [ 150.224783][ T4373] usb 1-1: Product: syz [ 150.235803][ T4373] usb 1-1: Manufacturer: syz [ 150.260635][ T4373] usb 1-1: SerialNumber: syz [ 150.379168][ T5771] netlink: 60 bytes leftover after parsing attributes in process `syz.5.359'. [ 150.431236][ T5771] unsupported nlmsg_type 40 [ 150.497233][ T4373] usb 1-1: 0:2 : does not exist [ 150.504762][ T4373] usb 1-1: unit 9 not found! [ 150.534669][ T4373] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 150.583742][ T4373] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4) [ 150.618787][ T4373] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 150.709806][ T4373] usb 1-1: USB disconnect, device number 3 [ 151.017116][ T5789] loop6: detected capacity change from 0 to 256 [ 151.368366][ T5794] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd [ 152.685607][ T26] audit: type=1326 audit(1784686930.643:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.4.375" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa032b9de99 code=0x0 [ 153.421642][ T4260] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 153.621666][ T4260] usb 7-1: Using ep0 maxpacket: 8 [ 153.629126][ T4260] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 153.671505][ T4260] usb 7-1: config 179 has no interface number 0 [ 153.678241][ T4260] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 153.748147][ T4260] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 153.807368][ T4260] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.852823][ T4260] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 153.882610][ T4260] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 153.915446][ T4260] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 153.948087][ T4260] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.008799][ T5847] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 154.885119][ T5816] Set syz1 is full, maxelem 65536 reached [ 156.247429][ T4376] usb 7-1: USB disconnect, device number 2 [ 156.247481][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 156.261898][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 156.471246][ T5913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.398'. [ 156.522003][ T5913] netlink: 48 bytes leftover after parsing attributes in process `syz.0.398'. [ 156.592189][ T5916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.398'. [ 156.632332][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 156.668981][ T5913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.398'. [ 156.869484][ T5918] syz.6.399 sent an empty control message without MSG_MORE. [ 157.411881][ T5928] loop6: detected capacity change from 0 to 4096 [ 157.527525][ T5931] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 157.541458][ T5933] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 157.645667][ T5935] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.911189][ T5939] syz.3.405 uses obsolete (PF_INET,SOCK_PACKET) [ 158.878448][ T5964] loop4: detected capacity change from 0 to 512 [ 158.886508][ T5964] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.940754][ T26] audit: type=1800 audit(1784686936.893:53): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.411" name="file1" dev="loop4" ino=1048611 res=0 errno=0 [ 158.953049][ T5964] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 158.973485][ T5964] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 158.980904][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.981968][ T5964] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 159.085840][ T5965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.249890][ T5968] overlayfs: failed to clone upperpath [ 159.296030][ T5965] device bridge_slave_0 left promiscuous mode [ 159.402827][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.508202][ T5965] device bridge_slave_1 left promiscuous mode [ 159.581981][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.695438][ T5965] bond0: (slave bond_slave_0): Releasing backup interface [ 159.820717][ T5965] bond0: (slave bond_slave_1): Releasing backup interface [ 160.128297][ T5965] team0: Port device team_slave_0 removed [ 160.210913][ T5965] team0: Port device team_slave_1 removed [ 160.238666][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.243761][ T5986] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 160.285881][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.309776][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.340202][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.100702][ T6052] kvm [6051]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x9203 [ 163.183322][ T6052] kvm [6051]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xbefe [ 163.202036][ T6052] kvm [6051]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x822 [ 164.350292][ T6094] loop0: detected capacity change from 0 to 512 [ 164.476602][ T6094] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 164.513409][ T6094] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.590052][ T6094] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.453: corrupted inode contents [ 164.679929][ T6094] EXT4-fs (loop0): Remounting filesystem read-only [ 164.713688][ T6094] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #2: comm syz.0.453: mark_inode_dirty error [ 164.740354][ T6105] capability: warning: `syz.4.456' uses deprecated v2 capabilities in a way that may be insecure [ 164.800758][ T6094] EXT4-fs (loop0): Remounting filesystem read-only [ 164.833959][ T6094] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.453: corrupted inode contents [ 164.874664][ T6094] EXT4-fs (loop0): Remounting filesystem read-only [ 164.968654][ T6106] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.453: corrupted inode contents [ 165.072774][ T6106] EXT4-fs (loop0): Remounting filesystem read-only [ 165.079382][ T6106] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #2: comm syz.0.453: mark_inode_dirty error [ 165.148523][ T6106] EXT4-fs (loop0): Remounting filesystem read-only [ 165.169055][ T6106] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.453: corrupted inode contents [ 165.232923][ T6106] EXT4-fs (loop0): Remounting filesystem read-only [ 165.258273][ T6106] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.453: mark_inode_dirty error [ 165.310645][ T6106] EXT4-fs (loop0): Remounting filesystem read-only [ 165.334863][ T6106] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.453: corrupted inode contents [ 165.376676][ T6106] EXT4-fs (loop0): Remounting filesystem read-only [ 165.413630][ T6106] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #2: comm syz.0.453: mark_inode_dirty error [ 165.464087][ T6106] EXT4-fs (loop0): Remounting filesystem read-only [ 165.618371][ T6094] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.453: corrupted inode contents [ 167.201475][ T4260] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 167.393381][ T4260] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 167.421847][ T4260] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.452237][ T4260] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 167.482743][ T4260] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 167.491079][ T4260] usb 7-1: Product: syz [ 167.515943][ T4260] usb 7-1: Manufacturer: syz [ 167.540337][ T4260] usb 7-1: SerialNumber: syz [ 167.590671][ T4260] usb 7-1: config 0 descriptor?? [ 167.620569][ T4260] usb 7-1: selecting invalid altsetting 0 [ 167.892386][ T4323] usb 7-1: USB disconnect, device number 3 [ 168.431857][ T6197] device bond0 entered promiscuous mode [ 168.510782][ T6197] device bond_slave_0 entered promiscuous mode [ 168.549536][ T6197] device batadv0 entered promiscuous mode [ 168.586549][ T6201] netlink: 'syz.4.488': attribute type 5 has an invalid length. [ 168.595956][ T6202] netlink: 'syz.0.486': attribute type 10 has an invalid length. [ 168.635948][ T6202] device syz_tun entered promiscuous mode [ 168.694192][ T6202] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 168.847860][ T6204] Zero length message leads to an empty skb [ 169.952998][ T6236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.500'. [ 170.617924][ T6217] loop6: detected capacity change from 0 to 32768 [ 170.769803][ T6217] XFS (loop6): Mounting V5 Filesystem [ 170.906228][ T6217] XFS (loop6): Ending clean mount [ 171.184498][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 171.596450][ T5186] XFS (loop6): Unmounting Filesystem [ 171.836439][ T6283] tipc: Started in network mode [ 171.881526][ T6283] tipc: Node identity 84e, cluster identity 4711 [ 171.899648][ T6283] tipc: Node number set to 2126 [ 172.492127][ T6301] loop4: detected capacity change from 0 to 256 [ 172.536057][ T6301] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.596206][ T6301] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 172.682650][ T6301] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 172.891667][ T6301] loop4: detected capacity change from 256 to 1 [ 172.924553][ T6311] syz.4.517: attempt to access beyond end of device [ 172.924553][ T6311] loop4: rw=2049, sector=161, nr_sectors = 1 limit=1 [ 172.993033][ T6311] Buffer I/O error on dev loop4, logical block 161, lost sync page write [ 173.030912][ T6311] syz.4.517: attempt to access beyond end of device [ 173.030912][ T6311] loop4: rw=2049, sector=160, nr_sectors = 1 limit=1 [ 173.065335][ T6311] Buffer I/O error on dev loop4, logical block 160, lost sync page write [ 173.095821][ T6311] syz.4.517: attempt to access beyond end of device [ 173.095821][ T6311] loop4: rw=0, sector=161, nr_sectors = 1 limit=1 [ 173.130282][ T6301] syz.4.517: attempt to access beyond end of device [ 173.130282][ T6301] loop4: rw=524288, sector=160, nr_sectors = 1 limit=1 [ 173.177204][ T6301] syz.4.517: attempt to access beyond end of device [ 173.177204][ T6301] loop4: rw=524288, sector=161, nr_sectors = 1 limit=1 [ 173.245490][ T6301] syz.4.517: attempt to access beyond end of device [ 173.245490][ T6301] loop4: rw=0, sector=160, nr_sectors = 1 limit=1 [ 173.810421][ T6310] loop6: detected capacity change from 0 to 32768 [ 173.836351][ T6310] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.519 (6310) [ 173.921449][ T6310] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 173.955950][ T6310] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 174.001752][ T6310] BTRFS info (device loop6): setting nodatasum [ 174.026403][ T6310] BTRFS info (device loop6): force zlib compression, level 3 [ 174.072293][ T6333] netlink: 48 bytes leftover after parsing attributes in process `syz.5.526'. [ 174.082925][ T6310] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 174.101483][ T6310] BTRFS info (device loop6): use lzo compression, level 0 [ 174.116764][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.526'. [ 174.126250][ T6310] BTRFS info (device loop6): turning on flush-on-commit [ 174.141087][ T6310] BTRFS info (device loop6): enabling auto defrag [ 174.156486][ T6310] BTRFS info (device loop6): max_inline at 4096 [ 174.171860][ T6310] BTRFS info (device loop6): using free space tree [ 174.451584][ T4325] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.486162][ T6310] BTRFS info (device loop6): enabling ssd optimizations [ 174.633611][ T26] audit: type=1800 audit(1784686952.593:54): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.519" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 174.656557][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.701513][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.788531][ T26] audit: type=1800 audit(1784686952.703:55): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.519" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 174.813504][ T4325] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 174.881507][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.002744][ T4325] usb 1-1: config 0 descriptor?? [ 175.430626][ T5186] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.491339][ C1] sched: RT throttling activated [ 175.584353][ T6365] loop4: detected capacity change from 0 to 131072 [ 175.613204][ T6365] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 175.621480][ T6365] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 175.635717][ T6365] F2FS-fs (loop4): invalid crc value [ 175.718196][ T6365] F2FS-fs (loop4): Found nat_bits in checkpoint [ 175.806864][ T6365] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 175.817529][ T6365] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 176.107637][ T4938] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop6 scanned by udevd (4938) [ 176.254861][ T4325] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input6 [ 176.480566][ T4325] uclogic 0003:256C:006D.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 176.561136][ T4325] usb 1-1: USB disconnect, device number 4 [ 176.970167][ T6406] fido_id[6406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 177.168240][ T6419] loop0: detected capacity change from 0 to 512 [ 177.242919][ T6419] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.544: iget: bad i_size value: 38620345925642 [ 177.334219][ T6419] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.544: couldn't read orphan inode 15 (err -117) [ 177.396657][ T6419] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 177.545759][ T6419] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.544: bg 0: block 5: invalid block bitmap [ 177.585752][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz.6.545'. [ 177.640703][ T6419] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 172 with error 28 [ 177.683926][ T6419] EXT4-fs (loop0): This should not happen!! Data will be lost [ 177.683926][ T6419] [ 177.738272][ T6419] EXT4-fs (loop0): Total free blocks count 0 [ 177.758295][ T6419] EXT4-fs (loop0): Free/Dirty block details [ 177.775763][ T6419] EXT4-fs (loop0): free_blocks=0 [ 177.811447][ T6419] EXT4-fs (loop0): dirty_blocks=176 [ 177.827193][ T6419] EXT4-fs (loop0): Block reservation details [ 177.861498][ T6419] EXT4-fs (loop0): i_reserved_data_blocks=176 [ 177.903793][ T6423] EXT4-fs (loop0): shut down requested (0) [ 178.419083][ T6446] loop0: detected capacity change from 0 to 512 [ 178.480096][ T6446] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 178.631521][ T6446] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.764624][ T6458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.850625][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 179.879411][ T6497] input: syz1 as /devices/virtual/input/input8 [ 180.079491][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 180.195597][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.570'. [ 182.612798][ T6553] loop5: detected capacity change from 0 to 40427 [ 182.665278][ T6553] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 182.718258][ T6553] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 182.760155][ T6553] F2FS-fs (loop5): invalid crc value [ 182.809354][ T6553] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 182.821013][ T26] audit: type=1326 audit(1784686960.773:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.0.597" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f306779de99 code=0x0 [ 183.050674][ T6553] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 183.073824][ T6553] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 183.669664][ T4506] syz-executor: attempt to access beyond end of device [ 183.669664][ T4506] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.837443][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 183.926923][ T6615] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.011547][ T6617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.019079][ T6617] bond2: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 184.033808][ T6617] bond2: (slave ip_vti0): Error -95 calling set_mac_address [ 184.156695][ T6625] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 184.206529][ T6625] CIFS mount error: No usable UNC path provided in device string! [ 184.206529][ T6625] [ 184.219524][ T6625] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 184.585487][ T4373] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 184.644219][ T4373] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.700303][ T4325] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 184.851152][ T6638] fido_id[6638]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 184.938273][ T4325] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 184.971229][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.014267][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.025472][ T4325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 185.060470][ T4325] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 185.090119][ T4325] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 185.109663][ T4325] usb 5-1: Manufacturer: syz [ 185.131643][ T4325] usb 5-1: config 0 descriptor?? [ 185.274381][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.616'. [ 185.551039][ T4325] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 185.571231][ T4325] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 185.603720][ T4325] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 185.726227][ T6670] loop5: detected capacity change from 0 to 512 [ 185.970889][ T6677] loop5: detected capacity change from 0 to 512 [ 186.008459][ T6677] ext4: Unknown parameter 'obj_role' [ 186.321053][ T4325] usb 5-1: USB disconnect, device number 5 [ 187.156441][ T6709] IPVS: persistence engine module ip_vs_pe_ not found [ 189.597313][ T6801] netlink: 'syz.3.653': attribute type 29 has an invalid length. [ 189.633208][ T6801] netlink: 'syz.3.653': attribute type 29 has an invalid length. [ 189.642366][ T26] audit: type=1326 audit(1784686967.593:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.5.652" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c3359de99 code=0x0 [ 189.671752][ T6807] netlink: 'syz.3.653': attribute type 29 has an invalid length. [ 189.744377][ T6801] netlink: 'syz.3.653': attribute type 29 has an invalid length. [ 189.776368][ T6801] netlink: 'syz.3.653': attribute type 29 has an invalid length. [ 190.653701][ T6821] loop0: detected capacity change from 0 to 32768 [ 190.744438][ T6821] XFS (loop0): Mounting V5 Filesystem [ 190.822993][ T6821] XFS (loop0): Ending clean mount [ 190.906592][ T6821] XFS (loop0): Quotacheck needed: Please wait. [ 191.009079][ T6821] XFS (loop0): Quotacheck: Done. [ 191.105952][ T26] audit: type=1800 audit(1784686969.063:58): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.657" name="bus" dev="loop0" ino=6155 res=0 errno=0 [ 191.161431][ T26] audit: type=1800 audit(1784686969.113:59): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.657" name="bus" dev="loop0" ino=6155 res=0 errno=0 [ 191.267052][ T26] audit: type=1800 audit(1784686969.223:60): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.657" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 191.731841][ T6861] loop4: detected capacity change from 0 to 512 [ 191.800632][ T6861] FAT-fs (loop4): bogus number of FAT sectors [ 191.842271][ T6861] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 191.885839][ T6861] FAT-fs (loop4): Can't find a valid FAT filesystem [ 191.920901][ T4280] XFS (loop0): Unmounting Filesystem [ 192.704205][ T6880] loop0: detected capacity change from 0 to 64 [ 192.915393][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 192.938764][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 192.959368][ T6884] ceph: No mds server is up or the cluster is laggy [ 192.984907][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 193.016296][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 193.950819][ T6910] netlink: 156 bytes leftover after parsing attributes in process `syz.3.686'. [ 194.088334][ T6914] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 194.095403][ T6914] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 194.415590][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.451606][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.475073][ T26] audit: type=1326 audit(1784686972.433:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.5.692" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c3359de99 code=0x0 [ 195.747835][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz.5.699'. [ 196.038901][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.050665][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.060184][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.072406][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.080443][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 196.092121][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.205122][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.5.702'. [ 196.229343][ T6955] device bond1 entered promiscuous mode [ 196.235491][ T6955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.260898][ T6955] device bridge1 entered promiscuous mode [ 196.261474][ T4323] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 196.267637][ T6955] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 196.298382][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 196.360377][ T6955] bond1: (slave bridge1): Error: Slave device does not support XDP [ 196.533522][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.564043][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.594995][ T4323] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.639399][ T4323] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.659852][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.689518][ T4323] usb 5-1: config 0 descriptor?? [ 196.856322][ T6950] chnl_net:caif_netlink_parms(): no params data found [ 197.109829][ T4323] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 197.135657][ T4323] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 197.144029][ T6950] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.152457][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.161879][ T6950] device bridge_slave_0 entered promiscuous mode [ 197.172333][ T6950] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.180253][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.204970][ T6950] device bridge_slave_1 entered promiscuous mode [ 197.249409][ T4323] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 197.331821][ T6950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.395001][ T6950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.528978][ T4325] usb 5-1: USB disconnect, device number 6 [ 197.539799][ T6950] team0: Port device team_slave_0 added [ 197.572314][ T6973] fido_id[6973]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 197.600819][ T6950] team0: Port device team_slave_1 added [ 197.675885][ T6950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.686874][ T6950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.749968][ T6950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.809357][ T6950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.828513][ T6950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.865940][ T6950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.910930][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 197.973913][ T6950] device hsr_slave_0 entered promiscuous mode [ 197.984380][ T6950] device hsr_slave_1 entered promiscuous mode [ 198.017161][ T6950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.038003][ T6950] Cannot create hsr debugfs directory [ 198.171583][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 198.525492][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.714'. [ 198.571079][ T6994] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.580725][ T6994] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.589780][ T6994] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.599014][ T6994] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.653594][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.714'. [ 198.738367][ T6950] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 198.764646][ T6950] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 198.783391][ T6950] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 198.852539][ T6950] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 200.102971][ T6950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.181571][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.190833][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.223445][ T6950] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.261478][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 200.410706][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.447432][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.480886][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.488703][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.569962][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.596717][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.617145][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.624545][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.652858][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.709352][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.752217][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.788414][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.844731][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.878607][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.918143][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.952388][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.982862][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.002276][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.030771][ T6950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.062691][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.098880][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.108038][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.409865][ T7051] sd 0:0:1:0: PR command failed: 1026 [ 201.430692][ T7051] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 201.459568][ T7051] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 201.611637][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 201.617848][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 201.632485][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 201.887164][ T5498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.905862][ T5498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.941873][ T6950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.332926][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 202.634611][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.660822][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.033987][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.047511][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.103523][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.202848][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.347753][ T6950] device veth0_vlan entered promiscuous mode [ 203.469292][ T6950] device veth1_vlan entered promiscuous mode [ 203.496430][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 203.611269][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 203.630923][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 203.643205][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.702855][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.714726][ T6950] device veth0_macvtap entered promiscuous mode [ 203.743972][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.755881][ T6950] device veth1_macvtap entered promiscuous mode [ 203.822680][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.871442][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.891478][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.929649][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.960510][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.981434][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.021502][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.041165][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.063781][ T6950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.073718][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.094015][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.118465][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.140643][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.151705][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.163323][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.187664][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.204016][ T7] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 204.210419][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.238447][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.240028][ T7] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 204.282868][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.283168][ T7116] loop0: detected capacity change from 0 to 2048 [ 204.363266][ T6950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.375009][ T6950] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.411644][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 204.421737][ T6950] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.480814][ T7118] fido_id[7118]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 204.490775][ T6950] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.529300][ T6950] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.529940][ T7122] loop5: detected capacity change from 0 to 512 [ 204.560748][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.584673][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.613342][ T7122] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 204.711564][ T7122] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 1803188595: comm syz.5.756: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 204.782752][ T7122] EXT4-fs (loop5): mount failed [ 204.901925][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.910426][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.946715][ T7122] loop5: detected capacity change from 0 to 2048 [ 204.974400][ T5495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.987543][ T7122] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.065478][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.084620][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.108593][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.606817][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 205.664513][ T7148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.680784][ T7150] overlayfs: failed to get inode (-116) [ 205.689442][ T7148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.713132][ T7148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.728896][ T7150] overlayfs: failed to get inode (-116) [ 205.752175][ T7150] overlayfs: failed to get inode (-116) [ 205.757896][ T7148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.766064][ T7150] overlayfs: failed to get inode (-116) [ 205.991436][ T7148] device batadv0 left promiscuous mode [ 206.016750][ T7161] netlink: 24 bytes leftover after parsing attributes in process `syz.5.769'. [ 206.923104][ T7195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.780'. [ 207.676145][ T6393] kernel write not supported for file bpf-prog (pid: 6393 comm: kworker/0:18) [ 207.691207][ T52] block nbd5: Attempted send on invalid socket [ 207.698373][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 207.708658][ T7211] XFS (nbd5): SB validate failed with error -5. [ 208.012507][ T1159] block nbd5: Attempted send on invalid socket [ 208.019035][ T1159] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 208.030720][ T7218] XFS (nbd5): SB validate failed with error -5. [ 208.733872][ T7250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.797'. [ 210.236658][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.812'. [ 210.284991][ T7287] tipc: Started in network mode [ 210.314950][ T7287] tipc: Node identity 7f, cluster identity 16 [ 210.337973][ T7287] tipc: Node number set to 127 [ 210.961592][ T4376] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 211.151648][ T4376] usb 6-1: Using ep0 maxpacket: 32 [ 211.159238][ T4376] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 211.202459][ T4376] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.209339][ T4376] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 211.220314][ T7294] netlink: 'syz.7.815': attribute type 4 has an invalid length. [ 211.259451][ T4376] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.293904][ T4376] usb 6-1: config 0 descriptor?? [ 211.315175][ T7295] netlink: 'syz.7.815': attribute type 4 has an invalid length. [ 212.127989][ T4376] corsair-cpro 0003:1B1C:0C10.0007: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 212.533837][ T4376] corsair-cpro: probe of 0003:1B1C:0C10.0007 failed with error -71 [ 212.548709][ T4376] usb 6-1: USB disconnect, device number 2 [ 212.781439][ T4373] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 212.864258][ T7328] fido_id[7328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 212.972802][ T4373] usb 8-1: Using ep0 maxpacket: 16 [ 212.983852][ T4373] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 213.009512][ T4373] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.038395][ T4373] usb 8-1: Product: syz [ 213.054696][ T4373] usb 8-1: Manufacturer: syz [ 213.069710][ T4373] usb 8-1: SerialNumber: syz [ 213.741272][ T4373] snd-usb-audio: probe of 8-1:1.0 failed with error -71 [ 213.754777][ T4373] usb 8-1: USB disconnect, device number 2 [ 214.610743][ T7362] netlink: 'syz.0.840': attribute type 12 has an invalid length. [ 214.671532][ T4373] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 214.862737][ T4373] usb 8-1: Using ep0 maxpacket: 32 [ 214.870070][ T4373] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.887080][ T4373] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 214.908003][ T4373] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 214.919203][ T4373] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.928026][ T4373] usb 8-1: Product: syz [ 214.935453][ T4373] usb 8-1: Manufacturer: syz [ 214.940485][ T4373] usb 8-1: SerialNumber: syz [ 215.172033][ T4373] usb 8-1: USB disconnect, device number 3 [ 216.419082][ T7410] loop0: detected capacity change from 0 to 40427 [ 216.446809][ T7410] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 216.454205][ T7410] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 216.481788][ T7410] F2FS-fs (loop0): invalid crc value [ 216.489022][ T7410] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 216.553573][ T7410] F2FS-fs (loop0): Start checkpoint disabled! [ 216.596956][ T7410] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 216.605537][ T7410] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 216.715673][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.864'. [ 216.759149][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.864'. [ 216.808194][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.864'. [ 217.329498][ T4324] kworker/u4:5: attempt to access beyond end of device [ 217.329498][ T4324] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 217.652930][ T7430] tipc: Started in network mode [ 217.658759][ T7430] tipc: Node identity 2e8657535e72, cluster identity 4711 [ 217.675565][ T7430] tipc: Enabled bearer , priority 0 [ 217.725550][ T7430] syzkaller0: MTU too low for tipc bearer [ 217.757599][ T7430] tipc: Disabling bearer [ 217.773691][ T7432] netlink: 'syz.5.870': attribute type 4 has an invalid length. [ 217.867066][ T7434] netlink: 'syz.5.870': attribute type 4 has an invalid length. [ 217.913289][ T7441] netlink: 'syz.4.873': attribute type 4 has an invalid length. [ 217.975371][ T7443] mmap: syz.0.868 (7443) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 217.992801][ T7444] netlink: 'syz.4.873': attribute type 4 has an invalid length. [ 218.190652][ T7447] loop7: detected capacity change from 0 to 2048 [ 218.279901][ T7447] loop7: p1 p3 p4 [ 218.296651][ T7447] loop7: p4 size 589824 extends beyond EOD, truncated [ 218.428586][ T7457] batman_adv: batadv0: Adding interface: dummy0 [ 218.476509][ T7457] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.582818][ T7457] batman_adv: batadv0: Interface activated: dummy0 [ 218.691130][ T4471] udevd[4471]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 218.705586][ T4938] udevd[4938]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 218.705772][ T4442] udevd[4442]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 218.723904][ T7462] batadv0: mtu less than device minimum [ 218.769061][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.782712][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.795380][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.808180][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.821024][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.833703][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.846634][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.859645][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.872646][ T7462] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.962455][ T6393] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 220.161445][ T6393] usb 1-1: Using ep0 maxpacket: 32 [ 220.171724][ T6393] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.209858][ T6393] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 220.257409][ T6393] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 220.275615][ T4287] Bluetooth: hci4: unexpected cc 0x204b length: 9 > 3 [ 220.292585][ T6393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.311228][ T6393] usb 1-1: Product: syz [ 220.324560][ T6393] usb 1-1: Manufacturer: syz [ 220.329243][ T6393] usb 1-1: SerialNumber: syz [ 220.575558][ T6393] usb 1-1: USB disconnect, device number 5 [ 221.589389][ T7546] device syzkaller0 entered promiscuous mode [ 222.426453][ T7557] loop5: detected capacity change from 0 to 32768 [ 224.130240][ T7606] overlayfs: failed to clone upperpath [ 224.719652][ T7605] loop5: detected capacity change from 0 to 32768 [ 224.848146][ T7605] XFS (loop5): Mounting V5 Filesystem [ 224.965841][ T7605] XFS (loop5): Ending clean mount [ 225.243923][ T4506] XFS (loop5): Unmounting Filesystem [ 225.962704][ T7661] fuse: Bad value for 'fd' [ 226.187565][ T7667] netlink: 52 bytes leftover after parsing attributes in process `syz.4.950'. [ 226.245037][ T7667] netlink: 76 bytes leftover after parsing attributes in process `syz.4.950'. [ 226.276892][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.285141][ T7667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.294814][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.301999][ T7667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.335391][ T7667] netlink: 52 bytes leftover after parsing attributes in process `syz.4.950'. [ 226.364439][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.372094][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.428089][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.951'. [ 226.767408][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 226.832677][ T7687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.957'. [ 226.856384][ T7687] device ip6gre1 entered promiscuous mode [ 226.949664][ T7687] netlink: 'syz.0.957': attribute type 6 has an invalid length. [ 226.998603][ T7687] netlink: 72 bytes leftover after parsing attributes in process `syz.0.957'. [ 227.272188][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 227.312259][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.411207][ T7699] team0: Port device vlan2 added [ 227.431447][ T7697] netlink: 'syz.0.962': attribute type 1 has an invalid length. [ 227.454133][ T7708] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96 [ 227.542920][ T7697] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.642598][ T7704] bond3: (slave geneve2): making interface the new active one [ 227.695843][ T7704] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 227.821100][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 228.022715][ T4325] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 228.224978][ T4325] usb 8-1: Using ep0 maxpacket: 32 [ 228.240749][ T4325] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.287990][ T4325] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.332859][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.974'. [ 228.341807][ T4325] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 228.350897][ T4325] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.392843][ T4325] usb 8-1: config 0 descriptor?? [ 229.663009][ T7755] tipc: Enabled bearer , priority 0 [ 229.699354][ T7755] net_ratelimit: 10 callbacks suppressed [ 229.699370][ T7755] syzkaller0: mtu less than device minimum [ 229.964325][ T4325] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 229.972170][ T4325] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 229.989300][ T4325] ft260 0003:0403:6030.0008: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 230.078352][ T4325] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 230.341410][ T4325] ft260 0003:0403:6030.0008: failed to retrieve status: -32 [ 230.626735][ T7719] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0x0002, size 0, write) [ 230.684481][ T4373] usb 8-1: USB disconnect, device number 4 [ 230.732489][ T7778] device ip6gre1 entered promiscuous mode [ 230.742447][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.990'. [ 230.763513][ T7778] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 230.792645][ T7778] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 231.575809][ T7797] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 231.723627][ T7797] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.836157][ T7801] bond2: (slave geneve2): making interface the new active one [ 231.890280][ T7801] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 231.925140][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 234.812545][ T7856] fuse: Bad value for 'fd' [ 236.770870][ T7890] tipc: Enabling of bearer rejected, failed to enable media [ 237.350789][ T5354] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 237.570687][ T5354] usb 1-1: Using ep0 maxpacket: 8 [ 237.584214][ T5354] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 237.606355][ T5354] usb 1-1: config 0 has no interface number 0 [ 237.623933][ T5354] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 237.651648][ T5354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.659797][ T5354] usb 1-1: Product: syz [ 237.670631][ T5354] usb 1-1: Manufacturer: syz [ 237.675506][ T5354] usb 1-1: SerialNumber: syz [ 237.702557][ T5354] usb 1-1: config 0 descriptor?? [ 237.920166][ T5354] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 237.929546][ T5354] usb 1-1: No valid video chain found. [ 237.960123][ T5354] usb 1-1: USB disconnect, device number 6 [ 238.076762][ T7922] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 238.129461][ T7922] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 238.189541][ T7922] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 238.212557][ T7922] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 238.255739][ T7922] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 238.330283][ T7922] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 238.531377][ T7929] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1041'. [ 239.449220][ T7952] 9pnet_fd: p9_fd_create_tcp (7952): problem connecting socket to 127.0.0.1 [ 239.475278][ T7952] 9pnet_fd: p9_fd_create_tcp (7952): problem connecting socket to 127.0.0.1 [ 239.506668][ T7952] 9pnet_fd: p9_fd_create_tcp (7952): problem connecting socket to 127.0.0.1 [ 239.868708][ T7966] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1053'. [ 241.379112][ T8011] loop7: detected capacity change from 0 to 256 [ 241.436643][ T4938] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 245.247571][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1096'. [ 245.482971][ T8104] loop5: detected capacity change from 0 to 8192 [ 245.545912][ T8104] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.030081][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 247.213882][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 247.291836][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 247.395582][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 247.481713][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 247.580263][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 248.296363][ T8173] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1118'. [ 248.322961][ T8173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1118'. [ 249.268057][ T8177] loop5: detected capacity change from 0 to 4096 [ 249.424635][ T26] audit: type=1326 audit(1784687283.370:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8178 comm="syz.7.1121" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f029239de99 code=0x7fc00000 [ 249.532679][ T26] audit: type=1326 audit(1784687283.380:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8178 comm="syz.7.1121" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f029239de99 code=0x7fc00000 [ 249.787618][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 249.821764][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 249.886209][ T8190] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 249.928397][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 249.964064][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 250.007790][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 250.081618][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 250.099216][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 250.470255][ T8201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.510673][ T8201] device bond_slave_0 entered promiscuous mode [ 250.517563][ T8201] device bond_slave_1 entered promiscuous mode [ 250.525386][ T8201] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 250.536311][ T8201] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 250.604447][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 251.427676][ T8227] netlink: 'syz.0.1142': attribute type 12 has an invalid length. [ 251.456690][ T8229] : renamed from veth0_vlan [ 251.515945][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 251.586047][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 251.650060][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 251.696471][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 251.730965][ T8210] loop7: detected capacity change from 0 to 32768 [ 251.749655][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 251.804754][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 251.870147][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 251.887302][ T8210] XFS (loop7): Mounting V5 Filesystem [ 252.089175][ T8210] XFS (loop7): Ending clean mount [ 252.135604][ T8210] XFS (loop7): Quotacheck needed: Please wait. [ 252.240351][ T8210] XFS (loop7): Quotacheck: Done. [ 255.550644][ T8322] loop5: detected capacity change from 0 to 512 [ 255.565004][ T8322] EXT4-fs: Ignoring removed bh option [ 255.572165][ T8322] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.601989][ T8322] EXT4-fs: Ignoring removed bh option [ 255.627092][ T8322] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 255.705510][ T8322] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 255.719883][ T8322] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.863284][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.869764][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.042506][ T4506] EXT4-fs (loop5): unmounting filesystem. [ 256.720650][ T8210] Set syz1 is full, maxelem 65536 reached [ 256.824503][ T6950] XFS (loop7): Unmounting Filesystem [ 256.985254][ T8354] loop0: detected capacity change from 0 to 2048 [ 257.066394][ T8354] Alternate GPT is invalid, using primary GPT. [ 257.090423][ T8354] loop0: p1 p2 p3 [ 257.094271][ T8354] loop0: partition table partially beyond EOD, truncated [ 257.582850][ T4471] udevd[4471]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 257.592733][ T4442] udevd[4442]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 257.621967][ T4938] udevd[4938]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 258.160555][ T4895] kernel read not supported for file [userfaultfd] (pid: 4895 comm: kworker/0:15) [ 258.246288][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 258.320687][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 258.365108][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 258.378821][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 258.407627][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 258.468330][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 258.529557][ T8387] tipc: Enabling of bearer rejected, failed to enable media [ 258.714138][ T8396] overlayfs: failed to clone lowerpath [ 258.723417][ T8396] overlayfs: failed to clone upperpath [ 259.928013][ T4287] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 259.937090][ T4287] Bluetooth: hci1: Injecting HCI hardware error event [ 259.953010][ T4285] Bluetooth: hci1: hardware error 0x00 [ 260.556174][ T8441] syz.0.1216 (8441): drop_caches: 2 [ 261.148342][ T8449] loop7: detected capacity change from 0 to 512 [ 261.201537][ T8449] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.256873][ T8449] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 261.268659][ T8449] EXT4-fs (loop7): orphan cleanup on readonly fs [ 261.320686][ T8449] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 261.448218][ T8449] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 261.595189][ T8449] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 261.622204][ T8449] EXT4-fs error (device loop7): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 261.764018][ T8449] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #12: comm syz.7.1221: corrupted inode contents [ 261.898848][ T8449] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #12: comm syz.7.1221: mark_inode_dirty error [ 262.007712][ T4285] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 262.054483][ T8449] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #12: comm syz.7.1221: corrupted inode contents [ 262.087884][ T8449] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #12: comm syz.7.1221: mark_inode_dirty error [ 262.119307][ T8449] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #12: comm syz.7.1221: corrupted inode contents [ 262.209210][ T8449] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 262.263876][ T8449] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #12: comm syz.7.1221: corrupted inode contents [ 262.327620][ T8449] EXT4-fs error (device loop7): ext4_truncate:4325: inode #12: comm syz.7.1221: mark_inode_dirty error [ 262.398044][ T8449] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 262.482961][ T8449] EXT4-fs (loop7): 1 truncate cleaned up [ 262.509321][ T8449] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 262.697228][ T6950] EXT4-fs (loop7): unmounting filesystem. [ 263.657988][ T8477] 9pnet: p9_errstr2errno: server reported unknown error @c0x0000000000000006 [ 264.905400][ T8498] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1238'. [ 264.971791][ T5474] wlan1: Trigger new scan to find an IBSS to join [ 265.041766][ T8501] loop5: detected capacity change from 0 to 512 [ 265.069985][ T8501] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 265.113185][ T8501] FAT-fs (loop5): Filesystem has been set read-only [ 266.163918][ T26] audit: type=1326 audit(1784687300.122:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz.3.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 266.206511][ T26] audit: type=1326 audit(1784687300.152:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz.3.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 266.244280][ T26] audit: type=1326 audit(1784687300.152:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz.3.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 266.342910][ T26] audit: type=1326 audit(1784687300.152:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz.3.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 266.414766][ T26] audit: type=1326 audit(1784687300.152:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz.3.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 266.516819][ T26] audit: type=1326 audit(1784687300.152:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz.3.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 266.573948][ T26] audit: type=1326 audit(1784687300.152:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz.3.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 266.675211][ T26] audit: type=1326 audit(1784687300.152:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz.3.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 266.735304][ T26] audit: type=1326 audit(1784687300.152:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz.3.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 266.767911][ T26] audit: type=1326 audit(1784687300.152:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz.3.1253" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 266.973544][ T26] audit: type=1326 audit(1784687300.932:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.0.1263" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f306779de99 code=0x0 [ 267.116138][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1260'. [ 267.175099][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 268.008397][ T5473] wlan1: Trigger new scan to find an IBSS to join [ 268.061704][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1274'. [ 268.191445][ T8601] device team1 entered promiscuous mode [ 268.240422][ T8601] 8021q: adding VLAN 0 to HW filter on device team1 [ 268.292410][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1274'. [ 268.444044][ T8603] device team2 entered promiscuous mode [ 268.484397][ T8603] 8021q: adding VLAN 0 to HW filter on device team2 [ 268.576580][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1280'. [ 268.924721][ T5473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.743318][ T8647] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1294'. [ 269.753136][ T8647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.756128][ T8674] loop7: detected capacity change from 0 to 1024 [ 270.840633][ T8674] EXT4-fs: test_dummy_encryption requires encrypt feature [ 271.136564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 271.806882][ T8694] netlink: 'syz.3.1313': attribute type 1 has an invalid length. [ 271.920699][ T8694] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.972335][ T8700] device bond4 entered promiscuous mode [ 272.086050][ T8694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1313'. [ 272.115887][ T8694] netlink: 'syz.3.1313': attribute type 1 has an invalid length. [ 272.137752][ T8694] device bond4 left promiscuous mode [ 272.145035][ T8694] 8021q: adding VLAN 0 to HW filter on device bond4 [ 273.852572][ T8732] loop7: detected capacity change from 0 to 1024 [ 273.917979][ T8732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 273.967966][ T8732] EXT4-fs: inline encryption not supported [ 273.974038][ T8732] EXT4-fs: Ignoring removed nomblk_io_submit option [ 274.021436][ T8732] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 274.046422][ T8740] netlink: 'syz.4.1329': attribute type 1 has an invalid length. [ 274.112183][ T8732] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 274.147555][ T8732] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.183973][ T8740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.347981][ T8745] device bond1 entered promiscuous mode [ 274.405890][ T8746] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1329'. [ 274.426163][ T8744] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 274.486269][ T8746] netlink: 'syz.4.1329': attribute type 1 has an invalid length. [ 274.527662][ T6950] EXT4-fs (loop7): unmounting filesystem. [ 274.532518][ T8746] device bond1 left promiscuous mode [ 274.574782][ T8746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.947130][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'. [ 275.993612][ T8773] tipc: Failed to remove unknown binding: 66,0,0/0:1625912544/1625912545 [ 276.032739][ T8773] tipc: Failed to remove unknown binding: 66,0,0/0:1625912544/1625912545 [ 276.474672][ T8784] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 276.842996][ T8795] loop5: detected capacity change from 0 to 512 [ 276.912166][ T8795] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 276.987715][ T8795] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 277.023976][ T8795] EXT4-fs (loop5): orphan cleanup on readonly fs [ 277.076720][ T8795] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 277.099580][ T8795] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 277.139429][ T8795] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 277.162820][ T8795] EXT4-fs error (device loop5): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 277.206052][ T8795] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.1350: corrupted inode contents [ 277.254379][ T8795] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #12: comm syz.5.1350: mark_inode_dirty error [ 277.278593][ T8806] netlink: 'syz.7.1354': attribute type 12 has an invalid length. [ 277.335932][ T8795] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.1350: corrupted inode contents [ 277.407723][ T8795] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #12: comm syz.5.1350: mark_inode_dirty error [ 277.441870][ T8809] input: syz1 as /devices/virtual/input/input10 [ 277.456637][ T8795] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.1350: corrupted inode contents [ 277.508095][ T8795] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 277.547271][ T8795] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.1350: corrupted inode contents [ 277.600510][ T8795] EXT4-fs error (device loop5): ext4_truncate:4325: inode #12: comm syz.5.1350: mark_inode_dirty error [ 277.670666][ T8795] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 277.718447][ T8814] loop0: detected capacity change from 0 to 512 [ 277.726851][ T8795] EXT4-fs (loop5): 1 truncate cleaned up [ 277.732834][ T8795] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 277.833182][ T8814] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1357: bg 0: block 5: invalid block bitmap [ 277.861721][ T4506] EXT4-fs (loop5): unmounting filesystem. [ 277.971250][ T8814] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 277.989799][ T8814] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1357: invalid indirect mapped block 3 (level 2) [ 278.005173][ T8814] EXT4-fs (loop0): 1 orphan inode deleted [ 278.012447][ T8814] EXT4-fs (loop0): 1 truncate cleaned up [ 278.018746][ T8814] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 278.429470][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 279.077440][ T8095] wlan1: Trigger new scan to find an IBSS to join [ 280.209036][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 280.328554][ T8848] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.340198][ T8848] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.340284][ T8848] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.340315][ T8848] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.434062][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 281.025728][ T4895] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 281.242868][ T4895] usb 8-1: config 1 interface 0 has no altsetting 0 [ 281.266063][ T4895] usb 8-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.40 [ 281.291578][ T4895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.340004][ T4895] usb 8-1: Product: syz [ 281.344263][ T4895] usb 8-1: Manufacturer: syz [ 281.375724][ T4895] usb 8-1: SerialNumber: syz [ 281.462056][ T8868] loop0: detected capacity change from 0 to 512 [ 281.493751][ T8868] EXT4-fs: Ignoring removed oldalloc option [ 281.522569][ T8868] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 281.604985][ T8868] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 281.631848][ T4895] usbhid 8-1:1.0: can't add hid device: -71 [ 281.651703][ T4895] usbhid: probe of 8-1:1.0 failed with error -71 [ 281.665529][ T8868] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.713143][ T4895] usb 8-1: USB disconnect, device number 5 [ 282.086634][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 282.364279][ T8875] skbuff: bad partial csum: csum=65486/0 headroom=64 headlen=65488 [ 282.413124][ T8880] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1382'. [ 282.449680][ T8880] loop7: detected capacity change from 0 to 512 [ 282.481237][ T8880] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 282.572781][ T8882] tipc: Started in network mode [ 282.599560][ T8882] tipc: Node identity ac14140f, cluster identity 4711 [ 282.630044][ T8882] gre0: MTU too low for tipc bearer [ 282.672756][ T8882] tipc: Enabling of bearer rejected, failed to enable media [ 282.827387][ T8890] netlink: 'syz.7.1386': attribute type 1 has an invalid length. [ 282.884789][ T8890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.021481][ T8890] bond1: (slave geneve2): making interface the new active one [ 283.092336][ T8890] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 283.130242][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 283.201601][ T8890] syz.7.1386 (8890) used greatest stack depth: 20032 bytes left [ 283.470561][ T8912] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.1394'. [ 283.487564][ T8912] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1394'. [ 283.560159][ T8914] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 283.623864][ T8914] batman_adv: batadv0: Adding interface: gretap1 [ 283.663464][ T8914] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.690828][ T8914] batman_adv: batadv0: Interface activated: gretap1 [ 284.016057][ T5473] wlan1: Trigger new scan to find an IBSS to join [ 284.740824][ T8938] Bluetooth: MGMT ver 1.22 [ 284.970196][ T5470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.370297][ T8990] netlink: 'syz.3.1425': attribute type 1 has an invalid length. [ 286.612079][ T8991] bond5: (slave dummy0): making interface the new active one [ 286.647975][ T8991] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 286.681788][ T8993] device bond5 entered promiscuous mode [ 286.714858][ T8993] device dummy0 entered promiscuous mode [ 286.726101][ T8989] device bond5 left promiscuous mode [ 286.732176][ T8989] device dummy0 left promiscuous mode [ 287.375724][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1432'. [ 288.235090][ T9030] overlayfs: failed to clone upperpath [ 288.644643][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 290.390922][ T9076] loop7: detected capacity change from 0 to 128 [ 290.471157][ T9076] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 290.496576][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/197.tmp-b7:7' failed: Read-only file system [ 290.511116][ T9076] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 290.534977][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:7' failed: Read-only file system [ 290.592709][ T9076] EXT4-fs (loop7): shut down requested (1) [ 290.621157][ T9076] fscrypt (loop7, inode 12): Error -5 getting encryption context [ 290.663959][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/197.tmp-b7:7' failed: Read-only file system [ 290.707851][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:7' failed: Read-only file system [ 290.792585][ T6950] EXT4-fs (loop7): unmounting filesystem. [ 290.847679][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/197.tmp-b7:7' failed: Read-only file system [ 290.907009][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/197.tmp-b7:7' failed: Read-only file system [ 291.227539][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/198.tmp-b7:7' failed: Read-only file system [ 291.364906][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/198.tmp-b7:7' failed: Read-only file system [ 292.066722][ T9113] bond3: (slave xfrm2): The slave device specified does not support setting the MAC address [ 292.077168][ T9113] bond3: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 292.090466][ T9113] bond3: (slave xfrm2): making interface the new active one [ 292.100712][ T9113] bond3: (slave xfrm2): Enslaving as an active interface with an up link [ 292.391066][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/198.tmp-b7:7' failed: Read-only file system [ 292.604690][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/198.tmp-b7:7' failed: Read-only file system [ 294.225774][ T9174] overlayfs: upper fs does not support file handles, falling back to index=off. [ 294.313428][ T9177] loop0: detected capacity change from 0 to 256 [ 294.561836][ T9177] FAT-fs (loop0): codepage cp73 not found [ 294.830211][ T9187] tipc: Enabled bearer , priority 0 [ 294.973314][ T9187] device syzkaller0 entered promiscuous mode [ 294.994565][ T9187] tipc: Resetting bearer [ 295.082177][ T9186] tipc: Resetting bearer [ 295.213919][ T5354] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 295.418089][ T5354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.450829][ T5354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.477883][ T5354] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 295.502142][ T5354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.548516][ T5354] usb 1-1: config 0 descriptor?? [ 295.990041][ T5354] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 296.033545][ T5354] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 296.040757][ T5354] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 296.055137][ T5354] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 296.062660][ T5354] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 296.077952][ T5354] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 296.102616][ T5354] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 296.120957][ T5354] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 296.204307][ T5354] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x00 [ 296.813247][ T5354] cp2112 0003:10C4:EA90.0009: error reading lock byte: -32 [ 296.828290][ T5354] usb 1-1: USB disconnect, device number 7 [ 296.955163][ T9208] fido_id[9208]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 297.440897][ T4938] udevd[4938]: symlink '../../loop0' '/dev/disk/by-diskseq/200.tmp-b7:0' failed: Read-only file system [ 297.592568][ T4938] udevd[4938]: symlink '../../loop0' '/dev/disk/by-diskseq/200.tmp-b7:0' failed: Read-only file system [ 299.563646][ T9186] tipc: Disabling bearer [ 299.572410][ T4260] tipc: Node number set to 1895061331 [ 299.587431][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1508'. [ 299.671422][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/198.tmp-b7:7' failed: Read-only file system [ 300.062938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 300.141019][ T4938] udevd[4938]: symlink '../../loop0' '/dev/disk/by-diskseq/200.tmp-b7:0' failed: Read-only file system [ 300.255395][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/198.tmp-b7:7' failed: Read-only file system [ 300.432012][ T9249] loop7: detected capacity change from 0 to 2048 [ 300.527411][ T9249] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 300.622399][ T9249] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.721048][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/201.tmp-b7:7' failed: Read-only file system [ 300.808405][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-label/LinuxUDF.tmp-b7:7' failed: Read-only file system [ 300.882021][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-uuid/1234567812345678.tmp-b7:7' failed: Read-only file system [ 300.893437][ T9261] overlayfs: failed to clone lowerpath [ 301.247105][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/201.tmp-b7:7' failed: Read-only file system [ 301.357263][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/201.tmp-b7:7' failed: Read-only file system [ 302.168785][ T9295] overlayfs: failed to clone upperpath [ 302.523837][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/202.tmp-b7:7' failed: Read-only file system [ 302.674614][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/202.tmp-b7:7' failed: Read-only file system [ 302.768174][ T9322] netlink: 'syz.5.1540': attribute type 4 has an invalid length. [ 302.792210][ T9322] netlink: 'syz.5.1540': attribute type 4 has an invalid length. [ 303.002739][ T6393] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 303.068425][ T4895] libceph: connect (1)[c::]:6789 error -1 [ 303.074485][ T4895] libceph: mon0 (1)[c::]:6789 connect error [ 303.110358][ T9334] ceph: No mds server is up or the cluster is laggy [ 303.232907][ T6393] usb 8-1: Using ep0 maxpacket: 32 [ 303.246222][ T6393] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.257614][ T6393] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.341088][ T6393] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 303.412012][ T6393] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.502888][ T6393] usb 8-1: config 0 descriptor?? [ 303.743480][ T4471] udevd[4471]: symlink '../../loop0' '/dev/disk/by-diskseq/200.tmp-b7:0' failed: Read-only file system [ 303.931104][ T6393] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 303.948534][ T6393] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 303.981202][ T6393] ft260 0003:0403:6030.000A: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 304.129225][ T6393] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 304.412830][ T26] audit: type=1326 audit(1784687338.377:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.3.1553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 304.492034][ T26] audit: type=1326 audit(1784687338.377:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.3.1553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 304.531656][ T6393] ft260 0003:0403:6030.000A: failed to retrieve status: -32 [ 304.599285][ T26] audit: type=1326 audit(1784687338.377:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.3.1553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 304.760275][ T26] audit: type=1326 audit(1784687338.377:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.3.1553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 304.776624][ T4471] udevd[4471]: symlink '../../loop0' '/dev/disk/by-diskseq/200.tmp-b7:0' failed: Read-only file system [ 304.851737][ T4893] usb 8-1: USB disconnect, device number 6 [ 304.911745][ T26] audit: type=1326 audit(1784687338.377:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.3.1553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 304.976330][ T26] audit: type=1326 audit(1784687338.377:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.3.1553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 305.039525][ T9378] fido_id[9378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 305.057094][ T26] audit: type=1326 audit(1784687338.377:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.3.1553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 305.093284][ T26] audit: type=1326 audit(1784687338.377:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.3.1553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 305.156348][ T26] audit: type=1326 audit(1784687338.377:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.3.1553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 305.187450][ T26] audit: type=1326 audit(1784687338.377:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.3.1553" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f357c79de99 code=0x7ffc0000 [ 305.381093][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1561'. [ 305.439951][ T4938] udevd[4938]: symlink '../../loop0' '/dev/disk/by-diskseq/200.tmp-b7:0' failed: Read-only file system [ 305.500364][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/202.tmp-b7:7' failed: Read-only file system [ 305.813829][ T4938] udevd[4938]: symlink '../../loop0' '/dev/disk/by-diskseq/200.tmp-b7:0' failed: Read-only file system [ 306.146624][ T4938] udevd[4938]: symlink '../../loop0' '/dev/disk/by-diskseq/200.tmp-b7:0' failed: Read-only file system [ 306.279988][ T9392] loop5: detected capacity change from 0 to 32768 [ 306.390022][ T4471] udevd[4471]: symlink '../../loop0' '/dev/disk/by-diskseq/200.tmp-b7:0' failed: Read-only file system [ 306.440896][ T9392] XFS (loop5): Mounting V5 Filesystem [ 306.476208][ T4442] udevd[4442]: symlink '../../loop7' '/dev/disk/by-diskseq/202.tmp-b7:7' failed: Read-only file system [ 306.526475][ T9422] netlink: 'syz.4.1569': attribute type 1 has an invalid length. [ 306.623452][ T9422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.646157][ T9392] XFS (loop5): Ending clean mount [ 306.759414][ T4506] XFS (loop5): Unmounting Filesystem [ 306.796189][ T9422] bond2: (slave geneve2): making interface the new active one [ 306.806450][ T9422] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 306.908187][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 307.728406][ T4938] udevd[4938]: symlink '../../loop5' '/dev/disk/by-diskseq/204.tmp-b7:5' failed: Read-only file system [ 307.939137][ T4938] udevd[4938]: symlink '../../loop5' '/dev/disk/by-diskseq/204.tmp-b7:5' failed: Read-only file system [ 308.085854][ T4938] udevd[4938]: symlink '../../loop0' '/dev/disk/by-diskseq/200.tmp-b7:0' failed: Read-only file system [ 308.124092][ T4471] udevd[4471]: symlink '../../loop5' '/dev/disk/by-diskseq/204.tmp-b7:5' failed: Read-only file system [ 308.298408][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/202.tmp-b7:7' failed: Read-only file system [ 308.368071][ T4938] udevd[4938]: symlink '../../loop0' '/dev/disk/by-diskseq/200.tmp-b7:0' failed: Read-only file system [ 308.497213][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/202.tmp-b7:7' failed: Read-only file system [ 308.584581][ T4938] udevd[4938]: symlink '../../loop0' '/dev/disk/by-diskseq/200.tmp-b7:0' failed: Read-only file system [ 308.880366][ T4938] udevd[4938]: symlink '../../loop7' '/dev/disk/by-diskseq/202.tmp-b7:7' failed: Read-only file system [ 309.034858][ T9480] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1587'. [ 309.159379][ T8096] ------------[ cut here ]------------ [ 309.165586][ T8096] WARNING: CPU: 1 PID: 8096 at net/mac80211/ibss.c:500 ieee80211_ibss_csa_beacon+0x5b4/0x680 [ 309.176049][ T8096] Modules linked in: [ 309.180002][ T8096] CPU: 1 PID: 8096 Comm: kworker/u4:51 Not tainted syzkaller #0 [ 309.187772][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 309.197925][ T8096] Workqueue: phy18 ieee80211_csa_finalize_work [ 309.204529][ T8096] RIP: 0010:ieee80211_ibss_csa_beacon+0x5b4/0x680 [ 309.210994][ T8096] Code: f7 c6 05 ac 26 63 04 01 48 c7 c7 b0 b4 a6 8b be fd 01 00 00 48 c7 c2 40 b5 a6 8b e8 d6 2a bb f7 e9 69 fe ff ff e8 1c a8 d8 f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 0b a8 d8 f7 0f 0b e9 b4 fa [ 309.230828][ T8096] RSP: 0018:ffffc90010a0fb70 EFLAGS: 00010293 [ 309.236981][ T8096] RAX: ffffffff89a97984 RBX: ffff88805d098740 RCX: ffff88802d5f3c00 [ 309.245064][ T8096] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 309.253133][ T8096] RBP: 1ffff11008193ab5 R08: ffffffff90b10307 R09: 1ffffffff2162060 [ 309.255854][ T4938] udevd[4938]: symlink '../../loop5' '/dev/disk/by-diskseq/204.tmp-b7:5' failed: Read-only file system [ 309.261213][ T8096] R10: dffffc0000000000 R11: fffffbfff2162061 R12: dffffc0000000000 [ 309.280358][ T8096] R13: ffff888040c9dac8 R14: ffff888040c9cc80 R15: 0000000000000000 [ 309.288443][ T8096] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 309.297482][ T8096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.304200][ T8096] CR2: 000055555acf84e8 CR3: 0000000053379000 CR4: 00000000003506e0 [ 309.312271][ T8096] DR0: 0000000000000013 DR1: 00000000000001f8 DR2: 0000000000000084 [ 309.320298][ T8096] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.328408][ T8096] Call Trace: [ 309.331743][ T8096] [ 309.334778][ T8096] ? ieee80211_ibss_finish_csa+0x299/0x390 [ 309.340650][ T8096] ieee80211_csa_finalize+0x4ef/0xc60 [ 309.346156][ T8096] ieee80211_csa_finalize_work+0xf2/0x130 [ 309.352069][ T8096] ? process_one_work+0x7b4/0x1160 [ 309.357236][ T8096] process_one_work+0x8ab/0x1160 [ 309.362396][ T8096] ? worker_detach_from_pool+0x240/0x240 [ 309.368090][ T8096] ? _raw_spin_lock_irq+0xb7/0xf0 [ 309.373230][ T8096] ? _raw_spin_lock_irqsave+0x100/0x100 [ 309.378831][ T8096] ? wq_worker_running+0x97/0x190 [ 309.383976][ T8096] worker_thread+0xaf5/0x12a0 [ 309.388717][ T8096] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 309.394896][ T8096] kthread+0x29d/0x330 [ 309.399008][ T8096] ? worker_clr_flags+0x1a0/0x1a0 [ 309.404159][ T8096] ? kthread_blkcg+0xd0/0xd0 [ 309.408807][ T8096] ret_from_fork+0x1f/0x30 [ 309.413336][ T8096] [ 309.416380][ T8096] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 309.423764][ T8096] CPU: 1 PID: 8096 Comm: kworker/u4:51 Not tainted syzkaller #0 [ 309.431515][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 309.441632][ T8096] Workqueue: phy18 ieee80211_csa_finalize_work [ 309.447900][ T8096] Call Trace: [ 309.451211][ T8096] [ 309.454235][ T8096] dump_stack_lvl+0x188/0x24e [ 309.458934][ T8096] ? memcpy+0x3c/0x60 [ 309.462932][ T8096] ? show_regs_print_info+0x12/0x12 [ 309.468242][ T8096] ? load_image+0x410/0x410 [ 309.472763][ T8096] panic+0x2d3/0x710 [ 309.476843][ T8096] ? bpf_jit_dump+0xd0/0xd0 [ 309.481364][ T8096] ? ret_from_fork+0x1f/0x30 [ 309.485972][ T8096] __warn+0x2f8/0x4f0 [ 309.489969][ T8096] ? ieee80211_ibss_csa_beacon+0x5b4/0x680 [ 309.495790][ T8096] ? ieee80211_ibss_csa_beacon+0x5b4/0x680 [ 309.501605][ T8096] report_bug+0x2ba/0x4f0 [ 309.505945][ T8096] ? ieee80211_ibss_csa_beacon+0x5b4/0x680 [ 309.511770][ T8096] handle_bug+0x3a/0x70 [ 309.515936][ T8096] exc_invalid_op+0x16/0x40 [ 309.520447][ T8096] asm_exc_invalid_op+0x16/0x20 [ 309.525306][ T8096] RIP: 0010:ieee80211_ibss_csa_beacon+0x5b4/0x680 [ 309.532006][ T8096] Code: f7 c6 05 ac 26 63 04 01 48 c7 c7 b0 b4 a6 8b be fd 01 00 00 48 c7 c2 40 b5 a6 8b e8 d6 2a bb f7 e9 69 fe ff ff e8 1c a8 d8 f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 0b a8 d8 f7 0f 0b e9 b4 fa [ 309.551629][ T8096] RSP: 0018:ffffc90010a0fb70 EFLAGS: 00010293 [ 309.557711][ T8096] RAX: ffffffff89a97984 RBX: ffff88805d098740 RCX: ffff88802d5f3c00 [ 309.565704][ T8096] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 309.573702][ T8096] RBP: 1ffff11008193ab5 R08: ffffffff90b10307 R09: 1ffffffff2162060 [ 309.581681][ T8096] R10: dffffc0000000000 R11: fffffbfff2162061 R12: dffffc0000000000 [ 309.589663][ T8096] R13: ffff888040c9dac8 R14: ffff888040c9cc80 R15: 0000000000000000 [ 309.597646][ T8096] ? ieee80211_ibss_csa_beacon+0x5b4/0x680 [ 309.603483][ T8096] ? ieee80211_ibss_finish_csa+0x299/0x390 [ 309.609313][ T8096] ieee80211_csa_finalize+0x4ef/0xc60 [ 309.614701][ T8096] ieee80211_csa_finalize_work+0xf2/0x130 [ 309.620519][ T8096] ? process_one_work+0x7b4/0x1160 [ 309.625683][ T8096] process_one_work+0x8ab/0x1160 [ 309.630650][ T8096] ? worker_detach_from_pool+0x240/0x240 [ 309.636316][ T8096] ? _raw_spin_lock_irq+0xb7/0xf0 [ 309.641348][ T8096] ? _raw_spin_lock_irqsave+0x100/0x100 [ 309.647010][ T8096] ? wq_worker_running+0x97/0x190 [ 309.652061][ T8096] worker_thread+0xaf5/0x12a0 [ 309.656766][ T8096] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 309.662677][ T8096] kthread+0x29d/0x330 [ 309.666748][ T8096] ? worker_clr_flags+0x1a0/0x1a0 [ 309.672128][ T8096] ? kthread_blkcg+0xd0/0xd0 [ 309.676815][ T8096] ret_from_fork+0x1f/0x30 [ 309.681259][ T8096] [ 309.684544][ T8096] Kernel Offset: disabled [ 309.688978][ T8096] Rebooting in 86400 seconds..