last executing test programs: 12.731559126s ago: executing program 2 (id=412): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00q'], 0x0) getpid() sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x818, &(0x7f0000000280)=ANY=[], 0x7e, 0x1cf, &(0x7f0000001080)="$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") connect$inet6(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000002140)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) rt_sigprocmask(0xaf69fcf3ef41c694, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="191d4c7ce674b8f19db24349ef1d040000000800f3e522a3000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0086dd6012000800103afffe8000000000000000000000000000bbfd020000000000000000000000f10f6f6a042a00000186009078010002000000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) 12.730671666s ago: executing program 3 (id=413): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ff020000000000000000000000000001ac1414bb000000000000000000000000000000e3b3d09d5f04a8926efb2476f9473f5ed4d4fb9dfb9c1f"], 0x38}}, 0x0) 12.44053335s ago: executing program 3 (id=415): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xca, &(0x7f0000000300), 0xff, 0x463, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001280)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000012c0)={0x8, 0x5bb0, 0x0, 'queue1\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 11.034128097s ago: executing program 2 (id=420): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="400f4d00000069"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000740)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.923933307s ago: executing program 3 (id=421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x80000) 9.8124758s ago: executing program 3 (id=424): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010100, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x2, 0xfffffffd, 0x3]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast1}, {@private=0xa010101}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x818, &(0x7f0000000280)=ANY=[], 0x7e, 0x1cf, &(0x7f0000001080)="$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") mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000002140)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x9, 0x0, 0x0, 0x0, 'syz0\x00', 0x2}, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 'syz1\x00', 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x7fff}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2}, {@private=0xa010100, 0x1}, {@rand_addr, 0x3}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000a, 0x28011, r8, 0x0) r9 = dup(r7) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) 8.539366736s ago: executing program 1 (id=426): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000ac0)={0x0, 0x15, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.396255338s ago: executing program 3 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv6_newaddr={0x40, 0x14, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) 8.029960289s ago: executing program 2 (id=431): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xca, &(0x7f0000000300), 0xff, 0x463, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001280)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000012c0)={0x8, 0x5bb0, 0x0, 'queue1\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 7.852294043s ago: executing program 3 (id=432): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000700), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x40, 0x14, 0x3, "5d6002"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.851630354s ago: executing program 0 (id=433): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) 7.613632323s ago: executing program 0 (id=435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000180)=0x80000) 7.366108114s ago: executing program 4 (id=438): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$eJzs3MtvG8UfAPDv2nHS5y/5lfJoaCFQEBGPpEkf9MAFBBIHkJC4FHEKSVqFpg1qgkSrCAKHcESVuCOOSPwFnOCCgBMSV7ijShXKpYWT0dq7qZvYaZw4del+PtLGM96xZr67O/bsjJ0ACmso/ZNE7IuI3yOiv569vcBQ/eHmyuLk3yuLk0lUq2//ldTK3VhZnMyL5q/bW89Uq1m+r0m9y+9GTMzOTl/K8qMLFz4Ynb985YWZCxPnps9NXxw/ffrE8SO9p8ZPdiTONK4bgx/PHT70+jtX35w8c/W9n79N27sv298YR6cM1Y9uU09XOl1bd+1vSCc9XWwIbSlHRHq6KrX+3x/l2L26rz9e+6yrjQN2VLVarTb7fM4sVYH7WBLdbgHQHfkHfXr/m293aehxT7j+cv0GKI37ZrbV9/REKStTWXN/20lDEXFm6Z+v0i12aB4CAKDR9+n45/lm479SPNRQ7n/ZGspARPw/Ig5ExAMRcTAiHoyolX04Ih5ps/61KyTrxz+la1sKbJPS8d9L2drW7eO/fPQXA+Ust78WfyU5OzM7fSw7JsNR6UvzYxvU8cOrv33Ral/j+C/d0vrzsWDWjms9aybopiYWJrYTc6Prn0YM9jSLP4l8GSeJiEMRMbjFOmae/eZwq313jn8DHVhnqn4d8Uz9/C/FmvhzScv1ybEXT42fHN0Vs9PHRvOrYr1ffl1+q1X924q/A9Lzv6fp9b8a/0CyK2L+8pXztfXa+fbrWP7j85b3NFu7/mdWG9ebPX40sbBwaSyiN3lj/fPjt16b5/PyafzDR5v3/wNx60g8GhHpRXwkIh6LiMeztj8REU9GxNEN4v/plafebz/+DWblOyiNf+pO5z8az3/7ifL5H79rP/5cev5P1FLD2TObef/bbAO3c+wAAADgv6JU+w58UhpZTZdKIyP17/AfjD1LMTe/8NzZuQ8vTtW/Kz8QlVI+09XfMB86ls0N5/nxNfnj2bzxl+XdtfzI5NzsVLeDh4Lb26L/p/4sd7t1wI7zey0oLv0fikv/h+LS/6G49H8ormb9/5MutAO4+3z+Q3Hp/1Bc+j8Ul/4PhdTyt/Glbf3kf7uJpBuVSrSTiNI90Yz7P9Gz6X9mscVEX9Nd3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Ix/AwAA//+UFuN0") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYBLOB="da42823e509616ae9a55d0343597086522f44a052ef8f88a8a64abac39413f811db3ba29e45a895c7a118795f77237ece84c9c45d8d2eb2a3cdc1cc16e59d6712fdfa5a7b7cf3f458acfda11f66f00269b82985a31ad3ddea2e3d332f35e4650e6f6bf0e75151841a5149d665af3a68cd8b512ebe57788f8e6cf15", @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYBLOB="fad50f61722d8f2e0ccd6186e627354da57807aa9a4f9752c80919dfb058acc725c18edc3e8760cabb4294aa9e3fc7f54e7122bc70666228004fb7f23cfbaaa3844f52c446820ec0b99b05d05f570d8c151971cedc87359c3dd4a292636a5bbf63f65e24e48bdff93a7edd3feb44df8153a1f5b36dd7424aa3e0a69c2da0542601a506fb13f1bc27fd19eca65aff32c9999a38a10c949a1c2377ae7de9691249adf0dd07da9250db2395f54e7802427cb8c0ce373cb5df46cc07c06db0a8125ab3fed2eaa59816083c4574eb8a41e5187afff1"], 0x1, 0x1e5, &(0x7f00000006c0)="$eJzslU9rE0EYxn+zmXQbzaFnrxbbi7bZgvgN7F0/gCFdazHxTzeiCQWjl148iF+i4KfwIOjdg4jgpR4U9FDxVJHI7Lw7nTRLTdUghXkgvM/7vP9mdjM7N7K7WQz83NtqMUcORZ33SqGBBWW1/Rlrv4kdCj5p6zdEfy72o9is13/zxNL+zWa7nW5mvaNJjILf5IyScUlPOqyMvH48qij+rM/0Sbdin+x46OmIEpflSC2HOzeu/Pd9/T35Xgdf+fyvR1QpDSl1rP/6UQSc8qM+/poOk3fP7OTSnIqU1xh9LCePRMeqypD3kV1+FPFVQZW3e1sto16Tr5gJr9lfcSTyKuO89HLOaBiAqjDMm5o+WnIXgKVu585S1uuf3+g019P19FaSrFxcfnVajujwIWy002WVL8OWR4ZoHMw5rXnxKvDhID7Ag/KWhtnXgexaFh/nxbNeYQ0ir9brIQ1euPmxaPeyDlc5xyxwf2DCiTygeUw3zXWztVUUFXEa2l8Q+0TM5oELrdvttW0UqijbQbsejV2qzknEMYPSlUtu+9ti58Wuit0Ruyu2uLuKO0nnHb6ItziAGR40u93N/PKyzGmJ05I5NzmSqcVtqIqVxEyIU5MmBgQEBAQEBARMCb8CAAD//zqVSCI=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@bridge_dellink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f00000042c0)="c7", 0x1}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) 7.274373972s ago: executing program 0 (id=439): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.905253533s ago: executing program 0 (id=440): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010100, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x2, 0xfffffffd, 0x3]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast1}, {@private=0xa010101}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x818, &(0x7f0000000280)=ANY=[], 0x7e, 0x1cf, &(0x7f0000001080)="$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") mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000002140)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x9, 0x0, 0x0, 0x0, 'syz0\x00', 0x2}, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 'syz1\x00', 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x7fff}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2}, {@private=0xa010100, 0x1}, {@rand_addr, 0x3}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000a, 0x28011, r8, 0x0) r9 = dup(r7) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) 6.675000252s ago: executing program 2 (id=441): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000740)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.386423916s ago: executing program 0 (id=442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000633c77fbac141412e000002062079f4b4d2f87e5feca6aab845013f2325f1a3903050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 5.822709293s ago: executing program 0 (id=443): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getdents(r1, &(0x7f00000009c0)=""/112, 0x70) 5.413508828s ago: executing program 1 (id=445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 5.086318895s ago: executing program 1 (id=446): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfa, 0xcf, 0x1, 0x40, 0x56e, 0x4010, 0x201c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0x55, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f00000004c0)={0x0, 0x14, 0x1d, "cec6d2495486108441f778265b1d0fcc6ccc673281516c2b7653121f42"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0}) 4.517659872s ago: executing program 4 (id=447): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@multicast2}, {@in=@multicast2, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @extra_flags={0x8, 0x18, 0x80000001}]}, 0x140}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$usbfs(0x0, 0xb, 0x101301) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) getrandom(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000180)={{0x8, 0x0, 0xffffffff, 0x9, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x721, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0xf, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.538093644s ago: executing program 4 (id=448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000180)=0x80000) 3.408902805s ago: executing program 4 (id=449): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001e00)) dup2(r0, r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000012e35b40030400000004000000010902120001000000000904"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x10010) r5 = fsopen(&(0x7f0000000000)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0x10, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x0) r7 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000000)=""/67, 0x43}, {&(0x7f0000000080)=""/218, 0xda}, {&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000280)=""/100, 0x64}, {&(0x7f0000000300)=""/62, 0x3e}], 0x5, 0x0, 0x1) 2.624972651s ago: executing program 2 (id=450): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xca, &(0x7f0000000300), 0xff, 0x463, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001280)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000012c0)={0x8, 0x5bb0, 0x0, 'queue1\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 1.454324549s ago: executing program 1 (id=451): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010100, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x2, 0xfffffffd, 0x3]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast1}, {@private=0xa010101}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x818, &(0x7f0000000280)=ANY=[], 0x7e, 0x1cf, &(0x7f0000001080)="$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") mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000002140)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x9, 0x0, 0x0, 0x0, 'syz0\x00', 0x2}, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 'syz1\x00', 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x7fff}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2}, {@private=0xa010100, 0x1}, {@rand_addr, 0x3}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000a, 0x28011, r8, 0x0) r9 = dup(r7) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) 773.927706ms ago: executing program 1 (id=452): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 563.290823ms ago: executing program 2 (id=453): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000ac0)={0x0, 0x15, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 298.455616ms ago: executing program 4 (id=454): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x8004587d, &(0x7f0000001ec0)={@id={0x2, 0x0, @auto="de60e4b8e8c640437d02438081fc0e47"}}) 137.887329ms ago: executing program 4 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15", 0x0, 0x69873270, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000400), 0x1, 0x35b, &(0x7f0000000440)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='sched_switch\x00', r5}, 0x18) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000040)={0x1, @time}) tkill(r6, 0x7) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f0000000100)={{0x0, 0xfc}, 0x0, 0x0, 0x0, {}, 0x0, 0x4000000}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xb9) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) 0s ago: executing program 1 (id=456): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4383ef1a, 0xfffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000001900)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10002) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): and [ 75.296541][ T3795] and is ignored by this kernel. Remove the mand [ 75.296541][ T3795] option from the mount to silence this warning. [ 75.296541][ T3795] ======================================================= [ 75.357150][ T3783] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 75.404326][ T3795] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.430931][ T3795] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.481380][ T3570] XFS (loop2): Unmounting Filesystem [ 75.604993][ T3621] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 75.640742][ T3621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.650903][ T3621] usb 4-1: config 0 descriptor?? [ 75.665951][ T3612] usb 5-1: USB disconnect, device number 2 [ 75.685043][ T3621] usb 4-1: can't set config #0, error -71 [ 75.759131][ T3621] usb 4-1: USB disconnect, device number 3 [ 75.780384][ T3804] loop4: detected capacity change from 0 to 512 [ 75.831254][ T3806] loop3: detected capacity change from 0 to 512 [ 75.928264][ T3806] EXT4-fs (loop3): Ignoring removed orlov option [ 75.943796][ T3806] EXT4-fs (loop3): Test dummy encryption mode enabled [ 75.978071][ T146] Bluetooth: Wrong link type (-71) [ 76.011274][ T3806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 76.029620][ T3804] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,inode_readahead_blks=0x0000000000020000,minixdf,,errors=continue. Quota mode: writeback. [ 76.057793][ T3806] System zones: 1-12 [ 76.062888][ T3804] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.087955][ T3806] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.36: casefold flag without casefold feature [ 76.169041][ T3806] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.36: couldn't read orphan inode 15 (err -117) [ 76.223860][ T3822] loop0: detected capacity change from 0 to 512 [ 76.244558][ T3806] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback. [ 76.796564][ T3806] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.36: Directory hole found for htree leaf block 0 [ 76.816806][ T3619] wlan1: Trigger new scan to find an IBSS to join [ 76.889339][ T3822] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.965352][ T3574] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.975470][ T3822] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.080626][ T3829] loop1: detected capacity change from 0 to 1024 [ 77.150931][ T3832] loop3: detected capacity change from 0 to 256 [ 77.345596][ T3574] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 77.424308][ T3832] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119ab80, checksum : 0x1119abd0) [ 77.446053][ T3574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.472125][ T3832] exFAT-fs (loop3): invalid boot region [ 77.494223][ T3574] usb 5-1: config 0 descriptor?? [ 77.545403][ T3832] exFAT-fs (loop3): failed to recognize exfat type [ 77.720152][ T3839] hfsplus: xattr searching failed [ 77.726036][ T3839] hfsplus: xattr searching failed [ 77.734390][ T3839] hfsplus: xattr searching failed [ 77.843619][ T3841] hfsplus: xattr searching failed [ 77.864522][ T3841] hfsplus: xattr search failed [ 77.873740][ T26] audit: type=1800 audit(1729439266.245:2): pid=3841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.42" name="file0" dev="loop1" ino=5 res=0 errno=0 [ 78.150781][ T3828] hfsplus: xattr search failed [ 78.603755][ T3842] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.984123][ T3571] hfsplus: bad catalog entry type [ 79.022244][ T3619] wlan1: Creating new IBSS network, BSSID 72:ce:37:de:f7:ca [ 79.075903][ T3574] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 79.087048][ T3574] [drm] Initialized udl on minor 2 [ 79.204305][ T3804] fuse: Unknown parameter 'usXr_id' [ 79.328216][ T3846] loop0: detected capacity change from 0 to 512 [ 79.355427][ T3574] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 79.374045][ T3574] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 79.413676][ T3574] usb 5-1: USB disconnect, device number 3 [ 79.432110][ T3846] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.455137][ T3846] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.539054][ T3846] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 79.642306][ T3846] EXT4-fs (loop0): 1 truncate cleaned up [ 79.676371][ T3846] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 79.913304][ T424] hfsplus: bad catalog file entry [ 80.242599][ T3858] loop3: detected capacity change from 0 to 256 [ 80.332448][ T3860] loop0: detected capacity change from 0 to 512 [ 80.351227][ T3858] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 80.441333][ T3860] EXT4-fs (loop0): Ignoring removed orlov option [ 80.451553][ T3858] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 80.487025][ T3860] EXT4-fs (loop0): Test dummy encryption mode enabled [ 80.495787][ T3858] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 80.503988][ T3858] UDF-fs: Scanning with blocksize 512 failed [ 80.514484][ T3860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 80.535141][ T3860] System zones: 1-12 [ 80.541832][ T3858] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 80.579608][ T3860] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.53: casefold flag without casefold feature [ 80.610765][ T3858] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.623203][ T3860] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.53: couldn't read orphan inode 15 (err -117) [ 80.716575][ T3615] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 80.765273][ T3860] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback. [ 80.818436][ T3860] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.53: Directory hole found for htree leaf block 0 [ 80.889555][ T3868] loop3: detected capacity change from 0 to 256 [ 81.035030][ T3615] usb 5-1: Using ep0 maxpacket: 32 [ 81.059735][ T3868] FAT-fs (loop3): Directory bread(block 64) failed [ 81.086920][ T3868] FAT-fs (loop3): Directory bread(block 65) failed [ 81.104194][ T3868] FAT-fs (loop3): Directory bread(block 66) failed [ 81.124723][ T3868] FAT-fs (loop3): Directory bread(block 67) failed [ 81.131711][ T3868] FAT-fs (loop3): Directory bread(block 68) failed [ 81.138646][ T3868] FAT-fs (loop3): Directory bread(block 69) failed [ 81.145905][ T3868] FAT-fs (loop3): Directory bread(block 70) failed [ 81.152653][ T3868] FAT-fs (loop3): Directory bread(block 71) failed [ 81.159598][ T3868] FAT-fs (loop3): Directory bread(block 72) failed [ 81.166598][ T3868] FAT-fs (loop3): Directory bread(block 73) failed [ 81.176849][ T3615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 81.219562][ T3868] attempt to access beyond end of device [ 81.219562][ T3868] loop3: rw=524288, want=1164, limit=256 [ 81.236932][ T3615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 81.263601][ T3868] attempt to access beyond end of device [ 81.263601][ T3868] loop3: rw=0, want=1164, limit=256 [ 81.265414][ T3865] chnl_net:caif_netlink_parms(): no params data found [ 81.276272][ T26] audit: type=1800 audit(1729439269.665:3): pid=3868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.56" name="file0" dev="loop3" ino=1048590 res=0 errno=0 [ 81.293195][ T3615] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 81.385258][ T3615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.573117][ T3615] usb 5-1: config 0 descriptor?? [ 81.598124][ T1075] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.609146][ T7] cfg80211: failed to load regulatory.db [ 81.615971][ T3863] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 82.778371][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 82.843911][ T3615] hub 5-1:0.0: USB hub found [ 82.955064][ T1075] usb 1-1: Using ep0 maxpacket: 8 [ 83.156820][ T1075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.158375][ T3863] loop4: detected capacity change from 0 to 1024 [ 83.200831][ T1075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.214866][ T1075] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 83.278765][ T1075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.290581][ T3863] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 83.348758][ T1075] usb 1-1: config 0 descriptor?? [ 83.392465][ T3865] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.419627][ T3865] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.494748][ T3865] device bridge_slave_0 entered promiscuous mode [ 83.517008][ T3893] loop3: detected capacity change from 0 to 2048 [ 83.562830][ T3865] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.585125][ T3865] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.603391][ T3893] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.623287][ T3865] device bridge_slave_1 entered promiscuous mode [ 83.709389][ T3641] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.869417][ T3903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 84.336360][ T3641] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.412510][ T3865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.456792][ T3865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.567282][ T3881] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 84.601518][ T3881] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 774 with error 28 [ 84.607754][ T1075] logitech 0003:046D:C24F.0001: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.0-1/input0 [ 84.626384][ T1075] logitech 0003:046D:C24F.0001: no inputs found [ 84.645147][ T1075] usb 1-1: USB disconnect, device number 2 [ 84.657526][ T3881] EXT4-fs (loop3): This should not happen!! Data will be lost [ 84.657526][ T3881] [ 84.666423][ T3641] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.680212][ T3881] EXT4-fs (loop3): Total free blocks count 0 [ 84.693554][ T3881] EXT4-fs (loop3): Free/Dirty block details [ 84.699372][ T3911] loop2: detected capacity change from 0 to 1024 [ 84.707674][ T3881] EXT4-fs (loop3): free_blocks=2415919104 [ 84.707702][ T3881] EXT4-fs (loop3): dirty_blocks=784 [ 84.707716][ T3881] EXT4-fs (loop3): Block reservation details [ 84.707728][ T3881] EXT4-fs (loop3): i_reserved_data_blocks=49 [ 84.792809][ T3865] team0: Port device team_slave_0 added [ 84.991985][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 85.004583][ T3641] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.021295][ T3865] team0: Port device team_slave_1 added [ 85.041693][ T3916] loop0: detected capacity change from 0 to 512 [ 85.270007][ T3916] EXT4-fs (loop0): Ignoring removed orlov option [ 85.301183][ T3916] EXT4-fs (loop0): Test dummy encryption mode enabled [ 85.333324][ T3865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.385391][ T3865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.418198][ T3916] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 85.464740][ T3916] System zones: 1-12 [ 85.487622][ T3916] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.66: casefold flag without casefold feature [ 85.521131][ T3865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.545209][ T3916] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.66: couldn't read orphan inode 15 (err -117) [ 85.592825][ T3865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.610681][ T3916] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback. [ 85.633255][ T3865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.636105][ T3615] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 85.659929][ T3865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.776447][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.787062][ T3916] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.66: Directory hole found for htree leaf block 0 [ 85.829807][ T3922] loop2: detected capacity change from 0 to 512 [ 85.854337][ T3865] device hsr_slave_0 entered promiscuous mode [ 85.864727][ T3865] device hsr_slave_1 entered promiscuous mode [ 85.889484][ T3865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.903147][ T3865] Cannot create hsr debugfs directory [ 85.906364][ T3615] usbhid 5-1:0.0: can't add hid device: -71 [ 85.914695][ T3615] usbhid: probe of 5-1:0.0 failed with error -71 [ 86.007383][ T3615] usb 5-1: USB disconnect, device number 4 [ 86.081657][ T3922] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.67: corrupted inode contents [ 86.198826][ T3922] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #3: comm syz.2.67: mark_inode_dirty error [ 86.548614][ T3922] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.67: corrupted inode contents [ 86.783283][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 86.808575][ T3922] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.67: mark_inode_dirty error [ 86.884229][ T3922] Quota error (device loop2): write_blk: dquota write failed [ 86.934223][ T3922] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 86.973547][ T3922] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.67: Failed to acquire dquot type 0 [ 87.059204][ T3922] EXT4-fs (loop2): 1 orphan inode deleted [ 87.087772][ T3922] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.105335][ T7] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 87.123698][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.150002][ T3922] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.166645][ T7] usb 4-1: Product: syz [ 87.177866][ T7] usb 4-1: Manufacturer: syz [ 87.198625][ T7] usb 4-1: SerialNumber: syz [ 87.263491][ T26] audit: type=1800 audit(1729439275.645:4): pid=3922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.67" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 87.286375][ T7] usb 4-1: config 0 descriptor?? [ 87.429968][ T3942] loop0: detected capacity change from 0 to 128 [ 87.538415][ T3942] EXT4-fs (loop0): Unrecognized mount option "mask=^MAY_APPEND" or missing value [ 87.548134][ T7] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 87.625156][ T13] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 87.825141][ T13] usb 3-1: device descriptor read/64, error -71 [ 87.909255][ T2989] Bluetooth: hci2: command 0x040f tx timeout [ 88.095207][ T13] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 88.170099][ T3946] loop0: detected capacity change from 0 to 8 [ 88.295218][ T13] usb 3-1: device descriptor read/64, error -71 [ 88.313519][ T3946] SQUASHFS error: zlib decompression failed, data probably corrupt [ 88.342166][ T3946] SQUASHFS error: Failed to read block 0x4de: -5 [ 88.364476][ T3946] SQUASHFS error: Failed to read block 0x4e2: -5 [ 88.378547][ T3946] SQUASHFS error: Failed to read block 0x9ca: -5 [ 88.401125][ T3946] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 88.419528][ T3946] SQUASHFS error: Failed to read block 0x35f2: -5 [ 88.425341][ T13] usb usb3-port1: attempt power cycle [ 88.456620][ T26] audit: type=1800 audit(1729439276.845:5): pid=3946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.72" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 88.637176][ T3955] loop0: detected capacity change from 0 to 2048 [ 88.752642][ T3922] syz.2.67 (3922) used greatest stack depth: 17912 bytes left [ 88.811647][ T3955] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.855128][ T13] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 89.058428][ T3865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.095631][ T13] usb 3-1: device not accepting address 4, error -71 [ 89.116758][ T3966] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.461677][ T3865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.588722][ T3865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.611632][ T3865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.873468][ T3976] loop0: detected capacity change from 0 to 1024 [ 90.083041][ T3641] device hsr_slave_0 left promiscuous mode [ 90.105251][ T7] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 90.117578][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 90.167754][ T7] usb 4-1: USB disconnect, device number 4 [ 90.588915][ T3989] loop3: detected capacity change from 0 to 512 [ 90.755229][ T3989] EXT4-fs (loop3): Ignoring removed orlov option [ 90.770025][ T3989] EXT4-fs (loop3): Test dummy encryption mode enabled [ 90.780336][ T3641] device hsr_slave_1 left promiscuous mode [ 90.803810][ T3641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.815177][ T3641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.844538][ T3989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 90.849339][ T3641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.888815][ T3989] System zones: 1-12 [ 90.944344][ T3641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.966380][ T3989] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.78: casefold flag without casefold feature [ 90.999040][ T3989] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.78: couldn't read orphan inode 15 (err -117) [ 91.015324][ T3989] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback. [ 91.020125][ T3641] device bridge_slave_1 left promiscuous mode [ 91.111815][ T3641] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.138499][ T3989] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.78: Directory hole found for htree leaf block 0 [ 91.203460][ T3641] device bridge_slave_0 left promiscuous mode [ 91.235134][ T3641] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.258312][ T4006] loop0: detected capacity change from 0 to 1024 [ 91.294413][ T3641] device veth1_macvtap left promiscuous mode [ 91.304108][ T3641] device veth0_macvtap left promiscuous mode [ 91.320733][ T4006] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 91.320756][ T3641] device veth1_vlan left promiscuous mode [ 91.339259][ T3641] device veth0_vlan left promiscuous mode [ 91.571482][ T4012] raw_sendmsg: syz.0.82 forgot to set AF_INET. Fix it! [ 91.884578][ T3641] team0 (unregistering): Port device team_slave_1 removed [ 91.904405][ T3641] team0 (unregistering): Port device team_slave_0 removed [ 91.921649][ T3641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.937952][ T3641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.019534][ T3641] bond0 (unregistering): Released all slaves [ 92.087803][ T4014] loop0: detected capacity change from 0 to 764 [ 92.110729][ T3865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.125856][ T4009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 92.149424][ T4014] rock: directory entry would overflow storage [ 92.175947][ T3865] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.183009][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.185827][ T4014] rock: sig=0x4654, size=5, remaining=4 [ 92.201838][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.258070][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.287673][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.300775][ T3881] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.308049][ T3881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.349352][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.366446][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.377204][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.394342][ T3881] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.401578][ T3881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.419562][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.456380][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.467656][ T4020] nfs: Bad value for 'source' [ 92.545282][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.563174][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.571521][ T2989] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.598433][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.610742][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.626520][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.675834][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.693748][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.713034][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.721831][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.738173][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.748927][ T3865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.997437][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 93.025276][ T2989] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.061903][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.134956][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.520602][ T3865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.529605][ T2989] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.567613][ T2989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.576756][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.599882][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.617740][ T2989] usb 4-1: Product: syz [ 93.622138][ T2989] usb 4-1: Manufacturer: syz [ 93.627087][ T2989] usb 4-1: SerialNumber: syz [ 93.655617][ T13] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 93.669823][ T3865] device veth0_vlan entered promiscuous mode [ 93.685147][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.699817][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.709715][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.725012][ T13] usb 1-1: Product: syz [ 93.729379][ T13] usb 1-1: Manufacturer: syz [ 93.733998][ T13] usb 1-1: SerialNumber: syz [ 93.762943][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.771128][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.900517][ T13] usb 1-1: config 0 descriptor?? [ 93.908687][ T3865] device veth1_vlan entered promiscuous mode [ 94.585133][ T13] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 94.674289][ T3865] device veth0_macvtap entered promiscuous mode [ 94.734384][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.777640][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.814852][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.837351][ T4045] loop2: detected capacity change from 0 to 512 [ 94.851084][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.409253][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.425215][ T13] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -110 [ 99.467441][ T13] usb 1-1: USB disconnect, device number 3 [ 99.484677][ T2989] cdc_ncm 4-1:1.0: bind() failure [ 99.506343][ T3865] device veth1_macvtap entered promiscuous mode [ 99.610778][ T4062] loop0: detected capacity change from 0 to 512 [ 99.617917][ T3865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.650359][ T2989] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 99.677542][ T3865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.704452][ T2989] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 99.744951][ T3865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.757271][ T2989] usbtest: probe of 4-1:1.1 failed with error -71 [ 99.778254][ T2989] usb 4-1: USB disconnect, device number 5 [ 99.821375][ T3865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.854947][ T3865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.875076][ T3865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.890229][ T3865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.911032][ T3865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.943052][ T3865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.973576][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.987636][ T4062] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.992882][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.076425][ T4066] loop2: detected capacity change from 0 to 1024 [ 100.132211][ T3865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.167195][ T3865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.167863][ T4062] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 100.186902][ T4062] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.97: invalid indirect mapped block 2683928664 (level 1) [ 100.205038][ T3865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.215983][ T3865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.226151][ T3865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.238223][ T3865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.248301][ T3865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.259024][ T3865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.270447][ T3865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.279872][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.311681][ T4066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.391767][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.553786][ T3865] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.642451][ T4062] EXT4-fs (loop0): Remounting filesystem read-only [ 100.658418][ T3865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.695881][ T3865] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.785862][ T3865] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.978785][ T4062] EXT4-fs (loop0): 1 truncate cleaned up [ 101.004578][ T4062] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 101.357543][ T4074] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.97: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 101.458567][ T4074] EXT4-fs (loop0): Remounting filesystem read-only [ 101.746799][ T3691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.084842][ T3691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.104079][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.169834][ T424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.179394][ T424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.193395][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.267840][ T4096] loop2: detected capacity change from 0 to 512 [ 103.350218][ T4096] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 103.393011][ T4096] UDF-fs: Scanning with blocksize 512 failed [ 103.431526][ T4096] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 103.435431][ T4101] loop0: detected capacity change from 0 to 1024 [ 103.460455][ T4096] UDF-fs: Scanning with blocksize 1024 failed [ 103.494620][ T4096] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 103.545331][ T3667] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 103.560085][ T4106] binder: 4102:4106 ioctl c0306201 20000340 returned -14 [ 103.845181][ T3667] usb 4-1: Using ep0 maxpacket: 8 [ 104.186077][ T3667] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 104.239933][ T3667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.260369][ T3667] usb 4-1: Product: syz [ 104.264582][ T3667] usb 4-1: Manufacturer: syz [ 104.286283][ T3667] usb 4-1: SerialNumber: syz [ 104.322121][ T3667] usb 4-1: config 0 descriptor?? [ 104.334984][ T4096] UDF-fs: Scanning with blocksize 2048 failed [ 104.342456][ T4096] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 104.384382][ T4096] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.418082][ T4108] loop4: detected capacity change from 0 to 512 [ 104.456303][ T26] audit: type=1800 audit(1729439292.845:6): pid=4096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.102" name="file1" dev="loop2" ino=26 res=0 errno=0 [ 104.525871][ T4108] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 104.533652][ T4108] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 104.615656][ T3667] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 104.628135][ T4108] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 104.674675][ T4108] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.254360][ T4108] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 105.295372][ T4108] Quota error (device loop4): write_blk: dquota write failed [ 105.311308][ T4118] loop1: detected capacity change from 0 to 512 [ 105.327206][ T4108] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 105.367692][ T4108] Quota error (device loop4): write_blk: dquota write failed [ 105.387675][ T4108] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 105.407909][ T4118] EXT4-fs (loop1): Ignoring removed nobh option [ 105.431418][ T4108] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.108: Failed to acquire dquot type 1 [ 105.453408][ T4118] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.475838][ T4108] EXT4-fs (loop4): 1 truncate cleaned up [ 105.487563][ T4118] EXT4-fs (loop1): 1 truncate cleaned up [ 105.493275][ T4118] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 105.515141][ T4108] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,mblk_io_submit,jqfmt=vfsold,noinit_itable,nomblk_io_submit,noauto_da_alloc,minixdf,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 105.748043][ T4118] EXT4-fs (loop1): shut down requested (0) [ 106.503912][ T4108] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 106.565347][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.713889][ T4135] loop1: detected capacity change from 0 to 512 [ 106.810137][ T4135] EXT4-fs (loop1): Ignoring removed oldalloc option [ 106.840737][ T4135] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.114: Parent and EA inode have the same ino 15 [ 106.873380][ T4135] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.114: Parent and EA inode have the same ino 15 [ 106.955420][ T4135] EXT4-fs (loop1): 1 orphan inode deleted [ 107.090446][ T13] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 107.101511][ T4135] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 107.141656][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.356631][ T4144] loop4: detected capacity change from 0 to 128 [ 107.666828][ T13] usb 3-1: config 0 has no interface number 0 [ 107.673030][ T13] usb 3-1: config 0 interface 156 has no altsetting 0 [ 107.680028][ T13] usb 3-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 107.690070][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.703115][ T13] usb 3-1: config 0 descriptor?? [ 107.748016][ T13] hub 3-1:0.156: bad descriptor, ignoring hub [ 107.754481][ T13] hub: probe of 3-1:0.156 failed with error -5 [ 107.814155][ T13] option 3-1:0.156: GSM modem (1-port) converter detected [ 108.114548][ T4144] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.130539][ T4144] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.403128][ T4144] 9pnet: Insufficient options for proto=fd [ 110.375626][ T3667] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 110.537841][ T3667] usb 4-1: USB disconnect, device number 6 [ 110.556003][ T13] usb 3-1: USB disconnect, device number 6 [ 110.563935][ T13] option 3-1:0.156: device disconnected [ 110.712519][ T4150] loop2: detected capacity change from 0 to 2048 [ 111.034560][ T4160] loop3: detected capacity change from 0 to 2048 [ 112.569178][ T4150] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.139729][ T4170] loop0: detected capacity change from 0 to 512 [ 113.165740][ T4160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.377593][ T4161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 113.491553][ T4170] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.507264][ T2989] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.515376][ T4176] netlink: 124 bytes leftover after parsing attributes in process `syz.2.124'. [ 113.526024][ T4170] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.812022][ T4183] loop2: detected capacity change from 0 to 256 [ 113.825337][ T4181] loop3: detected capacity change from 0 to 2048 [ 113.938264][ T3882] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.970626][ T4183] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 113.985916][ T2989] usb 2-1: Using ep0 maxpacket: 32 [ 113.995447][ T4181] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 114.035374][ T3570] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 114.046364][ T4181] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.163790][ T2989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 114.195022][ T3882] usb 5-1: Using ep0 maxpacket: 8 [ 114.212274][ T2989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 114.267453][ T4188] loop2: detected capacity change from 0 to 512 [ 114.275887][ T2989] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 114.297375][ T2989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.346847][ T2989] usb 2-1: config 0 descriptor?? [ 114.382989][ T4165] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 114.406213][ T2989] hub 2-1:0.0: USB hub found [ 114.413757][ T4190] loop3: detected capacity change from 0 to 512 [ 114.552878][ T4190] EXT4-fs (loop3): orphan cleanup on readonly fs [ 114.621928][ T4190] EXT4-fs error (device loop3): ext4_find_extent:929: inode #4: comm syz.3.129: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 114.643412][ T3882] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 114.801298][ T4193] loop2: detected capacity change from 0 to 2048 [ 114.825516][ T3582] Bluetooth: hci1: hardware error 0x07 [ 114.842789][ T3882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.865275][ T3882] usb 5-1: Product: syz [ 114.869620][ T3882] usb 5-1: Manufacturer: syz [ 114.933178][ T4193] loop2: p1 < > p4 [ 114.955551][ T4193] loop2: p4 size 8388608 extends beyond EOD, truncated [ 115.076046][ T3882] usb 5-1: SerialNumber: syz [ 115.091562][ T4190] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 115.136843][ T3882] usb 5-1: config 0 descriptor?? [ 115.189801][ T4190] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 115.215009][ T2989] hub 2-1:0.0: 2 ports detected [ 115.222510][ T4190] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 115.230342][ T4190] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.256084][ T3029] loop2: p1 < > p4 [ 115.267880][ T3029] loop2: p4 size 8388608 extends beyond EOD, truncated [ 115.435253][ T3882] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 115.665026][ T4202] loop2: detected capacity change from 0 to 1024 [ 115.957354][ T4202] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.008548][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 116.048506][ T3815] udevd[3815]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 116.211270][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 116.239402][ T3815] udevd[3815]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 117.956340][ T4207] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 117.971808][ T4207] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 117.984017][ T4207] EXT4-fs (loop2): This should not happen!! Data will be lost [ 117.984017][ T4207] [ 117.993908][ T4207] EXT4-fs (loop2): Total free blocks count 0 [ 117.999942][ T4207] EXT4-fs (loop2): Free/Dirty block details [ 118.005852][ T4207] EXT4-fs (loop2): free_blocks=68451041280 [ 118.012256][ T4207] EXT4-fs (loop2): dirty_blocks=58816 [ 118.017677][ T4207] EXT4-fs (loop2): Block reservation details [ 118.023654][ T4207] EXT4-fs (loop2): i_reserved_data_blocks=3671 [ 118.145974][ T3667] usb 2-1: USB disconnect, device number 2 [ 118.155102][ T2989] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 118.441140][ T4217] loop1: detected capacity change from 0 to 512 [ 118.442470][ T4194] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 8 with error 28 [ 118.475119][ T2072] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.491203][ T4194] EXT4-fs (loop2): This should not happen!! Data will be lost [ 118.491203][ T4194] [ 118.544164][ T4217] EXT4-fs (loop1): orphan cleanup on readonly fs [ 118.576293][ T3882] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 118.643283][ T3882] usb 5-1: USB disconnect, device number 5 [ 118.691544][ T4217] EXT4-fs error (device loop1): ext4_find_extent:929: inode #4: comm syz.1.135: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 118.822779][ T4217] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 118.856270][ T2072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.885161][ T4217] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 118.901400][ T2072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.945327][ T2072] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 118.971023][ T2072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.011687][ T4217] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 119.018391][ T4222] loop4: detected capacity change from 0 to 512 [ 119.039906][ T2072] usb 4-1: config 0 descriptor?? [ 119.065146][ T4217] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.391433][ T4224] loop1: detected capacity change from 0 to 512 [ 119.453673][ T4224] EXT4-fs (loop1): invalid first ino: 10 [ 119.488395][ T4227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 119.511385][ T4227] device bridge_slave_1 left promiscuous mode [ 119.521684][ T4227] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.535533][ T4227] device bridge_slave_0 left promiscuous mode [ 119.542064][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.560599][ T4224] loop1: detected capacity change from 0 to 512 [ 119.578656][ T2072] wacom 0003:056A:0029.0002: Unknown device_type for 'HID 056a:0029'. Assuming pen. [ 119.624866][ T4224] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 119.652945][ T2072] wacom 0003:056A:0029.0002: hidraw0: USB HID v0.00 Device [HID 056a:0029] on usb-dummy_hcd.3-1/input0 [ 119.736098][ T2072] input: Wacom Intuos5 S Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0029.0002/input/input6 [ 119.987647][ T2072] usb 4-1: USB disconnect, device number 7 [ 121.139426][ T4235] loop3: detected capacity change from 0 to 128 [ 122.106848][ T4242] loop3: detected capacity change from 0 to 256 [ 122.126385][ T4245] loop0: detected capacity change from 0 to 1024 [ 122.242741][ T4245] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.352372][ T4245] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.415062][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.715533][ T2989] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.735679][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 122.856006][ T7] usb 2-1: config 9 has no interfaces? [ 122.864151][ T7] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 122.975334][ T2989] usb 4-1: Using ep0 maxpacket: 8 [ 123.185758][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.990987][ T4246] udc-core: couldn't find an available UDC or it's busy [ 124.026807][ T4246] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 124.297788][ T4268] input: syz0 as /devices/virtual/input/input9 [ 124.384582][ T4270] loop2: detected capacity change from 0 to 512 [ 124.397373][ T2989] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 124.491985][ T4270] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 124.624693][ T2989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.874937][ T2989] usb 4-1: Product: syz [ 124.879149][ T2989] usb 4-1: Manufacturer: syz [ 124.945192][ T2989] usb 4-1: SerialNumber: syz [ 125.040363][ T2989] usb 4-1: config 0 descriptor?? [ 126.122699][ T7] usb 2-1: string descriptor 0 read error: -71 [ 126.145390][ T2989] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 126.166178][ T7] usb 2-1: USB disconnect, device number 3 [ 126.840843][ T4293] loop0: detected capacity change from 0 to 256 [ 127.059901][ T4295] loop4: detected capacity change from 0 to 2048 [ 127.188826][ T4295] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noinit_itable,init_itable=0x0000000000000080,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,noload,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 128.365174][ T2989] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 128.522060][ T2989] usb 4-1: USB disconnect, device number 8 [ 128.889063][ T4308] input: syz0 as /devices/virtual/input/input10 [ 129.117996][ T4314] loop3: detected capacity change from 0 to 1024 [ 129.129230][ T4307] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 129.388773][ T4314] EXT4-fs (loop3): Test dummy encryption mode enabled [ 129.521239][ T4314] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x000000000000b930,commit=0x0000000000000005,user_xattr,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 129.732852][ T4320] loop2: detected capacity change from 0 to 2048 [ 129.898222][ T4325] loop4: detected capacity change from 0 to 1024 [ 130.381131][ T4320] EXT4-fs (loop2): Ignoring removed orlov option [ 130.580695][ T4320] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,acl,,errors=continue. Quota mode: none. [ 130.703142][ T4325] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.780987][ T4325] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.976904][ T4337] loop2: detected capacity change from 0 to 128 [ 131.016269][ T4336] loop3: detected capacity change from 0 to 2048 [ 131.867925][ T4336] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.020670][ T4344] loop4: detected capacity change from 0 to 256 [ 132.876454][ T4300] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 133.582324][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.589973][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.747589][ T4336] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 450 with error 28 [ 133.787366][ T4336] EXT4-fs (loop3): This should not happen!! Data will be lost [ 133.787366][ T4336] [ 133.831127][ T4336] EXT4-fs (loop3): Total free blocks count 0 [ 133.885210][ T4336] EXT4-fs (loop3): Free/Dirty block details [ 133.903549][ T4336] EXT4-fs (loop3): free_blocks=2415919104 [ 133.981137][ T4336] EXT4-fs (loop3): dirty_blocks=464 [ 133.995117][ T4336] EXT4-fs (loop3): Block reservation details [ 134.060428][ T4336] EXT4-fs (loop3): i_reserved_data_blocks=29 [ 134.368688][ T2072] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.016185][ T4361] loop3: detected capacity change from 0 to 2048 [ 135.032791][ T2072] usb 1-1: Using ep0 maxpacket: 8 [ 136.771347][ T2072] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 136.802380][ T2072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.842177][ T2072] usb 1-1: Product: syz [ 136.849437][ T2072] usb 1-1: Manufacturer: syz [ 136.854699][ T2072] usb 1-1: SerialNumber: syz [ 136.870951][ T2072] usb 1-1: config 0 descriptor?? [ 137.005207][ T2072] usb 1-1: can't set config #0, error -71 [ 137.031017][ T4373] loop1: detected capacity change from 0 to 1024 [ 138.023520][ T4377] xt_hashlimit: size too large, truncated to 1048576 [ 138.082925][ T2072] usb 1-1: USB disconnect, device number 4 [ 139.225190][ T4383] Invalid option length (0) for dns_resolver key [ 140.562001][ T4387] loop4: detected capacity change from 0 to 2048 [ 140.713121][ T4388] hfsplus: extend alloc file! (8192,512,16777719) [ 140.788130][ T4388] Invalid option length (375) for dns_resolver key [ 141.338765][ T9] hfsplus: b-tree write err: -5, ino 8 [ 141.571704][ T4387] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.275351][ T26] audit: type=1800 audit(1863657058.622:7): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.182" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 143.014643][ T4408] loop0: detected capacity change from 0 to 512 [ 143.060491][ T4410] loop2: detected capacity change from 0 to 256 [ 143.156786][ T4408] EXT4-fs (loop0): Ignoring removed bh option [ 143.192990][ T4408] EXT4-fs error (device loop0): __ext4_iget:4872: inode #15: block 1803188595: comm syz.0.181: invalid block [ 143.281531][ T4408] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.181: couldn't read orphan inode 15 (err -117) [ 143.342564][ T4408] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,grpid,,errors=continue. Quota mode: none. [ 143.365012][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 143.468589][ T4413] netlink: 52 bytes leftover after parsing attributes in process `syz.2.185'. [ 143.825456][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 144.305730][ T7] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 144.337848][ T4418] loop2: detected capacity change from 0 to 256 [ 144.495343][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.663497][ T7] usb 5-1: Product: syz [ 144.757583][ T7] usb 5-1: Manufacturer: syz [ 144.855585][ T7] usb 5-1: SerialNumber: syz [ 145.014630][ T7] usb 5-1: config 0 descriptor?? [ 145.086616][ T7] option 5-1:0.0: GSM modem (1-port) converter detected [ 145.343965][ T4403] device bridge_slave_1 left promiscuous mode [ 145.364342][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.407678][ T4403] device bridge_slave_0 left promiscuous mode [ 145.409347][ T4423] loop2: detected capacity change from 0 to 512 [ 145.414130][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.474790][ T4422] loop1: detected capacity change from 0 to 2048 [ 145.679317][ T4423] EXT4-fs (loop2): Invalid want_extra_isize 91 [ 145.986282][ T4427] loop4: detected capacity change from 0 to 512 [ 146.061476][ T2987] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.435270][ T2987] usb 1-1: Using ep0 maxpacket: 8 [ 146.734017][ T4423] loop2: detected capacity change from 0 to 512 [ 146.770698][ T2987] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 146.788916][ T1075] usb 5-1: USB disconnect, device number 6 [ 146.790978][ T2987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.806633][ T1075] option 5-1:0.0: device disconnected [ 146.825579][ T4423] EXT4-fs (loop2): Ignoring removed oldalloc option [ 146.838958][ T2987] usb 1-1: Product: syz [ 146.843211][ T2987] usb 1-1: Manufacturer: syz [ 146.860982][ T2987] usb 1-1: SerialNumber: syz [ 146.861045][ T4433] loop1: detected capacity change from 0 to 1024 [ 146.886570][ T2987] usb 1-1: config 0 descriptor?? [ 146.931681][ T4423] EXT4-fs (loop2): 1 orphan inode deleted [ 147.013569][ T4423] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,nodiscard,noquota,init_itable,oldalloc,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,,errors=continue. Quota mode: writeback. [ 147.103659][ T4433] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 147.634976][ T4433] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 147.646027][ T4423] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.715156][ T2987] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 147.773209][ T4433] jbd2_journal_init_inode: Cannot locate journal superblock [ 148.005085][ T4433] EXT4-fs (loop1): Could not load journal inode [ 148.497625][ T4429] loop3: detected capacity change from 0 to 32768 [ 149.391156][ T4447] loop1: detected capacity change from 0 to 16 [ 149.466367][ T4447] erofs: (device loop1): mounted with root inode @ nid 36. [ 149.681793][ T3865] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 149.696786][ T4451] loop4: detected capacity change from 0 to 2048 [ 149.749535][ T3865] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 150.190783][ T4456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.198'. [ 151.190390][ T2987] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 151.214597][ T4466] trusted_key: encrypted_key: insufficient parameters specified [ 151.219109][ T2987] usb 1-1: USB disconnect, device number 5 [ 153.644811][ T4477] loop2: detected capacity change from 0 to 1024 [ 153.867679][ T26] audit: type=1326 audit(1863657070.262:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4472 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f6f98ff9 code=0x7ffc0000 [ 153.977336][ T4478] loop4: detected capacity change from 0 to 1024 [ 154.125006][ T26] audit: type=1326 audit(1863657070.302:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4472 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3f6f98ff9 code=0x7ffc0000 [ 154.125052][ T26] audit: type=1326 audit(1863657070.302:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4472 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f6f98ff9 code=0x7ffc0000 [ 154.125087][ T26] audit: type=1326 audit(1863657070.302:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4472 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f6f98ff9 code=0x7ffc0000 [ 154.125123][ T26] audit: type=1326 audit(1863657070.302:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4472 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe3f6f98ff9 code=0x7ffc0000 [ 154.152898][ T4477] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.255204][ T26] audit: type=1326 audit(1863657070.492:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4472 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f6f98ff9 code=0x7ffc0000 [ 154.315552][ T26] audit: type=1326 audit(1863657070.492:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4472 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f6f98ff9 code=0x7ffc0000 [ 154.425094][ T26] audit: type=1326 audit(1863657070.642:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4472 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3f6f98ff9 code=0x7ffc0000 [ 154.491216][ T4485] Device name cannot be null; rc = [-22] [ 154.583097][ T26] audit: type=1326 audit(1863657070.652:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4472 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f6f98ff9 code=0x7ffc0000 [ 154.672673][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.722240][ T4487] loop3: detected capacity change from 0 to 2048 [ 154.747715][ T26] audit: type=1326 audit(1863657070.672:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4472 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe3f6f98ff9 code=0x7ffc0000 [ 155.564860][ T4487] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.901644][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.318162][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.341732][ T4501] loop2: detected capacity change from 0 to 2048 [ 156.395253][ T4503] loop4: detected capacity change from 0 to 512 [ 156.480897][ T4501] EXT4-fs (loop2): Ignoring removed bh option [ 156.505425][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.558359][ T4501] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 156.602524][ T4503] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,inode_readahead_blks=0x0000000000020000,minixdf,,errors=continue. Quota mode: writeback. [ 156.674192][ T4503] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.751529][ T4512] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 156.794453][ T4512] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 156.831637][ T4512] EXT4-fs (loop2): This should not happen!! Data will be lost [ 156.831637][ T4512] [ 156.844965][ T4512] EXT4-fs (loop2): Total free blocks count 0 [ 156.853554][ T4512] EXT4-fs (loop2): Free/Dirty block details [ 156.864943][ T4512] EXT4-fs (loop2): free_blocks=2415919104 [ 156.873023][ T4512] EXT4-fs (loop2): dirty_blocks=32 [ 156.884678][ T4512] EXT4-fs (loop2): Block reservation details [ 156.897683][ T4512] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 157.504019][ T4516] loop4: detected capacity change from 0 to 1024 [ 157.531927][ T3619] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 157.580576][ T3619] EXT4-fs (loop2): This should not happen!! Data will be lost [ 157.580576][ T3619] [ 157.583185][ T4490] chnl_net:caif_netlink_parms(): no params data found [ 157.629293][ T4518] loop3: detected capacity change from 0 to 1024 [ 157.726448][ T4516] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.837081][ T4518] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.715293][ T2072] Bluetooth: hci2: command 0x0409 tx timeout [ 158.865076][ T3667] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 158.963479][ T4490] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.991349][ T4490] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.002378][ T4490] device bridge_slave_0 entered promiscuous mode [ 159.013798][ T4490] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.029774][ T4490] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.057896][ T4490] device bridge_slave_1 entered promiscuous mode [ 159.171818][ T4490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.230815][ T4559] loop0: detected capacity change from 0 to 512 [ 159.233037][ T4490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.237618][ T3667] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.304825][ T3667] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 159.354362][ T4562] Zero length message leads to an empty skb [ 159.368822][ T3667] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.385974][ T4559] EXT4-fs (loop0): Ignoring removed orlov option [ 159.392664][ T4559] EXT4-fs (loop0): Test dummy encryption mode enabled [ 159.446277][ T4490] team0: Port device team_slave_0 added [ 159.491715][ T4559] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 159.512972][ T4490] team0: Port device team_slave_1 added [ 159.528448][ T4559] System zones: 1-12 [ 159.568745][ T4559] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.223: casefold flag without casefold feature [ 159.585283][ T3667] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 159.611794][ T3667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.616284][ T4559] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.223: couldn't read orphan inode 15 (err -117) [ 159.640523][ T4559] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback. [ 159.642765][ T3667] usb 4-1: Product: syz [ 159.785795][ T4569] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.223: Directory hole found for htree leaf block 0 [ 159.816295][ T3667] usb 4-1: Manufacturer: syz [ 159.967896][ T3667] usb 4-1: SerialNumber: syz [ 160.023815][ T3667] usb 4-1: config 0 descriptor?? [ 160.056284][ T4518] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 160.144584][ T3667] dm9601: probe of 4-1:0.0 failed with error -22 [ 160.359044][ T4490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.381089][ T4490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.468177][ T7] usb 4-1: USB disconnect, device number 9 [ 160.558254][ T4490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.613688][ T4490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.675535][ T4490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.718053][ T3667] Bluetooth: hci2: command 0x041b tx timeout [ 162.735073][ T4490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.805732][ T4591] capability: warning: `syz.0.232' uses 32-bit capabilities (legacy support in use) [ 162.946161][ T4490] device hsr_slave_0 entered promiscuous mode [ 162.965946][ T4490] device hsr_slave_1 entered promiscuous mode [ 163.011848][ T4490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.031541][ T4490] Cannot create hsr debugfs directory [ 163.118757][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 163.660697][ T4602] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 163.973243][ T154] device hsr_slave_0 left promiscuous mode [ 164.012674][ T4618] loop2: detected capacity change from 0 to 512 [ 164.042728][ T154] device hsr_slave_1 left promiscuous mode [ 164.062480][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.077635][ T4624] loop4: detected capacity change from 0 to 128 [ 164.088398][ T4618] EXT4-fs (loop2): Ignoring removed orlov option [ 164.115046][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.124151][ T4618] EXT4-fs (loop2): Test dummy encryption mode enabled [ 164.124682][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.156824][ T4618] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 164.164975][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.176790][ T4618] System zones: 1-12 [ 164.185401][ T4618] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.237: casefold flag without casefold feature [ 164.215380][ T154] device bridge_slave_1 left promiscuous mode [ 164.225853][ T4624] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.253831][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.392285][ T4624] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.430082][ T4618] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.237: couldn't read orphan inode 15 (err -117) [ 164.573087][ T4618] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback. [ 164.673978][ T154] device bridge_slave_0 left promiscuous mode [ 164.811330][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.855600][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 165.135894][ T154] device veth1_macvtap left promiscuous mode [ 165.137313][ T4634] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.237: Directory hole found for htree leaf block 0 [ 165.142071][ T154] device veth0_macvtap left promiscuous mode [ 165.247435][ T154] device veth1_vlan left promiscuous mode [ 165.260550][ T154] device veth0_vlan left promiscuous mode [ 166.135131][ T2072] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 166.354052][ T4646] loop4: detected capacity change from 0 to 1024 [ 166.568866][ T2072] usb 4-1: Using ep0 maxpacket: 8 [ 167.375631][ T4646] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 167.452121][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 167.529449][ T4657] loop2: detected capacity change from 0 to 1024 [ 167.595413][ T2072] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 167.615971][ T2072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.635852][ T2072] usb 4-1: Product: syz [ 167.665613][ T2072] usb 4-1: Manufacturer: syz [ 167.670265][ T2072] usb 4-1: SerialNumber: syz [ 167.697568][ T2072] usb 4-1: config 0 descriptor?? [ 167.946768][ T154] team0 (unregistering): Port device team_slave_1 removed [ 167.955107][ T2072] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 168.028221][ T154] team0 (unregistering): Port device team_slave_0 removed [ 168.051002][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.298961][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.552823][ T4672] loop2: detected capacity change from 0 to 2048 [ 168.604809][ T154] bond0 (unregistering): Released all slaves [ 168.659409][ T4672] loop2: p3 < > p4 < > [ 168.663872][ T4672] loop2: partition table partially beyond EOD, truncated [ 168.695531][ T4672] loop2: p3 start 4284289 is beyond EOD, truncated [ 168.703159][ T4668] loop0: detected capacity change from 0 to 32768 [ 168.838318][ T4675] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 169.277811][ T4668] XFS (loop0): Mounting V5 Filesystem [ 169.673827][ T4668] XFS (loop0): Ending clean mount [ 169.826606][ T4693] xfs: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 169.956206][ T4696] loop2: detected capacity change from 0 to 256 [ 169.963827][ T3569] XFS (loop0): Unmounting Filesystem [ 169.976475][ T4696] FAT-fs (loop2): Unrecognized mount option "rinnt" or missing value [ 170.502333][ T4699] loop2: detected capacity change from 0 to 16 [ 170.570876][ T4699] erofs: (device loop2): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 170.775323][ T2072] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 170.836581][ T2072] usb 4-1: USB disconnect, device number 10 [ 171.557291][ T3667] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 171.957485][ T4490] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.015774][ T4490] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.066969][ T4490] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.114360][ T4490] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.205761][ T3667] usb 4-1: config 1 has an invalid interface number: 252 but max is 2 [ 172.219427][ T3667] usb 4-1: config 1 has no interface number 0 [ 172.245093][ T3667] usb 4-1: too many endpoints for config 1 interface 252 altsetting 255: 255, using maximum allowed: 30 [ 172.277138][ T3667] usb 4-1: config 1 interface 252 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 172.335012][ T3667] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 32, changing to 4 [ 172.362668][ T4490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.369619][ T3667] usb 4-1: config 1 interface 252 has no altsetting 0 [ 172.407710][ T4490] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.421760][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.445874][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.490726][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.520484][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.545196][ T3667] usb 4-1: New USB device found, idVendor=fb47, idProduct=0060, bcdDevice= 0.8f [ 172.574015][ T3691] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.581472][ T3691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.596503][ T3667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.614644][ T4740] loop0: detected capacity change from 0 to 512 [ 172.626013][ T3667] usb 4-1: Product: syz [ 172.630218][ T3667] usb 4-1: Manufacturer: syz [ 172.642659][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.663193][ T3667] usb 4-1: SerialNumber: syz [ 172.704581][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.736615][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.762489][ T3691] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.769700][ T3691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.782999][ T4740] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,inode_readahead_blks=0x0000000000020000,minixdf,,errors=continue. Quota mode: writeback. [ 172.812004][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.836522][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.873688][ T4740] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.905008][ T21] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.938894][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.245095][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 174.254264][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.265363][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.291936][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.349563][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.377132][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.425137][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.439735][ T4490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.488514][ T3582] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 174.499445][ T3582] CPU: 0 PID: 3582 Comm: kworker/u5:5 Not tainted 5.15.168-syzkaller #0 [ 174.507807][ T3582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.517872][ T3582] Workqueue: hci0 hci_rx_work [ 174.522586][ T3582] Call Trace: [ 174.525867][ T3582] [ 174.528796][ T3582] dump_stack_lvl+0x1e3/0x2d0 [ 174.533478][ T3582] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 174.539203][ T3582] ? panic+0x860/0x860 [ 174.544542][ T3582] ? sysfs_create_dir_ns+0x282/0x390 [ 174.549847][ T3582] sysfs_create_dir_ns+0x2c6/0x390 [ 174.554972][ T3582] ? sysfs_warn_dup+0xa0/0xa0 [ 174.559657][ T3582] ? do_raw_spin_unlock+0x137/0x8b0 [ 174.564862][ T3582] kobject_add_internal+0x6e0/0xe00 [ 174.570074][ T3582] kobject_add+0x14e/0x210 [ 174.574664][ T3582] ? device_add+0x3c2/0xfd0 [ 174.579190][ T3582] ? kobject_init+0x1d0/0x1d0 [ 174.583876][ T3582] ? __raw_spin_lock_init+0x41/0x100 [ 174.589172][ T3582] ? get_device_parent+0x128/0x400 [ 174.594295][ T3582] device_add+0x476/0xfd0 [ 174.598639][ T3582] hci_conn_add_sysfs+0xe4/0x1f0 [ 174.603578][ T3582] le_conn_complete_evt+0xc15/0x1500 [ 174.608870][ T3582] ? cs_le_create_conn+0x5f0/0x5f0 [ 174.614004][ T3582] hci_le_meta_evt+0x28c/0x3f50 [ 174.618969][ T3582] ? __lock_acquire+0x1ff0/0x1ff0 [ 174.624012][ T3582] ? __mutex_lock_common+0x444/0x25a0 [ 174.629485][ T3582] ? hci_remote_host_features_evt+0x280/0x280 [ 174.635559][ T3582] ? __mutex_unlock_slowpath+0x218/0x750 [ 174.641193][ T3582] ? hci_event_packet+0x3b4/0x1550 [ 174.646314][ T3582] ? mutex_unlock+0x10/0x10 [ 174.650818][ T3582] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 174.656799][ T3582] ? print_irqtrace_events+0x210/0x210 [ 174.662259][ T3582] hci_event_packet+0xc41/0x1550 [ 174.667229][ T3582] ? rcu_lock_release+0x20/0x20 [ 174.672092][ T3582] ? hci_send_to_monitor+0x99/0x4d0 [ 174.677306][ T3582] hci_rx_work+0x232/0x990 [ 174.681757][ T3582] process_one_work+0x8a1/0x10c0 [ 174.686881][ T3582] ? worker_detach_from_pool+0x260/0x260 [ 174.692534][ T3582] ? _raw_spin_lock_irqsave+0x120/0x120 [ 174.698082][ T3582] ? kthread_data+0x4e/0xc0 [ 174.702595][ T3582] ? wq_worker_running+0x97/0x170 [ 174.707633][ T3582] worker_thread+0xaca/0x1280 [ 174.712527][ T3582] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 174.718441][ T3582] kthread+0x3f6/0x4f0 [ 174.722857][ T3582] ? rcu_lock_release+0x20/0x20 [ 174.727741][ T3582] ? kthread_blkcg+0xd0/0xd0 [ 174.732600][ T3582] ret_from_fork+0x1f/0x30 [ 174.737061][ T3582] [ 174.741670][ T3582] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 174.755193][ T3582] Bluetooth: hci0: failed to register connection device [ 174.771164][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 174.771178][ T26] audit: type=1326 audit(1863657091.162:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f25251ff9 code=0x0 [ 174.801803][ T21] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 174.816840][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.830826][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.843170][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.868623][ T21] usb 5-1: Product: syz [ 174.886184][ T21] usb 5-1: Manufacturer: syz [ 174.907378][ T21] usb 5-1: SerialNumber: syz [ 174.953226][ T21] usb 5-1: config 0 descriptor?? [ 175.269026][ T4490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.305319][ T3615] usb 4-1: USB disconnect, device number 11 [ 175.315273][ T21] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 175.333981][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.354239][ T4571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.385791][ T4790] loop3: detected capacity change from 0 to 128 [ 175.405002][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.413735][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.039138][ T4490] device veth0_vlan entered promiscuous mode [ 176.101525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.120469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.160536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.204675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.215202][ T3667] Bluetooth: hci3: command 0x0406 tx timeout [ 176.221781][ T3667] Bluetooth: hci4: command 0x0406 tx timeout [ 176.285588][ T3667] Bluetooth: hci0: command 0x0406 tx timeout [ 176.332355][ T4490] device veth1_vlan entered promiscuous mode [ 176.474000][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.502622][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.543876][ T4490] device veth0_macvtap entered promiscuous mode [ 177.101630][ T4490] device veth1_macvtap entered promiscuous mode [ 177.139437][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.196881][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.276926][ T4490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.288777][ T4818] loop3: detected capacity change from 0 to 512 [ 177.321826][ T4490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.352541][ T4490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.384005][ T4490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.404809][ T4490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.464995][ T4490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.494785][ T4490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.533236][ T4490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.843497][ T4490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.888698][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.100214][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.115342][ T21] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 178.133175][ T21] usb 5-1: USB disconnect, device number 7 [ 178.150381][ T4490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.162324][ T4490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.172432][ T4490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.186921][ T4818] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,inode_readahead_blks=0x0000000000020000,minixdf,,errors=continue. Quota mode: writeback. [ 178.246116][ T4490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.246333][ T4818] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.336570][ T4490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.366613][ T4842] loop0: detected capacity change from 0 to 1024 [ 178.373989][ T4490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.393103][ T4490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.414188][ T4490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.436852][ T4490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.449274][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.481287][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.638653][ T4852] loop4: detected capacity change from 0 to 1024 [ 178.839880][ T4852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.110825][ T4490] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.157658][ T4842] hfsplus: extend alloc file! (8192,65536,366) [ 179.185996][ T4490] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.235520][ T4490] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.259013][ T4490] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.186229][ T3691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.198434][ T4842] kvm: pic: non byte write [ 180.241747][ T4872] loop3: detected capacity change from 0 to 256 [ 180.253343][ T3691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.341082][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 180.368297][ T3881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.415398][ T4872] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 180.440208][ T3881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.557379][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.784647][ T4886] loop1: detected capacity change from 0 to 256 [ 180.835209][ T4872] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 181.014661][ T4863] loop4: detected capacity change from 0 to 160 [ 181.175183][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 181.202045][ T4891] loop2: detected capacity change from 0 to 128 [ 181.827779][ T3612] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 182.007601][ T4904] loop3: detected capacity change from 0 to 512 [ 182.149065][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 182.315056][ T3612] usb 1-1: Using ep0 maxpacket: 8 [ 182.665532][ T3612] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 182.712511][ T3612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.724179][ T4904] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,inode_readahead_blks=0x0000000000020000,minixdf,,errors=continue. Quota mode: writeback. [ 182.751827][ T4904] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.760362][ T3612] usb 1-1: Product: syz [ 182.767321][ T3612] usb 1-1: Manufacturer: syz [ 182.772311][ T3612] usb 1-1: SerialNumber: syz [ 182.785716][ T3612] usb 1-1: config 0 descriptor?? [ 183.047052][ T3612] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 183.114283][ T4932] loop3: detected capacity change from 0 to 1024 [ 183.809978][ T4936] hfsplus: xattr searching failed [ 183.941381][ T4934] loop1: detected capacity change from 0 to 8192 [ 184.091467][ T4941] loop3: detected capacity change from 0 to 512 [ 184.121563][ T26] audit: type=1800 audit(1863657100.512:21): pid=4942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.298" name="bus" dev="loop1" ino=1048628 res=0 errno=0 [ 184.385925][ T4941] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 184.394253][ T4924] loop4: detected capacity change from 0 to 32768 [ 184.411209][ T4941] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.077232][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 186.125479][ T3612] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 186.165527][ T3612] usb 1-1: USB disconnect, device number 6 [ 186.217208][ T4961] loop0: detected capacity change from 0 to 512 [ 187.589190][ T26] audit: type=1326 audit(1863657102.972:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4958 comm="syz.1.306" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93a742dff9 code=0x0 [ 187.810649][ T4961] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,inode_readahead_blks=0x0000000000020000,minixdf,,errors=continue. Quota mode: writeback. [ 187.839832][ T4961] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.140374][ T3667] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 188.405069][ T3667] usb 5-1: Using ep0 maxpacket: 8 [ 188.547571][ T26] audit: type=1326 audit(1863657104.942:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf59f9fff9 code=0x7ffc0000 [ 188.635183][ T26] audit: type=1326 audit(1863657104.942:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbf59f9fff9 code=0x7ffc0000 [ 188.691058][ T26] audit: type=1326 audit(1863657104.942:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbf59fa0033 code=0x7ffc0000 [ 188.714584][ T3667] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 188.754062][ T3667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.772003][ T3667] usb 5-1: Product: syz [ 188.785057][ T3667] usb 5-1: Manufacturer: syz [ 188.798156][ T3667] usb 5-1: SerialNumber: syz [ 188.824613][ T26] audit: type=1326 audit(1863657105.062:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbf59f9eadf code=0x7ffc0000 [ 188.872440][ T3667] usb 5-1: config 0 descriptor?? [ 189.114251][ T26] audit: type=1326 audit(1863657105.502:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbf59fa0087 code=0x7ffc0000 [ 189.218667][ T26] audit: type=1326 audit(1863657105.612:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf59f9e990 code=0x7ffc0000 [ 189.248041][ T4975] loop2: detected capacity change from 0 to 8192 [ 189.285064][ T3667] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 189.611876][ T26] audit: type=1326 audit(1863657105.632:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf59f9fbfb code=0x7ffc0000 [ 189.637243][ T4975] loop2: p1 p2 p3 p4 [ 189.648619][ T4975] loop2: p1 start 17760256 is beyond EOD, truncated [ 189.663846][ T4975] loop2: p2 size 64053 extends beyond EOD, truncated [ 189.699976][ T4975] loop2: p3 start 458496 is beyond EOD, truncated [ 189.710975][ T4975] loop2: p4 size 50331648 extends beyond EOD, truncated [ 189.733458][ T26] audit: type=1326 audit(1863657105.652:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbf59f9ec8a code=0x7ffc0000 [ 189.802307][ T26] audit: type=1326 audit(1863657105.652:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf59f9fbfb code=0x7ffc0000 [ 189.840222][ T26] audit: type=1326 audit(1863657105.652:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf59f9fbfb code=0x7ffc0000 [ 190.073193][ T26] audit: type=1326 audit(1863657106.462:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.2.313" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf59f9fff9 code=0x0 [ 190.115214][ T3667] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 190.149694][ T4992] loop0: detected capacity change from 0 to 1024 [ 190.208062][ T3815] udevd[3815]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 190.208619][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 190.251992][ T4992] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,barrier,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 190.396904][ T3615] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 190.455317][ T26] audit: type=1326 audit(1863657106.852:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f25251ff9 code=0x7ffc0000 [ 190.508660][ T26] audit: type=1326 audit(1863657106.852:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9f25251ff9 code=0x7ffc0000 [ 190.510477][ T5002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 190.548035][ T26] audit: type=1326 audit(1863657106.852:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f25251ff9 code=0x7ffc0000 [ 190.572742][ T26] audit: type=1326 audit(1863657106.852:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f25251ff9 code=0x7ffc0000 [ 190.626388][ T5006] loop0: detected capacity change from 0 to 512 [ 190.638660][ T5004] loop1: detected capacity change from 0 to 512 [ 190.655317][ T3615] usb 4-1: Using ep0 maxpacket: 8 [ 190.928567][ T5006] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,inode_readahead_blks=0x0000000000020000,minixdf,,errors=continue. Quota mode: writeback. [ 190.945418][ T5006] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.469086][ T3612] usb 5-1: USB disconnect, device number 8 [ 191.662295][ T3615] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 191.678943][ T3615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.696526][ T3615] usb 4-1: Product: syz [ 191.730500][ T3615] usb 4-1: Manufacturer: syz [ 191.771086][ T3615] usb 4-1: SerialNumber: syz [ 192.771914][ T3615] usb 4-1: config 0 descriptor?? [ 193.236067][ T5020] loop0: detected capacity change from 0 to 512 [ 193.245092][ T3615] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 193.254675][ T3615] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 193.290923][ T5020] EXT4-fs (loop0): Ignoring removed oldalloc option [ 193.446686][ T3615] usb 4-1: USB disconnect, device number 12 [ 193.568491][ T5020] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.319: Parent and EA inode have the same ino 15 [ 193.885359][ T5020] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.319: Parent and EA inode have the same ino 15 [ 194.267120][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.280800][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.817347][ T5020] EXT4-fs (loop0): 1 orphan inode deleted [ 194.823214][ T5020] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 194.980914][ T5040] loop4: detected capacity change from 0 to 512 [ 195.105923][ T5040] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 196.796797][ T5050] loop1: detected capacity change from 0 to 512 [ 196.819269][ T5040] EXT4-fs (loop4): 1 truncate cleaned up [ 196.829417][ T5040] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,i_version,quota,,errors=continue. Quota mode: writeback. [ 196.869411][ T5050] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,inode_readahead_blks=0x0000000000020000,minixdf,,errors=continue. Quota mode: writeback. [ 196.889364][ T5050] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.178281][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 197.354783][ T5060] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 197.415340][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 197.573066][ T5064] loop0: detected capacity change from 0 to 1024 [ 197.674990][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 198.245323][ T13] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 198.273901][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.308571][ T13] usb 2-1: Product: syz [ 198.322968][ T13] usb 2-1: Manufacturer: syz [ 198.339995][ T13] usb 2-1: SerialNumber: syz [ 198.372768][ T13] usb 2-1: config 0 descriptor?? [ 198.645104][ T2989] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 198.645132][ T13] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 198.665785][ T5075] loop3: detected capacity change from 0 to 1024 [ 199.019298][ T2989] usb 3-1: Using ep0 maxpacket: 8 [ 199.415885][ T2989] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 199.455125][ T2989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.625262][ T13] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 199.637838][ T2989] usb 3-1: Product: syz [ 199.642474][ T2989] usb 3-1: Manufacturer: syz [ 199.647252][ T2989] usb 3-1: SerialNumber: syz [ 199.665904][ T2989] usb 3-1: config 0 descriptor?? [ 199.702575][ T5084] xt_bpf: check failed: parse error [ 199.891636][ T5088] loop3: detected capacity change from 0 to 1024 [ 199.926613][ T2989] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 200.058395][ T5088] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 200.083953][ T5088] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 200.115106][ T5088] EXT4-fs (loop3): invalid journal inode [ 201.575471][ T3615] usb 2-1: USB disconnect, device number 4 [ 201.618562][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 201.629747][ T5105] loop4: detected capacity change from 0 to 512 [ 201.872237][ T5105] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,inode_readahead_blks=0x0000000000020000,minixdf,,errors=continue. Quota mode: writeback. [ 201.955119][ T5115] loop3: detected capacity change from 0 to 256 [ 201.965068][ T5105] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.051581][ T5115] exfat: Deprecated parameter 'namecase' [ 202.074985][ T5115] exfat: Deprecated parameter 'namecase' [ 202.142744][ T5115] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 202.423304][ T5120] loop4: detected capacity change from 0 to 128 [ 202.841296][ T5123] loop0: detected capacity change from 0 to 1024 [ 203.103905][ T2989] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 203.117509][ T2989] usb 3-1: USB disconnect, device number 7 [ 203.148246][ T5128] loop2: detected capacity change from 0 to 512 [ 203.706333][ T5128] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 203.805095][ T3574] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 203.912968][ T5140] loop1: detected capacity change from 0 to 1024 [ 206.162370][ T5157] loop0: detected capacity change from 0 to 512 [ 206.547735][ T3574] usb 5-1: Using ep0 maxpacket: 32 [ 206.558206][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 206.897058][ T3574] usb 5-1: device descriptor read/all, error -71 [ 206.945876][ T5157] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,inode_readahead_blks=0x0000000000020000,minixdf,,errors=continue. Quota mode: writeback. [ 207.004269][ T5169] xt_hashlimit: size too large, truncated to 1048576 [ 207.500652][ T5157] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.761481][ T5176] loop3: detected capacity change from 0 to 1024 [ 208.062577][ T5183] device bridge0 entered promiscuous mode [ 208.654375][ T5187] loop2: detected capacity change from 0 to 512 [ 210.732512][ T5207] loop1: detected capacity change from 0 to 512 [ 210.767608][ T5187] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 210.865118][ T3882] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 211.115108][ T3882] usb 1-1: Using ep0 maxpacket: 8 [ 211.516203][ T3882] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 211.525678][ T3882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.534000][ T3882] usb 1-1: Product: syz [ 211.539586][ T3882] usb 1-1: Manufacturer: syz [ 211.545272][ T3882] usb 1-1: SerialNumber: syz [ 211.551828][ T3882] usb 1-1: config 0 descriptor?? [ 212.318309][ T5207] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,inode_readahead_blks=0x0000000000020000,minixdf,,errors=continue. Quota mode: writeback. [ 212.345182][ T5207] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.440516][ T5218] loop2: detected capacity change from 0 to 1024 [ 212.527503][ T3882] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 213.000966][ T5224] hfsplus: xattr searching failed [ 213.031706][ T5224] hfsplus: xattr searching failed [ 213.043758][ T5224] attempt to access beyond end of device [ 213.043758][ T5224] loop2: rw=0, want=5780, limit=1024 [ 213.658270][ T5223] loop1: detected capacity change from 0 to 512 [ 213.755606][ T3882] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 213.925335][ T5223] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 214.591183][ T5223] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.755340][ T3615] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 214.986657][ T21] usb 1-1: USB disconnect, device number 7 [ 215.035348][ T3615] usb 5-1: Using ep0 maxpacket: 8 [ 215.075128][ T5223] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 215.369775][ T5223] netlink: 'syz.1.374': attribute type 12 has an invalid length. [ 215.425343][ T3615] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 215.456544][ T3615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.464601][ T3615] usb 5-1: Product: syz [ 215.510597][ T3615] usb 5-1: Manufacturer: syz [ 215.525880][ T3615] usb 5-1: SerialNumber: syz [ 215.541534][ T3615] usb 5-1: config 0 descriptor?? [ 215.805138][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 215.825476][ T3615] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 216.014236][ T5253] loop1: detected capacity change from 0 to 512 [ 216.095446][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 216.385841][ T21] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 216.409460][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.565412][ T3615] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 216.620168][ T21] usb 3-1: Product: syz [ 216.700866][ T21] usb 3-1: Manufacturer: syz [ 216.811660][ T21] usb 3-1: SerialNumber: syz [ 216.896083][ T21] usb 3-1: config 0 descriptor?? [ 216.910860][ T5253] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 217.155052][ T3615] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 217.722837][ T21] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 218.503840][ T2989] usb 5-1: USB disconnect, device number 11 [ 218.553235][ T5273] loop3: detected capacity change from 0 to 512 [ 218.705779][ T3615] usb 1-1: Using ep0 maxpacket: 8 [ 218.739945][ T5273] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 218.759872][ T5273] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.883297][ T5280] loop1: detected capacity change from 0 to 16 [ 219.030675][ T5280] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 219.042016][ T3615] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 219.053799][ T3615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.066819][ T3615] usb 1-1: Product: syz [ 219.071015][ T3615] usb 1-1: Manufacturer: syz [ 219.080021][ T2989] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 219.090512][ T3615] usb 1-1: SerialNumber: syz [ 219.101829][ T3615] usb 1-1: config 0 descriptor?? [ 220.288583][ T3615] usb 1-1: can't set config #0, error -71 [ 220.416040][ T3615] usb 1-1: USB disconnect, device number 8 [ 220.575147][ T2989] usb 5-1: Using ep0 maxpacket: 8 [ 220.656889][ T21] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 220.694509][ T21] usb 3-1: USB disconnect, device number 8 [ 220.776113][ T5280] loop1: detected capacity change from 0 to 256 [ 220.956130][ T5280] exfat: Unknown parameter 'X?_h ' [ 220.979746][ T5290] loop2: detected capacity change from 0 to 128 [ 221.015129][ T2989] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 221.024393][ T2989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.062157][ T2989] usb 5-1: Product: syz [ 221.085957][ T2989] usb 5-1: Manufacturer: syz [ 221.207461][ T2989] usb 5-1: SerialNumber: syz [ 221.215984][ T2989] usb 5-1: config 0 descriptor?? [ 221.330407][ T2989] option 5-1:0.0: GSM modem (1-port) converter detected [ 221.433965][ T5290] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.455177][ T5290] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 221.491101][ T13] usb 5-1: USB disconnect, device number 12 [ 221.508199][ T13] option 5-1:0.0: device disconnected [ 222.125755][ T5310] loop2: detected capacity change from 0 to 1024 [ 222.823728][ T5310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.929953][ T5312] loop4: detected capacity change from 0 to 512 [ 223.238080][ T5319] loop0: detected capacity change from 0 to 1024 [ 223.325487][ T2987] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 223.516011][ T5319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.775337][ T2987] usb 4-1: Using ep0 maxpacket: 8 [ 223.925864][ T5323] 9pnet: Insufficient options for proto=fd [ 223.982887][ T5312] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 224.034613][ T5325] loop0: detected capacity change from 0 to 16 [ 224.041322][ T5321] loop2: detected capacity change from 0 to 2048 [ 224.074004][ T5325] erofs: (device loop0): mounted with root inode @ nid 36. [ 224.128851][ T2987] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 224.521613][ T5328] loop1: detected capacity change from 0 to 256 [ 224.530227][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 224.530243][ T26] audit: type=1326 audit(1863657140.912:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a742dff9 code=0x7ffc0000 [ 224.563378][ T26] audit: type=1326 audit(1863657140.912:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f93a742dff9 code=0x7ffc0000 [ 224.589140][ T26] audit: type=1326 audit(1863657140.912:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f93a742e033 code=0x7ffc0000 [ 224.616690][ T26] audit: type=1326 audit(1863657140.912:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f93a742cadf code=0x7ffc0000 [ 224.642156][ T26] audit: type=1326 audit(1863657140.912:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f93a742e087 code=0x7ffc0000 [ 224.668777][ T26] audit: type=1326 audit(1863657140.912:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93a742c990 code=0x7ffc0000 [ 224.694487][ T26] audit: type=1326 audit(1863657140.912:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93a742dbfb code=0x7ffc0000 [ 224.720668][ T26] audit: type=1326 audit(1863657140.922:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f93a742cc8a code=0x7ffc0000 [ 224.748738][ T26] audit: type=1326 audit(1863657140.922:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f93a742cc8a code=0x7ffc0000 [ 224.960748][ T2987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.968888][ T2987] usb 4-1: Product: syz [ 224.973070][ T2987] usb 4-1: Manufacturer: syz [ 224.977718][ T2987] usb 4-1: SerialNumber: syz [ 224.991454][ T2987] usb 4-1: config 0 descriptor?? [ 225.004996][ T26] audit: type=1326 audit(1863657141.392:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f93a742c897 code=0x7ffc0000 [ 225.037009][ T5328] FAT-fs (loop1): Unrecognized mount option "D+#)W/7qEeƺj {c׺Q?ٕN}5|+c\54?o[+]wXq.Γbp{'A!&M_/.]S]~P_<{E[" or missing value [ 225.081153][ T5321] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 225.117831][ T5321] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.399: bg 0: block 234: padding at end of block bitmap is not set [ 225.175101][ T5321] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 117 [ 225.233209][ T5321] EXT4-fs (loop2): This should not happen!! Data will be lost [ 225.233209][ T5321] [ 225.255180][ T2987] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 225.891039][ T5341] loop4: detected capacity change from 0 to 764 [ 225.997047][ T5345] loop2: detected capacity change from 0 to 512 [ 226.005138][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 226.012718][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 226.025385][ T2987] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 226.062553][ T5345] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 226.084366][ T5345] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.455037][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 226.530120][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 226.795288][ T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 226.812189][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.821104][ T13] usb 2-1: New USB device found, idVendor=0e8d, idProduct=0003, bcdDevice=b2.0b [ 226.837145][ T7] usb 1-1: Product: syz [ 226.841660][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.854172][ T7] usb 1-1: Manufacturer: syz [ 226.862907][ T7] usb 1-1: SerialNumber: syz [ 226.871483][ T13] usb 2-1: Product: syz [ 226.879422][ T13] usb 2-1: Manufacturer: syz [ 226.884043][ T13] usb 2-1: SerialNumber: syz [ 226.896408][ T7] usb 1-1: config 0 descriptor?? [ 226.916145][ T13] usb 2-1: config 0 descriptor?? [ 226.957490][ T13] option 2-1:0.0: GSM modem (1-port) converter detected [ 227.038733][ T2989] usb 4-1: USB disconnect, device number 14 [ 227.333117][ T3615] usb 2-1: USB disconnect, device number 5 [ 227.347638][ T3615] option 2-1:0.0: device disconnected [ 227.660384][ T7] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 227.738217][ T13] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 228.177311][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 228.345344][ T5376] loop2: detected capacity change from 0 to 256 [ 228.353193][ T5380] loop3: detected capacity change from 0 to 512 [ 228.483596][ T5380] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 228.565214][ T13] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 228.584657][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.776007][ T13] usb 5-1: Product: syz [ 228.780775][ T13] usb 5-1: Manufacturer: syz [ 228.787557][ T13] usb 5-1: SerialNumber: syz [ 228.804718][ T13] usb 5-1: config 0 descriptor?? [ 229.157772][ T13] option 5-1:0.0: GSM modem (1-port) converter detected [ 229.204421][ T13] usb 5-1: USB disconnect, device number 13 [ 229.244477][ T13] option 5-1:0.0: device disconnected [ 229.663354][ T5399] loop1: detected capacity change from 0 to 1024 [ 230.647019][ T5399] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.695948][ T7] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 230.696624][ T3882] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 231.383481][ T7] usb 1-1: USB disconnect, device number 9 [ 231.384142][ T5407] loop3: detected capacity change from 0 to 16 [ 231.887195][ T5407] erofs: (device loop3): mounted with root inode @ nid 36. [ 232.057094][ T3584] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 232.085102][ T3584] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 232.174957][ T3882] usb 3-1: Using ep0 maxpacket: 8 [ 232.255095][ T2987] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 232.455033][ T2987] usb 2-1: device descriptor read/64, error -71 [ 232.479038][ T5424] loop2: detected capacity change from 0 to 512 [ 232.510698][ T3882] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 232.530429][ T3882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.561239][ T3882] usb 3-1: Product: syz [ 232.598200][ T3882] usb 3-1: config 0 descriptor?? [ 232.635164][ T3662] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.656110][ T3882] usb 3-1: can't set config #0, error -71 [ 232.700327][ T3882] usb 3-1: USB disconnect, device number 9 [ 232.735101][ T2987] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 232.750647][ T5424] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 232.790887][ T3662] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.042224][ T3662] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.121442][ T5444] loop4: detected capacity change from 0 to 512 [ 233.140342][ T2987] usb 2-1: device descriptor read/64, error -71 [ 233.527165][ T2987] usb usb2-port1: attempt power cycle [ 233.634403][ T5454] loop0: detected capacity change from 0 to 16 [ 233.789980][ T3662] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.800674][ T5454] erofs: (device loop0): mounted with root inode @ nid 36. [ 233.838791][ T5444] EXT4-fs (loop4): Ignoring removed bh option [ 233.903215][ T5441] chnl_net:caif_netlink_parms(): no params data found [ 233.936205][ T2987] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 233.970273][ T5444] EXT4-fs error (device loop4): __ext4_iget:4872: inode #15: block 1803188595: comm syz.4.438: invalid block [ 234.025280][ T2987] usb 2-1: device descriptor read/8, error -71 [ 234.025802][ T5444] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.438: couldn't read orphan inode 15 (err -117) [ 234.044775][ T3569] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 234.053557][ T3569] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 234.056661][ T5444] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 234.085330][ T3615] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 234.149567][ T5444] EXT4-fs error (device loop4): __ext4_iget:4872: inode #15: block 1803188595: comm syz.4.438: invalid block [ 234.295632][ T2987] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 234.335306][ T5441] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.343405][ T5441] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.345146][ T3615] usb 3-1: Using ep0 maxpacket: 8 [ 234.352854][ T5441] device bridge_slave_0 entered promiscuous mode [ 234.372387][ T5441] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.381434][ T5441] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.391254][ T5441] device bridge_slave_1 entered promiscuous mode [ 234.395494][ T2987] usb 2-1: device descriptor read/8, error -71 [ 234.526372][ T2987] usb usb2-port1: unable to enumerate USB device [ 234.539427][ T5441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.598757][ T5441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.655316][ T3615] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 234.670312][ T3615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.712943][ T3615] usb 3-1: Product: syz [ 234.730624][ T3615] usb 3-1: Manufacturer: syz [ 234.753441][ T3615] usb 3-1: SerialNumber: syz [ 234.797156][ T3615] usb 3-1: config 0 descriptor?? [ 234.869321][ T5441] team0: Port device team_slave_0 added [ 234.909580][ T5441] team0: Port device team_slave_1 added [ 235.045164][ T3615] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 235.132154][ T5441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.146289][ T5441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.230839][ T5441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.311287][ T5441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.348301][ T5441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.376738][ T5441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.495017][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 235.544525][ T5441] device hsr_slave_0 entered promiscuous mode [ 235.596251][ T5441] device hsr_slave_1 entered promiscuous mode [ 235.634005][ T5441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.645205][ T21] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 235.651594][ T5441] Cannot create hsr debugfs directory [ 235.951104][ T3662] device hsr_slave_0 left promiscuous mode [ 235.961627][ T3662] device hsr_slave_1 left promiscuous mode [ 235.969104][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.977214][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.985652][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.993358][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.006544][ T21] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 236.032892][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.055948][ T21] usb 2-1: config 0 descriptor?? [ 236.061679][ T3662] device bridge_slave_1 left promiscuous mode [ 236.066277][ T5501] loop4: detected capacity change from 0 to 512 [ 236.080132][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.102671][ T3662] device bridge_slave_0 left promiscuous mode [ 236.117973][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.136568][ T3662] device veth1_macvtap left promiscuous mode [ 236.141706][ T5501] EXT4-fs (loop4): Ignoring removed oldalloc option [ 236.146836][ T3662] device veth0_macvtap left promiscuous mode [ 236.177927][ T3662] device veth1_vlan left promiscuous mode [ 236.183778][ T3662] device veth0_vlan left promiscuous mode [ 236.213438][ T5501] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.447: Parent and EA inode have the same ino 15 [ 236.251327][ T5501] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.447: Parent and EA inode have the same ino 15 [ 236.271428][ T5501] EXT4-fs (loop4): 1 orphan inode deleted [ 236.278946][ T5501] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 237.107843][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 237.121065][ T3662] team0 (unregistering): Port device team_slave_0 removed [ 237.136843][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.154458][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.235351][ T3662] bond0 (unregistering): Released all slaves [ 237.325142][ T3615] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 237.335861][ T2987] Bluetooth: hci0: command 0x0409 tx timeout [ 237.345056][ T3616] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 237.358162][ T3615] usb 3-1: USB disconnect, device number 10 [ 237.476181][ T5486] chnl_net:caif_netlink_parms(): no params data found [ 237.576275][ T3621] Bluetooth: hci4: command 0x041b tx timeout [ 237.672584][ T5486] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.680496][ T5486] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.691973][ T5486] device bridge_slave_0 entered promiscuous mode [ 237.725160][ T3616] usb 5-1: New USB device found, idVendor=0403, idProduct=0000, bcdDevice= 4.00 [ 237.734821][ T3616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.783305][ T3616] usb 5-1: config 0 descriptor?? [ 237.800661][ T5486] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.822364][ T5486] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.836454][ T3616] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 237.841578][ T5486] device bridge_slave_1 entered promiscuous mode [ 237.875712][ T3616] usb 5-1: Detected FT232BM [ 237.876556][ T5534] loop2: detected capacity change from 0 to 512 [ 237.885285][ T21] pegasus 2-1:0.0: can't reset MAC [ 237.891765][ T21] pegasus: probe of 2-1:0.0 failed with error -5 [ 237.962722][ T21] usb 2-1: USB disconnect, device number 10 [ 237.993554][ T5486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.058903][ T5486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.166563][ T5539] netlink: 'syz.4.449': attribute type 1 has an invalid length. [ 238.174532][ T5539] netlink: 'syz.4.449': attribute type 2 has an invalid length. [ 238.306692][ T5534] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 238.673290][ T5486] team0: Port device team_slave_0 added [ 238.929729][ T5486] team0: Port device team_slave_1 added [ 239.228360][ T5544] loop1: detected capacity change from 0 to 16 [ 239.282484][ T5441] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 239.317235][ T5544] erofs: (device loop1): mounted with root inode @ nid 36. [ 239.388172][ T5486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.415015][ T3615] Bluetooth: hci0: command 0x041b tx timeout [ 239.421595][ T5486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.555026][ T5486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.649022][ T5486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.659821][ T4490] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 239.678375][ T5486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.726454][ T4490] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 239.789001][ T5486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.886062][ T2987] Bluetooth: hci4: command 0x040f tx timeout [ 239.952361][ T5441] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.030880][ T5486] device hsr_slave_0 entered promiscuous mode [ 240.046117][ T5486] device hsr_slave_1 entered promiscuous mode [ 240.054416][ T5441] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.115162][ T3616] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 240.135115][ T3616] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 240.151000][ T3616] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 240.162627][ T5550] EXT4-fs (sda1): shut down requested (2) [ 240.171018][ T5550] Aborting journal on device sda1-8. [ 240.193089][ T3616] usb 5-1: USB disconnect, device number 14 [ 240.212194][ T5441] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 240.225375][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 240.263681][ T3616] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 240.287548][ T3616] ftdi_sio 5-1:0.0: device disconnected SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 240.577321][ T5554] loop4: detected capacity change from 0 to 160 [ 240.586590][ T7] usb 3-1: device descriptor read/64, error -71 [ 240.594819][ T5486] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.807075][ T5486] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.894954][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 240.991289][ T5486] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.150023][ T5486] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.525088][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 241.851556][ T3662] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.902938][ T3662] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.962179][ T3662] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.038361][ T3662] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.152804][ T3662] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.221517][ T3662] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.273049][ T3662] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.321094][ T3662] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.473602][ T3662] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.527846][ T3662] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.578440][ T3662] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.644722][ T3662] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.397324][ T3662] device hsr_slave_0 left promiscuous mode [ 244.404083][ T3662] device hsr_slave_1 left promiscuous mode [ 244.412537][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.420551][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.432357][ T3662] device bridge_slave_1 left promiscuous mode [ 244.439664][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.448675][ T3662] device bridge_slave_0 left promiscuous mode [ 244.455367][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.467658][ T3662] device hsr_slave_0 left promiscuous mode [ 244.473987][ T3662] device hsr_slave_1 left promiscuous mode [ 244.480708][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.488341][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.496367][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.503794][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.513424][ T3662] device bridge_slave_1 left promiscuous mode [ 244.519743][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.530304][ T3662] device bridge_slave_0 left promiscuous mode [ 244.537229][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.558525][ T3662] device hsr_slave_0 left promiscuous mode [ 244.565061][ T3662] device hsr_slave_1 left promiscuous mode [ 244.571684][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.579961][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.588751][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.596345][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.607146][ T3662] device hsr_slave_0 left promiscuous mode [ 244.613459][ T3662] device hsr_slave_1 left promiscuous mode [ 244.621204][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.628789][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.636810][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.644348][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.652897][ T3662] device bridge_slave_1 left promiscuous mode [ 244.659972][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.668987][ T3662] device bridge_slave_0 left promiscuous mode [ 244.675710][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.690855][ T3662] device hsr_slave_0 left promiscuous mode [ 244.697276][ T3662] device hsr_slave_1 left promiscuous mode [ 244.703670][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.711349][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.719539][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.728016][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.752774][ T3662] device veth1_macvtap left promiscuous mode [ 244.759153][ T3662] device veth0_macvtap left promiscuous mode [ 244.766804][ T3662] device veth1_vlan left promiscuous mode [ 244.772612][ T3662] device veth0_vlan left promiscuous mode [ 244.779983][ T3662] device veth1_macvtap left promiscuous mode [ 244.786124][ T3662] device veth0_macvtap left promiscuous mode [ 244.792222][ T3662] device veth1_vlan left promiscuous mode [ 244.798826][ T3662] device veth0_vlan left promiscuous mode [ 244.807654][ T3662] device veth1_macvtap left promiscuous mode [ 244.813711][ T3662] device veth0_macvtap left promiscuous mode [ 244.820196][ T3662] device veth1_vlan left promiscuous mode [ 244.827027][ T3662] device veth0_vlan left promiscuous mode [ 244.833873][ T3662] device veth1_macvtap left promiscuous mode [ 244.841255][ T3662] device veth0_macvtap left promiscuous mode [ 244.848450][ T3662] device veth1_vlan left promiscuous mode [ 244.854258][ T3662] device veth0_vlan left promiscuous mode [ 245.394506][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 245.410143][ T3662] team0 (unregistering): Port device team_slave_0 removed [ 245.422175][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.440476][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.502991][ T3662] bond0 (unregistering): Released all slaves [ 245.658612][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 245.673444][ T3662] team0 (unregistering): Port device team_slave_0 removed [ 245.686992][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.705658][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.786831][ T3662] bond0 (unregistering): Released all slaves [ 245.896587][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 245.916072][ T3662] team0 (unregistering): Port device team_slave_0 removed [ 245.932602][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.949731][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.017636][ T3662] bond0 (unregistering): Released all slaves [ 246.112172][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 246.134320][ T3662] team0 (unregistering): Port device team_slave_0 removed [ 246.148246][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.168174][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.239047][ T3662] bond0 (unregistering): Released all slaves [ 246.431915][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 246.449052][ T3662] team0 (unregistering): Port device team_slave_0 removed [ 246.464209][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.479570][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.548728][ T3662] bond0 (unregistering): Released all slaves [ 249.298247][ T3662] device hsr_slave_0 left promiscuous mode [ 249.304531][ T3662] device hsr_slave_1 left promiscuous mode [ 249.311399][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.319064][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.326870][ T3662] device bridge_slave_1 left promiscuous mode [ 249.333043][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.341566][ T3662] device bridge_slave_0 left promiscuous mode [ 249.347838][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.426181][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 249.441522][ T3662] team0 (unregistering): Port device team_slave_0 removed [ 249.456117][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.470354][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.530903][ T3662] bond0 (unregistering): Released all slaves