last executing test programs: 27m56.428654984s ago: executing program 32 (id=182): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x9}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) 27m12.938794778s ago: executing program 33 (id=762): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000340)=0x1000000, 0x4) 21m52.308378396s ago: executing program 34 (id=5651): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000bc0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0xa0) 20m29.595783896s ago: executing program 35 (id=6873): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) 9m2.78663933s ago: executing program 36 (id=17886): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7ef8, 0xd6f567cd89dbf67c}], 0x1, 0x0) semop(r0, &(0x7f0000000000), 0x1) 7m59.395165839s ago: executing program 8 (id=18526): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @private1, 0xbf}, {0xa, 0x4e21, 0x2800, @loopback, 0x4}, r1, 0x9}}, 0x48) 7m59.133307037s ago: executing program 8 (id=18533): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000053c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000005480)={0x0, 0x8, 0x3cdb, {0x0, 0x10000}}) 7m58.881844015s ago: executing program 8 (id=18537): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r0, 0x0, 0x0) 7m58.702991441s ago: executing program 8 (id=18540): syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x18d442d, 0x0) 7m58.078730791s ago: executing program 8 (id=18545): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="050000009f60000000000000e7000000", @ANYRES64=0x0, @ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) 7m57.727345682s ago: executing program 8 (id=18547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd26, 0x0, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x22048041}, 0x10) 7m57.277420036s ago: executing program 37 (id=18547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd26, 0x0, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x22048041}, 0x10) 5m16.046627405s ago: executing program 4 (id=20246): openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 5m15.898487391s ago: executing program 4 (id=20249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250a000000180004801300010062726f6164636173742d6c696ec34b"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x48004) 5m15.687305507s ago: executing program 4 (id=20253): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x500, 0x5, 0x38414761, 0x0, 0x3, [{0xfffffffe, 0x9}, {0xfffffffe, 0x10000}, {0x3, 0x200}, {0x6, 0x3ff}, {0x2, 0x1ff}, {0x2, 0xd}, {0x42}, {0x1810, 0x8}], 0x8e, 0x6, 0x0, 0x1, 0x3}}) 5m15.546045222s ago: executing program 4 (id=20256): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000feffffff0000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a0000008500000006000000b7080000000000007baaf8ff00000000b5080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 5m15.374550567s ago: executing program 4 (id=20259): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000240)) 5m15.202874383s ago: executing program 4 (id=20262): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000004c0)={'sit0\x00', 0x0}) 5m0.115113906s ago: executing program 38 (id=20262): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000004c0)={'sit0\x00', 0x0}) 3m24.938054901s ago: executing program 9 (id=21361): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x8, 0xf, 0x0, 0x1, 0xb69}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000000000000004000010018010000202078a500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fbffffff850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 3m24.67136628s ago: executing program 9 (id=21364): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0xfff, &(0x7f00000014c0)=""/4095, 0x0, 0xd}, 0x94) 3m24.363575259s ago: executing program 9 (id=21368): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 3m24.059299009s ago: executing program 9 (id=21372): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000040)={0xa0202, 0x0, 0x11}, 0x18) 3m23.743860939s ago: executing program 9 (id=21376): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x30, r1, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x30}}, 0x3000c000) 3m23.198067897s ago: executing program 9 (id=21381): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfbfffff2, 0x800005f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x23, 0x7fff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x2, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432df, 0xcb, 0xf9, 0x5, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x10000001, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x10002, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x8005, 0xb, 0x4, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x9, 0x6d01, 0x5, 0x7fffffff, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x9, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 3m22.646740115s ago: executing program 39 (id=21381): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfbfffff2, 0x800005f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x23, 0x7fff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x2, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432df, 0xcb, 0xf9, 0x5, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x10000001, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x10002, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x8005, 0xb, 0x4, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x9, 0x6d01, 0x5, 0x7fffffff, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x9, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 1m35.097160976s ago: executing program 1 (id=22532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1m34.908149582s ago: executing program 1 (id=22536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 1m34.713496849s ago: executing program 1 (id=22539): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) 1m34.530961064s ago: executing program 1 (id=22542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x40, r1, 0x7, 0x70bd29, 0x50000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1m34.304046422s ago: executing program 1 (id=22545): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x103) 1m34.05447035s ago: executing program 1 (id=22547): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000280), 0x0, 0x0, 0x0) 1m18.962620273s ago: executing program 40 (id=22547): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000280), 0x0, 0x0, 0x0) 41.038081246s ago: executing program 5 (id=23066): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4112, 0x1010}], 0x1}, 0x10100) 40.830129793s ago: executing program 5 (id=23069): syz_mount_image$nilfs2(&(0x7f0000002680), &(0x7f00000026c0)='./file0\x00', 0x0, &(0x7f0000002700), 0x1, 0x267d, &(0x7f0000002740)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f0000000040)={0x2, 0x1, 0x8, 0x0, 0x7, 0x4fe4, 0x2401}) 39.719239008s ago: executing program 5 (id=23083): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd2, &(0x7f0000000040), &(0x7f0000000240)=0x4) 39.380083229s ago: executing program 5 (id=23090): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000006640)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYBLOB="665134ec1bdd9f0d3c85f7f044fb9b61056494501f1b9bd08326df69b6a59a873a932b5d62e563eea7457b7248182065bc8be2d7f9efc6477fe948ca12322ebcdce621fdae6f9756938d7902eabe21deaddc305bbb7dc3f32fd8447fe99f8481e34816ff645bc5771882f2471af71e3d105a5c2996145e072ea884d2ef07975fd984a94f5aa6c585b6364339229b75eae2f6513c6d5c57d692ec19558a83b1276fd9f666cf8bd8cf5b2239989248e3d6dfbab467b7c0fc8421dbf4bd3ceeeb746536445f7126cacb63786e364dfdd9fbf0e7a35a534b0b3600"/232, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES16], 0x1, 0x620d, &(0x7f0000000200)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xc, 0x3a, 'exfat\x00', 0x3a, 'exfat\x00', 0x3a, './file1', 0x3a, [0x46]}, 0x34) 37.777948071s ago: executing program 5 (id=23107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "f7"}]}], {0x14}}, 0x7c}}, 0x0) 37.003441165s ago: executing program 5 (id=23119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x9}]}, 0x34}}, 0x4044890) 36.605692878s ago: executing program 41 (id=23119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x9}]}, 0x34}}, 0x4044890) 2.335062055s ago: executing program 2 (id=23473): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x114) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'vlan1\x00', {0x3}, 0x7fff}) 2.102803152s ago: executing program 2 (id=23478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x30, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x30}}, 0x0) 1.986168086s ago: executing program 0 (id=23480): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000002cc0)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'cp936'}}, {@gid}, {@type={'type', 0x3d, "e481e91c"}}, {@gid}, {@nobarrier}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000000680)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 1.86281552s ago: executing program 7 (id=23482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000014000200776732000000002000000000000000003800088034"], 0x60}, 0x1, 0x0, 0x0, 0x4094}, 0x20000010) 1.85284566s ago: executing program 2 (id=23483): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x7f, 0x1, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0x2, 0x2, 0x18, 0x1, 0x6, 0xe, {0x3, 0xfffffeff, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}}, 0x0) 1.695352615s ago: executing program 0 (id=23485): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x8) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xffffffffffffffff) 1.643007287s ago: executing program 7 (id=23487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, r1, 0xe1a0b80db4190737, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8091}, 0x0) 1.55847127s ago: executing program 2 (id=23489): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 1.417484674s ago: executing program 6 (id=23490): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x1, @mcast2, 0x1}}}, 0x32) 1.409036055s ago: executing program 3 (id=23491): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="53b748bf412183542dd1cd69f07c", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.401990805s ago: executing program 0 (id=23492): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000002300)) 1.321342977s ago: executing program 7 (id=23493): syz_mount_image$nilfs2(&(0x7f0000000400), &(0x7f0000000f00)='./file0\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf19, &(0x7f0000003200)="$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") chdir(&(0x7f0000000100)='./file0\x00') truncate(&(0x7f0000000000)='./bus\x00', 0x9471) 1.204211761s ago: executing program 2 (id=23494): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000580)={'aio_iiro_16\x00', [0x8001, 0x2000000a, 0x4, 0x4, 0x2, 0xcc7, 0x7f, 0x7, 0x1, 0x7fff, 0x60, 0x1, 0x8, 0x40000002, 0x6, 0x4, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x10d, 0xf27, 0x3, 0xc, 0x8, 0x5, 0x40000006, 0x6, 0x10001, 0xfffffff4]}) 1.203632501s ago: executing program 6 (id=23495): unshare(0x2c020680) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5b, r0}, 0x38) 1.148136093s ago: executing program 3 (id=23496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.141046103s ago: executing program 0 (id=23497): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade36e9fe672ce5fbebe5b175c12cf16c48c2d4b61ce76443664e69106113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f386c", 0xfdef}], 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0xffffff64) 971.249498ms ago: executing program 6 (id=23498): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x0, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x8}}, 0x1c}}, 0x400c880) 894.347621ms ago: executing program 2 (id=23499): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0xf, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="2008750000007531f70ba381030000000000000000cbbb108505dc64a3a86d564fdc"], 0x0, 0x0, 0x0, 0x0}, 0x0) 893.752511ms ago: executing program 3 (id=23500): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04fd0506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x4804, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x1, 0x30, 0x69, 0x0, 0x8, 0x1, 0x0, @private=0xa010106, @dev={0xac, 0x14, 0x14, 0x3b}}, @dest_unreach={0x3, 0xc7c0567298e11ff4, 0x0, 0x0, 0xaf, 0x6, {0x5, 0x4, 0x2, 0x3e, 0xd5, 0x68, 0x803, 0x7, 0x16, 0x6b, @local, @dev={0xac, 0x14, 0x14, 0x12}}}}}}}, 0x0) 679.336268ms ago: executing program 6 (id=23501): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x3ff, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x2, 0x4) 679.133218ms ago: executing program 7 (id=23502): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) sendto$inet6(r0, &(0x7f0000000000)="ee", 0x1, 0x40043, &(0x7f0000000040)={0xa, 0x4e20, 0x8000008, @loopback, 0x1}, 0x1c) 659.648938ms ago: executing program 3 (id=23503): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) 526.937533ms ago: executing program 6 (id=23504): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x70bd2a}, 0x18}, 0x1, 0x0, 0x0, 0x110}, 0x4000040) 446.008425ms ago: executing program 7 (id=23505): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0xd8, 0x1403, 0x300, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4001}, 0x20000010) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 445.594025ms ago: executing program 3 (id=23506): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x0, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x6}) 304.46442ms ago: executing program 6 (id=23507): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000340)) 247.221422ms ago: executing program 0 (id=23508): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x9, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) 223.519872ms ago: executing program 3 (id=23509): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) 150.634455ms ago: executing program 7 (id=23510): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=23511): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x2, 0x83, 0x6, 0xb, 0x14, 0x6}}]}}]}, 0x148}}, 0x4008010) kernel console output (not intermixed with test programs): detected capacity change from 0 to 4096 [ 1640.493293][T24895] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1640.630397][T14646] EXT4-fs (loop2): unmounting filesystem. [ 1640.745354][T17479] EXT4-fs (loop7): unmounting filesystem. [ 1641.306403][T24930] device vlan3 entered promiscuous mode [ 1641.614343][T24941] loop2: detected capacity change from 0 to 64 [ 1641.675204][T24944] netlink: 24 bytes leftover after parsing attributes in process `syz.6.22167'. [ 1641.692427][T24941] syz.2.22165: attempt to access beyond end of device [ 1641.692427][T24941] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1641.696675][T24945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.22166'. [ 1641.742017][T24941] Buffer I/O error on dev loop2, logical block 512, async page read [ 1641.779817][T24941] syz.2.22165: attempt to access beyond end of device [ 1641.779817][T24941] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1641.854794][T24941] Buffer I/O error on dev loop2, logical block 56576, async page read [ 1641.994046][T24953] loop7: detected capacity change from 0 to 256 [ 1642.120975][T24953] FAT-fs (loop7): Directory bread(block 64) failed [ 1642.158065][T24953] FAT-fs (loop7): Directory bread(block 65) failed [ 1642.185400][T24953] FAT-fs (loop7): Directory bread(block 66) failed [ 1642.226831][T24953] FAT-fs (loop7): Directory bread(block 67) failed [ 1642.251366][T24953] FAT-fs (loop7): Directory bread(block 68) failed [ 1642.319078][T24953] FAT-fs (loop7): Directory bread(block 69) failed [ 1642.325751][T24953] FAT-fs (loop7): Directory bread(block 70) failed [ 1642.348957][T24962] vivid-001: disconnect [ 1642.380389][T24961] vivid-001: reconnect [ 1642.415721][T24953] FAT-fs (loop7): Directory bread(block 71) failed [ 1642.454530][T24953] FAT-fs (loop7): Directory bread(block 72) failed [ 1642.504294][T24953] FAT-fs (loop7): Directory bread(block 73) failed [ 1642.512940][T24970] vivid-002: disconnect [ 1642.873321][T24975] loop2: detected capacity change from 0 to 2048 [ 1642.967201][T24975] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1642.990540][T24983] loop1: detected capacity change from 0 to 1024 [ 1643.264565][T24965] vivid-002: reconnect [ 1643.265383][T24995] loop7: detected capacity change from 0 to 1024 [ 1643.296412][T24995] EXT4-fs: inline encryption not supported [ 1643.329034][T24995] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1643.396263][T24995] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #3: block 1: comm syz.7.22186: lblock 1 mapped to illegal pblock 1 (length 1) [ 1643.421333][T14646] EXT4-fs (loop2): unmounting filesystem. [ 1643.552948][T24995] EXT4-fs (loop7): Remounting filesystem read-only [ 1643.567404][T24995] Quota error (device loop7): write_blk: dquota write failed [ 1643.585383][T24995] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1643.630738][T24995] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.22186: Failed to acquire dquot type 0 [ 1643.689135][T24995] EXT4-fs (loop7): Remounting filesystem read-only [ 1643.716317][T24995] EXT4-fs error (device loop7): ext4_free_blocks:6220: comm syz.7.22186: Freeing blocks not in datazone - block = 0, count = 4096 [ 1643.758501][ T953] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1643.770022][T24995] EXT4-fs (loop7): Remounting filesystem read-only [ 1643.801481][T24995] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.22186: Invalid inode bitmap blk 0 in block_group 0 [ 1643.818645][ T2782] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 1643.879061][ T2782] EXT4-fs (loop7): Remounting filesystem read-only [ 1643.888794][T24995] EXT4-fs (loop7): Remounting filesystem read-only [ 1643.895367][T24995] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 1643.908469][ T2782] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1643.937370][ T2782] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:9: Failed to release dquot type 0 [ 1643.978901][ T2782] EXT4-fs (loop7): Remounting filesystem read-only [ 1643.988470][T24995] EXT4-fs (loop7): Remounting filesystem read-only [ 1644.002412][ T953] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1644.017679][T24995] EXT4-fs (loop7): 1 orphan inode deleted [ 1644.044615][T24995] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1644.048695][ T953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.098587][ T953] usb 2-1: Product: syz [ 1644.102815][ T953] usb 2-1: Manufacturer: syz [ 1644.127808][ T953] usb 2-1: SerialNumber: syz [ 1644.151348][ T953] usb 2-1: config 0 descriptor?? [ 1644.270363][T17479] EXT4-fs (loop7): unmounting filesystem. [ 1644.404979][ T953] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1644.569374][T25009] loop3: detected capacity change from 0 to 32768 [ 1644.654789][T25034] netlink: 140 bytes leftover after parsing attributes in process `syz.7.22201'. [ 1644.672170][T25036] loop6: detected capacity change from 0 to 512 [ 1644.678957][T25034] netlink: 16 bytes leftover after parsing attributes in process `syz.7.22201'. [ 1644.706391][T25009] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1644.816055][ T953] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1644.843562][ T953] usb 2-1: USB disconnect, device number 19 [ 1644.857048][T25036] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1644.926246][T25036] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #2: comm syz.6.22200: corrupted inode contents [ 1645.014275][T25036] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #2: comm syz.6.22200: mark_inode_dirty error [ 1645.059015][ T4290] ocfs2: Unmounting device (7,3) on (node local) [ 1645.065664][T25044] loop2: detected capacity change from 0 to 4096 [ 1645.113763][T25036] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #2: comm syz.6.22200: corrupted inode contents [ 1645.161532][T25048] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #2: comm syz.6.22200: corrupted inode contents [ 1645.217489][T25052] netlink: 'syz.7.22206': attribute type 2 has an invalid length. [ 1645.266476][T25048] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #2: comm syz.6.22200: mark_inode_dirty error [ 1645.317634][T25048] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #2: comm syz.6.22200: corrupted inode contents [ 1645.351263][T25048] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.22200: mark_inode_dirty error [ 1645.411190][T25048] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #2: comm syz.6.22200: corrupted inode contents [ 1645.476297][T25048] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #2: comm syz.6.22200: mark_inode_dirty error [ 1645.764846][T22681] EXT4-fs (loop6): unmounting filesystem. [ 1645.856821][ C1] vkms_vblank_simulate: vblank timer overrun [ 1646.102098][T25081] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22216'. [ 1646.258835][T25081] device gretap0 entered promiscuous mode [ 1646.519375][T25099] netlink: 616 bytes leftover after parsing attributes in process `syz.3.22221'. [ 1646.554301][T25102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22225'. [ 1646.781259][T25107] loop6: detected capacity change from 0 to 1024 [ 1647.244857][T25134] loop1: detected capacity change from 0 to 128 [ 1647.445100][T25132] loop6: detected capacity change from 0 to 4096 [ 1647.513479][T25132] ntfs3: loop6: Failed to load $Extend. [ 1647.563364][T25143] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22239'. [ 1647.601781][T25132] ntfs3: loop6: ino=5, "/" directory corrupted [ 1647.638666][T25132] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1647.929100][T25157] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22244'. [ 1648.635146][T25178] loop6: detected capacity change from 0 to 8192 [ 1648.667156][T25178] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1648.681150][T25191] netlink: 5 bytes leftover after parsing attributes in process `syz.3.22257'. [ 1648.708098][T25178] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 1648.752232][T25178] REISERFS (device loop6): using ordered data mode [ 1648.760812][T25178] reiserfs: using flush barriers [ 1648.768862][T12033] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1648.794551][T25178] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1648.878490][T25178] REISERFS (device loop6): checking transaction log (loop6) [ 1648.893958][T25178] REISERFS (device loop6): Using r5 hash to sort names [ 1648.915916][T25178] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 1648.958320][T12033] usb 3-1: Using ep0 maxpacket: 32 [ 1648.965057][T12033] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 148, changing to 11 [ 1649.018348][T12033] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 1649.060938][T12033] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1649.084706][T12033] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1649.094938][T12033] usb 3-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 1649.117976][T12033] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.148698][T12033] usb 3-1: config 0 descriptor?? [ 1649.164284][T25180] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1649.176641][ C1] vkms_vblank_simulate: vblank timer overrun [ 1649.585525][T12033] hid (null): unknown global tag 0xe [ 1649.603213][T12033] asus 0003:048D:CE50.002A: unknown main item tag 0x2 [ 1649.639654][T12033] asus 0003:048D:CE50.002A: unknown global tag 0xe [ 1649.660965][T12033] asus 0003:048D:CE50.002A: item 0 2 1 14 parsing failed [ 1649.682428][T12033] asus 0003:048D:CE50.002A: Asus hid parse failed: -22 [ 1649.698096][T12033] asus: probe of 0003:048D:CE50.002A failed with error -22 [ 1649.705800][T25214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22265'. [ 1649.789676][T12033] usb 3-1: USB disconnect, device number 12 [ 1649.905055][T25202] loop1: detected capacity change from 0 to 32768 [ 1650.057145][ T4288] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1650.068190][ T4288] CPU: 1 PID: 4288 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1650.075772][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1650.085856][ T4288] Workqueue: hci0 hci_rx_work [ 1650.090652][ T4288] Call Trace: [ 1650.092866][T25226] loop3: detected capacity change from 0 to 256 [ 1650.093932][ T4288] [ 1650.103183][ T4288] dump_stack_lvl+0x188/0x24e [ 1650.107914][ T4288] ? show_regs_print_info+0x12/0x12 [ 1650.113148][ T4288] ? load_image+0x400/0x400 [ 1650.117701][ T4288] sysfs_create_dir_ns+0x26a/0x290 [ 1650.122928][ T4288] ? sysfs_warn_dup+0xa0/0xa0 [ 1650.127646][ T4288] ? do_raw_spin_unlock+0x11d/0x230 [ 1650.132878][ T4288] kobject_add_internal+0x61c/0xcc0 [ 1650.138212][ T4288] kobject_add+0x160/0x230 [ 1650.142671][ T4288] ? kobject_init+0x1d0/0x1d0 [ 1650.147386][ T4288] ? klist_children_get+0x50/0x50 [ 1650.152507][ T4288] ? get_device_parent+0x121/0x3f0 [ 1650.157644][ T4288] device_add+0x48c/0x1000 [ 1650.162089][ T4288] ? kmem_cache_free+0xf7/0x290 [ 1650.167104][ T4288] hci_conn_add_sysfs+0xd1/0x1e0 [ 1650.172157][ T4288] le_conn_complete_evt+0x1062/0x1670 [ 1650.177565][ T4288] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1650.183833][ T4288] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1650.189472][ T4288] ? skb_pull_data+0xf7/0x200 [ 1650.194219][ T4288] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1650.200128][ T4288] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 1650.206561][ T4288] ? hci_remote_host_features_evt+0x270/0x270 [ 1650.212633][ T4288] hci_event_packet+0x7b9/0x1280 [ 1650.217580][ T4288] ? bis_list+0x280/0x280 [ 1650.221917][ T4288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1650.227891][ T4288] ? kcov_remote_start+0x4c7/0x7e0 [ 1650.233007][ T4288] ? mt_dump_node+0x750/0x1920 [ 1650.237778][ T4288] ? hci_send_to_monitor+0x9c/0x4a0 [ 1650.242989][ T4288] hci_rx_work+0x3eb/0xd40 [ 1650.247410][ T4288] ? _raw_spin_unlock+0x40/0x40 [ 1650.252276][ T4288] ? process_one_work+0x7b0/0x1160 [ 1650.257454][ T4288] process_one_work+0x8a2/0x1160 [ 1650.262422][ T4288] ? worker_detach_from_pool+0x240/0x240 [ 1650.268058][ T4288] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1650.273101][ T4288] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1650.278652][ T4288] ? kthread_data+0x4b/0xc0 [ 1650.283224][ T4288] worker_thread+0xaa2/0x1270 [ 1650.287933][ T4288] kthread+0x29d/0x330 [ 1650.291995][ T4288] ? worker_clr_flags+0x1a0/0x1a0 [ 1650.297037][ T4288] ? kthread_blkcg+0xd0/0xd0 [ 1650.301674][ T4288] ret_from_fork+0x1f/0x30 [ 1650.306237][ T4288] [ 1650.309274][ C1] vkms_vblank_simulate: vblank timer overrun [ 1650.316284][ T4288] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1650.329857][ T4288] Bluetooth: hci0: failed to register connection device [ 1650.537042][T25231] loop1: detected capacity change from 0 to 256 [ 1650.789213][T25235] loop2: detected capacity change from 0 to 2048 [ 1650.899074][T25241] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1651.509058][T25256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22281'. [ 1651.652144][T25232] loop7: detected capacity change from 0 to 32768 [ 1651.729346][ T4288] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1651.740896][ T4288] CPU: 1 PID: 4288 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1651.748487][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1651.758572][ T4288] Workqueue: hci2 hci_rx_work [ 1651.763293][ T4288] Call Trace: [ 1651.766771][ T4288] [ 1651.769748][ T4288] dump_stack_lvl+0x188/0x24e [ 1651.774463][ T4288] ? show_regs_print_info+0x12/0x12 [ 1651.779707][ T4288] ? load_image+0x400/0x400 [ 1651.784254][ T4288] sysfs_create_dir_ns+0x26a/0x290 [ 1651.789396][ T4288] ? sysfs_warn_dup+0xa0/0xa0 [ 1651.794105][ T4288] ? do_raw_spin_unlock+0x11d/0x230 [ 1651.799334][ T4288] kobject_add_internal+0x61c/0xcc0 [ 1651.804572][ T4288] kobject_add+0x160/0x230 [ 1651.809024][ T4288] ? kobject_init+0x1d0/0x1d0 [ 1651.813905][ T4288] ? klist_children_get+0x50/0x50 [ 1651.818956][ T4288] ? get_device_parent+0x121/0x3f0 [ 1651.824101][ T4288] device_add+0x48c/0x1000 [ 1651.828548][ T4288] ? kmem_cache_free+0xf7/0x290 [ 1651.833432][ T4288] hci_conn_add_sysfs+0xd1/0x1e0 [ 1651.838412][ T4288] le_conn_complete_evt+0x1062/0x1670 [ 1651.843838][ T4288] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1651.850122][ T4288] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1651.856397][ T4288] ? skb_pull_data+0xf7/0x200 [ 1651.861117][ T4288] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1651.867045][ T4288] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 1651.873501][ T4288] ? hci_remote_host_features_evt+0x270/0x270 [ 1651.879604][ T4288] hci_event_packet+0x7b9/0x1280 [ 1651.884594][ T4288] ? bis_list+0x280/0x280 [ 1651.888958][ T4288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1651.894903][ T4288] ? kcov_remote_start+0x4c7/0x7e0 [ 1651.900050][ T4288] ? mt_dump_node+0x750/0x1920 [ 1651.904835][ T4288] ? hci_send_to_monitor+0x9c/0x4a0 [ 1651.910153][ T4288] hci_rx_work+0x3eb/0xd40 [ 1651.914606][ T4288] ? _raw_spin_unlock+0x40/0x40 [ 1651.919590][ T4288] ? process_one_work+0x7b0/0x1160 [ 1651.924767][ T4288] process_one_work+0x8a2/0x1160 [ 1651.929754][ T4288] ? worker_detach_from_pool+0x240/0x240 [ 1651.935447][ T4288] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1651.940503][ T4288] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1651.946091][ T4288] ? kthread_data+0x4b/0xc0 [ 1651.950640][ T4288] worker_thread+0xaa2/0x1270 [ 1651.955370][ T4288] kthread+0x29d/0x330 [ 1651.959462][ T4288] ? worker_clr_flags+0x1a0/0x1a0 [ 1651.964537][ T4288] ? kthread_blkcg+0xd0/0xd0 [ 1651.969159][ T4288] ret_from_fork+0x1f/0x30 [ 1651.973613][ T4288] [ 1651.978995][ T4288] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1651.995059][ T4288] Bluetooth: hci2: failed to register connection device [ 1652.063174][T25232] XFS (loop7): Mounting V5 Filesystem [ 1652.149783][T25232] XFS (loop7): Ending clean mount [ 1652.333535][T17479] XFS (loop7): Unmounting Filesystem [ 1653.237864][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1653.632065][T25297] loop1: detected capacity change from 0 to 32768 [ 1653.796426][T25297] ialloc: diAlloc returned -5! [ 1653.980033][T25345] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1654.116857][T25353] loop3: detected capacity change from 0 to 128 [ 1654.176078][T25353] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1654.279283][T25353] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1654.398497][T25364] loop1: detected capacity change from 0 to 1024 [ 1654.439918][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 1654.635875][ T4464] Process accounting resumed [ 1654.724422][T25368] Process accounting resumed [ 1654.824590][T25376] loop7: detected capacity change from 0 to 64 [ 1654.841285][T25375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22322'. [ 1654.885162][T25375] batman_adv: batadv0: Interface deactivated: macvlan1 [ 1655.085006][T25375] batman_adv: batadv0: Removing interface: macvlan1 [ 1655.102661][T25380] device macsec1 entered promiscuous mode [ 1655.102681][T25380] device vlan1 entered promiscuous mode [ 1655.120211][T25380] device vlan1 left promiscuous mode [ 1655.134022][T25355] loop2: detected capacity change from 0 to 32768 [ 1655.647664][ T4467] usb 8-1: new full-speed USB device number 55 using dummy_hcd [ 1655.849837][ T4467] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.882403][T25402] loop3: detected capacity change from 0 to 512 [ 1655.889280][ T4467] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1655.916635][ T4467] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1655.928914][ T4467] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.942049][T25402] EXT4-fs (loop3): filesystem is read-only [ 1655.963125][ T4467] usb 8-1: config 0 descriptor?? [ 1656.010903][T25408] loop2: detected capacity change from 0 to 4096 [ 1656.028393][ T4467] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1656.055890][ T4467] dvb-usb: bulk message failed: -22 (3/0) [ 1656.094612][ T4467] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1656.131436][T25410] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1656.142710][T25408] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 2 already freed [ 1656.148259][ T4467] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1656.180085][T25408] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 1656.183400][ T4467] usb 8-1: media controller created [ 1656.220342][ T4467] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1656.300916][ T4467] dvb-usb: bulk message failed: -22 (6/0) [ 1656.306753][ T4467] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1656.361168][ T4467] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input96 [ 1656.403699][ T4467] dvb-usb: schedule remote query interval to 150 msecs. [ 1656.438056][ T4467] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1656.483325][ T4467] usb 8-1: USB disconnect, device number 55 [ 1656.906326][ T4467] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1657.103360][T25440] device bridge0 entered promiscuous mode [ 1657.337724][T10443] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1657.429534][T25431] loop7: detected capacity change from 0 to 8192 [ 1657.478302][T25452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22358'. [ 1657.489073][T25431] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 1657.537529][T10443] usb 3-1: Using ep0 maxpacket: 16 [ 1657.547017][T10443] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1657.587101][T10443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.590601][ T26] audit: type=1326 audit(1657.659:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.3.22359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea419ce59 code=0x7ffc0000 [ 1657.623036][T10443] usb 3-1: Product: syz [ 1657.637332][T10443] usb 3-1: Manufacturer: syz [ 1657.652693][T10443] usb 3-1: SerialNumber: syz [ 1657.688531][T10443] usb 3-1: config 0 descriptor?? [ 1657.712282][T10443] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1657.727106][ T26] audit: type=1326 audit(1657.699:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.3.22359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fcea419ce59 code=0x7ffc0000 [ 1657.735350][T25431] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1657.832942][ T26] audit: type=1326 audit(1657.699:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.3.22359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea419ce59 code=0x7ffc0000 [ 1657.857965][T25431] ntfs3: loop7: Failed to load $Extend. [ 1657.983578][ T26] audit: type=1326 audit(1657.699:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.3.22359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea419ce59 code=0x7ffc0000 [ 1658.089332][ T26] audit: type=1326 audit(1657.699:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.3.22359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcea419ce59 code=0x7ffc0000 [ 1658.169573][T25470] [U] ¹é [ 1658.177629][ T4467] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1658.216028][ T26] audit: type=1326 audit(1657.699:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.3.22359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea419ce59 code=0x7ffc0000 [ 1658.319212][T10443] ssu100: probe of 3-1:0.0 failed with error -71 [ 1658.338335][T10443] usb 3-1: USB disconnect, device number 13 [ 1658.346218][ T26] audit: type=1326 audit(1657.699:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25455 comm="syz.3.22359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea419ce59 code=0x7ffc0000 [ 1658.370875][ T4467] usb 4-1: Using ep0 maxpacket: 16 [ 1658.379386][ T4467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1658.411073][ T4467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1658.447503][ T4467] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1658.461211][ T4467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.488801][ T4467] usb 4-1: config 0 descriptor?? [ 1658.570018][T25482] loop6: detected capacity change from 0 to 512 [ 1658.662098][T25459] loop1: detected capacity change from 0 to 32768 [ 1658.781529][T25482] EXT4-fs (loop6): 1 truncate cleaned up [ 1658.801440][ T11] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1658.814598][T25482] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1658.880513][ T11] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 1 [ 1658.921477][ T4467] hid-multitouch 0003:1FD2:6007.002B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 1659.016013][T25491] loop7: detected capacity change from 0 to 512 [ 1659.043375][T25495] loop2: detected capacity change from 0 to 512 [ 1659.081781][T25491] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1659.092236][T22681] EXT4-fs (loop6): unmounting filesystem. [ 1659.139173][T12033] usb 4-1: USB disconnect, device number 103 [ 1659.175531][T25495] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.22370: inode has both inline data and extents flags [ 1659.258173][T25492] fido_id[25492]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1659.327215][T25495] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.22370: couldn't read orphan inode 15 (err -117) [ 1659.357724][T25495] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1659.432201][T25502] loop1: detected capacity change from 0 to 4096 [ 1659.440533][T17479] EXT4-fs (loop7): unmounting filesystem. [ 1659.516796][T14646] EXT4-fs (loop2): unmounting filesystem. [ 1659.613110][T25507] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1659.688578][T25502] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 1660.195572][T25531] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 1660.252254][T25525] loop6: detected capacity change from 0 to 4096 [ 1661.052614][T25545] loop3: detected capacity change from 0 to 8192 [ 1661.139326][T25545] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1661.152669][T25545] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1661.162500][T25545] REISERFS (device loop3): using ordered data mode [ 1661.169303][T25545] reiserfs: using flush barriers [ 1661.197303][T25545] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1661.216149][T25545] REISERFS (device loop3): checking transaction log (loop3) [ 1661.393626][T25527] loop1: detected capacity change from 0 to 40427 [ 1661.428464][T25545] REISERFS (device loop3): Using tea hash to sort names [ 1661.435848][T25545] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1661.451500][T25533] loop2: detected capacity change from 0 to 32768 [ 1661.516053][T25527] F2FS-fs (loop1): invalid crc value [ 1661.558320][T25527] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1661.701061][T25527] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 1661.787503][T25527] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1662.251395][ C1] vkms_vblank_simulate: vblank timer overrun [ 1662.273801][T19719] syz-executor: attempt to access beyond end of device [ 1662.273801][T19719] loop1: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 1662.359368][T19719] syz-executor: attempt to access beyond end of device [ 1662.359368][T19719] loop1: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 1662.436026][T19719] F2FS-fs (loop1): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 1662.436071][T19719] F2FS-fs (loop1): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 1662.511116][T25585] loop3: detected capacity change from 0 to 512 [ 1662.550059][T25555] loop7: detected capacity change from 0 to 40427 [ 1662.598834][T25585] EXT4-fs: Ignoring removed nobh option [ 1662.604452][T25585] EXT4-fs: Ignoring removed mblk_io_submit option [ 1662.628501][T25555] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 1662.635544][T25555] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1662.706560][T25585] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1662.738138][T25585] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1662.778470][T25585] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.22398: attempt to clear invalid blocks 2 len 1 [ 1662.785835][T25555] F2FS-fs (loop7): invalid crc value [ 1662.812710][T25555] F2FS-fs (loop7): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 1662.851904][T25585] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1662.895889][T25555] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1662.957511][T25585] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.22398: invalid indirect mapped block 1819239214 (level 0) [ 1663.045613][T25585] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.22398: invalid indirect mapped block 1819239214 (level 1) [ 1663.071930][T25555] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1663.096943][T25585] EXT4-fs (loop3): 1 truncate cleaned up [ 1663.101391][T25555] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1663.125252][T25585] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1663.260555][T25585] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work [ 1663.299219][T25555] syz.7.22389: attempt to access beyond end of device [ 1663.299219][T25555] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1663.452632][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 1663.520834][T25612] loop2: detected capacity change from 0 to 512 [ 1663.589091][T25612] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1663.717959][T25612] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.22407: bad orphan inode 131083 [ 1663.738213][T25612] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1663.938662][T14646] EXT4-fs (loop2): unmounting filesystem. [ 1664.073774][T25634] loop3: detected capacity change from 0 to 256 [ 1664.098127][T25634] exfat: Deprecated parameter 'namecase' [ 1664.169337][T25634] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1664.844946][T25664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22426'. [ 1664.851361][T25659] loop3: detected capacity change from 0 to 4096 [ 1664.864642][T25664] netlink: 'syz.1.22426': attribute type 2 has an invalid length. [ 1664.905145][T25659] ntfs3: loop3: ino=3, Correct links count -> 2. [ 1664.923600][T25664] netlink: 'syz.1.22426': attribute type 1 has an invalid length. [ 1664.998409][T25664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22426'. [ 1665.009673][T25659] ntfs3: loop3: ino=5, "/" directory corrupted [ 1665.123728][T25670] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22429'. [ 1665.439270][T25683] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.448227][T25683] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.457383][T25683] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.466268][T25683] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.600439][T25689] loop1: detected capacity change from 0 to 64 [ 1665.909972][T25703] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1666.083158][T25705] genirq: Flags mismatch irq 10. 00000000 (das16m1) vs. 00000080 (virtio2) [ 1666.217371][T25713] loop7: detected capacity change from 0 to 512 [ 1666.235080][T25716] bridge0: port 3(veth1_macvtap) entered blocking state [ 1666.264859][T25716] bridge0: port 3(veth1_macvtap) entered disabled state [ 1666.347254][ T4467] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1666.388200][T25720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22447'. [ 1666.549142][ T4467] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1666.569627][ T4467] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.622872][ T4467] usb 2-1: config 0 descriptor?? [ 1666.632907][ T4467] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1667.046156][T25744] loop3: detected capacity change from 0 to 128 [ 1667.054499][ T4467] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1667.085394][ T4467] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1667.137782][T25744] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 1667.268137][ T4467] usb 2-1: USB disconnect, device number 20 [ 1667.722836][T25776] netlink: 536 bytes leftover after parsing attributes in process `syz.2.22469'. [ 1668.188231][T25796] program syz.7.22478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1668.599711][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.606081][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.846008][T25822] syz.6.22490[25822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1668.846107][T25822] syz.6.22490[25822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1670.080928][T25871] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1670.124719][T25833] loop6: detected capacity change from 0 to 40427 [ 1670.149478][T25871] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1670.166524][T25833] F2FS-fs (loop6): invalid crc value [ 1670.181009][T25833] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1670.184243][T25875] loop7: detected capacity change from 0 to 256 [ 1670.311084][T25875] FAT-fs (loop7): Directory bread(block 64) failed [ 1670.343867][T25833] F2FS-fs (loop6): Start checkpoint disabled! [ 1670.353929][T25875] FAT-fs (loop7): Directory bread(block 65) failed [ 1670.379787][T25833] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1670.399900][T25875] FAT-fs (loop7): Directory bread(block 66) failed [ 1670.424366][T25875] FAT-fs (loop7): Directory bread(block 67) failed [ 1670.440372][T25875] FAT-fs (loop7): Directory bread(block 68) failed [ 1670.455273][T25875] FAT-fs (loop7): Directory bread(block 69) failed [ 1670.469517][T25833] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=4000000, run fsck to fix. [ 1670.485056][T25880] smc: net device vcan0 applied user defined pnetid SYZ1 [ 1670.503062][T25875] FAT-fs (loop7): Directory bread(block 70) failed [ 1670.515046][T25875] FAT-fs (loop7): Directory bread(block 71) failed [ 1670.543271][T25875] FAT-fs (loop7): Directory bread(block 72) failed [ 1670.567239][T25875] FAT-fs (loop7): Directory bread(block 73) failed [ 1670.580308][T25833] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=4000000, run fsck to fix. [ 1671.170100][T25898] loop3: detected capacity change from 0 to 64 [ 1671.457131][T25909] sctp: [Deprecated]: syz.3.22530 (pid 25909) Use of int in max_burst socket option. [ 1671.457131][T25909] Use struct sctp_assoc_value instead [ 1671.916700][ T4467] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1672.126935][ T4467] usb 4-1: Using ep0 maxpacket: 8 [ 1672.134955][ T4467] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1672.195830][T25904] loop6: detected capacity change from 0 to 32768 [ 1672.206925][ T4467] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1672.222619][ T4467] usb 4-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 1672.272371][ T4467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.357399][ T4467] usb 4-1: config 0 descriptor?? [ 1672.401927][T25904] XFS (loop6): Mounting V5 Filesystem [ 1672.522781][T25904] XFS (loop6): Ending clean mount [ 1672.716642][T22681] XFS (loop6): Unmounting Filesystem [ 1672.802013][ T4467] hid (null): unknown global tag 0xa3 [ 1672.822742][ T4467] apple 0003:05AC:029F.002C: unexpected long global item [ 1672.830255][T25961] netlink: 'syz.2.22548': attribute type 3 has an invalid length. [ 1672.830343][T25961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22548'. [ 1672.875812][ T4467] apple 0003:05AC:029F.002C: parse failed [ 1672.887643][ T4467] apple: probe of 0003:05AC:029F.002C failed with error -22 [ 1672.953297][ C1] vkms_vblank_simulate: vblank timer overrun [ 1673.115112][ T4464] usb 4-1: USB disconnect, device number 104 [ 1673.311371][T25968] loop2: detected capacity change from 0 to 1764 [ 1673.649458][T25974] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22552'. [ 1674.132866][T25990] loop3: detected capacity change from 0 to 4096 [ 1674.194323][T25990] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1674.278685][T25994] loop2: detected capacity change from 0 to 2048 [ 1674.360216][T25994] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1674.449936][T26000] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1676.158688][T26063] loop6: detected capacity change from 0 to 128 [ 1676.199225][T26063] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1676.761717][T26082] IPv6: Can't replace route, no match found [ 1677.020352][T26094] netlink: 64 bytes leftover after parsing attributes in process `syz.2.22597'. [ 1677.024742][T26092] loop6: detected capacity change from 0 to 1024 [ 1677.372566][T26102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22601'. [ 1677.961253][T26128] loop7: detected capacity change from 0 to 512 [ 1678.028000][T26128] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.22611: inode has both inline data and extents flags [ 1678.157385][T26128] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.22611: couldn't read orphan inode 15 (err -117) [ 1678.236859][T26128] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1678.382577][T17479] EXT4-fs (loop7): unmounting filesystem. [ 1678.403280][T26140] netlink: 798 bytes leftover after parsing attributes in process `syz.6.22616'. [ 1678.436094][ C1] vkms_vblank_simulate: vblank timer overrun [ 1678.511197][T26144] netlink: 52 bytes leftover after parsing attributes in process `syz.7.22618'. [ 1678.788899][T26152] loop3: detected capacity change from 0 to 512 [ 1678.884933][T26152] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 1679.035122][T26159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1679.075814][T26159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.139860][T26159] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1679.176499][ T4464] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1679.382477][ T4464] usb 3-1: Using ep0 maxpacket: 32 [ 1679.393216][ T4464] usb 3-1: config 0 interface 0 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.455933][ T4464] usb 3-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1679.476847][ T4464] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1679.507259][ T4464] usb 3-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 1679.544408][ T4464] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.587295][ T4464] usb 3-1: config 0 descriptor?? [ 1679.673787][T26176] loop6: detected capacity change from 0 to 1024 [ 1680.008533][ T4464] a4tech 0003:09DA:0006.002D: unknown main item tag 0x5 [ 1680.027787][ T4464] a4tech 0003:09DA:0006.002D: unknown main item tag 0x4 [ 1680.034837][ T4464] a4tech 0003:09DA:0006.002D: unknown main item tag 0x2 [ 1680.104103][ T4464] a4tech 0003:09DA:0006.002D: unknown main item tag 0x7 [ 1680.126377][ T4464] a4tech 0003:09DA:0006.002D: unknown main item tag 0x7 [ 1680.167326][ T4464] a4tech 0003:09DA:0006.002D: hidraw0: USB HID v0.08 Device [HID 09da:0006] on usb-dummy_hcd.2-1/input0 [ 1680.261598][ T4464] usb 3-1: USB disconnect, device number 14 [ 1680.442704][T26190] fido_id[26190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1681.349716][T26219] loop2: detected capacity change from 0 to 64 [ 1681.508780][T26222] loop3: detected capacity change from 0 to 4096 [ 1681.599396][T26224] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1681.689834][T26222] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 1681.742694][T26222] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 1681.783561][T26222] Remounting filesystem read-only [ 1681.803349][T26222] NILFS (loop3): error -5 truncating bmap (ino=12) [ 1681.927142][ T4290] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 1682.159199][T26236] loop3: detected capacity change from 0 to 512 [ 1682.207794][T26236] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.22659: iget: bad i_size value: 38620345925642 [ 1682.241402][T26236] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.22659: couldn't read orphan inode 15 (err -117) [ 1682.264693][T26236] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1682.341041][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 1682.875394][T26248] loop2: detected capacity change from 0 to 164 [ 1682.930407][T26248] ISOFS: Unable to identify CD-ROM format. [ 1683.226246][ T33] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1683.296127][T12033] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1683.466249][ T33] usb 3-1: Using ep0 maxpacket: 32 [ 1683.496321][T12033] usb 4-1: Using ep0 maxpacket: 16 [ 1683.504573][ T33] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1683.504747][T12033] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1683.523102][ T33] usb 3-1: config 0 has no interface number 0 [ 1683.547188][ T33] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1683.571654][T12033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.576122][ T33] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 28526, setting to 1024 [ 1683.608054][T12033] usb 4-1: config 0 descriptor?? [ 1683.626087][ T33] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1683.682127][ T33] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1683.716134][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.724228][ T33] usb 3-1: Product: syz [ 1683.756081][ T33] usb 3-1: Manufacturer: syz [ 1683.760728][ T33] usb 3-1: SerialNumber: syz [ 1683.807807][ T33] usb 3-1: config 0 descriptor?? [ 1683.813498][T26248] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1683.846120][T26248] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1684.033009][T12033] elecom 0003:056E:011C.002E: unknown main item tag 0x7 [ 1684.047498][T12033] elecom 0003:056E:011C.002E: unknown global tag 0xd [ 1684.058773][T12033] elecom 0003:056E:011C.002E: item 0 0 1 13 parsing failed [ 1684.067210][T12033] elecom: probe of 0003:056E:011C.002E failed with error -22 [ 1684.189532][T26263] loop7: detected capacity change from 0 to 32768 [ 1684.241445][ T33] usb 3-1: USB disconnect, device number 15 [ 1684.302982][T26263] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1684.340569][T12033] usb 4-1: USB disconnect, device number 105 [ 1684.371493][T26263] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1684.397459][T26263] BTRFS warning (device loop7): excessive commit interval 3581 [ 1684.435554][T26263] BTRFS info (device loop7): force zlib compression, level 3 [ 1684.445698][T26263] BTRFS info (device loop7): metadata ratio 107050 [ 1684.476042][T26263] BTRFS info (device loop7): turning on flush-on-commit [ 1684.498178][T26263] BTRFS info (device loop7): max_inline at 4096 [ 1684.525560][T26263] BTRFS info (device loop7): using free space tree [ 1684.909753][T26263] BTRFS info (device loop7): enabling ssd optimizations [ 1685.081206][T17479] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1685.252156][ C1] vkms_vblank_simulate: vblank timer overrun [ 1685.286628][ C1] vkms_vblank_simulate: vblank timer overrun [ 1685.438870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1685.470224][ C1] vkms_vblank_simulate: vblank timer overrun [ 1685.519596][ C1] vkms_vblank_simulate: vblank timer overrun [ 1685.640910][ C1] vkms_vblank_simulate: vblank timer overrun [ 1685.690315][ C1] vkms_vblank_simulate: vblank timer overrun [ 1685.738268][ C1] vkms_vblank_simulate: vblank timer overrun [ 1686.935851][T12033] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1687.117474][T12033] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1687.136291][T12033] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1687.196773][T12033] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1687.228601][T12033] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1687.245478][T12033] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1687.264351][T12033] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.292118][T12033] usb 3-1: config 0 descriptor?? [ 1687.318313][T26324] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1687.712509][T26355] loop7: detected capacity change from 0 to 128 [ 1687.761058][T26355] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1687.765386][T12033] samsung 0003:0419:0001.002F: unknown main item tag 0x0 [ 1687.801517][T12033] samsung 0003:0419:0001.002F: unknown main item tag 0x0 [ 1687.826959][T12033] samsung 0003:0419:0001.002F: unknown main item tag 0x0 [ 1687.847277][T12033] samsung 0003:0419:0001.002F: unknown main item tag 0x0 [ 1687.856810][T12033] samsung 0003:0419:0001.002F: unknown main item tag 0x0 [ 1687.897905][T12033] samsung 0003:0419:0001.002F: unknown main item tag 0x0 [ 1687.905016][T12033] samsung 0003:0419:0001.002F: unknown main item tag 0x0 [ 1687.974263][T12033] samsung 0003:0419:0001.002F: hidraw0: USB HID v1.01 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 1688.066170][T12033] usb 3-1: USB disconnect, device number 16 [ 1688.177118][T26361] loop3: detected capacity change from 0 to 2048 [ 1688.207014][T26361] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1688.259320][T26361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1688.326143][ T26] audit: type=1800 audit(1688.400:1270): pid=26361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.22708" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 1688.406159][T26362] fido_id[26362]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1688.469374][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1688.493071][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1688.503861][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1688.513646][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1688.528892][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1688.536374][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1688.692801][T26374] loop7: detected capacity change from 0 to 1024 [ 1688.750833][T26367] lo speed is unknown, defaulting to 1000 [ 1688.769932][T26374] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1688.898570][T26374] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 2: comm syz.7.22712: lblock 2 mapped to illegal pblock 2 (length 1) [ 1689.006228][T26374] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 1689.021203][T26374] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 48: comm syz.7.22712: lblock 0 mapped to illegal pblock 48 (length 1) [ 1689.083209][ T4304] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.097601][T26374] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 1689.125913][T26374] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.22712: Failed to acquire dquot type 0 [ 1689.143156][T26367] vxcan1 speed is unknown, defaulting to 1000 [ 1689.183319][T26374] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1689.226004][T26374] EXT4-fs error (device loop7): ext4_evict_inode:281: inode #11: comm syz.7.22712: mark_inode_dirty error [ 1689.286456][T26374] EXT4-fs warning (device loop7): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1689.305985][T26374] EXT4-fs (loop7): 1 orphan inode deleted [ 1689.311924][T26374] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1689.328094][ T4304] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.386099][T14771] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1689.436065][T26391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22720'. [ 1689.446548][T14771] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1689.455067][T14771] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 1689.456216][T26374] EXT4-fs: Ignoring removed bh option [ 1689.613288][T17479] EXT4-fs (loop7): unmounting filesystem. [ 1689.614984][ T4304] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.630575][T17479] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1689.670739][T17479] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1689.682873][T26386] loop3: detected capacity change from 0 to 32768 [ 1689.696490][T17479] EXT4-fs error (device loop7): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 1689.942365][ T4304] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.177092][T26367] chnl_net:caif_netlink_parms(): no params data found [ 1690.497532][T26367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1690.536609][T26367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.595955][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 1690.596929][T26367] device bridge_slave_0 entered promiscuous mode [ 1690.700910][ T4463] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1690.871742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1690.926808][ T4463] usb 4-1: Using ep0 maxpacket: 16 [ 1690.932485][T26367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.933917][ T4463] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 1690.945794][T26367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.968509][ T4463] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1690.972567][T26367] device bridge_slave_1 entered promiscuous mode [ 1690.998854][ T4463] usb 4-1: config 0 has no interface number 0 [ 1691.005003][ T4463] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1691.033071][ T4463] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1691.115881][ T4463] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1691.150320][ T4463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.159248][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 1691.168721][ T4463] usb 4-1: Product: syz [ 1691.173685][ T4463] usb 4-1: Manufacturer: syz [ 1691.179180][ T4463] usb 4-1: SerialNumber: syz [ 1691.190735][ T4463] usb 4-1: config 0 descriptor?? [ 1691.197003][T26404] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1691.204536][T26404] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1691.254764][ C1] vkms_vblank_simulate: vblank timer overrun [ 1691.428453][T26367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1691.435195][ T4463] asix: probe of 4-1:0.251 failed with error -71 [ 1691.468434][T26367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1691.477990][ T4463] usb 4-1: USB disconnect, device number 106 [ 1691.757612][T26450] loop2: detected capacity change from 0 to 4096 [ 1691.774104][T26367] team0: Port device team_slave_0 added [ 1691.778654][T26450] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1691.790855][T26367] team0: Port device team_slave_1 added [ 1691.822134][T26450] ntfs: (device loop2): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 1691.835709][T26450] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1691.918842][T26450] ntfs: volume version 3.1. [ 1691.957383][T26450] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 1691.998286][T26450] ntfs: (device loop2): load_and_init_quota(): Failed to find inode number for $Quota. [ 1692.020935][T26450] ntfs: (device loop2): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 1692.063891][T26367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1692.115821][T26367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1692.142387][ C1] vkms_vblank_simulate: vblank timer overrun [ 1692.210584][T26367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1692.404391][T26367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1692.428986][T26367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1692.454908][ C1] vkms_vblank_simulate: vblank timer overrun [ 1692.490790][T26468] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22746'. [ 1692.573764][T26367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1692.669726][ C1] vkms_vblank_simulate: vblank timer overrun [ 1692.676384][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 1692.839890][T26367] device hsr_slave_0 entered promiscuous mode [ 1692.857922][T26367] device hsr_slave_1 entered promiscuous mode [ 1692.875113][T26367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1692.945095][T26367] Cannot create hsr debugfs directory [ 1692.956592][ T4304] batman_adv: batadv0: Interface deactivated: gretap1 [ 1693.030840][ T4463] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1693.130827][ T4304] batman_adv: batadv0: Removing interface: gretap1 [ 1693.153652][T26494] tipc: Enabling of bearer rejected, failed to enable media [ 1693.277212][ T4463] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1693.309430][ T4463] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1693.350491][ T4463] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1693.391047][ T4463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.438801][T26480] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1693.506138][ T4304] IPVS: stopping backup sync thread 24351 ... [ 1694.035384][ C1] vkms_vblank_simulate: vblank timer overrun [ 1694.158914][T10442] usb 3-1: USB disconnect, device number 17 [ 1694.192336][T26510] loop3: detected capacity change from 0 to 32768 [ 1694.234171][T26510] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1694.292058][T26510] JBD2: Ignoring recovery information on journal [ 1694.372316][T26510] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1694.447079][T26510] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #65 has bad signature INODE01 [ 1694.475715][T26510] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1694.495569][T26510] OCFS2: File system is now read-only. [ 1694.501106][T26510] (syz.3.22760,26510,0):ocfs2_search_one_group:1684 ERROR: status = -30 [ 1694.521229][T26526] loop7: detected capacity change from 0 to 4096 [ 1694.527817][T26510] (syz.3.22760,26510,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 1694.559050][T26510] (syz.3.22760,26510,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1694.568566][T26510] (syz.3.22760,26510,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 1694.577749][T26510] (syz.3.22760,26510,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 1694.586466][T26510] (syz.3.22760,26510,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1694.603934][T26510] (syz.3.22760,26510,0):ocfs2_mknod:385 ERROR: status = -30 [ 1694.621340][T26526] __ntfs_error: 12 callbacks suppressed [ 1694.621359][T26526] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1694.640235][T26510] (syz.3.22760,26510,0):ocfs2_mknod:502 ERROR: status = -30 [ 1694.647968][T26510] (syz.3.22760,26510,0):ocfs2_mkdir:659 ERROR: status = -30 [ 1694.655756][T26526] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1694.700545][T26526] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1694.745565][T26526] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1694.755715][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 1694.793466][T26526] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1694.829141][T26526] ntfs: volume version 3.1. [ 1694.841207][T26526] ntfs: (device loop7): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is resident. [ 1694.853063][T26526] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 1694.878815][T26526] ntfs: (device loop7): load_system_files(): Failed to load root directory. [ 1694.878965][ T4290] ocfs2: Unmounting device (7,3) on (node local) [ 1694.894124][T26526] ntfs: (device loop7): ntfs_fill_super(): Failed to load system files. [ 1695.004713][ T4356] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1695.142505][T26526] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1695.385818][T26536] loop7: detected capacity change from 0 to 512 [ 1695.466251][T26536] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1695.530614][T26536] EXT4-fs (loop7): 1 truncate cleaned up [ 1695.558008][T26536] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1695.610978][T26545] netlink: 277 bytes leftover after parsing attributes in process `syz.2.22772'. [ 1695.734776][T17479] EXT4-fs (loop7): unmounting filesystem. [ 1696.052289][ T4304] device hsr_slave_0 left promiscuous mode [ 1696.071991][ T4304] device hsr_slave_1 left promiscuous mode [ 1696.086144][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1696.093837][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1696.111282][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1696.120498][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1696.128963][ T4304] device bridge_slave_1 left promiscuous mode [ 1696.135773][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.150580][ T4304] device bridge_slave_0 left promiscuous mode [ 1696.157317][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.210630][ T4304] device veth1_macvtap left promiscuous mode [ 1696.231546][ T4304] device veth0_macvtap left promiscuous mode [ 1696.254920][ T4304] device veth1_vlan left promiscuous mode [ 1696.261396][ T4304] device veth0_vlan left promiscuous mode [ 1696.835459][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 1697.155786][ C1] vkms_vblank_simulate: vblank timer overrun [ 1697.189013][ C1] vkms_vblank_simulate: vblank timer overrun [ 1697.321011][ C1] vkms_vblank_simulate: vblank timer overrun [ 1697.545443][T26591] netlink: 104 bytes leftover after parsing attributes in process `syz.3.22787'. [ 1697.703337][ C1] vkms_vblank_simulate: vblank timer overrun [ 1697.818675][ C1] vkms_vblank_simulate: vblank timer overrun [ 1697.869616][ C1] vkms_vblank_simulate: vblank timer overrun [ 1698.200118][T26587] Falling back ldisc for ttyprintk. [ 1698.234618][ C1] vkms_vblank_simulate: vblank timer overrun [ 1698.283766][ C1] vkms_vblank_simulate: vblank timer overrun [ 1698.283785][T26595] sock: sock_timestamping_bind_phc: sock not bind to device [ 1698.342316][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 1698.389100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1698.468157][ C1] vkms_vblank_simulate: vblank timer overrun [ 1698.479252][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 1698.554936][ C1] vkms_vblank_simulate: vblank timer overrun [ 1698.601187][ C1] vkms_vblank_simulate: vblank timer overrun [ 1698.609520][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1698.712035][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1699.548910][ T4304] bond0 (unregistering): Released all slaves [ 1700.127459][T26610] netlink: 'syz.6.22795': attribute type 1 has an invalid length. [ 1700.155997][T26612] loop3: detected capacity change from 0 to 512 [ 1700.206228][T26609] IPVS: Error connecting to the multicast addr [ 1700.217921][T26610] netlink: 252 bytes leftover after parsing attributes in process `syz.6.22795'. [ 1700.238416][T26612] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1700.271432][T26612] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1700.331965][T26612] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 1700.339819][T26612] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1700.370777][T26612] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.22796: Directory hole found for htree leaf block 0 [ 1700.460626][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 1700.566612][ C1] vkms_vblank_simulate: vblank timer overrun [ 1700.608921][T26619] loop2: detected capacity change from 0 to 4096 [ 1700.631575][T26367] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1700.726227][T26625] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1700.759117][T26367] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1700.896184][T26367] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1701.065767][T26367] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1701.104116][T26636] loop2: detected capacity change from 0 to 256 [ 1701.135424][T26637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.22804'. [ 1701.164164][T26636] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1701.207016][T26637] netlink: 56 bytes leftover after parsing attributes in process `syz.3.22804'. [ 1701.280022][ T26] audit: type=1800 audit(1701.351:1278): pid=26636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.22803" name="file2" dev="loop2" ino=1049093 res=0 errno=0 [ 1701.535232][T26367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1701.612865][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1701.623478][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1701.659244][T26367] 8021q: adding VLAN 0 to HW filter on device team0 [ 1701.689177][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1701.709660][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1701.777645][T15084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.784802][T15084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1701.865423][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1701.874101][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1701.926088][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1701.976426][T15084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.983591][T15084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1702.022611][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1702.054607][T26661] netlink: 20 bytes leftover after parsing attributes in process `syz.6.22812'. [ 1702.061057][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1702.108254][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1702.159021][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1702.226659][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1702.238241][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1702.248785][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1702.322422][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1702.343707][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1702.406657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1702.475820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1702.559447][T26367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1702.969363][ T4356] udevd[4356]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1703.107412][T26692] comedi comedi2: 8255: I/O port conflict (0x100,4) [ 1703.142886][T26694] device macsec5 entered promiscuous mode [ 1703.605811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1703.613384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1703.622685][T26709] loop6: detected capacity change from 0 to 1024 [ 1703.662978][T26367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1703.852484][ T4304] hfsplus: b-tree write err: -5, ino 25 [ 1703.859321][ T4304] hfsplus: b-tree write err: -5, ino 4 [ 1703.891807][T26682] loop2: detected capacity change from 0 to 32768 [ 1703.899153][ T4304] hfsplus: b-tree write err: -5, ino 2 [ 1703.936024][ T4304] hfsplus: b-tree write err: -5, ino 17 [ 1703.976904][T26682] non-latin1 character 0x200 found in JFS file name [ 1703.983603][T26682] mount with iocharset=utf8 to access [ 1704.083107][T10439] kernel write not supported for file /sysvipc/msg (pid: 10439 comm: kworker/1:12) [ 1704.422123][T26736] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22837'. [ 1705.020860][T26759] loop3: detected capacity change from 0 to 256 [ 1705.105233][T26761] netlink: 16 bytes leftover after parsing attributes in process `syz.6.22846'. [ 1705.134184][T26759] FAT-fs (loop3): Directory bread(block 64) failed [ 1705.150665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1705.163592][T26759] FAT-fs (loop3): Directory bread(block 65) failed [ 1705.196003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1705.204706][T26759] FAT-fs (loop3): Directory bread(block 66) failed [ 1705.211839][T26759] FAT-fs (loop3): Directory bread(block 67) failed [ 1705.244954][T26759] FAT-fs (loop3): Directory bread(block 68) failed [ 1705.262769][T26759] FAT-fs (loop3): Directory bread(block 69) failed [ 1705.284569][T30814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1705.292688][T26759] FAT-fs (loop3): Directory bread(block 70) failed [ 1705.300927][T30814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1705.329186][T26759] FAT-fs (loop3): Directory bread(block 71) failed [ 1705.342300][T30814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1705.352116][T26759] FAT-fs (loop3): Directory bread(block 72) failed [ 1705.365509][T30814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1705.381500][T26759] FAT-fs (loop3): Directory bread(block 73) failed [ 1705.392306][T26367] device veth0_vlan entered promiscuous mode [ 1705.409764][ T33] usb 8-1: new full-speed USB device number 56 using dummy_hcd [ 1705.474415][T26367] device veth1_vlan entered promiscuous mode [ 1705.546356][T26775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22851'. [ 1705.587196][T14771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1705.606689][ T33] usb 8-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1705.606904][T14771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1705.646373][ T33] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1705.671104][ T33] usb 8-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1705.734977][ T33] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.791116][ T33] usb 8-1: config 0 descriptor?? [ 1705.799822][T14771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1705.839656][T14771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1705.886077][T26367] device veth0_macvtap entered promiscuous mode [ 1705.908771][T26367] device veth1_macvtap entered promiscuous mode [ 1705.943204][T26785] loop6: detected capacity change from 0 to 512 [ 1705.975663][T26785] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1706.028305][T26367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.069679][T26367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.071027][T26785] EXT4-fs (loop6): 1 truncate cleaned up [ 1706.090108][T26367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.110877][T26367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.137144][T26785] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1706.141309][T26367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1706.164170][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1706.206410][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1706.228858][ T33] waltop 0003:172F:0037.0030: unknown main item tag 0x2 [ 1706.246940][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1706.255157][ T33] waltop 0003:172F:0037.0030: unexpected long global item [ 1706.275581][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1706.284322][ T33] waltop: probe of 0003:172F:0037.0030 failed with error -22 [ 1706.334099][T26367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.376274][T26367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.394241][T26367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.405258][T26367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.417046][T26367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1706.419829][T22681] EXT4-fs (loop6): unmounting filesystem. [ 1706.479780][T26367] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.509561][ T4464] usb 8-1: USB disconnect, device number 56 [ 1706.527077][T26367] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.548602][T26367] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.584873][T26367] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.609964][T14771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1706.629158][T14771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1706.897152][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1706.925687][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.933535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1707.081601][T30814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.117461][T30814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.144546][T30814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1707.171961][T26820] netlink: 72 bytes leftover after parsing attributes in process `syz.6.22866'. [ 1707.199859][T26820] netlink: 3 bytes leftover after parsing attributes in process `syz.6.22866'. [ 1707.469557][T26832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22871'. [ 1707.566905][T26830] loop5: detected capacity change from 0 to 4096 [ 1707.612929][T26830] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1707.672426][T26830] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1707.779110][T26840] loop6: detected capacity change from 0 to 4096 [ 1707.845702][T26840] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1708.073139][T26848] CUSE: unknown device info "" [ 1708.093838][T26848] CUSE: unknown device info "Ö" [ 1708.134811][T26848] CUSE: unknown device info "" [ 1708.152865][T26848] CUSE: unknown device info "" [ 1708.195674][T26848] CUSE: unknown device info "ðÿÿÿ" [ 1708.227790][T26848] CUSE: unknown device info "" [ 1708.255000][T26848] CUSE: unknown device info "" [ 1708.259997][T26848] CUSE: unknown device info "" [ 1708.297655][T26848] CUSE: unknown device info "" [ 1708.320673][T26848] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 1708.347816][T26848] CUSE: unknown device info "ÿÿÿÿ" [ 1708.374701][T22681] ntfs3: loop6: ntfs_sync_fs r=1a failed, -22. [ 1708.374783][T26848] CUSE: unknown device info "" [ 1708.416802][T22681] ntfs3: loop6: ntfs_evict_inode r=1a failed, -22. [ 1708.423390][T22681] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1708.423493][T26848] CUSE: unknown device info "€" [ 1708.485016][T26848] CUSE: DEVNAME unspecified [ 1708.945047][T26879] ALSA: mixer_oss: invalid OSS volume 'LIDE' [ 1709.229676][T26882] loop7: detected capacity change from 0 to 8192 [ 1709.293157][T26882] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1709.334875][T26882] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 1709.483897][T26882] REISERFS (device loop7): using ordered data mode [ 1709.507227][T26882] reiserfs: using flush barriers [ 1709.552998][T26882] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1709.665170][T26882] REISERFS (device loop7): checking transaction log (loop7) [ 1709.977696][T26882] REISERFS (device loop7): Using tea hash to sort names [ 1710.005211][T26882] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 1710.647940][T26944] netlink: 20 bytes leftover after parsing attributes in process `syz.7.22903'. [ 1711.267249][ C1] vkms_vblank_simulate: vblank timer overrun [ 1711.300285][ T4356] udevd[4356]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1711.472834][T10439] kernel write not supported for file /sg0 (pid: 10439 comm: kworker/1:12) [ 1711.543049][T26970] loop2: detected capacity change from 0 to 4096 [ 1711.626589][T26970] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1711.674994][T26970] ntfs3: loop2: Failed to load $Extend. [ 1711.774695][T26983] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1712.094728][T26992] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22925'. [ 1712.353056][T27005] loop2: detected capacity change from 0 to 256 [ 1712.604838][ T4280] Bluetooth: hci2: command 0x0405 tx timeout [ 1712.711260][T27020] loop6: detected capacity change from 0 to 512 [ 1712.743705][T27020] EXT4-fs: Ignoring removed nobh option [ 1712.757819][T27022] loop2: detected capacity change from 0 to 1024 [ 1712.787470][T27022] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1712.821448][T27020] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1712.834079][T27020] EXT4-fs warning (device loop6): ext4_xattr_inode_get:492: inode #11: comm syz.6.22937: ea_inode file size=1535 entry size=6 [ 1712.923597][T27022] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1712.958240][T27020] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1712.984645][T27020] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.22937: corrupted inode contents [ 1713.034959][T27020] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #15: comm syz.6.22937: mark_inode_dirty error [ 1713.084872][T27020] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.22937: corrupted inode contents [ 1713.097717][T27020] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2947: inode #15: comm syz.6.22937: mark_inode_dirty error [ 1713.142019][T27020] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2950: inode #15: comm syz.6.22937: mark inode dirty (error -117) [ 1713.164948][T27020] EXT4-fs warning (device loop6): ext4_evict_inode:301: xattr delete (err -117) [ 1713.175607][T27020] EXT4-fs (loop6): 1 orphan inode deleted [ 1713.181474][T27020] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1713.562005][T27013] loop7: detected capacity change from 0 to 32768 [ 1713.646763][T27013] JBD2: Ignoring recovery information on journal [ 1713.755754][T14646] EXT4-fs (loop2): unmounting filesystem. [ 1713.762595][T22681] EXT4-fs (loop6): unmounting filesystem. [ 1713.814988][ C1] vkms_vblank_simulate: vblank timer overrun [ 1713.878751][T27013] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1713.986141][ C1] vkms_vblank_simulate: vblank timer overrun [ 1714.171898][T27043] loop2: detected capacity change from 0 to 4096 [ 1714.234508][T17479] ocfs2: Unmounting device (7,7) on (node local) [ 1714.510880][T14646] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 1714.534376][T14646] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1715.209604][T27086] loop2: detected capacity change from 0 to 64 [ 1715.403878][T27057] loop3: detected capacity change from 0 to 40427 [ 1715.460010][T27057] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 1715.489304][T27057] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1715.518914][T27057] F2FS-fs (loop3): invalid crc value [ 1715.602811][T27057] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1715.769938][T27057] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1715.788336][T27057] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1715.838070][T27057] F2FS-fs (loop3): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem [ 1715.859893][T27079] loop7: detected capacity change from 0 to 40427 [ 1715.908232][T27079] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1715.937663][T27079] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1715.966726][T27079] F2FS-fs (loop7): invalid crc value [ 1716.009982][T27079] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1716.123486][T27079] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1716.131103][ T4290] syz-executor: attempt to access beyond end of device [ 1716.131103][ T4290] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1716.146354][T27079] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1716.277795][ T26] audit: type=1800 audit(1716.352:1279): pid=27079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.22953" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 1716.298106][ C1] vkms_vblank_simulate: vblank timer overrun [ 1716.394389][ T26] audit: type=1804 audit(1716.382:1280): pid=27079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.22953" name="/newroot/3405/bus/file1" dev="loop7" ino=10 res=1 errno=0 [ 1716.415705][ C1] vkms_vblank_simulate: vblank timer overrun [ 1716.939860][T27127] loop3: detected capacity change from 0 to 512 [ 1717.048418][T27127] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1717.145452][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 1717.147817][ T26] audit: type=1326 audit(1717.222:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27132 comm="syz.5.22967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d799ce59 code=0x7ffc0000 [ 1717.229735][T27133] loop5: detected capacity change from 0 to 256 [ 1717.304603][ T26] audit: type=1326 audit(1717.282:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27132 comm="syz.5.22967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d799ce59 code=0x7ffc0000 [ 1717.313083][T27133] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1717.427422][ T26] audit: type=1326 audit(1717.282:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27132 comm="syz.5.22967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff4d799ce59 code=0x7ffc0000 [ 1717.513149][ T26] audit: type=1326 audit(1717.282:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27132 comm="syz.5.22967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff4d799cbc2 code=0x7ffc0000 [ 1717.616730][ T26] audit: type=1326 audit(1717.292:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27132 comm="syz.5.22967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff4d795d68e code=0x7ffc0000 [ 1717.739152][ T26] audit: type=1326 audit(1717.292:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27132 comm="syz.5.22967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff4d799cc87 code=0x7ffc0000 [ 1717.821318][ T26] audit: type=1326 audit(1717.302:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27132 comm="syz.5.22967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4d795d68e code=0x7ffc0000 [ 1717.948704][ T26] audit: type=1326 audit(1717.302:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27132 comm="syz.5.22967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff4d799caeb code=0x7ffc0000 [ 1718.874525][T27190] device netdevsim0 entered promiscuous mode [ 1718.915070][T27189] device netdevsim0 left promiscuous mode [ 1719.513287][T27167] loop6: detected capacity change from 0 to 40427 [ 1719.585897][T27167] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x3ffff [ 1719.618196][T27167] F2FS-fs (loop6): invalid crc value [ 1719.681753][T27167] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1719.765232][T27221] loop2: detected capacity change from 0 to 256 [ 1719.845920][T27221] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1719.878860][T27167] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1720.283305][T27203] loop5: detected capacity change from 0 to 32768 [ 1720.393498][T27203] JBD2: Ignoring recovery information on journal [ 1720.481817][T27245] loop3: detected capacity change from 0 to 512 [ 1720.569398][T27245] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 1720.595904][T27203] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1720.657481][T27252] sctp: [Deprecated]: syz.6.23006 (pid 27252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1720.657481][T27252] Use struct sctp_sack_info instead [ 1720.664093][T27245] EXT4-fs (loop3): 1 truncate cleaned up [ 1720.724463][T27245] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1720.809709][T27260] sctp: [Deprecated]: syz.6.23006 (pid 27260) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1720.809709][T27260] Use struct sctp_sack_info instead [ 1720.906087][T26367] ocfs2: Unmounting device (7,5) on (node local) [ 1721.104905][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 1721.235299][T27269] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23012'. [ 1721.885773][T27296] netlink: 'syz.5.23022': attribute type 27 has an invalid length. [ 1722.276157][T27313] loop3: detected capacity change from 0 to 2048 [ 1722.356698][T27317] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1722.390028][T27313] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=56, inode=12, rec_len=24, name_len=56 [ 1722.417515][T27313] Remounting filesystem read-only [ 1722.438349][T27326] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=56, inode=12, rec_len=24, name_len=56 [ 1722.706418][T27332] loop7: detected capacity change from 0 to 1024 [ 1723.205112][T27344] loop7: detected capacity change from 0 to 1024 [ 1723.240354][T27344] EXT4-fs: Ignoring removed orlov option [ 1723.394286][T27344] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1723.553274][T27344] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #12: block 7: comm syz.7.23039: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 1723.694049][T27344] EXT4-fs (loop7): Remounting filesystem read-only [ 1723.823262][T27367] netlink: 16 bytes leftover after parsing attributes in process `syz.5.23048'. [ 1723.899492][T17479] EXT4-fs (loop7): unmounting filesystem. [ 1724.091027][T27378] loop5: detected capacity change from 0 to 512 [ 1724.206980][T27378] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1724.274100][T10442] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1724.290580][T27378] __quota_error: 14 callbacks suppressed [ 1724.290597][T27378] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1724.376421][T27389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23056'. [ 1724.404127][T27378] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1724.436538][T27378] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.23053: Failed to acquire dquot type 0 [ 1724.486195][T10442] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1724.512105][T10442] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.561058][T10442] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1724.589476][T10442] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1724.613800][T10442] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1724.647457][T10442] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1724.665713][T10442] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1724.690545][T26367] EXT4-fs (loop5): unmounting filesystem. [ 1724.695633][T10442] usb 3-1: string descriptor 0 read error: -22 [ 1724.702709][T10442] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1724.754588][T10442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.771106][T27369] loop6: detected capacity change from 0 to 32768 [ 1725.084298][T27402] device syz_tun entered promiscuous mode [ 1725.098837][T27402] device macvtap1 entered promiscuous mode [ 1725.185861][T27402] device syz_tun left promiscuous mode [ 1725.401730][T10442] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1725.445458][T10442] usb 3-1: USB disconnect, device number 18 [ 1726.130196][T27433] loop6: detected capacity change from 0 to 1024 [ 1726.142677][T27434] loop7: detected capacity change from 0 to 1024 [ 1726.163530][T27433] EXT4-fs: Ignoring removed orlov option [ 1726.277100][T27433] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1726.330868][T27433] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #12: block 7: comm syz.6.23061: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 1726.392599][T27426] loop5: detected capacity change from 0 to 16384 [ 1726.471238][T27433] EXT4-fs (loop6): Remounting filesystem read-only [ 1726.572303][T27451] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1726.689371][T22681] EXT4-fs (loop6): unmounting filesystem. [ 1726.975618][T27466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.23082'. [ 1727.601373][T27493] device macsec1 entered promiscuous mode [ 1728.012698][T27504] team0: Device xfrm0 is of different type [ 1728.136590][T27509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23099'. [ 1728.348308][T27481] loop5: detected capacity change from 0 to 32768 [ 1728.393971][T27486] loop3: detected capacity change from 0 to 32768 [ 1728.421134][T27486] [ 1728.421134][T27486] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1728.421134][T27486] [ 1728.428375][T27481] [ 1728.428375][T27481] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1728.428375][T27481] [ 1728.477737][T27486] ERROR: (device loop3): diWrite: ixpxd invalid [ 1728.477737][T27486] [ 1728.505708][T27486] ERROR: (device loop3): txCommit: [ 1728.505708][T27486] [ 1728.737128][ T4290] [ 1728.737128][ T4290] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1728.737128][ T4290] [ 1728.766543][T26367] non-latin1 character 0x3ff found in JFS file name [ 1728.773192][T26367] mount with iocharset=utf8 to access [ 1728.774345][ T4290] [ 1728.774345][ T4290] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1728.774345][ T4290] [ 1728.814342][T26367] ERROR: (device loop5): diWrite: ixpxd invalid [ 1728.814342][T26367] [ 1728.873474][T26367] ERROR: (device loop5): remounting filesystem as read-only [ 1728.919150][T26367] ERROR: (device loop5): txCommit: [ 1728.919150][T26367] [ 1729.858994][T17663] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.042265][T27566] loop6: detected capacity change from 0 to 512 [ 1730.049096][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.055529][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.100754][T17663] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.141688][T27566] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1730.418853][ T26] audit: type=1326 audit(1730.493:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27577 comm="syz.3.23125" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcea419ce59 code=0x0 [ 1730.424104][T17663] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.458282][T22681] EXT4-fs (loop6): unmounting filesystem. [ 1730.500394][ C1] vkms_vblank_simulate: vblank timer overrun [ 1730.613936][T27589] loop6: detected capacity change from 0 to 256 [ 1730.682398][T27589] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1730.786671][T17663] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.120379][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1731.132896][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1731.146776][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1731.158079][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1731.164610][T27598] loop6: detected capacity change from 0 to 4096 [ 1731.174893][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1731.185429][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1731.295659][T27602] lo speed is unknown, defaulting to 1000 [ 1731.331725][T27605] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1731.347245][T27598] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 64 already freed [ 1731.400597][T27598] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 1731.616186][T27612] netlink: 68 bytes leftover after parsing attributes in process `syz.7.23136'. [ 1731.634785][T27613] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 1731.648985][T27614] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 1 [ 1731.709427][T27612] netlink: 16 bytes leftover after parsing attributes in process `syz.7.23136'. [ 1731.800732][T27602] vxcan1 speed is unknown, defaulting to 1000 [ 1732.487046][T27637] EXT4-fs: Conflicting test_dummy_encryption options [ 1732.629045][T27644] netem: change failed [ 1732.902863][T27650] loop6: detected capacity change from 0 to 1024 [ 1732.920973][T27650] EXT4-fs: inline encryption not supported [ 1732.953849][T27650] EXT4-fs: Ignoring removed mblk_io_submit option [ 1733.022612][T27650] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1733.227772][T27671] loop2: detected capacity change from 0 to 512 [ 1733.243373][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 1733.317119][T27671] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1733.380871][T27602] chnl_net:caif_netlink_parms(): no params data found [ 1733.514844][ C1] vkms_vblank_simulate: vblank timer overrun [ 1733.530945][T22681] EXT4-fs (loop6): unmounting filesystem. [ 1734.285388][T27705] binder_alloc: binder_alloc_mmap_handler: 27704 200000ffe000-200000fff000 already mapped failed -16 [ 1734.445680][T27602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1734.452843][T27602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.494517][T27602] device bridge_slave_0 entered promiscuous mode [ 1734.639253][T27602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1734.657123][T27602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.676558][T27602] device bridge_slave_1 entered promiscuous mode [ 1734.789117][T27722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23174'. [ 1734.964767][ C1] vkms_vblank_simulate: vblank timer overrun [ 1735.019722][T27722] IPVS: Error joining to the multicast group [ 1735.142267][T27602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.313203][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 1735.338125][T27737] CUSE: zero length info key specified [ 1735.465436][ C1] vkms_vblank_simulate: vblank timer overrun [ 1735.583771][ C1] vkms_vblank_simulate: vblank timer overrun [ 1735.632469][T27753] loop7: detected capacity change from 0 to 256 [ 1735.725987][T27753] FAT-fs (loop7): Directory bread(block 64) failed [ 1735.732581][T27753] FAT-fs (loop7): Directory bread(block 65) failed [ 1735.750569][T27602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1735.835558][T27753] FAT-fs (loop7): Directory bread(block 66) failed [ 1735.842147][T27753] FAT-fs (loop7): Directory bread(block 67) failed [ 1735.913334][T27753] FAT-fs (loop7): Directory bread(block 68) failed [ 1735.919919][T27753] FAT-fs (loop7): Directory bread(block 69) failed [ 1735.961790][T27602] team0: Port device team_slave_0 added [ 1735.983419][T27753] FAT-fs (loop7): Directory bread(block 70) failed [ 1735.990003][T27753] FAT-fs (loop7): Directory bread(block 71) failed [ 1736.043634][T27753] FAT-fs (loop7): Directory bread(block 72) failed [ 1736.066182][T27753] FAT-fs (loop7): Directory bread(block 73) failed [ 1736.086821][T27602] team0: Port device team_slave_1 added [ 1736.245488][T27602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1736.252536][T27602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1736.399830][T27602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1736.465544][T27602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1736.485386][T27602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1736.606016][T27779] netlink: 108 bytes leftover after parsing attributes in process `syz.7.23195'. [ 1736.640405][T27602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1736.653125][T27779] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23195'. [ 1736.726697][T17663] device hsr_slave_0 left promiscuous mode [ 1736.776219][T17663] device hsr_slave_1 left promiscuous mode [ 1736.807517][T17663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1736.843468][T17663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1736.885367][T17663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1736.892896][T17663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1736.965119][T27792] loop6: detected capacity change from 0 to 512 [ 1737.002713][T17663] device bridge_slave_1 left promiscuous mode [ 1737.014346][T27792] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1737.041811][T17663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.045437][T27792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 1737.074375][T27792] System zones: 1-12 [ 1737.087952][T27789] loop7: detected capacity change from 0 to 4096 [ 1737.088322][T27792] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1737.130675][T17663] device bridge_slave_0 left promiscuous mode [ 1737.144210][T27789] NILFS error (device loop7): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1737.153248][T17663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.154176][T27800] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1737.180905][T27792] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.23201: attempt to clear invalid blocks 1024 len 1 [ 1737.219532][T27789] NILFS (loop7): mounting fs with errors [ 1737.265830][T27792] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.23201: bg 0: block 361: padding at end of block bitmap is not set [ 1737.287603][T27789] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6 [ 1737.318759][T27792] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1737.370909][T27792] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.23201: invalid indirect mapped block 1811939328 (level 0) [ 1737.393028][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 1737.431976][T27792] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.23201: invalid indirect mapped block 2 (level 2) [ 1737.491694][T27792] EXT4-fs (loop6): 1 truncate cleaned up [ 1737.521517][T27789] NILFS error (device loop7): nilfs_readdir: bad page in #2 [ 1737.529868][T27792] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1737.540038][T17663] device veth1_macvtap left promiscuous mode [ 1737.558969][T17663] device veth0_macvtap left promiscuous mode [ 1737.621396][T17663] device veth1_vlan left promiscuous mode [ 1737.644239][T17663] device veth0_vlan left promiscuous mode [ 1737.805297][T22681] EXT4-fs (loop6): unmounting filesystem. [ 1737.888860][T27795] loop2: detected capacity change from 0 to 32768 [ 1737.979815][T27795] JBD2: Ignoring recovery information on journal [ 1738.162843][T27795] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1738.365962][T14646] ocfs2: Unmounting device (7,2) on (node local) [ 1739.208786][ T26] audit: type=1326 audit(1739.283:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27842 comm="syz.6.23214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f7b19ce59 code=0x0 [ 1739.486490][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 1739.605037][T27839] loop2: detected capacity change from 0 to 40427 [ 1739.624276][T27839] F2FS-fs (loop2): invalid crc value [ 1739.679625][ C1] vkms_vblank_simulate: vblank timer overrun [ 1739.718804][T27839] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1739.791913][T27839] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 1739.801475][T27839] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1739.886274][T14646] syz-executor: attempt to access beyond end of device [ 1739.886274][T14646] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1740.485283][T27858] loop2: detected capacity change from 0 to 8192 [ 1740.553064][T27858] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1740.598209][T27858] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1740.623261][T27858] REISERFS (device loop2): using ordered data mode [ 1740.631086][T27858] reiserfs: using flush barriers [ 1740.638413][T17663] team0 (unregistering): Port device team_slave_1 removed [ 1740.647382][T27858] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1740.664943][T27858] REISERFS (device loop2): checking transaction log (loop2) [ 1740.741861][T27858] REISERFS (device loop2): Using tea hash to sort names [ 1740.759594][T27858] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1741.073372][T17663] team0 (unregistering): Port device team_slave_0 removed [ 1741.116397][ C1] vkms_vblank_simulate: vblank timer overrun [ 1741.212523][ C1] vkms_vblank_simulate: vblank timer overrun [ 1741.297045][ C1] vkms_vblank_simulate: vblank timer overrun [ 1741.360793][T17663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1741.450749][T17663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1741.633827][ T4464] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1741.762302][ C1] vkms_vblank_simulate: vblank timer overrun [ 1741.855998][ T4464] usb 3-1: Using ep0 maxpacket: 32 [ 1741.863729][ T4464] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 1741.872331][ T4464] usb 3-1: config 0 has no interface number 0 [ 1741.878840][ T4464] usb 3-1: config 0 interface 153 has no altsetting 0 [ 1741.914030][ T4464] usb 3-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1741.923174][ T4464] usb 3-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 1741.931282][ T4464] usb 3-1: Product: syz [ 1741.935908][ T4464] usb 3-1: Manufacturer: syz [ 1741.940554][ T4464] usb 3-1: SerialNumber: syz [ 1741.947820][ C1] vkms_vblank_simulate: vblank timer overrun [ 1741.954822][ T4464] usb 3-1: config 0 descriptor?? [ 1742.179706][ T4464] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 1742.316952][T17663] bond0 (unregistering): Released all slaves [ 1742.513096][T27811] netlink: 'syz.7.23206': attribute type 10 has an invalid length. [ 1742.529787][T27811] .`: (slave dummy0): Releasing backup interface [ 1742.576325][T27811] team0: Port device dummy0 added [ 1742.581763][T27812] netlink: 'syz.7.23206': attribute type 10 has an invalid length. [ 1742.615606][T27812] team0: Port device dummy0 removed [ 1742.635332][T27812] .`: (slave dummy0): Enslaving as an active interface with an up link [ 1742.666637][T27602] device hsr_slave_0 entered promiscuous mode [ 1742.709333][T27602] device hsr_slave_1 entered promiscuous mode [ 1742.773979][T27602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1742.801994][T27602] Cannot create hsr debugfs directory [ 1742.817593][T27871] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23222'. [ 1742.893318][T27871] netlink: 192 bytes leftover after parsing attributes in process `syz.6.23222'. [ 1742.912899][ T4464] usb 3-1: reset high-speed USB device number 19 using dummy_hcd [ 1742.928892][T27869] loop7: detected capacity change from 0 to 4096 [ 1743.082203][T27875] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1743.214227][T27881] binder: 27876:27881 ioctl c018620b 200000000240 returned -14 [ 1743.278545][ C1] vkms_vblank_simulate: vblank timer overrun [ 1743.541533][ T4464] usb 3-1: failed to restore interface 153 altsetting 198 (error=-71) [ 1743.581768][ T4464] ueagle-atm 3-1:0.153: usbatm_usb_probe: bind failed: -19! [ 1743.635824][ T4464] usb 3-1: USB disconnect, device number 19 [ 1743.862103][ C1] vkms_vblank_simulate: vblank timer overrun [ 1743.900406][T27901] loop3: detected capacity change from 0 to 2048 [ 1743.930317][T27901] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1743.980712][T27906] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1744.214749][ C1] vkms_vblank_simulate: vblank timer overrun [ 1744.550238][ C1] vkms_vblank_simulate: vblank timer overrun [ 1744.797840][ C1] vkms_vblank_simulate: vblank timer overrun [ 1744.962861][ C1] vkms_vblank_simulate: vblank timer overrun [ 1745.301479][T27949] netlink: 104 bytes leftover after parsing attributes in process `syz.6.23251'. [ 1745.651218][T27959] devpts: called with bogus options [ 1745.698878][T27956] loop7: detected capacity change from 0 to 4096 [ 1746.303643][T27982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23264'. [ 1746.345156][T27602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1746.420427][T27602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1746.468226][T27602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1746.534185][T27602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1746.788757][T27602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1746.857361][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1746.873366][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1746.933050][T27602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1746.962853][ T4463] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1746.972254][T14771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1747.032611][T14771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1747.055697][T14771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.062885][T14771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1747.149641][T14771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1747.173036][ T4463] usb 8-1: Using ep0 maxpacket: 16 [ 1747.185703][ T4463] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1747.211231][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1747.244191][ T4463] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1747.253327][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1747.262836][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.269972][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1747.274579][ T4463] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1747.304093][ T4463] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1747.327120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1747.339262][ T4463] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.373001][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1747.393931][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1747.399386][ T4463] usb 8-1: config 0 descriptor?? [ 1747.449573][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1747.493600][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1747.520324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1747.553881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1747.586028][T28019] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23278'. [ 1747.650866][T27602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1747.682201][T27602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1747.722186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1747.733085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1747.755758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1747.780155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1747.834970][ T4463] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1747.852766][ T4463] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1747.860106][ T4463] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1747.881384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1747.951019][ T4463] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1747.970771][ T4463] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1747.991239][ T4463] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1748.029332][ T4463] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1748.047849][ T4463] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1748.070615][ T4463] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1748.094147][ T4463] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1748.137851][ T4463] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1748.162533][ T4463] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1748.183123][ T4463] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1748.208485][ T4463] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1748.223092][ T4463] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1748.239309][ T4463] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0031/input/input98 [ 1748.266622][ T4463] microsoft 0003:045E:07DA.0031: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1748.294842][ T4463] usb 8-1: USB disconnect, device number 57 [ 1748.742604][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1748.750204][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1748.781992][T28056] loop3: detected capacity change from 0 to 4096 [ 1748.810325][T27602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1748.837488][T28056] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1748.880832][T28057] fido_id[28057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1748.909235][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1748.935654][T28065] loop7: detected capacity change from 0 to 1024 [ 1748.942958][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1748.955216][T28056] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1749.038420][T28065] hfsplus: xattr exists yet [ 1749.053122][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1749.062265][T28056] ntfs3: loop3: ino=5, "/" directory corrupted [ 1749.080521][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1749.144872][T27602] device veth0_vlan entered promiscuous mode [ 1749.182449][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1749.215268][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1749.250528][T27602] device veth1_vlan entered promiscuous mode [ 1749.385947][T27602] device veth0_macvtap entered promiscuous mode [ 1749.410195][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1749.437670][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1749.463763][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1749.496644][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1749.526417][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1749.569910][T27602] device veth1_macvtap entered promiscuous mode [ 1749.647967][ C1] vkms_vblank_simulate: vblank timer overrun [ 1749.755182][T27602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1749.812403][T27602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1749.842330][T27602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1749.865757][T27602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1749.914057][T27602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1749.925092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1749.953551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1749.987412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1750.019637][T27602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1750.036768][T10443] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1750.062725][T27602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.102103][T27602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1750.130316][T27602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.152701][T27602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1750.161914][T14771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1750.194930][T14771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1750.219660][T27602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.232479][T10443] usb 3-1: Using ep0 maxpacket: 8 [ 1750.245144][T10443] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1750.272425][T10443] usb 3-1: config 0 has no interface number 0 [ 1750.273069][T28100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23304'. [ 1750.292949][T27602] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.294014][T10443] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1750.322068][T27602] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.341506][T27602] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.351716][T10443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.378389][T28078] loop6: detected capacity change from 0 to 32768 [ 1750.380942][T10443] usb 3-1: Product: syz [ 1750.412448][T10443] usb 3-1: Manufacturer: syz [ 1750.417121][T10443] usb 3-1: SerialNumber: syz [ 1750.481413][T10443] usb 3-1: config 0 descriptor?? [ 1750.506849][ T26] audit: type=1800 audit(1750.584:1305): pid=28078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.23298" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 1750.559110][ T2782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1750.593218][ T2782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1750.623972][T15084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1750.682048][T14771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1750.694755][T14771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1750.751448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1750.775624][T10443] usb 3-1: USB disconnect, device number 20 [ 1751.422978][ T4467] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1751.481725][T28126] netlink: 'syz.6.23313': attribute type 27 has an invalid length. [ 1751.557773][T28130] netlink: 'syz.2.23315': attribute type 1 has an invalid length. [ 1751.632613][ T4467] usb 8-1: Using ep0 maxpacket: 8 [ 1751.644306][ T4467] usb 8-1: config 0 interface 0 altsetting 26 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.703926][ T4467] usb 8-1: config 0 interface 0 altsetting 26 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1751.758187][ T4467] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1751.779484][ T4467] usb 8-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1751.825155][ T4467] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.874036][ T4467] usb 8-1: config 0 descriptor?? [ 1752.056178][T28149] ALSA: mixer_oss: invalid OSS volume '' [ 1752.294509][ T4467] sony 0003:054C:0268.0032: unknown main item tag 0x0 [ 1752.316149][ T4467] sony 0003:054C:0268.0032: unknown main item tag 0x0 [ 1752.349278][ T4467] sony 0003:054C:0268.0032: unknown main item tag 0x0 [ 1752.379157][ T4467] sony 0003:054C:0268.0032: unknown main item tag 0x0 [ 1752.384720][T28160] netlink: 'syz.6.23325': attribute type 5 has an invalid length. [ 1752.407915][ T4467] sony 0003:054C:0268.0032: unknown main item tag 0x0 [ 1752.433087][ T4467] sony 0003:054C:0268.0032: unknown main item tag 0x0 [ 1752.460433][ T4467] sony 0003:054C:0268.0032: unknown main item tag 0x0 [ 1752.628505][ T4467] sony 0003:054C:0268.0032: hiddev0,hidraw0: USB HID v84.00 Device [HID 054c:0268] on usb-dummy_hcd.7-1/input0 [ 1752.672383][ T4467] sony 0003:054C:0268.0032: failed to claim input [ 1752.755146][ T4467] usb 8-1: USB disconnect, device number 58 [ 1752.842533][T28173] Bluetooth: MGMT ver 1.22 [ 1753.014598][T28171] fido_id[28171]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1753.185850][T28156] loop2: detected capacity change from 0 to 40427 [ 1753.243345][T28156] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1753.271180][T28156] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1753.290654][T28156] F2FS-fs (loop2): invalid crc value [ 1753.304173][T28182] netlink: 88 bytes leftover after parsing attributes in process `syz.6.23332'. [ 1753.338877][T28156] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1753.352307][T28182] tipc: Started in network mode [ 1753.359639][T28182] tipc: Node identity ac141442, cluster identity 4711 [ 1753.424006][T28182] tipc: Enabling of bearer rejected, failed to enable media [ 1753.489807][T28156] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1753.501742][T28156] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1755.162065][T28260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23359'. [ 1755.413191][T28270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23363'. [ 1755.493742][T28273] loop3: detected capacity change from 0 to 1024 [ 1755.506281][T28275] netlink: 'syz.6.23365': attribute type 3 has an invalid length. [ 1755.549896][T28275] netlink: 'syz.6.23365': attribute type 3 has an invalid length. [ 1756.276177][T28304] loop6: detected capacity change from 0 to 1024 [ 1756.307198][T28304] EXT4-fs: Ignoring removed bh option [ 1756.321480][T28304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1756.422160][T10443] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1756.430882][T28304] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1756.512102][T28314] netlink: 172 bytes leftover after parsing attributes in process `syz.7.23380'. [ 1756.623769][T10443] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1756.646773][T10443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.663784][T22681] EXT4-fs (loop6): unmounting filesystem. [ 1756.677217][T10443] usb 3-1: config 0 descriptor?? [ 1756.817793][T10443] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1757.021651][T28326] loop6: detected capacity change from 0 to 4096 [ 1757.191597][T28326] ntfs: volume version 3.1. [ 1757.323049][T10443] gspca_sunplus: reg_w_riv err -71 [ 1757.328306][T10443] sunplus: probe of 3-1:0.0 failed with error -71 [ 1757.358684][T10443] usb 3-1: USB disconnect, device number 21 [ 1757.690771][T28351] loop3: detected capacity change from 0 to 128 [ 1757.750564][T28351] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1757.864637][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 1758.606606][T28382] loop3: detected capacity change from 0 to 2048 [ 1758.624436][T28382] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1758.650906][T28382] NILFS (loop3): mounting unchecked fs [ 1758.763529][T28382] NILFS (loop3): recovery complete [ 1758.807902][T28392] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1759.632802][T28395] loop6: detected capacity change from 0 to 40427 [ 1759.668847][T28395] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 1759.721520][T28395] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1759.776887][T28395] F2FS-fs (loop6): invalid crc value [ 1759.860468][T28395] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1760.062660][T28395] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 1760.069938][T28395] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1760.310782][T22681] syz-executor: attempt to access beyond end of device [ 1760.310782][T22681] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1760.580645][T28443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23423'. [ 1760.601962][T28443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23423'. [ 1760.611011][T28443] netlink: 'syz.2.23423': attribute type 14 has an invalid length. [ 1760.679062][T28443] netlink: 'syz.2.23423': attribute type 12 has an invalid length. [ 1760.950535][T28453] netlink: 80 bytes leftover after parsing attributes in process `syz.2.23428'. [ 1762.040397][T28492] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23446'. [ 1762.054320][T28494] loop2: detected capacity change from 0 to 512 [ 1762.198358][T28494] EXT4-fs (loop2): 1 orphan inode deleted [ 1762.241976][T28494] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1762.252946][ T2782] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1762.291707][ T2782] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:9: Failed to release dquot type 1 [ 1762.345753][T28506] loop7: detected capacity change from 0 to 256 [ 1762.392590][T28506] exfat: Deprecated parameter 'utf8' [ 1762.427391][T28506] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1762.446933][T14646] EXT4-fs (loop2): unmounting filesystem. [ 1762.710584][T28474] loop6: detected capacity change from 0 to 40427 [ 1762.761414][T28474] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 1762.814960][T28474] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1762.869044][T28522] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23454'. [ 1762.903411][T28474] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1763.074107][T28474] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1763.081231][T28474] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1763.144912][T28533] loop7: detected capacity change from 0 to 164 [ 1763.251798][T28533] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1763.361037][T22681] syz-executor: attempt to access beyond end of device [ 1763.361037][T22681] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1764.493178][T28578] netlink: 16 bytes leftover after parsing attributes in process `syz.6.23476'. [ 1764.581400][T28583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23479'. [ 1765.500607][T28618] loop7: detected capacity change from 0 to 4096 [ 1765.621552][T28631] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1765.695547][T28618] NILFS error (device loop7): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 1765.734968][T28618] Remounting filesystem read-only [ 1766.091745][ T4467] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 1766.223560][T28652] netlink: 790 bytes leftover after parsing attributes in process `syz.7.23505'. [ 1766.273469][ T4467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1766.315453][ T4467] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1766.379891][ T4467] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1766.394598][T28657] use of bytesused == 0 is deprecated and will be removed in the future, [ 1766.414147][ T4467] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.443202][ T4467] usb 3-1: config 0 descriptor?? [ 1766.462165][T28657] use the actual size instead. [ 1766.569495][T28664] [ 1766.571877][T28664] ====================================================== [ 1766.578905][T28664] WARNING: possible circular locking dependency detected [ 1766.585942][T28664] syzkaller #0 Not tainted [ 1766.590352][T28664] ------------------------------------------------------ [ 1766.597389][T28664] syz.7.23510/28664 is trying to acquire lock: [ 1766.603535][T28664] ffff88801ab44c58 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 1766.613214][T28664] [ 1766.613214][T28664] but task is already holding lock: [ 1766.620573][T28664] ffff888074ff9bd0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 1766.631459][T28664] [ 1766.631459][T28664] which lock already depends on the new lock. [ 1766.631459][T28664] [ 1766.641861][T28664] [ 1766.641861][T28664] the existing dependency chain (in reverse order) is: [ 1766.650873][T28664] [ 1766.650873][T28664] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 1766.659576][T28664] down_write+0x36/0x60 [ 1766.664263][T28664] process_measurement+0x3a2/0x1c30 [ 1766.670147][T28664] ima_file_mmap+0x102/0x150 [ 1766.675250][T28664] __se_sys_remap_file_pages+0x559/0x7b0 [ 1766.681405][T28664] do_syscall_64+0x4c/0xa0 [ 1766.686343][T28664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1766.692758][T28664] [ 1766.692758][T28664] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 1766.700313][T28664] __lock_acquire+0x2d07/0x7d10 [ 1766.705687][T28664] lock_acquire+0x1bb/0x4a0 [ 1766.710710][T28664] down_read_killable+0x4c/0x340 [ 1766.716164][T28664] mmap_read_lock_killable+0x1d/0x60 [ 1766.721969][T28664] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1766.727769][T28664] do_user_addr_fault+0x2db/0xb10 [ 1766.733339][T28664] exc_page_fault+0x60/0x100 [ 1766.738455][T28664] asm_exc_page_fault+0x22/0x30 [ 1766.743829][T28664] fault_in_readable+0x13e/0x1f0 [ 1766.749289][T28664] fault_in_iov_iter_readable+0x18e/0x2e0 [ 1766.755608][T28664] generic_perform_write+0x1f1/0x5c0 [ 1766.761422][T28664] __generic_file_write_iter+0x148/0x2a0 [ 1766.767580][T28664] generic_file_write_iter+0xab/0x2e0 [ 1766.773475][T28664] do_iter_write+0x642/0xb10 [ 1766.778664][T28664] do_pwritev+0x23d/0x3a0 [ 1766.783508][T28664] do_syscall_64+0x4c/0xa0 [ 1766.788446][T28664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1766.794863][T28664] [ 1766.794863][T28664] other info that might help us debug this: [ 1766.794863][T28664] [ 1766.805084][T28664] Possible unsafe locking scenario: [ 1766.805084][T28664] [ 1766.812528][T28664] CPU0 CPU1 [ 1766.817884][T28664] ---- ---- [ 1766.823239][T28664] lock(&sb->s_type->i_mutex_key#13); [ 1766.828698][T28664] lock(&mm->mmap_lock); [ 1766.835540][T28664] lock(&sb->s_type->i_mutex_key#13); [ 1766.843622][T28664] lock(&mm->mmap_lock); [ 1766.847990][T28664] [ 1766.847990][T28664] *** DEADLOCK *** [ 1766.847990][T28664] [ 1766.856144][T28664] 2 locks held by syz.7.23510/28664: [ 1766.861418][T28664] #0: ffff888079824460 (sb_writers#5){.+.+}-{0:0}, at: do_pwritev+0x226/0x3a0 [ 1766.870392][T28664] #1: ffff888074ff9bd0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 1766.881709][T28664] [ 1766.881709][T28664] stack backtrace: [ 1766.887582][T28664] CPU: 1 PID: 28664 Comm: syz.7.23510 Not tainted syzkaller #0 [ 1766.895119][T28664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1766.905166][T28664] Call Trace: [ 1766.908441][T28664] [ 1766.911368][T28664] dump_stack_lvl+0x188/0x24e [ 1766.916043][T28664] ? load_image+0x400/0x400 [ 1766.920671][T28664] ? show_regs_print_info+0x12/0x12 [ 1766.925872][T28664] ? print_circular_bug+0x12b/0x1a0 [ 1766.931087][T28664] check_noncircular+0x296/0x330 [ 1766.936028][T28664] ? add_chain_block+0x940/0x940 [ 1766.940988][T28664] ? lockdep_lock+0xf1/0x1f0 [ 1766.945580][T28664] ? _find_first_zero_bit+0xcf/0x100 [ 1766.950864][T28664] __lock_acquire+0x2d07/0x7d10 [ 1766.955723][T28664] ? verify_lock_unused+0x140/0x140 [ 1766.960925][T28664] ? verify_lock_unused+0x140/0x140 [ 1766.966128][T28664] ? memset+0x1e/0x40 [ 1766.970133][T28664] lock_acquire+0x1bb/0x4a0 [ 1766.974728][T28664] ? mmap_read_lock_killable+0x1d/0x60 [ 1766.980188][T28664] ? read_lock_is_recursive+0x10/0x10 [ 1766.985563][T28664] ? cmp_ex_search+0x1a/0x70 [ 1766.990160][T28664] ? bsearch+0x8a/0xb0 [ 1766.994233][T28664] ? fault_in_readable+0x13e/0x1f0 [ 1766.999344][T28664] ? search_extable+0x8c/0xd0 [ 1767.004031][T28664] ? trim_init_extable+0x3b0/0x3b0 [ 1767.009141][T28664] ? mmap_read_lock_killable+0x1d/0x60 [ 1767.014619][T28664] down_read_killable+0x4c/0x340 [ 1767.019571][T28664] ? mmap_read_lock_killable+0x1d/0x60 [ 1767.025033][T28664] mmap_read_lock_killable+0x1d/0x60 [ 1767.030316][T28664] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1767.035513][T28664] do_user_addr_fault+0x2db/0xb10 [ 1767.040538][T28664] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1767.045744][T28664] exc_page_fault+0x60/0x100 [ 1767.050336][T28664] asm_exc_page_fault+0x22/0x30 [ 1767.055189][T28664] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 1767.060915][T28664] Code: c8 5b c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 a7 5b c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 8a 5b [ 1767.080526][T28664] RSP: 0018:ffffc90003317990 EFLAGS: 00050287 [ 1767.086593][T28664] RAX: ffffffff81be1ff9 RBX: 0000000000001000 RCX: 0000000000080000 [ 1767.094560][T28664] RDX: ffffc9000cd19000 RSI: 0000000000024d09 RDI: 0000000000024d0a [ 1767.102532][T28664] RBP: 0000000000000000 R08: ffff88802af39e00 R09: 0000000000000002 [ 1767.110501][T28664] R10: 0000000000000006 R11: 0000000000000002 R12: 000020000015b000 [ 1767.118470][T28664] R13: 0000000000001000 R14: 0000200000159241 R15: 000020000015a000 [ 1767.126440][T28664] ? fault_in_readable+0x139/0x1f0 [ 1767.131564][T28664] fault_in_iov_iter_readable+0x18e/0x2e0 [ 1767.137307][T28664] generic_perform_write+0x1f1/0x5c0 [ 1767.142599][T28664] ? generic_file_direct_write+0x330/0x330 [ 1767.148404][T28664] ? __file_remove_privs+0x5f0/0x5f0 [ 1767.153720][T28664] ? rwsem_write_trylock+0x135/0x1c0 [ 1767.159005][T28664] ? clear_nonspinnable+0x60/0x60 [ 1767.164032][T28664] ? generic_write_checks_count+0x3d9/0x4c0 [ 1767.169928][T28664] __generic_file_write_iter+0x148/0x2a0 [ 1767.175562][T28664] generic_file_write_iter+0xab/0x2e0 [ 1767.180933][T28664] do_iter_write+0x642/0xb10 [ 1767.185530][T28664] ? vfs_iter_write+0xa0/0xa0 [ 1767.190210][T28664] ? rcu_read_lock_any_held+0xb0/0x130 [ 1767.195672][T28664] do_pwritev+0x23d/0x3a0 [ 1767.200003][T28664] ? do_preadv+0x390/0x390 [ 1767.204416][T28664] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1767.210401][T28664] ? lock_chain_count+0x20/0x20 [ 1767.215262][T28664] ? lockdep_hardirqs_on+0x94/0x140 [ 1767.220472][T28664] ? __x64_sys_pwritev2+0xba/0x100 [ 1767.225600][T28664] do_syscall_64+0x4c/0xa0 [ 1767.230027][T28664] ? clear_bhb_loop+0x60/0xb0 [ 1767.234705][T28664] ? clear_bhb_loop+0x60/0xb0 [ 1767.239388][T28664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1767.245286][T28664] RIP: 0033:0x7f99ae39ce59 [ 1767.249719][T28664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1767.269420][T28664] RSP: 002b:00007f99af1d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1767.277840][T28664] RAX: ffffffffffffffda RBX: 00007f99ae615fa0 RCX: 00007f99ae39ce59 [ 1767.285807][T28664] RDX: 0000000000000001 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 1767.293770][T28664] RBP: 00007f99ae432d6f R08: 000000000000000c R09: 0000000000000004 [ 1767.301748][T28664] R10: 0000000000000fff R11: 0000000000000246 R12: 0000000000000000 [ 1767.309718][T28664] R13: 00007f99ae616038 R14: 00007f99ae615fa0 R15: 00007fff353f7088 [ 1767.317699][T28664] [ 1767.320835][ C1] vkms_vblank_simulate: vblank timer overrun [ 1767.534218][ T4467] hid (null): unknown global tag 0xa3 [ 1767.551467][ T4467] magicmouse 0003:05AC:0269.0033: unexpected long global item [ 1767.559643][ T4467] magicmouse 0003:05AC:0269.0033: magicmouse hid parse failed [ 1767.578409][ T4467] magicmouse: probe of 0003:05AC:0269.0033 failed with error -22 [ 1767.742071][ T4467] usb 3-1: USB disconnect, device number 22 [ 1773.930643][ T3935] eql: remember to turn off Van-Jacobson compression on your slave devices