last executing test programs: 3m4.263073254s ago: executing program 4 (id=5): syz_mount_image$nilfs2(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x4018400, &(0x7f0000000000)=ANY=[], 0x1, 0xf94, &(0x7f00000011c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) 3m2.895701463s ago: executing program 4 (id=10): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {@noflush_merge}, {@four_active_logs}, {@alloc_mode_reuse}, {@fastboot}, {@disable_roll_forward}, {@nobarrier}, {@background_gc_off}, {@fsync_mode_posix}, {@user_xattr}, {@data_flush}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m0.624311976s ago: executing program 4 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYRESHEX=r1], 0x20}}], 0x1, 0x24004004) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x782, &(0x7f0000001040)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000001000000000000000400060000000000100007000000000020"], 0x24, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mprotect(&(0x7f000071c000/0x2000)=nil, 0x2000, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x9, 0x1, 0x2, 0xff, 0xc1]}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd) 2m57.453384064s ago: executing program 4 (id=26): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001600)='./file0\x00', 0x80c880, &(0x7f0000000800)={[{@fat=@codepage={'codepage', 0x3d, '949'}}, {@uni_xlateno}, {@fat=@errors_remount}, {@fat=@nfs}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@fat=@umask={'umask', 0x3d, 0xe1}}, {@utf8}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@shortname_lower}]}, 0x2a, 0x35b, &(0x7f0000000280)="$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") syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 2m57.211979506s ago: executing program 32 (id=26): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001600)='./file0\x00', 0x80c880, &(0x7f0000000800)={[{@fat=@codepage={'codepage', 0x3d, '949'}}, {@uni_xlateno}, {@fat=@errors_remount}, {@fat=@nfs}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@fat=@umask={'umask', 0x3d, 0xe1}}, {@utf8}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@shortname_lower}]}, 0x2a, 0x35b, &(0x7f0000000280)="$eJzs3U1oHOUbAPBn/7PJpoH+k4NQ9LR6E6Q0EQ/qJaFUKOaglcWvi4tN/ciuhSwuJIdsc1E8Kl4ExYO3HvTgoWfxUMSbB69WkKp4sbdAiyO7M7s7+xEbLUkt/n6H5eGZ95n3nQ+yk7D75JWV2Dg/Exdu3Lgec3OlKK+cXom9UixGEn2XYorytCQAcC/YS9P4Pc3cfvQH8/1o9pDXBQAcnt77/2vHh4nK3VwNAHAUDvj7/zPdl9J49uKhLg0AOCR7Mfb+/9DI5rE/85cLnwoAAO5Vz7340tOraxHnqtW5iOa77Vq7Fk8Mt69eiDeiEetxKhbiVkT2oJA9LXRfnzq7duZUtevnxah1K9q1iGanXcueFFaTXn0llmIhFvP6dFCfdOuXevXViLjU6c0fzVK7NhPz+fw/zMd6LMdC3DdRH3F27cxyNd9Brdmv70Tsxlz/ILrrPxkL8d2rcTEacT66tcP17yxVq6fTtZH69uVKb9x+PvX5RwAAAAAAAAAAAAAAAAAAAAAA7sDJ6sDioP9N2uy03zk3PmCx2B+n3xgw7w+0m/UHSiv97jzvJeP9gUb787Rr5fjf3TxwAAAAAAAAAAAAAAAAAAAA+Bdpbc1GvdFY32xtbW8Ug04h89Y3n399LMbHvJkMM1HOdjcyJs9FoSqJQXk6KE+TkTF5kEQMB1++MlhxcUxlcBTb/WYCxf1Usk2FTClfU73ROP7gTx9PTLq1vfHHMJPExGkZDUqTkzb/n6X+omr/YPk2Y66labpf+c5Hk1VRiihPXLg7CWbz4Or11+9/tHXisd6mr/KmDw8/svD8tQ8/+3Wj3oj81DQas5utW+k/mSuySzC8N0r5eS5NuROmB7vDzO5ma6uefP/bCw+8/+3Y4CSmlXdvnmHm7f3n+mI8M5sF3WVOrbo6suf1mSk3/5TgyS/rL98c3L1//wqe+GSlfmXnx18OWlX4IaFRBwAAAAAAAAAAAAAAAAAAHInC160PJPvu9ePPHu6qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBoDf//fyHYncgcJLjZiclNlfXN1r6THzvSQwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D/szwAAAP//t0hwXA==") syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 2m12.71305541s ago: executing program 2 (id=168): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffd8e, 0x734, 0x0, 0xfffffffffffffecb) 2m10.854669472s ago: executing program 2 (id=172): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0x204008, &(0x7f0000000300)=ANY=[], 0x1, 0x1de, &(0x7f00000006c0)="$eJzslc2q00AUx/8ziUnvRXwANy684HVhmqQqbi5cN65cCKLFhWCxaammVtosbEHEJ3DvzoWPIdStDyFVEAXRjboemY8kYz+EftmF5wd38j+Z4eTMmdv/gCCI/5aPH35NxM+jzxUAJ3EA37z/4pRruLX+feX707fXr9Vf3H39zp8Ee39m85f+vgtgfNVBJoN9QAgh7PkD8zxl6VvgOG90HQyB0ffAcdvoBAx3jH5g6Z5cHwStTpoE93tps+WkSSijSA6xHGrT9X17ztA0sayPWfOD4ehhI02T/hbF/M6Nvxb1VYAjqz77vALoakPwon8ROCKja2C4afQV+HlvdEus/Z92y/zOX/fvYc1tfwJQvmltro/+TM2e/NRKCQH2T85+y8KBEvmJ7ryejQu4G0sofGAbpTrr/yO9OdbnV5T6TMfL5TleMOUtmcd0vvBP8YrhnOVP2kpeqp9jNes+rg6GowudbqOdtJNHcVy7HF4Mw0txVRmRHudboMq/p/xpv8yv7iRXzK71mIcnjSzrR3os4liP8xyXK//jODyLEzKWbupN5f0BIL8Imfnj6inVobOweIIgiB1yBkx5svLlXJjbpJgQIr6x4zoJgiAIgiAIgiAIglid3wEAAP//cN1bUQ==") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm9yWSZJIklySZIkSXJLSJrkSEJiyC1pSJLkMiSXISSXaUwa9/tdEpKkSZKQ3JL1/wh/p1Pndzq/0zl+nzPP9/PZn1nPu/ez9trv8+733Xu9M/Ntl6E1G9eq1pCI4F+C538kA0AsAAwEgKsAIACA8vHl48+tzy0x+V/bCftzPZh2uUfALieuf87G9c/ZuP45G9c/Z+P652xc/5yN65+zcf0Zy8k2Tit0NS85d+H5/5yMP///i2SXGfPl6jLXdgWI+aMpXP+cjev/Xyv4Ixtx/XM2rn9OFXu5B8D+D+DzPyfI9XfXcP1zNq4/YznZv3+OWbnLPcf9Py0QydnfgVzu1x9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsZzhpL9EAcDF9uUeF2OMMcYYY4wxxv48PtflHgFjjDHGGGOMMcb+/RAESFAQQAzkgljIDXEgAOBKyAtXQQSuhni4BvLBtZAfCkBBKAQJUBiKgAYDFghCKArFIArXQXG4HkpASSgFpcFBGUiEG6As3Ajl4CYoDzdDBbgFKkIluBUqw21QBW6HqnAHVIM7oTrUgJpQC+6C2nA31IF7oC7cC/XgPqgP90MDeAAawoPQCB6CxvAwNIFHoCk0g+bQAlr+r/Kfhx7wAvSEXpAMvaEPvAh9oR/0hwEwEF6CQfAyDIZXIAWGwFB4FYbBazAcXocR8AaMhDdhFLwFo2EMjIVxkArjYQK8DRPhHZgEk2EKTIU0mAbT4V2YATNhFrwHs+F9mANzYR7Mh3T4ADJgAWTCh7AQPoIsWASLYQkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFj2EbfALb4VPYATthF3wGu+HzfzL/xN/kd0VAQIECFSqMwRiMxViMwzjMg3kwL+bFCEYwHuMxH+bD/JgfC2JBTMAELIJF0KBByk1YFItiFKNYHItjCSyBpbAUOnSYiIlYFm/EclgOy2N5rIAVsCJWwkpYGStjFayCVbEqVsNqWB2rY02siXfhXdgb62AdrIt1sR7Wuzg9hQ2xITbCRtgYG2MTbIJNsSk2x+bYEltiK2yFrbE1tsW22A7bYXtsj0mYhB2wA3bEjtgJO2Fn7IxdsAt2xW7YLfv5XIAv4AvYC6uL3tgH+2BfTMnVHwfgAHwJB+HL+DK+gik4BIfiq/gqvobD8TiOwDdwJI7EKuItHI1jkMQ4TMVUnIATcCJOxEk4GSfjVEzDaTgdp+MMnIkz8T2cje/j+zgX5+J8TMd0zMAFmImZuBBPYBYuwsW4BJfiMlyKK3AlrsDVuAZX4zpchxtwA27CTbgFL56sCgA/xZ24E1NwN+7GPbgH9+Je3If7MBuzcT/uxwMW8CAexEN4CA/jETyKR/AYHsPjeAJPYr8LXT2b8HWjT0quSgFxjhJKxIgYEStiRZyIE3lEHpFX5BURERHxIl7kE/lEfpFfFBQFRYJIEEVEEWGEESTCGAAQUREVxUVxUUKUEKVEKeGEE4kiUZQVZUU5UU6UFzeLCuIWUVFUEm1cZVFZVBFtXVVxh6gmqonqooaoKWqJWqK2qC3qiDqirqgr6ol6or64XzQQvbE/PijOVaaxGIJNxFBsKpoJeeFIWonh2Fq0EW3F4+INHIHtRSuXJJ4SHcRo7Cj+IsbgM6KzGIddxHOiq+gmuovnRQ/R2vUUvcQk7C36iKnYV/QT/cUAMQNriPdwdu6a4hWRIoaIoeJVMR9fE8PF62JEbxAjxZtilHhLjBZjxFgxTqSK8WKCeFtMFO+ISWKymCKmijQxTUwX74oZYqaYJd4Ts8X7Yo6YK+aJ+SJdfCAyxAKRKT4UC8VHIkssEovFErFULBPLxQqRG1aJ1WKNWCvWifVig9goNonNYovYKj4W28QnYrv4VOwQO8Uu8ZnYLT4Xe8QXYq/4UuwTX4ls8bXYL74RB8S34qD4ThwS34vD4og4Kn4Qx8SP4rg4IU6KU+K0+EmcET+Ls8ILkCiFlFLJQMbIXDJW5pZx8gqZRwYXnt2rZby8RuaT18r8soAsKAvJBFlYFpFaGmklyVAWlcVkVF4ni8vrZQlZUpaSpaWTZWSivEGWlTfKcvImWV7eLCvIW2RFWUneKivL22QVebuEyPl9VJc1ZE1ZS94lk+FuWUfeI+vKe2U9eZ+sL++XDeQDsqF8UDaSD8nG8mHZRD4im8pmsrlsIVvKR2Ur+ZhsLdvItvJx2U4+IdvLJ2WSfEp2kP7CS+QZ2Vk+K7vI52RX2U12lz/Ls9LLnrKXhN4g+8gXZV/ZT/aXA+RA+ZIcJF+Wg+UrMkUOkUPlq3KYfE0Ol6/LEfINOVK+KUfJt+RoOUaOleNkqhwvJ8i35UT5jpwkJ8spcqpMk9Nk/ws9zZLyH+a//Tv5g3/Z+wa5UW6Sm+UWuVV+LLfJT+R2uV3ukDvkLrlL7pa75R65R+6Ve+U+uU9myzvkfrlfHpAH5EF5UB6Sh+RheUSekj/IY/JHeVyekCfkKXlanpZnLjwHoFAJJZVSgYpRuVSsyq3i1BUqj7pS5VVXqYi6WsWra1Q+da3KrwqogqqQSlCFVRGllVFWkQpVUVVMRdV1F9+jVClVWjlVRiWqG/6ZfFVcXa9KqJK/yr84vuS/M76WqqVqpVqp1qq1aqvaqnaqnWqv2qsklaQ6qA6qo+qoOqlOqrPqrLqoLqqr6qq6q+6qh+qheqqeKlklqz7qRdVX9VP91QA1UL2kBqlBarAarFJUihqqhqphapgaroarEWqEGqlGqlFqlBqtRquxaqxKValqgpqgJqqJapKapKaoKSpNpanparqaoWaoWWqWmq1mqzlqjpqn5ql0la4yVIbKVJlqoVqostQitUgtUUvUMrVMrVAr1Cq1Sq1Ra9Q6tU5lqY1qo9qsNqutaqvaprap7Wq72qF2qF1ql9qtdqs9ao/aq/aqfWqfylbZar/arw6oA+qgOqgOqUPqsDqsjqqj6pg6po6r4+qkOqlOq9PqjDqjzqqz5y77AhGIQAUqiAligtggNogL4oI8QZ4gb5A3iASRID6ID/IF1wb5gwJBwaBQkBAUDooEOjCBDcSFokeD64LiwfVBiaBkUCooHbigTJAY3BCUDW4MygU3BeWDm4MKwS1BxaBScGtQObgtqBLcHlQN7giqBXcG1YMaQc2gVnBXUDu4O6gT3BPUDe4N6gX3BfWD+4MGwQNBw+DBoFHwUNA4eDhoEjwSNA2aBc2DFkHLP7V/748XeMz11L10su6t++gXdV/dT/fXA/RA/ZIepF/Wg/UrOkUP0UP1q3qYfk0P16/rEfoNPVK/qUfpt/RoPUaP1eN0qh6vJ+i39UT9jp6kJ+speqpO09P0dP2unqFn6ln6PT1bv6/n6Ll6np6v0/UHOkMv0Jn6Q71Qf6Sz9CK9WC/RS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1x3qb/kRv15/qHXqn3qU/07v153qP/kLv1V/qfforna2/1vv1N/qA/lYf1N/pQ/p7fVgf0Uf1D/qY/lEf1yf0SX1Kn9Y/6TP6Z31W+3MX9+c+3o0yysSYGBNrYk2ciTN5TB6T1+Q1ERMx8Sbe5DP5TH6T3xQ0BU2CSTBFTBFzDhkyRU1REzVRU9wUNyVMCVPKlDLOOJNoEk1ZU9aUM+VMeVPeVDAVTEVT0dxqbjW3mdvM7eZ2c4e5w9xp7jQ1TA1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDFNTVPT3DQ3LU1L08q0Mq1Na9PWtDXtTDvT3rQ3SSbJdDAdTEfT0XQynUxn09l0MV1MV9PVdDfdTQ/Tw/Q0PU2ySTZ9TB/T1/Q1/U1/M9AMNIPMIDPYDDYpJsUMNUPNMDPMDDfDzQjzhhl57kLVvGVGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbDJNhMk2mWWgWmiyTZRabxWapWWqWm+VmpVlpVpvVZi2sNevNerPRbDSbzWaz1Ww128w2s91sNzvMDrPL7DK7zW6zx+wxe81es8/sM9km2+w3+80Bc8AcNAfNIXPIHDaHzVFz1Bwzx8xxc9ycNCfNaVPgwuelN7E2t42zV9g89kqb115l/zYuaAvZBFvYFrHa5rcFfhUba20JW9KWsqWts2Vsor3hN3FFW8neaivb22wVe7ut+pu4tr3b1rH32Lr2XlvL3vWruJ69z9a3D9sGiAC2mW1kW9jG9mHbxD5im9pmtrltYdvZJ2x7+6RNsk/ZDvbp38QZdoFdaVfZ1XaN3WF32pP2lD1gv7Wn7U+2p+1lB9qX7CD7sh1sX7Epdshv4pH2TTvKvmVH2zF2rB33m3iKnWrT7DQ73b5rZ9iZv4nT7Qd2ts20c+xcO8/O/yXOsGgz7Yd2of3IZtkAFtsldqldZpfbFf9/rEvsOrvebrDb7ad2s91it9qP7baLF8J2p91lP7O77ed2v/3G7rVf2n32oM22X/8Snzu+g/Y7e8h+bw/bI/ao/cEesz+qi9nnjv0H+7M9a70FQgKSpCigGMpFsZSb4ugKykNXUl66iiJ0NcXTNZSPrqX8VIAKUiFKoMJUhDQZskQUUlEqRlG6ji4OrxSVJkdlKJFuoLJ0I5Wjm6g83UwV6BaqSJVyX9iMbqeqdAdVozupOtWgmlSL7qLadDfVoXuoLt1L9eg+qk/3UwN6gBrSg9SIHqLG9DA1oUeoKTWj5tSCWtKj1Ioeo9bUhtrS49SOnqD29CQl0VPUgZ6mjvQX6kTPUGd6lrrQc9SVulF3ep560AvUk3pRMvWmPvQi9aV+1J8G0EB6iQbRyzSYXqEUGkJD6VUaRq/RcHqdRtAbNJLepFH0Fo2mMTSWxlEqjacJ9DZNpHdoEk2mKTSV0mgaTad3aQbNpFn0Hs2m92kOzaV5NJ/S6QPKoAWUSR/SQvqIsmgRLaYltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6mbfQJbadPaQftpF30Ge2mz2kPfUF76UvaR19RNn1N++kbOkDf0kH6zvei7+kwHaGj9AMdox/pOJ2gk3SKTtNPdIZ+prPkCUIMRShDFQZhTJgrjA1zh3HhFWGe8Mowb3hVGAmvDuPDa8J84bVh/rBAWDAsFCaEhcMioQ5NaEMKw7BoWCyMhteFxcPrwxJhybBUWDp0YZkwMbwhLBveGJYLbwrLhzeHFcJbwophpfDheyuHt4VVwtvDquEdYbXwzrB6WCOsGdYK7wprh3eHdcJ7wrrhvWG58L6wfnh/2CB8IGwYPhg2Ch8KG4cPh03CR8KmYbOwedgibBk+GrYKHwtbh23CtuHjYbvwibB9+GSYFD4Vdgif/mX9fQv+/vrksHfYJ3wxfDH0/h45Lzo/mh79IJoRXRDNjH4YXRj9KJoVXRRdHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q9b5WLnDohJNOucDFuFwu1uV2ce4Kl8dd6fK6q1zEXe3i3TUun7vW5XcFXEFXyCW4wq6I084468iFrqgr5qLuOlfcXe9KuJKulCvtnCvjEl0L19K1dK3cY661a+Pausfd4+4J94R70j3pnnId3NOuo/uL6+SecZ3ds+5Z95zr6rq57u5518ONz3v+ZEt2fVwf19f1df1dfzfQDXSD3CA32A12KS7FDXVD3TA3zA13w90IN8KNdCPd3QpgtBvtxrqxLtWluglugpvoJrpJbpKb4qa4NJfmprvpboab4arMPL+XOW6Om+fmuXSX7jLcuWvGTLfQLXRZLsstdovdUrfULXfL3Uq30q12q91at9atd+vdRrfRbXab3Va31W1z29x2t93t8Fed79TtdnvcHrfX7XX73Fcu233t9rtv3AH3rTvovnOH3PfusDvijrof3DH3ozvuTriT7pQ77X5yZ9zP7qzzLjUyPjIh8nZkYuSdyKTI5MiUyNRIWmRaZHrk3ciMyMzIrMh7kdmR9yNzInMj8yLzI+mRDyIZkQWRzMiHkYWRjyJZkUWRxZElkaWRZRHvC28OfVFfzEf9db64v96X8CV9KV/aO1/GJ/obfFl/oy/nb/Ll/c2+gr/FV/SV/K3+Ed/UN/PNfQvf0j/qW/nHfGvfxrf1j/t2/gnf3j/pk/xTvoN/2nf0f/Gd/DO+s3/Wd/HP+a6+m+/un/c9/Au+p+/lk31v38e/6Pv6fr6/H+AH+pf8IP+yH+xf8Sl+iB/qX/XD/Gt+uH/dj/Bv+JExb/pRF2+RYZxP9eP9BP+2n+jf8ZP8ZD/FT/Vpfpqf7t/1M/xMP8u/52f79/0cP9fP8/N9uv/AZ/gFPtN/6Bf6j3yWX3RxUtkv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vv+x3+Y/8dv9p36H3+l3+c/8bv+53+O/8Hv9l36f/8pn+6/9fv+NP+C/9Qf9d/6Q/94f9kf8Uf+DP+Z/9Mf9CX/Sn/Kn/U/+jP/Zn+W/WWOMMcYY+0PGX2qKX685P53f+3dyxF9t3AcArtxSKPuv15+7olyb/3y7n0hoFwGAp3p1efDiUr16cnLyhW2zJATF5gJc/CbonBi4FC+CtvAEJEEbKPu74+8nup2mf9B/9GaAuL/KiYVL8aX+vwDA5N/p/9HHR2ZUCE/G/w/9zwUoUexSTm64FC+Ctr/Mr7SBcn9n/AVa/YPx5/4yFaD1X+XkgUvxpfEnwmPwNCT9akvGGGOMMcYYY+y8fuLWThfvPy/+xufv3Z8nqEs5ueBS/I/uzxljjDHGGGOMMXb5PdOt+5OPJiW16fTPN6r+r7L+cKMJ/Lt65sbvNrwHuPiIAoB/sUOAcw35nzyKTf+RfaVcOHX+dtXSUz6A/xul/DMal/mNiTHGGGOMMfanu3TR/+vH1eUaEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlgP9J/6d2OU+RsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xy+38BAAD//3lG9tE=") open(&(0x7f00000000c0)='./file0\x00', 0x44000, 0xee) 2m10.398115915s ago: executing program 2 (id=173): syz_mount_image$ext4(&(0x7f0000000f00)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000412, &(0x7f0000000180)={[{@delalloc}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000000440)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m9.338965858s ago: executing program 2 (id=178): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) 2m8.346669717s ago: executing program 2 (id=179): syz_clone(0x10065400, &(0x7f0000000040), 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000180)="42b4cba4997f5c8e3a79eb7d86904855bd8fdf60d908c00d5221ae903aa790ba6815a66e5b362561ec24678942efe282c8604f8aa6547eb7ea9408ae6a6e8996ceec4240") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffd8e, 0x734, 0x0, 0xfffffffffffffecb) 2m5.793056475s ago: executing program 2 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2182, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x41, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socket$netlink(0x10, 0x3, 0x0) sendfile(r3, r3, 0x0, 0x20000023896) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2m5.466545341s ago: executing program 33 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2182, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x41, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socket$netlink(0x10, 0x3, 0x0) sendfile(r3, r3, 0x0, 0x20000023896) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1m55.462765381s ago: executing program 5 (id=219): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$eJzs28tvG8UfAPDvrpP219cvoSqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCAJC5YgqcUcckfgLOMEFASckrnBHlSoUIbVwMlp7N7Ed23nUiaH+fKRtZ3bXnfl6drwzO90A+tZI9kcSsTcifo2IoVq28YSR2l+3lxam/lpamEqiUnnjj6R63q2lhani1OJze4rMQET6SRKHW5Q7d+XqhclyeeZynh+bv/ju2NyVq8+cvzh5bubczKWJ06dPnhh/7tTEs12JM4vr1qEPZo8cfOWt669Nnbn+9o9fJ0X8TXF0yUing49XKl0urrf21aWTgR5WhA0p1bppDFb7/1CUYqXxhuLlj3taOWBLVSqVyn3tDy9WgLtYEr2uAdAbxY0+m//mW3Hr34bRR+/dfKE2Acpiv51vtSMDkebnDDbNb7tpJCLOLP79RbbFRp9DpFtUKQDgrvZtNv55umH8l48/0qh/LvT/fA1lOCLuiYj9EXEqIg5ExL0R1XPvj4gHWhWStC+/eZFk9fgnvbHp4NYhG/89n69tNY7/lgdXw6U8t68a/2By9nx55nj+nRyLwZ1ZfrxDGd+99Mtn7Y7Vj/+yLSu/GAvm9bgxsLPxM9OT85N3EnO9mx9FHBpoFX+yvBKQNd/BiDi0yTLOP/nVkSJ9uNR4bO34O+jCOlPly4gnau2/GE3xF5LO65Nj/4vyzPGx4qpY7aefr73ervw7ir8Lsvbf3fL6X45/OKlfr53beBnXfvu07Zxms9f/juTNhn3vT87PXx6P2JG8Wqt0/f6JpvMmVs7P4j92tHX/3x8r38Th7PpPIx6MiIci4uG87o9ExKMRcbRD/D+8+Ng7HeP/s138Ozv8q92RxT/d0P7FD1+79l9J7IjmPa0TpQvff9NQ6HBT/Gu2/8lq6li+Zz2/f+up1+auZgAAAPjvySb7eyNJR5fTaTo6Wvs//Adid1qenZt/6uzse5ema+8IDMdgWjzpGqp7HjqeT+uL/ERT/kT+3Pjz0q5qfnRqtjzd6+Chz+1p0/8zv5d6XTtgy3lfC/qX/g99q/49AKDPuP9D/2rR/3f1oh7A9mt1//+wB/UAtl9T/7fsB33E/B/6l/4P/Uv/h740tyvWfkleQmJVItJ/RTUktijR618mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7vgnAAD//wW66qg=") r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8c1) socket$inet6(0xa, 0x80802, 0x0) 1m54.508620389s ago: executing program 5 (id=221): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0x2000, 0x20) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000007c0)={0x1, 0xffc, 0x0, 0x410a}) 1m53.421809194s ago: executing program 5 (id=226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000300)="d9e9baf80c66b8b5867c8666efbafc0cecf30fc737ba2100ec0f01d1baf80c66b8dc29868f66efbafc0cb88000ef8fea781058f200000000645bf30f1ef80fc7ad89ad", 0x43}], 0x1, 0x11, &(0x7f00000001c0)=[@cstype0={0x4, 0xc}, @dstype3={0x7, 0xb}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x35}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x800000000009, 0x7, 0x1, 0x839, 0xce, 0x5, 0xfffffffffffff235, 0x8, 0x4000000000008, 0x7, 0xed05, 0x1000000000005, 0x3c8, 0x9, 0x5, 0x8], 0x80f2000, 0x222}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m51.651494772s ago: executing program 5 (id=231): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89801) syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000c40)='./file0\x00', 0x0, &(0x7f0000000c80), 0x1, 0xbf6, &(0x7f0000000cc0)="$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") 1m50.389409895s ago: executing program 5 (id=234): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000001c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c726f6469722c696f636861727365743d61736369692c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d77696e6e742c6e66732c6e6f6e756d7461696c3d302c756e695f786c6174653d312c73686f72746e616d653d6d697865642c696f636861727365743d63703934392c757466383d302c00bce319934ec9b3445bcd9f0b7a8911511c7880c45c6a3f1a402a5d84be7884b28369f88ddaab3b9156af49edbb86efb63d0555101c09"], 0x1, 0x350, &(0x7f0000000600)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001880)=""/4093, 0xffd) 1m49.322284998s ago: executing program 5 (id=238): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xb, 0x204031, 0xffffffffffffffff, 0xc32bd000) 1m49.039232092s ago: executing program 34 (id=238): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xb, 0x204031, 0xffffffffffffffff, 0xc32bd000) 39.053792699s ago: executing program 1 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x4b65, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000040c0), 0x20000, 0x0) 36.356480483s ago: executing program 1 (id=436): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x113) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES8=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 35.546103024s ago: executing program 1 (id=438): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_delroute={0x1c, 0x12, 0x901, 0x0, 0x25dfdbfc, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x9}}, 0x1c}}, 0x0) 34.010942031s ago: executing program 1 (id=442): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000009c0), 0x11, 0x586, &(0x7f0000000d40)="$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") pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000cc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000140)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x1) 32.870948757s ago: executing program 1 (id=447): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0x30, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 30.459043358s ago: executing program 1 (id=455): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x48, 0x0, 0x1, 0x7fff}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000007c0)=ANY=[], 0x0) 30.088819347s ago: executing program 35 (id=455): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x48, 0x0, 0x1, 0x7fff}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000007c0)=ANY=[], 0x0) 16.229082079s ago: executing program 3 (id=497): socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="225100d1a9ec", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "006fea", 0xc, 0x84, 0x1, @private0, @local, {[], "d5e41935d532cbceca52de39"}}}}}, 0x0) 13.128428684s ago: executing program 0 (id=507): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup2(0x0, 0x0, &(0x7f0000000700), 0xc0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x2000c090}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @remote, @broadcast, @broadcast}}}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xa0003009}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) 12.321709404s ago: executing program 6 (id=511): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x13eb, 0xb, 0x8, 0x10, 0x8, "9530a964c07bfe00"}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 12.176134822s ago: executing program 0 (id=512): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902240001000000000904"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x76, 0xfa, 0xf, 0x10, 0x1c40, 0x534, 0xbc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 11.087597966s ago: executing program 6 (id=516): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) 10.055538068s ago: executing program 8 (id=518): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x840, &(0x7f0000000000), 0x1, 0x53b, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x48) 9.846993298s ago: executing program 3 (id=520): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) 9.037858328s ago: executing program 0 (id=522): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup2(0x0, 0x0, &(0x7f0000000700), 0xc0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001e00030903"], 0x28}, 0x1, 0x0, 0x0, 0x2000c090}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @remote, @broadcast, @broadcast}}}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xa0003009}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) 8.773673581s ago: executing program 8 (id=524): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x2d, &(0x7f0000000400)=ANY=[], 0x0) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x2d04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x8, 0x5, {0x7, 0x25, 0x1, 0xc, 0xc6, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0xff, 0x1, {0x7, 0x25, 0x1, 0x4, 0x8, 0x8c2}}}}}}}}]}}, 0x0) 7.987792491s ago: executing program 0 (id=526): syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224"], 0x0) 7.415089019s ago: executing program 6 (id=527): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000080)={0x9, 0x401, 0xfffffffc, 0x32c, 0x6, 0x1000}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1068) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/57) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000100)=0x4) syz_usb_connect(0x3, 0x11c, &(0x7f0000000280)=ANY=[@ANYBLOB="120100006d9aa1084c05e102098b0102030109020a0101000000000904ed"], 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000180)={0x9, 0x8, 0x2f26, 0x8, 0xfffffff7, 0x8}) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000540)=0x8ef02205db01c40c) 7.325455274s ago: executing program 3 (id=528): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000600), 0x0, 0x602) write$char_usb(r1, 0x0, 0x0) 5.831872968s ago: executing program 0 (id=532): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.754981822s ago: executing program 8 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x4b65, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000040c0), 0x20000, 0x0) 5.592339321s ago: executing program 6 (id=535): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x12, 0x82, 0xe0, 0x8, 0x2040, 0x9301, 0x30eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2d, 0x7, 0x30, 0x5, "", [{{0x9, 0x4, 0x2, 0x4, 0x0, 0xae, 0x63, 0xb0, 0x8}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0xb38e98e9b5c897a3, 0x22, 0x8a, {0x8a, 0x23, "7863455d2f0127f342167552c919e8c00e2e144858c11cc3caf3cf7b24634a411788f543db963f6cb686682269da1516811dbf37a1db1c52a0615cac4b30cba234cb5e310b802b4f3f1a089e074e5c3d80347026442eaa9720b8fd0864441ea01fc94da2920a90c8ec61c6e03948f754b0e029f84ba35ca2269430135527c633c32fc463b9873109"}}, &(0x7f00000000c0)={0x0, 0x3, 0xb0, @string={0xb0, 0x3, "8d1b2fe6d41e5b7c7251b97ffbe06986562b321289402f483a0ccbc2383ba4f5e6847d4cb8cac59974fd4cef739bcd17bbd3d5b12a115a30bbbda089cb7bba669279d3ee41b7ba10c198375b2c0eae891af3c0a0e5dcd476e4dc672540129b9294dd02c16dbcc824515c2019dad1c8d9d43ccb5bc95b991e4ba2e54db57b73dc8fa89c275a173529764442c345eb85dd2f2f399459d64eb35ba74de2bac5af02b1270381fdd3aa12c270ec0f5d4f"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x40, 0x15, 0xa4, "95fc4da6e9b53813fe16fe6f62d16098db3b9496b1d0abb498e31a66055b6b31a3add5abd5958e365087f6d031191b9bac953e526ade598e2402ac18b2dadb6a6792bac212b366499c9c6f0fa27573f23a5be4b62502d1f941734593030783a9da4657ad1a80fb99666789670b77c1e12b5714db27f5c12efbd170b2039ac4a2736e5f56bb82b698cb21b88eae6ffc3418ca66e4ed9eeb2cb9505909f9ea6538ac96e6b0"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x81, 0x1, ' '}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "be"}, &(0x7f0000000400)={0x20, 0x83, 0x3, "a971e6"}, &(0x7f0000000440)={0x20, 0x84, 0x3, "c5bfc9"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "0e1136"}}) 4.60319115s ago: executing program 8 (id=536): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup2(0x0, 0x0, &(0x7f0000000700), 0xc0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001e00030903"], 0x28}, 0x1, 0x0, 0x0, 0x2000c090}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @remote, @broadcast, @broadcast}}}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xa0003009}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) 4.555068192s ago: executing program 7 (id=537): r0 = syz_usb_connect(0x2, 0x26, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x35, 0xbb, 0x9b, 0x8, 0x10b8, 0x1e6e, 0x9fdb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14, 0x1, 0x8, 0x3, 0x10, 0x10, "", [{{0x9, 0x4, 0x21, 0x7, 0x0, 0x40, 0x82, 0x49, 0x5, [@generic={0x2, 0x22}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001140)={0x14, 0x0, &(0x7f0000001100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc27}}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000001400)={0x14, 0x0, &(0x7f00000013c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002240)={0x44, &(0x7f0000002040)={0x0, 0x11, 0x6, "022501f3a2d9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac2(0x2, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0xc, 0x0, 0x0, 0x0) syz_usb_disconnect(r1) 4.111069485s ago: executing program 3 (id=538): syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002994d9808b0141034cb5850e4264009022400010407108109040d00029226cafc09050110080003080b0905080240"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 3.713355554s ago: executing program 8 (id=539): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x840, &(0x7f0000000000), 0x1, 0x53b, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) 3.680832536s ago: executing program 7 (id=540): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xa5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = eventfd2(0xffffffff, 0x80000) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000040)={0x0, r6}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000001c0)=0xf) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) 2.735559253s ago: executing program 8 (id=541): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181242, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000280)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000300)="d9e9baf80c66b8b5867c8666efbafc0cecf30fc737ba2100ec0f01d1baf80c66b8dc29868f66efbafc0cb88000ef8fea781058f200000000645bf30f1ef80fc7ad89ad", 0x43}], 0x1, 0x11, &(0x7f00000001c0)=[@cstype0={0x4, 0xc}, @dstype3={0x7, 0xb}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x14, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000", 0x14) dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x35}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000240)="e08a907bafb24541010000000008", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0xe9, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x5, &(0x7f0000000080)=ANY=[], 0x1, [{0x0, 0x0}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8011) 2.163102712s ago: executing program 6 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2.146875833s ago: executing program 7 (id=543): syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7bc20"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1.409634379s ago: executing program 7 (id=544): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xd8}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000240)='./file0\x00') mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 1.344099423s ago: executing program 6 (id=545): r0 = syz_open_dev$evdev(0x0, 0x2, 0x200400) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000300)=0x6ee) syz_open_dev$hidraw(&(0x7f0000000340), 0x5, 0x682402) syz_usb_connect(0x3, 0x2d, &(0x7f0000001680)={{0x12, 0x1, 0x250, 0x60, 0x24, 0x64, 0x8, 0x3fd, 0xebbe, 0x2ca5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x7, 0x0, 0x9, "", [{{0x9, 0x4, 0x96, 0x3, 0x1, 0xe3, 0x90, 0xbc, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x8, 0x12, 0x5, 0x9}}]}}]}}]}}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, 0x0) 1.270144526s ago: executing program 7 (id=546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x4b65, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000040c0), 0x20000, 0x0) 1.051057208s ago: executing program 3 (id=547): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x840, &(0x7f0000000000), 0x1, 0x53b, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x48) 736.603483ms ago: executing program 0 (id=548): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) unshare(0x2c020400) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x112, 0x3, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 35.032358ms ago: executing program 7 (id=549): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) pipe2$9p(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0xfe, 0x0, 0x0) 0s ago: executing program 3 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup2(0x0, 0x0, &(0x7f0000000700), 0xc0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001e00030903"], 0x28}, 0x1, 0x0, 0x0, 0x2000c090}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @remote, @broadcast, @broadcast}}}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xa0003009}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) kernel console output (not intermixed with test programs): mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.719316][ T5185] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,bsdgroups,inode_readahead_blks=0x0000000000000100,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,quota,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 108.754577][ T4187] attempt to access beyond end of device [ 108.754577][ T4187] loop0: rw=2049, want=40968, limit=40427 [ 108.831951][ T5193] loop5: detected capacity change from 0 to 512 [ 108.837901][ T144] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 108.881364][ T144] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 108.924536][ T5185] EXT4-fs (loop2): shut down requested (2) [ 108.935381][ T5193] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.175: bg 0: block 473: padding at end of block bitmap is not set [ 108.951412][ T4352] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.025717][ T5193] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 109.072241][ T5193] EXT4-fs (loop5): 1 orphan inode deleted [ 109.079368][ T5193] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.097072][ T5193] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.268053][ T5199] loop2: detected capacity change from 0 to 4096 [ 109.450478][ T4352] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 109.477036][ T4352] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.670080][ T4352] usb 2-1: config 0 has no interface number 0 [ 109.728662][ T5199] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.840878][ T4352] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 109.881862][ T4352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.895400][ T4352] usb 2-1: Product: syz [ 109.899575][ T4352] usb 2-1: Manufacturer: syz [ 109.909476][ T4352] usb 2-1: SerialNumber: syz [ 110.041879][ T4352] usb 2-1: config 0 descriptor?? [ 110.083414][ T4190] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /43/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 110.157471][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 110.197019][ T4190] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 110.245479][ T4190] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /43/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 110.322518][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 110.346595][ T5210] loop3: detected capacity change from 0 to 512 [ 110.370282][ T4352] usb 2-1: USB disconnect, device number 6 [ 110.380575][ T4190] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 110.409984][ T4190] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /43/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 110.442269][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 110.480264][ T21] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 110.489284][ T4190] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 110.503193][ T4190] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /43/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 110.551985][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 110.579673][ T4190] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 110.599588][ T4190] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /43/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 110.627643][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 110.655703][ T4190] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 110.730913][ T4190] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 110.751374][ T4190] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 110.782473][ T4190] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 110.804671][ T4190] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 110.834512][ T4190] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 110.861361][ T21] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 110.887244][ T21] usb 6-1: config 0 has no interface number 0 [ 110.909418][ T21] usb 6-1: config 0 interface 41 has no altsetting 0 [ 111.198001][ T21] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 111.208089][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.217195][ T21] usb 6-1: Product: syz [ 111.221730][ T21] usb 6-1: Manufacturer: syz [ 111.226399][ T21] usb 6-1: SerialNumber: syz [ 111.234732][ T21] usb 6-1: config 0 descriptor?? [ 112.215787][ T5237] loop1: detected capacity change from 0 to 512 [ 112.317798][ T5237] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.190: bg 0: block 473: padding at end of block bitmap is not set [ 112.415976][ T5237] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 112.442867][ T5237] EXT4-fs (loop1): 1 orphan inode deleted [ 112.501850][ T5237] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.580150][ T5237] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.590762][ T21] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 112.630349][ T21] CoreChips: probe of 6-1:0.41 failed with error -71 [ 112.648139][ T21] usb 6-1: USB disconnect, device number 3 [ 113.310251][ T25] audit: type=1326 audit(1774493726.135:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3a7ec799 code=0x7ffc0000 [ 113.455962][ T25] audit: type=1326 audit(1774493726.135:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3a7ec799 code=0x7ffc0000 [ 113.545148][ T25] audit: type=1326 audit(1774493726.225:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3a7ec799 code=0x7ffc0000 [ 113.592740][ T25] audit: type=1326 audit(1774493726.225:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3a7ec799 code=0x7ffc0000 [ 113.616548][ T25] audit: type=1326 audit(1774493726.225:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3a7ec799 code=0x7ffc0000 [ 113.638615][ T25] audit: type=1326 audit(1774493726.225:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3a7ec799 code=0x7ffc0000 [ 113.663135][ T25] audit: type=1326 audit(1774493726.225:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8f3a7acfce code=0x7ffc0000 [ 113.689981][ T25] audit: type=1326 audit(1774493726.225:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3a7ec799 code=0x7ffc0000 [ 113.712215][ T25] audit: type=1326 audit(1774493726.225:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3a7ec799 code=0x7ffc0000 [ 113.734355][ T25] audit: type=1326 audit(1774493726.225:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3a7ec799 code=0x7ffc0000 [ 113.878628][ T5252] chnl_net:caif_netlink_parms(): no params data found [ 114.673750][ T5275] overlayfs: missing 'lowerdir' [ 114.775948][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.817374][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.903128][ T5252] device bridge_slave_0 entered promiscuous mode [ 114.939300][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.841666][ T4353] Bluetooth: hci4: command 0x0409 tx timeout [ 116.068739][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.179581][ T5252] device bridge_slave_1 entered promiscuous mode [ 116.236080][ T5252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.276173][ T5252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.368000][ T5296] loop1: detected capacity change from 0 to 512 [ 116.424290][ T5252] team0: Port device team_slave_0 added [ 116.492908][ T5252] team0: Port device team_slave_1 added [ 116.566873][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.584400][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.597924][ T5296] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.206: bg 0: block 473: padding at end of block bitmap is not set [ 116.614160][ T5252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.638541][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.645558][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.672192][ T5252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.682862][ T5296] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 116.693255][ T5296] EXT4-fs (loop1): 1 orphan inode deleted [ 116.698990][ T5296] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.732560][ T5296] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.770414][ T5252] device hsr_slave_0 entered promiscuous mode [ 116.790830][ T5252] device hsr_slave_1 entered promiscuous mode [ 116.800607][ T5252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.859561][ T5252] Cannot create hsr debugfs directory [ 117.382170][ T5102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.868601][ T5102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.966260][ T5312] loop0: detected capacity change from 0 to 2048 [ 117.970088][ T4353] Bluetooth: hci4: command 0x041b tx timeout [ 117.998909][ T5102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.052764][ T5312] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.063754][ T5312] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.656154][ T5102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.615052][ T5252] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 119.838873][ T5252] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 120.047974][ T4344] Bluetooth: hci4: command 0x040f tx timeout [ 120.609620][ T5252] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 120.647936][ T5252] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 121.008460][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.058176][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.097558][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.118912][ T5346] loop5: detected capacity change from 0 to 512 [ 121.128488][ T5252] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.193760][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.206945][ T5346] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.214: invalid indirect mapped block 256 (level 2) [ 121.212953][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.228979][ T4811] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.236092][ T4811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.248376][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.298608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.315870][ T5346] EXT4-fs (loop5): 2 truncates cleaned up [ 121.321352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.330355][ T5346] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 121.417774][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.424931][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.514017][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.541077][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.549845][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.596190][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.616808][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.643418][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.676622][ T5252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.724998][ T5252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.749675][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.771033][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.779827][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.909534][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.082136][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.123261][ T4345] Bluetooth: hci4: command 0x0419 tx timeout [ 122.229403][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.656806][ T5363] loop0: detected capacity change from 0 to 256 [ 122.839847][ T5363] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 123.081959][ T5374] loop5: detected capacity change from 0 to 512 [ 123.264143][ T5374] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 123.333622][ T5102] device hsr_slave_0 left promiscuous mode [ 123.381430][ T5102] device hsr_slave_1 left promiscuous mode [ 123.424608][ T5374] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 123.433026][ T5374] System zones: 1-12 [ 123.448285][ T5374] EXT4-fs (loop5): 1 truncate cleaned up [ 123.454168][ T5374] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug,block_validity,errors=remount-ro,debug,. Quota mode: none. [ 123.785008][ T5102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.910519][ T5102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.938549][ T5102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.963303][ T5379] loop5: detected capacity change from 0 to 512 [ 123.972518][ T5102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.117355][ T5102] device bridge_slave_1 left promiscuous mode [ 124.148142][ T5379] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 124.201620][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.486896][ T5102] device bridge_slave_0 left promiscuous mode [ 124.510242][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.532032][ T5379] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 124.660685][ T5102] device veth1_macvtap left promiscuous mode [ 124.666739][ T5102] device veth0_macvtap left promiscuous mode [ 124.700225][ T5379] EXT4-fs (loop5): 1 truncate cleaned up [ 124.717741][ T5102] device veth1_vlan left promiscuous mode [ 124.724196][ T5102] device veth0_vlan left promiscuous mode [ 124.742301][ T5379] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 125.581686][ T5421] loop0: detected capacity change from 0 to 128 [ 125.657214][ T5422] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.698316][ T5421] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.834311][ T5421] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.852984][ T5419] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 125.900556][ T5419] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 126.833863][ T5435] loop5: detected capacity change from 0 to 4096 [ 126.964218][ T5102] team0 (unregistering): Port device team_slave_1 removed [ 127.018707][ T5435] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.684632][ T5102] team0 (unregistering): Port device team_slave_0 removed [ 127.698982][ T5102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.839763][ T5445] loop0: detected capacity change from 0 to 512 [ 127.874703][ T5445] EXT4-fs (loop0): Ignoring removed nobh option [ 127.908648][ T5102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.973660][ T5445] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #3: comm syz.0.233: corrupted inode contents [ 128.297500][ T5102] bond0 (unregistering): Released all slaves [ 128.389656][ T5445] EXT4-fs (loop0): Remounting filesystem read-only [ 128.398703][ T5445] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #3: comm syz.0.233: mark_inode_dirty error [ 128.419403][ T5445] EXT4-fs (loop0): Remounting filesystem read-only [ 128.429843][ T5445] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #3: comm syz.0.233: corrupted inode contents [ 128.449185][ T5445] EXT4-fs (loop0): Remounting filesystem read-only [ 128.456082][ T5445] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.233: mark_inode_dirty error [ 128.474508][ T5445] EXT4-fs (loop0): Remounting filesystem read-only [ 128.488859][ T5445] __quota_error: 6 callbacks suppressed [ 128.488873][ T5445] Quota error (device loop0): write_blk: dquota write failed [ 128.508865][ T5445] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 128.520659][ T5445] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.233: Failed to acquire dquot type 0 [ 128.539360][ T5445] EXT4-fs (loop0): Remounting filesystem read-only [ 128.557552][ T5445] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.233: corrupted inode contents [ 128.590300][ T5445] EXT4-fs (loop0): Remounting filesystem read-only [ 128.596829][ T5445] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #16: comm syz.0.233: mark_inode_dirty error [ 128.617496][ T5445] EXT4-fs (loop0): Remounting filesystem read-only [ 128.630295][ T5445] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.233: corrupted inode contents [ 128.642772][ T5445] EXT4-fs (loop0): Remounting filesystem read-only [ 128.649372][ T5445] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.233: mark_inode_dirty error [ 128.669355][ T5445] EXT4-fs (loop0): Remounting filesystem read-only [ 128.670544][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.676774][ T5445] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.233: corrupted inode contents [ 128.747858][ T5456] loop1: detected capacity change from 0 to 256 [ 128.759843][ T5445] EXT4-fs (loop0): Remounting filesystem read-only [ 128.767265][ T5445] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 128.787279][ T5445] EXT4-fs (loop0): Remounting filesystem read-only [ 128.794261][ T5445] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.233: corrupted inode contents [ 128.822173][ T5445] EXT4-fs (loop0): Remounting filesystem read-only [ 128.833456][ T5445] EXT4-fs error (device loop0): ext4_truncate:4279: inode #16: comm syz.0.233: mark_inode_dirty error [ 128.848468][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.860256][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.878129][ T5445] EXT4-fs (loop0): Remounting filesystem read-only [ 128.885027][ T5445] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 128.937627][ T5445] EXT4-fs (loop0): Remounting filesystem read-only [ 128.976818][ T5445] EXT4-fs (loop0): 1 truncate cleaned up [ 129.031753][ T5445] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 129.090322][ T5445] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.347189][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.380855][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.444316][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.457499][ T5453] loop3: detected capacity change from 0 to 40427 [ 129.472604][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.529500][ T5252] device veth0_vlan entered promiscuous mode [ 129.546937][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.580243][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.611101][ T5252] device veth1_vlan entered promiscuous mode [ 129.612807][ T5453] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.666364][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.781896][ T5453] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.803381][ T5252] device veth0_macvtap entered promiscuous mode [ 129.836045][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.849736][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.896154][ T5252] device veth1_macvtap entered promiscuous mode [ 129.988733][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.142204][ T4768] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.326881][ T4184] attempt to access beyond end of device [ 130.326881][ T4184] loop3: rw=2049, want=45104, limit=40427 [ 130.711194][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.809269][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.838407][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.864647][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.886088][ T5461] loop1: detected capacity change from 0 to 40427 [ 130.908376][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.918994][ T5461] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 130.929137][ T5461] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 130.947186][ T5461] F2FS-fs (loop1): invalid crc value [ 130.954703][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.995256][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.995861][ T5461] F2FS-fs (loop1): Found nat_bits in checkpoint [ 131.041527][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.063169][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.106808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.129248][ T5461] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 131.147134][ T5461] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 131.152077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.202285][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.227003][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.265223][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.298106][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.315023][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.326589][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.362787][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.402794][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.435834][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.439001][ T5461] overlayfs: failed to resolve './cgroup': -2 [ 131.462606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.479690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.507427][ T5252] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.517447][ T5252] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.534177][ T5252] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.546364][ T5252] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.662201][ T5503] loop3: detected capacity change from 0 to 4096 [ 131.839228][ T5503] EXT4-fs (loop3): inline encryption not supported [ 131.948632][ T5503] EXT4-fs (loop3): Test dummy encryption mode enabled [ 132.177981][ T5503] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 132.241894][ T5503] System zones: 0-5 [ 132.290642][ T5503] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 132.324665][ T4768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.365239][ T4768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.379849][ T4232] Bluetooth: hci0: command 0x0409 tx timeout [ 132.430946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.490715][ T4749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.498586][ T4749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.547933][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.578414][ T5523] loop0: detected capacity change from 0 to 512 [ 132.604132][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.610532][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.625589][ T5484] chnl_net:caif_netlink_parms(): no params data found [ 132.733854][ T5523] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 132.768900][ T5523] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.919248][ T5484] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.940708][ T5523] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 132.980236][ T5484] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.010295][ T5523] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 133.055211][ T5484] device bridge_slave_0 entered promiscuous mode [ 133.080154][ T5523] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 133.098495][ T5523] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.246: bg 0: block 64: padding at end of block bitmap is not set [ 133.108268][ T5484] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.157698][ T5523] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 133.176395][ T5484] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.185062][ T5523] EXT4-fs (loop0): 1 truncate cleaned up [ 133.214078][ T5523] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.251644][ T5484] device bridge_slave_1 entered promiscuous mode [ 133.308571][ T5544] binder: BINDER_SET_CONTEXT_MGR already set [ 133.521731][ T5484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.545041][ T5544] binder: 5543:5544 ioctl 4018620d 2000000002c0 returned -16 [ 134.249660][ T5484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.926746][ T5484] team0: Port device team_slave_0 added [ 135.120510][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 135.177163][ T5484] team0: Port device team_slave_1 added [ 135.259914][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.360063][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.388651][ T5565] loop0: detected capacity change from 0 to 1024 [ 135.480250][ T5484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.529956][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.576548][ T5565] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.585898][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.931143][ T5484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.163262][ T5484] device hsr_slave_0 entered promiscuous mode [ 136.199253][ T5484] device hsr_slave_1 entered promiscuous mode [ 136.238312][ T5556] loop6: detected capacity change from 0 to 40427 [ 136.249947][ T5484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.260572][ T5484] Cannot create hsr debugfs directory [ 136.442114][ T5556] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 136.475806][ T5556] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 136.511363][ T5556] F2FS-fs (loop6): invalid crc value [ 136.795677][ T5586] loop1: detected capacity change from 0 to 512 [ 136.856154][ T5556] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 136.986183][ T5586] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.255: invalid indirect mapped block 4294967295 (level 0) [ 137.123175][ T5586] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.255: invalid indirect mapped block 4294967295 (level 1) [ 137.140588][ T5556] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 137.147645][ T5556] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 137.160226][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 137.195970][ T5586] EXT4-fs (loop1): 1 orphan inode deleted [ 137.215225][ T5586] EXT4-fs (loop1): 1 truncate cleaned up [ 137.254603][ T5586] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nodioread_nolock,block_validity,block_validity,nojournal_checksum,quota,noblock_validity,,errors=continue. Quota mode: writeback. [ 137.358060][ T5586] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.255: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 137.472455][ T5484] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 137.482271][ T5252] attempt to access beyond end of device [ 137.482271][ T5252] loop6: rw=2049, want=45104, limit=40427 [ 137.534512][ T5484] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 137.661005][ T5484] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 137.677686][ T5484] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 137.794740][ T5612] loop1: detected capacity change from 0 to 512 [ 137.914622][ T5612] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 137.926827][ T5612] EXT4-fs (loop1): orphan cleanup on readonly fs [ 137.934319][ T5612] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 137.999063][ T5484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.003192][ T5612] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 138.033918][ T5612] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 138.067826][ T5612] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.261: bg 0: block 64: padding at end of block bitmap is not set [ 138.076229][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.100504][ T5612] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 138.119752][ T5612] EXT4-fs (loop1): 1 truncate cleaned up [ 138.129783][ T5612] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.137434][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.153459][ T5620] loop6: detected capacity change from 0 to 512 [ 138.172023][ T5484] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.373309][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.249677][ T1111] Bluetooth: hci0: command 0x0419 tx timeout [ 139.318418][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.337593][ T5620] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 139.356824][ T5620] EXT4-fs (loop6): orphan cleanup on readonly fs [ 139.393272][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.400607][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.429859][ T5620] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 139.469488][ T5620] EXT4-fs warning (device loop6): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 139.489887][ T5484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.501403][ T5484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.533189][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.542484][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.551209][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.559582][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.566677][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.579515][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.752211][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.761081][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.778380][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.778533][ T5620] EXT4-fs (loop6): Cannot turn on quotas: error -5 [ 139.787607][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.280544][ T5620] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.260: bg 0: block 64: padding at end of block bitmap is not set [ 140.302980][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.337954][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.349597][ T5620] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 140.382848][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.404059][ T5620] EXT4-fs (loop6): 1 truncate cleaned up [ 140.423648][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.432171][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.440916][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.448796][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.477548][ T5620] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.522029][ T5102] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.560549][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 142.005578][ T5655] loop1: detected capacity change from 0 to 2048 [ 142.067463][ T5662] loop0: detected capacity change from 0 to 512 [ 142.117266][ T5102] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.153285][ T5655] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.174543][ T5655] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.210729][ T5662] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.270: bg 0: block 473: padding at end of block bitmap is not set [ 142.314874][ T5655] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.269: Directory block failed checksum [ 142.373114][ T5102] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.397177][ T5662] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 142.461342][ T5662] EXT4-fs (loop0): 1 orphan inode deleted [ 142.468691][ T5662] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 142.516258][ T5102] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.523004][ T5662] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.602461][ T5680] loop6: detected capacity change from 0 to 512 [ 142.705819][ T5683] loop1: detected capacity change from 0 to 4096 [ 142.801045][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.821540][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.070428][ T5484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.106837][ T5683] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.318022][ T5680] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 143.351714][ T5680] EXT4-fs (loop6): orphan cleanup on readonly fs [ 143.426845][ T5680] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 143.472724][ T5680] EXT4-fs warning (device loop6): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 143.568366][ T5680] EXT4-fs (loop6): Cannot turn on quotas: error -5 [ 143.608749][ T5680] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.272: bg 0: block 64: padding at end of block bitmap is not set [ 143.689165][ T5701] loop3: detected capacity change from 0 to 4096 [ 143.726120][ T5680] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 143.744526][ T5680] EXT4-fs (loop6): 1 truncate cleaned up [ 143.780433][ T5680] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.811111][ T5701] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 144.288514][ T5701] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000101,stripe=0x0000000000000061,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 144.897963][ T5701] syz.3.276 (5701) used greatest stack depth: 18320 bytes left [ 145.397782][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 145.718581][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.910759][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.062801][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.081569][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.092749][ T5484] device veth0_vlan entered promiscuous mode [ 146.127783][ T5741] loop6: detected capacity change from 0 to 512 [ 146.162059][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.175222][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.189202][ T5484] device veth1_vlan entered promiscuous mode [ 146.228696][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.265328][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.273721][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.282666][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.361685][ T5741] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.279: bg 0: block 473: padding at end of block bitmap is not set [ 146.403406][ T5752] loop1: detected capacity change from 0 to 512 [ 146.414156][ T5484] device veth0_macvtap entered promiscuous mode [ 146.423001][ T5741] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 146.425446][ T4356] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 146.437384][ T5741] EXT4-fs (loop6): 1 orphan inode deleted [ 146.447523][ T5741] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.450930][ T5484] device veth1_macvtap entered promiscuous mode [ 146.459080][ T5741] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.564789][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.587024][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.668990][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.689723][ T5752] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.282: invalid indirect mapped block 256 (level 2) [ 146.690766][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.711934][ T5752] EXT4-fs (loop1): 2 truncates cleaned up [ 146.713559][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.718671][ T5752] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 146.729389][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.128255][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.180881][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.180902][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.180916][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.186976][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.189764][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.189782][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.189792][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.189925][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.189936][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.189949][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.189961][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.191993][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.192007][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.192021][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.196275][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.199138][ T5484] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.199210][ T5484] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.199247][ T5484] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.199273][ T5484] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.213351][ T4356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.213384][ T4356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 147.213411][ T4356] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.213448][ T4356] usb 1-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 147.213473][ T4356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.223466][ T4356] usb 1-1: config 0 descriptor?? [ 147.250603][ T5739] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 147.429026][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.429698][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.430307][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.441994][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.442645][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.443225][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.982225][ T4356] elecom 0003:056E:00FC.0004: ignoring exceeding usage max [ 147.983453][ T4356] elecom 0003:056E:00FC.0004: usage index exceeded [ 147.983470][ T4356] elecom 0003:056E:00FC.0004: item 0 4 2 0 parsing failed [ 147.983882][ T4356] elecom: probe of 0003:056E:00FC.0004 failed with error -22 [ 147.984820][ T5773] loop6: detected capacity change from 0 to 4096 [ 148.017868][ T5735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.017887][ T5735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.018136][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.048052][ T5773] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 148.048388][ T5773] EXT4-fs (loop6): Test dummy encryption mode enabled [ 148.152327][ T5773] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,noquota,inode_readahead_blks=0x0000000000000000,auto_da_alloc=0x0000000000000001,minixdf,debug_want_extra_isize=0x0000000000000008,auto_da_alloc=0x000000000000000d,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 148.238741][ T4349] usb 1-1: USB disconnect, device number 4 [ 148.598194][ T5779] loop1: detected capacity change from 0 to 40427 [ 148.925153][ T5773] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 149.150433][ T5773] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 149.237540][ T5773] overlayfs: upper fs does not support tmpfile. [ 149.274649][ T5773] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 149.890898][ T5779] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 149.901940][ T5779] F2FS-fs (loop1): invalid crc value [ 150.033113][ T5779] F2FS-fs (loop1): Found nat_bits in checkpoint [ 150.111891][ T5779] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 150.222386][ T5735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.274220][ T5735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.380601][ T5810] loop6: detected capacity change from 0 to 512 [ 150.483453][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.550674][ T5812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 150.719776][ T5810] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 150.731339][ T5810] EXT4-fs (loop6): orphan cleanup on readonly fs [ 150.755547][ T5810] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 150.771918][ T5810] EXT4-fs warning (device loop6): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 150.806583][ T5102] device hsr_slave_0 left promiscuous mode [ 150.833959][ T5810] EXT4-fs (loop6): Cannot turn on quotas: error -5 [ 150.842707][ T5102] device hsr_slave_1 left promiscuous mode [ 150.844375][ T5810] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.289: bg 0: block 64: padding at end of block bitmap is not set [ 150.873520][ T5810] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 150.882718][ T5102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.890303][ T5102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.899726][ T5810] EXT4-fs (loop6): 1 truncate cleaned up [ 150.909820][ T5102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.919512][ T5810] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.936957][ T5102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.961126][ T5102] device bridge_slave_1 left promiscuous mode [ 150.976900][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.036282][ T5824] loop7: detected capacity change from 0 to 512 [ 151.057053][ T5102] device bridge_slave_0 left promiscuous mode [ 151.122705][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.166297][ T5102] device veth1_macvtap left promiscuous mode [ 151.187210][ T5826] loop3: detected capacity change from 0 to 4096 [ 152.525858][ T5102] device veth0_macvtap left promiscuous mode [ 152.550277][ T5102] device veth1_vlan left promiscuous mode [ 152.570185][ T5102] device veth0_vlan left promiscuous mode [ 152.936171][ T5836] loop0: detected capacity change from 0 to 1024 [ 152.994116][ T5824] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 153.027185][ T5836] EXT4-fs (loop0): Ignoring removed bh option [ 153.191890][ T5824] EXT4-fs (loop7): orphan cleanup on readonly fs [ 153.200365][ T5826] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000857,,errors=continue. Quota mode: writeback. [ 153.200627][ T5836] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #2: comm syz.0.293: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 250, max 4(4), depth 0(0) [ 153.233518][ T5836] EXT4-fs (loop0): Remounting filesystem read-only [ 153.240135][ T5836] EXT4-fs (loop0): get root inode failed [ 153.245775][ T5836] EXT4-fs (loop0): mount failed [ 153.346531][ T5824] Quota error (device loop7): v2_read_file_info: Can't read info structure [ 153.383751][ T5824] EXT4-fs warning (device loop7): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 153.403979][ T5824] EXT4-fs (loop7): Cannot turn on quotas: error -5 [ 153.447075][ T25] audit: type=1800 audit(1774493766.285:20): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.292" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 153.480423][ T5824] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.291: bg 0: block 64: padding at end of block bitmap is not set [ 153.600206][ T5847] loop6: detected capacity change from 0 to 512 [ 153.602922][ T5824] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 153.650706][ T5850] binder: 5849:5850 ioctl c0306201 2000000001c0 returned -14 [ 153.702815][ T5824] EXT4-fs (loop7): 1 truncate cleaned up [ 153.746134][ T5824] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.766886][ T5847] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.294: bg 0: block 473: padding at end of block bitmap is not set [ 153.820329][ T5847] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 153.890344][ T5847] EXT4-fs (loop6): 1 orphan inode deleted [ 153.896100][ T5847] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.956919][ T5847] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.349816][ T5893] loop6: detected capacity change from 0 to 512 [ 157.385987][ T5895] loop0: detected capacity change from 0 to 256 [ 157.472890][ T5895] FAT-fs (loop0): Directory bread(block 64) failed [ 157.517774][ T5895] FAT-fs (loop0): Directory bread(block 65) failed [ 157.525185][ T5895] FAT-fs (loop0): Directory bread(block 66) failed [ 157.532010][ T5895] FAT-fs (loop0): Directory bread(block 67) failed [ 157.538712][ T5895] FAT-fs (loop0): Directory bread(block 68) failed [ 157.545594][ T5895] FAT-fs (loop0): Directory bread(block 69) failed [ 157.548520][ T5893] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 157.558725][ T5895] FAT-fs (loop0): Directory bread(block 70) failed [ 157.565726][ T5893] EXT4-fs (loop6): orphan cleanup on readonly fs [ 157.574314][ T5895] FAT-fs (loop0): Directory bread(block 71) failed [ 157.580432][ T5893] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 157.581856][ T5895] FAT-fs (loop0): Directory bread(block 72) failed [ 157.681320][ T5893] EXT4-fs warning (device loop6): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 157.866462][ T5895] FAT-fs (loop0): Directory bread(block 73) failed [ 157.921444][ T5893] EXT4-fs (loop6): Cannot turn on quotas: error -5 [ 157.983945][ T5102] team0 (unregistering): Port device team_slave_1 removed [ 157.999022][ T5893] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.304: bg 0: block 64: padding at end of block bitmap is not set [ 158.037776][ T5102] team0 (unregistering): Port device team_slave_0 removed [ 158.045667][ T5893] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 158.056454][ T5102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.077475][ T5893] EXT4-fs (loop6): 1 truncate cleaned up [ 158.078655][ T5102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.101132][ T5893] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.218004][ T5102] bond0 (unregistering): Released all slaves [ 158.294530][ T4351] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 158.346850][ T5906] loop0: detected capacity change from 0 to 512 [ 158.470267][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 158.630219][ T4351] usb 8-1: Using ep0 maxpacket: 16 [ 158.821121][ T4351] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.075218][ T4351] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.229010][ T5906] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.268844][ T5906] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.393764][ T5906] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2923: inode #15: comm syz.0.307: corrupted xattr block 33 [ 159.440260][ T1111] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 159.447678][ T4351] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.476733][ T4351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.486914][ T5906] EXT4-fs warning (device loop0): ext4_evict_inode:302: xattr delete (err -74) [ 159.499446][ T5925] loop6: detected capacity change from 0 to 2048 [ 159.512219][ T4351] usb 8-1: Product: syz [ 159.516414][ T4351] usb 8-1: Manufacturer: syz [ 159.562330][ T4351] usb 8-1: SerialNumber: syz [ 159.632489][ T5925] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.761543][ T5925] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 159.821477][ T5925] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 10 with max blocks 1 with error 28 [ 159.822826][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.840287][ T5925] EXT4-fs (loop6): This should not happen!! Data will be lost [ 159.840287][ T5925] [ 159.882907][ T4351] usb 8-1: 0:2 : does not exist [ 160.107767][ T5925] EXT4-fs (loop6): Total free blocks count 0 [ 160.172249][ T4351] usb 8-1: USB disconnect, device number 2 [ 160.186604][ T5925] EXT4-fs (loop6): Free/Dirty block details [ 160.276186][ T5941] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 160.304158][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.331898][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.341778][ T1111] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 160.350860][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.370208][ T1111] usb 4-1: config 0 descriptor?? [ 160.388986][ T5925] EXT4-fs (loop6): free_blocks=2415919520 [ 160.395482][ T5925] EXT4-fs (loop6): dirty_blocks=16 [ 160.451115][ T1111] hub 4-1:0.0: USB hub found [ 160.510135][ T5925] EXT4-fs (loop6): Block reservation details [ 160.528834][ T5925] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 160.651572][ T5948] loop1: detected capacity change from 0 to 512 [ 160.676653][ T5941] EXT4-fs (loop6): This should not happen!! Data will be lost [ 160.676653][ T5941] [ 160.722300][ T1111] hub 4-1:0.0: 1 port detected [ 162.187111][ T1111] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 162.198924][ T1111] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 162.340401][ T1111] usbhid 4-1:0.0: can't add hid device: -71 [ 162.361963][ T5965] loop7: detected capacity change from 0 to 4096 [ 162.370402][ T1111] usbhid: probe of 4-1:0.0 failed with error -71 [ 162.490723][ T4346] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.698650][ T5965] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000857,,errors=continue. Quota mode: writeback. [ 162.717249][ T5970] loop6: detected capacity change from 0 to 1024 [ 162.867509][ T25] audit: type=1800 audit(1774493775.705:21): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.321" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 162.901480][ T1111] usb 4-1: USB disconnect, device number 5 [ 162.906699][ T5970] EXT4-fs (loop6): Ignoring removed oldalloc option [ 162.914065][ T4346] usb 2-1: Using ep0 maxpacket: 16 [ 162.978166][ T5974] loop3: detected capacity change from 0 to 2048 [ 163.008812][ T5970] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,oldalloc,,errors=continue. Quota mode: none. [ 163.090258][ T4346] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.106977][ T4346] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.132079][ T4346] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 163.146648][ T4346] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.159166][ T4346] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 163.179946][ T4346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.194614][ T4346] usb 2-1: config 0 descriptor?? [ 163.205460][ T5974] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback. [ 163.240394][ T5974] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.521009][ T5997] loop3: detected capacity change from 0 to 512 [ 163.714646][ T4346] hid (null): unknown global tag 0xe [ 163.729050][ T4346] hid (null): unknown global tag 0xe [ 163.845791][ T6010] loop6: detected capacity change from 0 to 512 [ 165.080308][ T4346] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 165.136376][ T4351] usb 2-1: USB disconnect, device number 7 [ 165.304522][ T5997] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.326: bg 0: block 473: padding at end of block bitmap is not set [ 165.471540][ T4346] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 165.575113][ T4346] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 165.823811][ T4346] usb 1-1: config 1 interface 0 has no altsetting 0 [ 165.839569][ T5997] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 166.170892][ T4346] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 166.197251][ T5997] EXT4-fs (loop3): 1 orphan inode deleted [ 166.242206][ T4346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.284650][ T5997] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.296252][ T5997] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.303403][ T4346] usb 1-1: Product: syz [ 167.379796][ T4346] usb 1-1: Manufacturer: syz [ 167.826751][ T6010] EXT4-fs: failed to create workqueue [ 167.832221][ T6010] EXT4-fs (loop6): mount failed [ 168.213710][ T4346] usb 1-1: SerialNumber: syz [ 168.385442][ T4346] usb 1-1: can't set config #1, error -71 [ 168.392530][ T4346] usb 1-1: USB disconnect, device number 5 [ 170.623490][ T4351] Bluetooth: hci1: command 0x0406 tx timeout [ 170.680628][ T4351] Bluetooth: hci2: command 0x0406 tx timeout [ 170.966811][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.6.343'. [ 171.075581][ T4227] Bluetooth: hci3: command 0x0406 tx timeout [ 171.303798][ T6079] loop6: detected capacity change from 0 to 512 [ 171.551329][ T6079] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.345: bg 0: block 473: padding at end of block bitmap is not set [ 171.575408][ T6079] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 171.623402][ T6079] EXT4-fs (loop6): 1 orphan inode deleted [ 171.649077][ T6079] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.704337][ T6079] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.021755][ T6115] loop3: detected capacity change from 0 to 512 [ 173.396790][ T6115] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.351: bg 0: block 473: padding at end of block bitmap is not set [ 173.471697][ T6115] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 173.731821][ T6115] EXT4-fs (loop3): 1 orphan inode deleted [ 174.475189][ T6115] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.500208][ T6115] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.313418][ T6141] loop1: detected capacity change from 0 to 1024 [ 175.393035][ T6141] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 175.738367][ T6141] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 176.518829][ T6151] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 177.210070][ T4266] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 177.473263][ T4266] usb 7-1: Using ep0 maxpacket: 16 [ 177.602377][ T4266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.635950][ T4266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.669513][ T4266] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.695660][ T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 177.713167][ T4266] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 177.746335][ T4266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.773155][ T4266] usb 7-1: config 0 descriptor?? [ 178.000268][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 178.188002][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.272319][ T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.567099][ T6153] loop0: detected capacity change from 0 to 40427 [ 178.605308][ T4266] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 178.610679][ T21] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.630558][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.646525][ T4266] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 178.652272][ T21] usb 2-1: Product: syz [ 178.661152][ T21] usb 2-1: Manufacturer: syz [ 178.665769][ T21] usb 2-1: SerialNumber: syz [ 178.711208][ T4266] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 178.738882][ T4266] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 178.753245][ T4266] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 178.783551][ T4266] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 178.817097][ T4266] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 178.842008][ T4266] microsoft 0003:045E:07DA.0006: no inputs found [ 178.860964][ T4266] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 178.901927][ T4266] usb 7-1: USB disconnect, device number 2 [ 179.000764][ T21] usb 2-1: 0:2 : does not exist [ 179.019767][ T6184] fido_id[6184]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 179.100651][ T21] usb 2-1: USB disconnect, device number 8 [ 179.415144][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.563833][ T6212] loop1: detected capacity change from 0 to 512 [ 180.795838][ T6215] loop0: detected capacity change from 0 to 512 [ 180.822618][ T6212] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.369: bg 0: block 473: padding at end of block bitmap is not set [ 180.906262][ T6212] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 180.990668][ T6212] EXT4-fs (loop1): 1 orphan inode deleted [ 180.998369][ T6212] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 181.010084][ T6212] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.512016][ T6230] netlink: 'syz.6.372': attribute type 2 has an invalid length. [ 181.523272][ T6215] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 182.178240][ T6232] fuse: Bad value for 'fd' [ 182.184061][ T6215] EXT4-fs (loop0): orphan cleanup on readonly fs [ 182.359136][ T6215] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 182.387767][ T6215] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 182.410383][ T6215] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 182.431366][ T6215] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.371: bg 0: block 64: padding at end of block bitmap is not set [ 182.488860][ T6215] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 182.508825][ T6215] EXT4-fs (loop0): 1 truncate cleaned up [ 182.569333][ T6249] loop3: detected capacity change from 0 to 512 [ 182.600126][ T6215] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.203364][ T6249] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.376: bg 0: block 473: padding at end of block bitmap is not set [ 183.328555][ T6249] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 183.442948][ T6249] EXT4-fs (loop3): 1 orphan inode deleted [ 183.494319][ T6249] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.577607][ T6249] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.490572][ T6284] loop1: detected capacity change from 0 to 512 [ 185.586835][ T6284] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.384: invalid indirect mapped block 4294967295 (level 0) [ 185.660660][ T6284] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.384: invalid indirect mapped block 4294967295 (level 1) [ 185.783631][ T6284] EXT4-fs (loop1): 1 orphan inode deleted [ 185.832288][ T6284] EXT4-fs (loop1): 1 truncate cleaned up [ 185.867483][ T6284] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nodioread_nolock,block_validity,block_validity,nojournal_checksum,quota,noblock_validity,,errors=continue. Quota mode: writeback. [ 186.022114][ T6295] netlink: 'syz.0.385': attribute type 2 has an invalid length. [ 186.062222][ T6284] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.384: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 186.249493][ T6284] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.384: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 186.335680][ T6299] loop6: detected capacity change from 0 to 1024 [ 186.384980][ T6299] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 186.396616][ T6306] loop3: detected capacity change from 0 to 256 [ 186.490047][ T6299] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 186.631942][ T6306] FAT-fs (loop3): Directory bread(block 64) failed [ 186.640097][ T6306] FAT-fs (loop3): Directory bread(block 65) failed [ 186.677473][ T6306] FAT-fs (loop3): Directory bread(block 66) failed [ 186.694767][ T6306] FAT-fs (loop3): Directory bread(block 67) failed [ 186.711870][ T6306] FAT-fs (loop3): Directory bread(block 68) failed [ 186.728129][ T6306] FAT-fs (loop3): Directory bread(block 69) failed [ 186.742700][ T6306] FAT-fs (loop3): Directory bread(block 70) failed [ 186.756036][ T6306] FAT-fs (loop3): Directory bread(block 71) failed [ 186.817671][ T6306] FAT-fs (loop3): Directory bread(block 72) failed [ 186.880246][ T6306] FAT-fs (loop3): Directory bread(block 73) failed [ 186.956015][ T6319] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 187.226809][ T6318] loop1: detected capacity change from 0 to 512 [ 187.263043][ T6306] overlayfs: filesystem on './file0' not supported [ 187.419406][ T6318] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 187.449757][ T6318] EXT4-fs (loop1): orphan cleanup on readonly fs [ 187.504700][ T6318] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 187.589766][ T6318] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 187.684202][ T6318] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 187.730676][ T6318] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.391: bg 0: block 64: padding at end of block bitmap is not set [ 187.765509][ T6318] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 187.792033][ T6318] EXT4-fs (loop1): 1 truncate cleaned up [ 187.819271][ T6318] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.652958][ T6341] loop3: detected capacity change from 0 to 512 [ 188.762843][ T6345] loop0: detected capacity change from 0 to 512 [ 188.920061][ T6345] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.397: bg 0: block 473: padding at end of block bitmap is not set [ 189.105696][ T6341] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.398: bg 0: block 473: padding at end of block bitmap is not set [ 189.120249][ T6345] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 189.158686][ T6345] EXT4-fs (loop0): 1 orphan inode deleted [ 189.165108][ T6341] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 189.187677][ T6345] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 189.219806][ T6341] EXT4-fs (loop3): 1 orphan inode deleted [ 189.272243][ T6341] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 189.283560][ T6345] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.310582][ T6341] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.820166][ T4227] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 190.876276][ T6380] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 191.070130][ T4227] usb 2-1: Using ep0 maxpacket: 16 [ 191.172882][ T6392] loop0: detected capacity change from 0 to 512 [ 191.190309][ T4227] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.253424][ T4227] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 191.858041][ T25] audit: type=1326 audit(1774493804.695:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.6.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2413829799 code=0x7ffc0000 [ 192.165221][ T6392] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 192.186538][ T6392] EXT4-fs (loop0): orphan cleanup on readonly fs [ 192.199691][ T25] audit: type=1326 audit(1774493804.695:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.6.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2413829799 code=0x7ffc0000 [ 192.253621][ T6392] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 192.296065][ T6392] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 192.313912][ T4227] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 192.323742][ T4227] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 192.356061][ T25] audit: type=1326 audit(1774493804.695:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.6.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2413829799 code=0x7ffc0000 [ 192.396546][ T6392] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 192.407192][ T25] audit: type=1326 audit(1774493804.695:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.6.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2413829799 code=0x7ffc0000 [ 192.430481][ T25] audit: type=1326 audit(1774493804.695:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.6.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2413829799 code=0x7ffc0000 [ 192.466181][ T25] audit: type=1326 audit(1774493804.695:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.6.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2413829799 code=0x7ffc0000 [ 192.466318][ T6392] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.409: bg 0: block 64: padding at end of block bitmap is not set [ 192.488953][ T4227] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.523121][ T25] audit: type=1326 audit(1774493804.695:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.6.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2413829799 code=0x7ffc0000 [ 192.540621][ T6413] loop3: detected capacity change from 0 to 512 [ 192.551462][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 192.551489][ T4227] usb 2-1: SerialNumber: syz [ 192.586879][ T25] audit: type=1326 audit(1774493804.695:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.6.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2413829799 code=0x7ffc0000 [ 192.610824][ T6366] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 192.620747][ T6392] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 192.627393][ T6366] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 192.638446][ T6392] EXT4-fs (loop0): 1 truncate cleaned up [ 192.650308][ T6392] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.661292][ T4227] hub 2-1:1.0: bad descriptor, ignoring hub [ 192.661345][ T4227] hub: probe of 2-1:1.0 failed with error -5 [ 192.743945][ T6413] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.413: bg 0: block 473: padding at end of block bitmap is not set [ 192.767034][ T6413] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 192.784312][ T6413] EXT4-fs (loop3): 1 orphan inode deleted [ 192.795022][ T6413] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.809590][ T6413] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.878387][ T6366] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 192.931888][ T6366] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 194.527976][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.536878][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.700341][ T4227] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 194.773098][ T4227] usb 2-1: USB disconnect, device number 9 [ 194.941546][ T6440] netlink: 164 bytes leftover after parsing attributes in process `syz.1.416'. [ 195.446899][ T6452] loop3: detected capacity change from 0 to 512 [ 197.602255][ T6452] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.419: inode has both inline data and extents flags [ 197.621052][ T6452] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.419: couldn't read orphan inode 15 (err -117) [ 197.634107][ T6452] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.001665][ T6479] loop0: detected capacity change from 0 to 512 [ 199.043207][ T6481] loop6: detected capacity change from 0 to 512 [ 200.618195][ T6481] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 200.626443][ T6479] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.425: bg 0: block 473: padding at end of block bitmap is not set [ 200.642541][ T6481] EXT4-fs (loop6): orphan cleanup on readonly fs [ 200.649609][ T6481] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 200.658970][ T6481] EXT4-fs warning (device loop6): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 200.674103][ T6481] EXT4-fs (loop6): Cannot turn on quotas: error -5 [ 200.698488][ T6481] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.426: bg 0: block 64: padding at end of block bitmap is not set [ 200.745560][ T6479] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 200.776729][ T6481] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 200.791639][ T6481] EXT4-fs (loop6): 1 truncate cleaned up [ 200.797400][ T6481] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 200.821945][ T6479] EXT4-fs (loop0): 1 orphan inode deleted [ 200.832568][ T6479] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 200.944094][ T6479] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.813480][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 204.284337][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 204.325309][ T6546] loop6: detected capacity change from 0 to 512 [ 204.517989][ T6552] loop1: detected capacity change from 0 to 1024 [ 204.815995][ T6556] loop3: detected capacity change from 0 to 512 [ 204.849917][ T6546] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.440: bg 0: block 473: padding at end of block bitmap is not set [ 204.910895][ T6552] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.958830][ T6546] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 205.027367][ T6546] EXT4-fs (loop6): 1 orphan inode deleted [ 205.067197][ T6556] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.443: bg 0: block 473: padding at end of block bitmap is not set [ 205.087004][ T6546] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.098591][ T6546] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.114056][ T6556] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 205.123297][ T6567] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.442: bad entry in directory: inode out of bounds - offset=16, inode=4294967295, rec_len=40, size=56 fake=0 [ 205.185341][ T6569] loop0: detected capacity change from 0 to 128 [ 205.200572][ T6556] EXT4-fs (loop3): 1 orphan inode deleted [ 205.206339][ T6556] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.355969][ T6556] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.357802][ T6569] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.418364][ T6569] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 205.462436][ T4188] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /86/file1: bad entry in directory: rec_len is smaller than minimal - offset=92, inode=65808, rec_len=0, size=1024 fake=0 [ 205.485184][ T4188] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 205.698524][ T4188] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 206.355546][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 206.909630][ T6605] loop0: detected capacity change from 0 to 128 [ 206.972098][ T6610] loop3: detected capacity change from 0 to 512 [ 207.051048][ T6605] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.076249][ T6605] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 207.118873][ T6610] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 207.147714][ T6610] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.401955][ T6610] EXT4-fs (loop3): orphan cleanup on readonly fs [ 207.670482][ T4752] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.794295][ T6610] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 207.877006][ T6610] EXT4-fs (loop3): Remounting filesystem read-only [ 207.914782][ T6610] Quota error (device loop3): write_blk: dquota write failed [ 207.928311][ T4752] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.943993][ T6610] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 207.974451][ T6605] fscrypt (loop0, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 208.006862][ T6610] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.452: Failed to acquire dquot type 0 [ 208.021236][ T6605] fscrypt (loop0, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 208.084772][ T4752] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.109851][ T6610] EXT4-fs (loop3): Remounting filesystem read-only [ 208.129061][ T6610] EXT4-fs (loop3): 1 truncate cleaned up [ 208.169403][ T6610] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,inode_readahead_blks=0x0000000000000002,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 208.227618][ T4752] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.221213][ T6643] loop3: detected capacity change from 0 to 512 [ 209.317520][ T6648] loop0: detected capacity change from 0 to 512 [ 209.465329][ T6643] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.458: bg 0: block 473: padding at end of block bitmap is not set [ 209.528774][ T6643] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 209.580941][ T6643] EXT4-fs (loop3): 1 orphan inode deleted [ 209.586692][ T6643] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.629578][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.7.462'. [ 209.710269][ T6643] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.751422][ T6648] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.460: bg 0: block 473: padding at end of block bitmap is not set [ 209.926127][ T6648] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 209.965846][ T6648] EXT4-fs (loop0): 1 orphan inode deleted [ 209.972089][ T6648] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.983850][ T6648] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.469177][ T6657] chnl_net:caif_netlink_parms(): no params data found [ 210.575159][ T6685] loop6: detected capacity change from 0 to 512 [ 210.632790][ T6682] loop0: detected capacity change from 0 to 4096 [ 210.657341][ T6685] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 210.697444][ T6685] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.764597][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.771917][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.781315][ T6657] device bridge_slave_0 entered promiscuous mode [ 210.789710][ T6657] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.796824][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.805029][ T6657] device bridge_slave_1 entered promiscuous mode [ 210.898584][ T6657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.911114][ T6682] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 210.943193][ T6682] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000101,stripe=0x0000000000000061,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 210.975834][ T6692] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2923: inode #15: comm syz.6.466: corrupted xattr block 33 [ 210.988803][ T6692] EXT4-fs warning (device loop6): ext4_evict_inode:302: xattr delete (err -74) [ 211.046964][ T6657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.094964][ T6657] team0: Port device team_slave_0 added [ 211.112700][ T6657] team0: Port device team_slave_1 added [ 211.200377][ T6657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.218172][ T6657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.252816][ T6657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.322069][ T6657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.329058][ T6657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.523343][ T6657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.743982][ T4356] Bluetooth: hci3: command 0x0409 tx timeout [ 212.231167][ T6657] device hsr_slave_0 entered promiscuous mode [ 212.268593][ T6657] device hsr_slave_1 entered promiscuous mode [ 212.340625][ T6657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.348540][ T6657] Cannot create hsr debugfs directory [ 212.421363][ T6717] xt_hashlimit: size too large, truncated to 1048576 [ 212.700715][ T4752] device hsr_slave_0 left promiscuous mode [ 212.725016][ T4752] device hsr_slave_1 left promiscuous mode [ 212.760455][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.777565][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.810221][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.855443][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.884712][ T4752] device bridge_slave_1 left promiscuous mode [ 212.901671][ T4752] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.920866][ T4752] device bridge_slave_0 left promiscuous mode [ 212.930184][ T4752] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.960231][ T4752] device veth1_macvtap left promiscuous mode [ 212.973733][ T4752] device veth0_macvtap left promiscuous mode [ 213.002724][ T4752] device veth1_vlan left promiscuous mode [ 213.018790][ T4752] device veth0_vlan left promiscuous mode [ 213.800249][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 213.850195][ T4752] team0 (unregistering): Port device team_slave_1 removed [ 213.874586][ T4752] team0 (unregistering): Port device team_slave_0 removed [ 213.896905][ T4752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.924692][ T4752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.057936][ T4752] bond0 (unregistering): Released all slaves [ 214.122979][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.6.472'. [ 214.727374][ T6657] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 214.792848][ T6657] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 214.830522][ T6657] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 214.890519][ T6657] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 215.201282][ T6657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.284582][ T6657] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.333825][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.363979][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.409326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.444836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.512038][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.519119][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.527880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.570883][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.904077][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.973688][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.980803][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.071636][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 216.081545][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.148776][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.182005][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.192191][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.231696][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.256035][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.282785][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.327365][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.346118][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.376786][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.410739][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.455357][ T6657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.964403][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.988209][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.035661][ T6657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.255717][ T6800] loop3: detected capacity change from 0 to 40427 [ 217.352832][ T6800] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 217.359195][ T6800] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 217.436276][ T6800] F2FS-fs (loop3): invalid crc value [ 217.498707][ T6800] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 217.856381][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.897369][ T6800] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 217.904774][ T6800] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 217.913389][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.525167][ T4227] Bluetooth: hci3: command 0x0419 tx timeout [ 218.536651][ T4184] attempt to access beyond end of device [ 218.536651][ T4184] loop3: rw=2049, want=45104, limit=40427 [ 218.547215][ T6657] device veth0_vlan entered promiscuous mode [ 218.606557][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.747270][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.801348][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.7.485'. [ 218.827082][ T6657] device veth1_vlan entered promiscuous mode [ 218.847213][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.855793][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.972125][ T6657] device veth0_macvtap entered promiscuous mode [ 219.042016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.064293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.108668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.151863][ T6657] device veth1_macvtap entered promiscuous mode [ 219.227400][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.280060][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.311552][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.401518][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.483712][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.570137][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.618648][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.700121][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.773900][ T25] audit: type=1326 audit(1774493832.615:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7cc90799 code=0x7ffc0000 [ 219.783862][ T6657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.799081][ T6863] loop3: detected capacity change from 0 to 512 [ 219.936998][ T25] audit: type=1326 audit(1774493832.625:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7c7cc50fce code=0x7ffc0000 [ 220.290419][ T25] audit: type=1326 audit(1774493832.635:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7cc90799 code=0x7ffc0000 [ 220.502819][ T25] audit: type=1326 audit(1774493832.635:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7c7cc905c7 code=0x7ffc0000 [ 220.548756][ T25] audit: type=1326 audit(1774493832.635:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c7cc50fce code=0x7ffc0000 [ 221.069390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.086391][ T25] audit: type=1326 audit(1774493832.635:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c7cc9042b code=0x7ffc0000 [ 221.146715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.205290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.215801][ T6880] loop6: detected capacity change from 0 to 512 [ 221.255892][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.286044][ T25] audit: type=1326 audit(1774493832.725:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7c7cc50fce code=0x7ffc0000 [ 221.316598][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.385776][ T25] audit: type=1326 audit(1774493832.765:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7c7cc50fce code=0x7ffc0000 [ 221.419988][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.474615][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.491851][ T25] audit: type=1326 audit(1774493833.265:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7c7cc8f607 code=0x7ffc0000 [ 221.515508][ T25] audit: type=1326 audit(1774493833.265:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7c7cc91a0a code=0x7ffc0000 [ 221.538212][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.548849][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.609007][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.747258][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.762353][ T6657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.781606][ T6657] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.798843][ T6657] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.877899][ T6657] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.912553][ T6880] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.492: bg 0: block 473: padding at end of block bitmap is not set [ 221.912773][ T6657] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.938440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.953396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.966146][ T6880] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 221.982647][ T6880] EXT4-fs (loop6): 1 orphan inode deleted [ 221.988585][ T6880] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 221.998556][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 222.005968][ T6880] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.367908][ T6903] xt_hashlimit: size too large, truncated to 1048576 [ 222.424897][ T6875] loop0: detected capacity change from 0 to 40427 [ 222.577160][ T6875] F2FS-fs (loop0): inline encryption not supported [ 222.597382][ T6875] F2FS-fs (loop0): invalid crc value [ 222.610335][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.635207][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.644403][ T6875] F2FS-fs (loop0): Found nat_bits in checkpoint [ 222.687546][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.745882][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.766385][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.803271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 222.839197][ T6875] F2FS-fs (loop0): Start checkpoint disabled! [ 222.888840][ T6875] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 223.068753][ T6922] loop8: detected capacity change from 0 to 512 [ 223.093545][ T6873] attempt to access beyond end of device [ 223.093545][ T6873] loop0: rw=2049, want=53256, limit=40427 [ 223.203501][ T6922] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.456: bg 0: block 473: padding at end of block bitmap is not set [ 223.255622][ T6922] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 223.293350][ T6922] EXT4-fs (loop8): 1 orphan inode deleted [ 223.361933][ T4752] attempt to access beyond end of device [ 223.361933][ T4752] loop0: rw=2049, want=40992, limit=40427 [ 223.363507][ T6922] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.440218][ T6922] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.654603][ T6952] loop8: detected capacity change from 0 to 256 [ 224.805509][ T6952] FAT-fs (loop8): Directory bread(block 64) failed [ 224.842730][ T6952] FAT-fs (loop8): Directory bread(block 65) failed [ 224.849336][ T6952] FAT-fs (loop8): Directory bread(block 66) failed [ 224.910194][ T6952] FAT-fs (loop8): Directory bread(block 67) failed [ 224.916822][ T6952] FAT-fs (loop8): Directory bread(block 68) failed [ 224.940979][ T6958] loop0: detected capacity change from 0 to 256 [ 224.950054][ T6952] FAT-fs (loop8): Directory bread(block 69) failed [ 224.956661][ T6952] FAT-fs (loop8): Directory bread(block 70) failed [ 224.998871][ T6958] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 225.020058][ T6952] FAT-fs (loop8): Directory bread(block 71) failed [ 225.026684][ T6952] FAT-fs (loop8): Directory bread(block 72) failed [ 225.107610][ T6952] FAT-fs (loop8): Directory bread(block 73) failed [ 226.070030][ T4227] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 226.310062][ T4227] usb 9-1: Using ep0 maxpacket: 8 [ 226.460030][ T4350] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 226.592559][ T4227] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 226.619288][ T4227] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.660068][ T4227] usb 9-1: Product: syz [ 226.664286][ T4227] usb 9-1: Manufacturer: syz [ 226.679093][ T4227] usb 9-1: SerialNumber: syz [ 226.992409][ T4350] usb 1-1: config 0 has no interfaces? [ 226.997925][ T4350] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 227.007145][ T4350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.023940][ T4350] usb 1-1: config 0 descriptor?? [ 227.288807][ T6992] udc-core: couldn't find an available UDC or it's busy [ 227.333291][ T6992] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 227.565346][ T6992] udc-core: couldn't find an available UDC or it's busy [ 227.616865][ T6992] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 227.820207][ T4350] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 227.896826][ T4349] usb 1-1: USB disconnect, device number 6 [ 228.075234][ T4227] usb 9-1: clock source 0 is not valid, cannot use [ 228.100142][ T4227] usb 9-1: 1:1: cannot get freq (v2/v3): err -71 [ 228.120614][ T4227] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 228.160101][ T4227] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 228.168728][ T4227] usb 9-1: clock source 0 is not valid, cannot use [ 228.220143][ T4227] usb 9-1: 2:1: cannot get freq (v2/v3): err -71 [ 228.220168][ T4350] usb 7-1: Using ep0 maxpacket: 16 [ 228.240174][ T4227] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 228.298577][ T7040] loop8: detected capacity change from 0 to 512 [ 228.326398][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.7.519'. [ 228.351430][ T4227] usb 9-1: USB disconnect, device number 2 [ 228.390344][ T4350] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 228.405923][ T4350] usb 7-1: config 1 has no interface number 0 [ 228.419463][ T7042] IPv6: sit1: Disabled Multicast RS [ 228.448701][ T4350] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 228.479566][ T4350] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 228.487610][ T7040] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.518: bg 0: block 473: padding at end of block bitmap is not set [ 228.500732][ T4350] usb 7-1: config 1 interface 105 has no altsetting 0 [ 228.510972][ T4349] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 228.525841][ T7040] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 228.560905][ T7040] EXT4-fs (loop8): 1 orphan inode deleted [ 228.617729][ T7040] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 228.659876][ T7040] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.130685][ T4350] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 229.150304][ T4349] usb 1-1: Using ep0 maxpacket: 16 [ 229.256584][ T4350] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 229.303948][ T4350] usb 7-1: Product: syz [ 229.334920][ T4350] usb 7-1: Manufacturer: syz [ 229.340445][ T4349] usb 1-1: device descriptor read/all, error -71 [ 229.461466][ T4350] usb 7-1: SerialNumber: syz [ 229.504879][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.610459][ T7032] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 229.623798][ T7032] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 229.681263][ T4226] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 229.796148][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.522'. [ 230.072648][ T7032] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 230.087027][ T7032] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 230.150479][ T4226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.167258][ T4226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 230.178565][ T4226] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 230.194445][ T4227] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 230.209101][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.233458][ T4226] usb 4-1: config 0 descriptor?? [ 230.254031][ T7048] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 230.360407][ T4350] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 230.380437][ T4350] aqc111: probe of 7-1:1.105 failed with error -71 [ 230.398835][ T4350] usb 7-1: USB disconnect, device number 3 [ 230.570286][ T4226] usbhid 4-1:0.0: can't add hid device: -71 [ 230.576615][ T4226] usbhid: probe of 4-1:0.0 failed with error -71 [ 230.583447][ T4227] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.616803][ T4226] usb 4-1: USB disconnect, device number 6 [ 230.627049][ T4227] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 230.656351][ T4227] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 230.669804][ T4227] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 230.687305][ T4227] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.730319][ T7075] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 230.754546][ T4227] hub 9-1:1.0: bad descriptor, ignoring hub [ 230.761564][ T4227] hub: probe of 9-1:1.0 failed with error -5 [ 230.768089][ T4227] cdc_wdm 9-1:1.0: skipping garbage [ 230.774220][ T4227] cdc_wdm 9-1:1.0: skipping garbage [ 230.790823][ T4227] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 230.796907][ T4227] cdc_wdm 9-1:1.0: Unknown control protocol [ 230.800172][ T4349] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 231.080153][ T4349] usb 1-1: Using ep0 maxpacket: 8 [ 231.182222][ T4350] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 231.214918][ T4349] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.229014][ T4349] usb 1-1: config 0 has no interfaces? [ 231.290230][ T4227] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 231.320459][ T4349] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.331901][ T4349] usb 1-1: config 0 has no interfaces? [ 231.420195][ T4349] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.437673][ T4349] usb 1-1: config 0 has no interfaces? [ 231.523478][ T4226] usb 9-1: USB disconnect, device number 3 [ 231.527181][ T7075] cdc_wdm 9-1:1.0: Error autopm - -16 [ 231.590324][ T4350] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.598571][ T4350] usb 7-1: config 0 has no interface number 0 [ 231.605451][ T4350] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 231.615158][ T4349] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 231.624677][ T4350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.634508][ T4349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.651415][ T4350] usb 7-1: config 0 descriptor?? [ 231.655361][ T4227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.656608][ T4349] usb 1-1: Product: syz [ 231.671589][ T4349] usb 1-1: Manufacturer: syz [ 231.676194][ T4349] usb 1-1: SerialNumber: syz [ 231.680925][ T4227] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.690990][ T4349] usb 1-1: config 0 descriptor?? [ 231.694078][ T4226] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 231.711687][ T4227] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 231.722618][ T4350] usb 7-1: selecting invalid altsetting 1 [ 231.724058][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.729624][ T4350] dvb_ttusb_budget: ttusb_init_controller: error [ 231.749528][ T4350] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 231.768200][ T4227] usb 4-1: config 0 descriptor?? [ 231.826590][ T4227] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 231.836964][ T4350] DVB: Unable to find symbol cx22700_attach() [ 231.888158][ T4350] DVB: Unable to find symbol tda10046_attach() [ 231.894709][ T4350] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 231.960791][ T4350] usb 1-1: USB disconnect, device number 9 [ 232.070224][ T4226] usb 9-1: unable to get BOS descriptor or descriptor too short [ 232.134951][ T7130] udc-core: couldn't find an available UDC or it's busy [ 232.146718][ T7130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 232.158870][ T7130] udc-core: couldn't find an available UDC or it's busy [ 232.170511][ T7130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 232.179269][ T4345] usb 7-1: USB disconnect, device number 4 [ 232.190136][ T4226] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 232.213140][ T4226] usb 9-1: can't read configurations, error -71 [ 233.112528][ T4227] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 233.350555][ T1111] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 233.711485][ T4227] usb 1-1: Using ep0 maxpacket: 32 [ 233.966189][ T4227] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 233.976990][ T4227] usb 1-1: config 0 has no interface number 0 [ 233.983829][ T4227] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.995440][ T4227] usb 1-1: config 0 interface 89 has no altsetting 0 [ 234.041363][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.8.536'. [ 234.160441][ T1111] usb 7-1: not running at top speed; connect to a high speed hub [ 234.173406][ T4350] usb 4-1: USB disconnect, device number 7 [ 234.200208][ T4227] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 234.219232][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.230327][ T4227] usb 1-1: Product: syz [ 234.234576][ T4227] usb 1-1: Manufacturer: syz [ 234.239393][ T4227] usb 1-1: SerialNumber: syz [ 234.250263][ T1111] usb 7-1: config 45 has an invalid interface number: 2 but max is 0 [ 234.266802][ T1111] usb 7-1: config 45 has no interface number 0 [ 234.273700][ T4227] usb 1-1: config 0 descriptor?? [ 234.278942][ T1111] usb 7-1: config 45 interface 2 has no altsetting 0 [ 234.314348][ T4227] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 234.324496][ T4227] em28xx 1-1:0.89: Video interface 89 found: [ 234.440275][ T1111] usb 7-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 234.454709][ T1111] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.463220][ T1111] usb 7-1: Product: syz [ 234.467476][ T1111] usb 7-1: Manufacturer: syz [ 234.472392][ T1111] usb 7-1: SerialNumber: syz [ 234.630126][ T4350] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 234.657127][ T7279] loop8: detected capacity change from 0 to 512 [ 234.769554][ T7279] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.539: bg 0: block 473: padding at end of block bitmap is not set [ 234.790485][ T7279] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 234.804899][ T7279] EXT4-fs (loop8): 1 orphan inode deleted [ 234.813291][ T7279] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 234.829320][ T7279] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.070880][ T4350] usb 4-1: Using ep0 maxpacket: 8 [ 235.581767][ T4227] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 235.661861][ T1111] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 235.669897][ T1111] dvb-usb: bulk message failed: -22 (3/0) [ 235.715513][ T1111] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 235.736140][ T4350] usb 4-1: unable to get BOS descriptor or descriptor too short [ 235.740582][ T1111] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 235.752248][ T4350] usb 4-1: too many configurations: 64, using maximum allowed: 8 [ 235.752404][ T1111] usb 7-1: media controller created [ 235.765365][ T1111] dvb-usb: bulk message failed: -22 (5/0) [ 235.771207][ T1111] dvb-usb: MAC address reading failed. [ 235.782740][ T1111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.819256][ T1111] dvb-usb: bulk message failed: -22 (6/0) [ 235.826655][ T1111] dvb-usb: bulk message failed: -22 (6/0) [ 235.833223][ T1111] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 235.850191][ T4350] usb 4-1: config 4 has an invalid interface number: 13 but max is 0 [ 235.858631][ T4350] usb 4-1: config 4 has no interface number 0 [ 235.865020][ T4350] usb 4-1: config 4 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 235.882036][ T1111] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input7 [ 235.898983][ T1111] dvb-usb: schedule remote query interval to 100 msecs. [ 235.906023][ T1111] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 235.933265][ T1111] usb 7-1: USB disconnect, device number 5 [ 235.960556][ T1111] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 235.980295][ T4350] usb 4-1: config 4 has an invalid interface number: 13 but max is 0 [ 235.988561][ T4350] usb 4-1: config 4 has no interface number 0 [ 235.995139][ T4350] usb 4-1: config 4 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 236.130272][ T4232] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 236.165588][ T4350] usb 4-1: config 4 has an invalid interface number: 13 but max is 0 [ 236.178545][ T4350] usb 4-1: config 4 has no interface number 0 [ 236.185068][ T4350] usb 4-1: config 4 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 236.270661][ T4350] usb 4-1: config 4 has an invalid interface number: 13 but max is 0 [ 236.287936][ T4350] usb 4-1: config 4 has no interface number 0 [ 236.412618][ T4350] usb 4-1: config 4 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 236.620992][ T4350] usb 4-1: config 4 has an invalid interface number: 13 but max is 0 [ 236.671443][ T4350] usb 4-1: config 4 has no interface number 0 [ 236.702711][ T4350] usb 4-1: config 4 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 236.890409][ T4350] usb 4-1: config 4 has an invalid interface number: 13 but max is 0 [ 236.922809][ T4350] usb 4-1: config 4 has no interface number 0 [ 236.991950][ T4350] usb 4-1: config 4 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 237.150235][ T4232] usb 9-1: unable to get BOS descriptor or descriptor too short [ 237.165700][ T4346] Bluetooth: hci4: command 0x0406 tx timeout [ 237.172164][ T4350] usb 4-1: config 4 has an invalid interface number: 13 but max is 0 [ 237.188404][ T4350] usb 4-1: config 4 has no interface number 0 [ 237.194610][ T4350] usb 4-1: config 4 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 237.240221][ T4232] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 237.285919][ T7325] loop3: detected capacity change from 0 to 512 [ 237.338674][ T7325] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.547: bg 0: block 473: padding at end of block bitmap is not set [ 237.360828][ T7325] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 237.377082][ T7325] EXT4-fs (loop3): 1 orphan inode deleted [ 237.385857][ T7325] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 237.404189][ T7325] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.610143][ T4350] usb 4-1: unable to read config index 7 descriptor/start: -71 [ 237.610391][ T4227] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 237.620912][ T4350] usb 4-1: can't read configurations, error -71 [ 237.632841][ T4346] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 237.637615][ T4227] em28xx 1-1:0.89: board has no eeprom [ 237.770175][ T4227] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 237.792219][ T4227] em28xx 1-1:0.89: analog set to bulk mode. [ 237.875351][ T7] em28xx 1-1:0.89: Registering V4L2 extension [ 238.060233][ T4232] usb 9-1: string descriptor 0 read error: -22 [ 238.198222][ T4227] usb 1-1: USB disconnect, device number 10 [ 238.222516][ T4232] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.300689][ T4227] em28xx 1-1:0.89: Disconnecting em28xx [ 238.307145][ T4232] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.418276][ T4232] cdc_ether: probe of 9-1:1.0 failed with error -22 [ 238.428334][ T7] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 238.446942][ T7] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 238.495400][ T7] em28xx 1-1:0.89: No AC97 audio processor [ 238.598836][ T7] usb 1-1: Decoder not found [ 238.680224][ T4346] usb 7-1: Using ep0 maxpacket: 8 [ 238.765133][ T7] em28xx 1-1:0.89: failed to create media graph [ 238.773404][ T7] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 238.788993][ T7] em28xx 1-1:0.89: Registering snapshot button... [ 238.789618][ T7348] ================================================================== [ 238.800133][ T7] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input8 [ 238.803678][ T7348] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 238.803717][ T7348] Read of size 8 at addr ffff8880536b0900 by task v4l_id/7348 [ 238.803731][ T7348] [ 238.803743][ T7348] CPU: 1 PID: 7348 Comm: v4l_id Not tainted syzkaller #0 [ 238.803760][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 238.803775][ T7348] Call Trace: [ 238.803782][ T7348] [ 238.803790][ T7348] dump_stack_lvl+0x188/0x250 [ 238.803811][ T7348] ? show_regs_print_info+0x20/0x20 [ 238.803832][ T7348] ? _printk+0xda/0x130 [ 238.803846][ T7348] ? v4l2_fh_open+0xc6/0x430 [ 238.803868][ T7348] ? load_image+0x400/0x400 [ 238.803891][ T7348] print_address_description+0x60/0x2d0 [ 238.803911][ T7348] ? v4l2_fh_open+0xc6/0x430 [ 238.803926][ T7348] kasan_report+0xdf/0x130 [ 238.803949][ T7348] ? v4l2_fh_open+0xc6/0x430 [ 238.803969][ T7348] v4l2_fh_open+0xc6/0x430 [ 238.803992][ T7348] em28xx_v4l2_open+0x152/0x990 [ 238.804011][ T7348] ? __lock_acquire+0x7d10/0x7d10 [ 238.804039][ T7348] v4l2_open+0x20b/0x360 [ 238.804059][ T7348] chrdev_open+0x5c5/0x6a0 [ 238.804079][ T7348] ? cd_forget+0x160/0x160 [ 238.804101][ T7348] ? fsnotify_perm+0x3a7/0x560 [ 238.804123][ T7348] ? cd_forget+0x160/0x160 [ 238.804141][ T7348] do_dentry_open+0x7ff/0xf80 [ 238.804173][ T7348] path_openat+0x26f5/0x2fa0 [ 238.827158][ T7] em28xx 1-1:0.89: Remote control support is not available for this card. [ 238.828969][ T7348] ? verify_lock_unused+0x140/0x140 [ 238.831758][ T4227] em28xx 1-1:0.89: Closing input extension [ 238.838276][ T7348] ? slab_post_alloc_hook+0x4c/0x380 [ 238.838304][ T7348] ? do_filp_open+0x410/0x410 [ 238.862291][ T4227] em28xx 1-1:0.89: Deregistering snapshot button [ 238.864559][ T7348] do_filp_open+0x1e2/0x410 [ 238.893821][ T4226] usb 9-1: USB disconnect, device number 6 [ 238.896852][ T7348] ? vfs_tmpfile+0x300/0x300 [ 238.896895][ T7348] ? _raw_spin_unlock+0x24/0x40 [ 238.997879][ T7348] ? alloc_fd+0x598/0x630 [ 239.002229][ T7348] do_sys_openat2+0x150/0x4b0 [ 239.006913][ T7348] ? __lock_acquire+0x7d10/0x7d10 [ 239.011945][ T7348] ? do_sys_open+0xe0/0xe0 [ 239.016367][ T7348] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 239.022357][ T7348] ? lock_chain_count+0x20/0x20 [ 239.027214][ T7348] ? vtime_user_exit+0x2c8/0x3e0 [ 239.032162][ T7348] __x64_sys_openat+0x135/0x160 [ 239.037027][ T7348] do_syscall_64+0x4c/0xa0 [ 239.041446][ T7348] ? clear_bhb_loop+0x30/0x80 [ 239.046126][ T7348] ? clear_bhb_loop+0x30/0x80 [ 239.050810][ T7348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 239.056717][ T7348] RIP: 0033:0x7f497fa78407 [ 239.061134][ T7348] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 239.080739][ T7348] RSP: 002b:00007fff2a43c060 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 239.089156][ T7348] RAX: ffffffffffffffda RBX: 00007f497f98a880 RCX: 00007f497fa78407 [ 239.097128][ T7348] RDX: 0000000000000000 RSI: 00007fff2a43df1c RDI: ffffffffffffff9c [ 239.105099][ T7348] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 239.113066][ T7348] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 239.121039][ T7348] R13: 00007fff2a43c2b0 R14: 00007f4980206000 R15: 00005643ec5e54d8 [ 239.129029][ T7348] [ 239.132047][ T7348] [ 239.134367][ T7348] The buggy address belongs to the page: [ 239.139995][ T7348] page:ffffea00014dac00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x536b0 [ 239.150151][ T7348] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 239.157284][ T7348] raw: 00fff00000000000 ffffea00014db208 ffff8880b90409f0 0000000000000000 [ 239.165867][ T7348] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 239.174442][ T7348] page dumped because: kasan: bad access detected [ 239.180865][ T7348] page_owner tracks the page as freed [ 239.186227][ T7348] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x102800(GFP_NOWAIT|__GFP_NOWARN|__GFP_HARDWALL), pid 7, ts 238817531110, free_ts 238817535605 [ 239.202375][ T7348] get_page_from_freelist+0x1bbd/0x1ca0 [ 239.207925][ T7348] __alloc_pages+0x1ee/0x480 [ 239.212517][ T7348] stack_depot_save+0x342/0x440 [ 239.217373][ T7348] kasan_set_track+0x62/0x70 [ 239.221966][ T7348] kasan_set_free_info+0x1f/0x40 [ 239.226911][ T7348] ____kasan_slab_free+0xd5/0x110 [ 239.231933][ T7348] slab_free_freelist_hook+0xea/0x170 [ 239.237300][ T7348] kfree+0xef/0x2a0 [ 239.241110][ T7348] devtmpfs_create_node+0x207/0x290 [ 239.246315][ T7348] device_add+0xcd1/0xfb0 [ 239.250641][ T7348] cdev_device_add+0x1a4/0x340 [ 239.255400][ T7348] evdev_connect+0x34b/0x3f0 [ 239.259982][ T7348] input_register_device+0xda7/0x1140 [ 239.265355][ T7348] em28xx_register_snapshot_button+0x2d8/0x460 [ 239.271509][ T7348] em28xx_ir_init+0x625/0x1db0 [ 239.276270][ T7348] em28xx_init_extension+0x118/0x1b0 [ 239.281556][ T7348] page last free stack trace: [ 239.286221][ T7348] free_unref_page_prepare+0x637/0x6c0 [ 239.291682][ T7348] free_unref_page+0x8f/0x2a0 [ 239.296360][ T7348] stack_depot_save+0x418/0x440 [ 239.301211][ T7348] kasan_set_track+0x62/0x70 [ 239.305804][ T7348] kasan_set_free_info+0x1f/0x40 [ 239.310748][ T7348] ____kasan_slab_free+0xd5/0x110 [ 239.315771][ T7348] slab_free_freelist_hook+0xea/0x170 [ 239.321140][ T7348] kfree+0xef/0x2a0 [ 239.324943][ T7348] devtmpfs_create_node+0x207/0x290 [ 239.330140][ T7348] device_add+0xcd1/0xfb0 [ 239.334468][ T7348] cdev_device_add+0x1a4/0x340 [ 239.339232][ T7348] evdev_connect+0x34b/0x3f0 [ 239.343824][ T7348] input_register_device+0xda7/0x1140 [ 239.349192][ T7348] em28xx_register_snapshot_button+0x2d8/0x460 [ 239.355345][ T7348] em28xx_ir_init+0x625/0x1db0 [ 239.360106][ T7348] em28xx_init_extension+0x118/0x1b0 [ 239.365390][ T7348] [ 239.367704][ T7348] Memory state around the buggy address: [ 239.373322][ T7348] ffff8880536b0800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 239.381376][ T7348] ffff8880536b0880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 239.389431][ T7348] >ffff8880536b0900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 239.397483][ T7348] ^ [ 239.401547][ T7348] ffff8880536b0980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 239.409603][ T7348] ffff8880536b0a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 239.417656][ T7348] ================================================================== [ 239.425710][ T7348] Disabling lock debugging due to kernel taint [ 239.487659][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 239.536899][ T7348] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 239.544109][ T7348] CPU: 1 PID: 7348 Comm: v4l_id Tainted: G B syzkaller #0 [ 239.552518][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.562562][ T7348] Call Trace: [ 239.565834][ T7348] [ 239.568755][ T7348] dump_stack_lvl+0x188/0x250 [ 239.573428][ T7348] ? show_regs_print_info+0x20/0x20 [ 239.578626][ T7348] ? load_image+0x400/0x400 [ 239.583132][ T7348] panic+0x2e5/0x810 [ 239.587030][ T7348] ? bpf_jit_dump+0xd0/0xd0 [ 239.591534][ T7348] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 239.597510][ T7348] ? _raw_spin_unlock+0x40/0x40 [ 239.602356][ T7348] ? print_memory_metadata+0x314/0x400 [ 239.607815][ T7348] ? v4l2_fh_open+0xc6/0x430 [ 239.612404][ T7348] check_panic_on_warn+0x80/0xa0 [ 239.617344][ T7348] ? v4l2_fh_open+0xc6/0x430 [ 239.621933][ T7348] end_report+0x6d/0xf0 [ 239.626089][ T7348] kasan_report+0x102/0x130 [ 239.630594][ T7348] ? v4l2_fh_open+0xc6/0x430 [ 239.635180][ T7348] v4l2_fh_open+0xc6/0x430 [ 239.639591][ T7348] em28xx_v4l2_open+0x152/0x990 [ 239.644443][ T7348] ? __lock_acquire+0x7d10/0x7d10 [ 239.649473][ T7348] v4l2_open+0x20b/0x360 [ 239.653716][ T7348] chrdev_open+0x5c5/0x6a0 [ 239.658134][ T7348] ? cd_forget+0x160/0x160 [ 239.662550][ T7348] ? fsnotify_perm+0x3a7/0x560 [ 239.667321][ T7348] ? cd_forget+0x160/0x160 [ 239.671739][ T7348] do_dentry_open+0x7ff/0xf80 [ 239.676423][ T7348] path_openat+0x26f5/0x2fa0 [ 239.681016][ T7348] ? verify_lock_unused+0x140/0x140 [ 239.686214][ T7348] ? slab_post_alloc_hook+0x4c/0x380 [ 239.691503][ T7348] ? do_filp_open+0x410/0x410 [ 239.696184][ T7348] do_filp_open+0x1e2/0x410 [ 239.700691][ T7348] ? vfs_tmpfile+0x300/0x300 [ 239.705286][ T7348] ? _raw_spin_unlock+0x24/0x40 [ 239.710132][ T7348] ? alloc_fd+0x598/0x630 [ 239.714460][ T7348] do_sys_openat2+0x150/0x4b0 [ 239.719134][ T7348] ? __lock_acquire+0x7d10/0x7d10 [ 239.724163][ T7348] ? do_sys_open+0xe0/0xe0 [ 239.728575][ T7348] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 239.734559][ T7348] ? lock_chain_count+0x20/0x20 [ 239.739407][ T7348] ? vtime_user_exit+0x2c8/0x3e0 [ 239.744351][ T7348] __x64_sys_openat+0x135/0x160 [ 239.749202][ T7348] do_syscall_64+0x4c/0xa0 [ 239.753621][ T7348] ? clear_bhb_loop+0x30/0x80 [ 239.758297][ T7348] ? clear_bhb_loop+0x30/0x80 [ 239.762972][ T7348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 239.768873][ T7348] RIP: 0033:0x7f497fa78407 [ 239.773287][ T7348] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 239.792891][ T7348] RSP: 002b:00007fff2a43c060 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 239.801304][ T7348] RAX: ffffffffffffffda RBX: 00007f497f98a880 RCX: 00007f497fa78407 [ 239.809272][ T7348] RDX: 0000000000000000 RSI: 00007fff2a43df1c RDI: ffffffffffffff9c [ 239.817241][ T7348] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 239.825208][ T7348] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 239.833182][ T7348] R13: 00007fff2a43c2b0 R14: 00007f4980206000 R15: 00005643ec5e54d8 [ 239.841161][ T7348] [ 239.844466][ T7348] Kernel Offset: disabled [ 239.852770][ T7348] Rebooting in 86400 seconds..