last executing test programs: 1m48.664732645s ago: executing program 0 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 1m48.429449615s ago: executing program 0 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x40081271, 0xffffffffffffffff) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m47.400409338s ago: executing program 0 (id=23): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) execve(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x20, 0x80, 0x1c, {0x0, 0xd, 0x0, 0xfffc, 0x5, 0x2, 0x0, 0xbc, 0x800, 0x0, 0x1000, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m44.059150087s ago: executing program 0 (id=34): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7ad, &(0x7f00000007c0)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x2008000, &(0x7f0000000440)=ANY=[@ANYBLOB="8ba10530f04a435f10203ce48b552624852220b25dc34e9886cc0e823918dabdb6637c537d453db9937504fdc8ec5e2f2b39bf82aa5f951e976f", @ANYBLOB="aacd1d6630d7b44c49df74341c5bd77616f04336e4558973bc74f6f8187fcbd7158fd887e3a9369443f256a16775f8cdfbe3481a5438ab2a8b258a4a33b687501ee3fd519a05f607e785e346bf4951f435f5a6846527092db6f8c7b1a7e6a287782ed75c22267b4759cbf0807429711f5c0e0c98763608cc066e22c73833b634663b26", @ANYBLOB="2e5113abb96490e8baa757031fd3113d8fd231aecab2c455591d3bec0b6d42a1d9572dc5078c0de5a68dc252aeb457f345aaef1744f717c71738086a77f819bf8ec2164ad9d225996868d5440c2a1f1759386c920214f5b07fdeaa34d7cbb895ee45108d8715e8678c9e65c8b76f3f4f2a1537de01264b0f6c5a5083f49b6737a25758553b72788c48c129ab89ff000e7d0b1da439dc5e7e6cfad150a664ab7d70dd127f473015976f8f2a3603f45a042d8c3578e6eb3060b986ee9e6b4dbf79896d68301c5d9ea34afe122934", @ANYBLOB="55ac88cf517af1b04b090000000ec53f9628c15cb14edefde39762fe236b4ce8c60a7c43543970516a02d827011407c1362a6f3ee218574d1d03907f069e233eb8845406027ad215c6cb94b3c1660b0b307d92fda8f7ffffffddad398c29967c9b3a2a2f4e8bcaccaa614de8b11d51221fd15e41511f4946f3ea66f5e4386903f94da6eafe8f943cbc7fb75ab04f9afe9f69e5bc6c21ca487b92ca6050937ae8af3ec55050d716ee8cccf22ea07fbe0f0eac590000000000000000000000002c4a6956a304640a061636c8a834f9bdf9ce332357af4b2a62d0fda693f4f22bc69e7ac38c41e010a61f8de542", @ANYRES16=r0, @ANYRES16=r2, @ANYRES32, @ANYRES8=r1, @ANYRESDEC=0x0], 0x0, 0x1c7, &(0x7f0000000dc0)="$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") chdir(&(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000040)='./bus\x00', 0x0) 1m41.910375343s ago: executing program 0 (id=40): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x64, 0x17, 0x2f, 0x20, 0x1557, 0x8150, 0x29ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0x7a, 0x61}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000640)={0x0, 0x0, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000280)={0x40, 0x23, 0xbc, {0xbc, 0xb, "cb775c3f21a9c211d2927b42d413b91466319cb32f033ec16b23d200e3e5d1344c7738e5aa32f9daefb2c9b2703ccd4265ee4613e5ee4ac8999a4b343f022ea5c70cf5df7bc4c18ba8bcf3d18d25213f597e36fd6a1600ac73b75cf1ef38219a36a0714e40ab026da2a2471134fa11d3d4e2c00e643804a831e26fb46b40108e60b59156822ced02019278424c0043a92af829309bf43b2e934ac131c63c13286ac146bc699ed5f8301e5b560488b00118db002bdf83f948115b"}}, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000580)={0x34, &(0x7f00000001c0)={0x20, 0xe, 0xc, "7519bb6870cea9f517834847"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m36.074208809s ago: executing program 0 (id=71): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) write$vga_arbiter(r1, &(0x7f0000000100)=@other={'unlock', ' ', 'none'}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000f974756b3000000000000000000000000000ed23693b052a15c102898e7c9cb103f6a7524461051379e2ad77dc41fe52e0ccac50af06e5e5cff6d09a9da2ce4f19c8a3eb0326a16efc1f5eb876cde0d8", @ANYRES32=0x0, @ANYRES32], 0x50) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x736d09f18c299aeb, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000300)={@default, @null}) 1m35.824795419s ago: executing program 32 (id=71): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) write$vga_arbiter(r1, &(0x7f0000000100)=@other={'unlock', ' ', 'none'}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000f974756b3000000000000000000000000000ed23693b052a15c102898e7c9cb103f6a7524461051379e2ad77dc41fe52e0ccac50af06e5e5cff6d09a9da2ce4f19c8a3eb0326a16efc1f5eb876cde0d8", @ANYRES32=0x0, @ANYRES32], 0x50) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x736d09f18c299aeb, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000300)={@default, @null}) 1m17.675388639s ago: executing program 2 (id=149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m17.42846448s ago: executing program 2 (id=150): sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040850) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0xa, 0x4622, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x4000044) 1m16.511903032s ago: executing program 2 (id=156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x5, 0x0, &(0x7f0000000300)="5f71b30936", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m16.232846182s ago: executing program 2 (id=158): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000e00)={[{@lastblock}, {@umask}, {@undelete}, {@longad}, {@shortad}, {@uid_forget}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortad}, {@noadinicb}, {@uid_forget}, {@nostrict}, {@session}, {@partition={'partition', 0x3d, 0x6}}]}, 0x2, 0xc2d, &(0x7f00000001c0)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@uid={'uid', 0x3d, 0xee01}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x0) sendfile(r1, r0, 0x0, 0x100800001) 1m15.845134364s ago: executing program 2 (id=165): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @multicast}, 0x65) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) 1m14.332987968s ago: executing program 2 (id=169): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000001c80)='./file0\x00', 0x4, &(0x7f0000003540)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\a\x00\x00\x00\x00\x00\x00\x00p'}}, {@subj_type={'subj_type', 0x3d, '%'}}, {@smackfshat={'smackfshat', 0x3d, 'GPL\x00'}}, {@subj_role={'subj_role', 0x3d, 'mountinfo\x00'}}, {@obj_role}, {@seclabel}]}, 0xfe, 0x5f0, &(0x7f0000004d40)="$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") 1m14.151942458s ago: executing program 33 (id=169): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000001c80)='./file0\x00', 0x4, &(0x7f0000003540)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\a\x00\x00\x00\x00\x00\x00\x00p'}}, {@subj_type={'subj_type', 0x3d, '%'}}, {@smackfshat={'smackfshat', 0x3d, 'GPL\x00'}}, {@subj_role={'subj_role', 0x3d, 'mountinfo\x00'}}, {@obj_role}, {@seclabel}]}, 0xfe, 0x5f0, &(0x7f0000004d40)="$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") 12.006215057s ago: executing program 5 (id=470): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008042, &(0x7f0000000c00)={[{@norecovery}, {@bsdgroups}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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") 10.068073182s ago: executing program 6 (id=475): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000004c0)='./file1\x00', 0x82, &(0x7f0000000fc0)=ANY=[], 0x1, 0x1f6, &(0x7f0000000d00)="$eJzslU1rE0EYx3+zmTSN5tCzp4LF9qJttiB+A/sBvHkxpGstbnzpBjSlkNVLr+KXKPgpPAj6DUQEL/WgoIeKp0qJzM4z0w2JbJV6CMwfludl/vM8z+zMPHMve5w1gJOjvS4LFFC0+KgUGlhW1nc8Z+UPkSPBF23ttvhfifwsMhsIccju/U6aJjvZoEJRCqo46QirSHrGSXpKMsesDP3u+bhHMZUcAVXraZx1zZWKyTYx1K/ZJU3OejFexjSOzOW8KvwHZShn48+cRTjzubErtcrP1viR+Hrexdf53/8HvOdXq3qbPry02zmN43e5OXFTZk2J/mpWhrSv7OaziO+F8f5or2uUO9LFjG/Tfu5KFBxjvClxLmnIQdVORj6OLrolLAOr/d6j1Wywe3W719lKtpIHcbx+fe3tRbmioyFsp8maKpVhLjWuLwHmnjZL43Xg0+l4zu15b6hSaQYXQEnP9SFdc165fJqDJkSlueUYNu5rn78hvho9bnEFk/1JrhYhxv6tJUw0zV2ztA0UNTHaulQnHBMxXwxc6z5MN/dRKDftAO1jtA+peyMWwyRK1m/krsR9kUsiN0QeiDwU6d4u9ybpIsI3sVZymONpp9/fKR4vq3lf7H3xgs8cSVb3GipXSYOAgICAgICAgBnB7wAAAP//BwlLrA==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = msgget$private(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) msgsnd(r4, &(0x7f0000000080)=ANY=[], 0x2000, 0x800) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000480)=@keyring) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') creat(&(0x7f0000000040)='./file1\x00', 0x9) 9.765067353s ago: executing program 3 (id=476): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000080)=[{r0, 0x40}], 0x1, 0x24b) 9.652984293s ago: executing program 5 (id=478): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@data_err_abort}, {@noinit_itable}, {@nouid32}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigsuspend(&(0x7f0000000300)={[0x800]}, 0x8) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0) 9.120132755s ago: executing program 6 (id=479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2d000000010001", 0x7) 9.078154425s ago: executing program 3 (id=480): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0), 0x1, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) lgetxattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f0000000480)=""/67, 0x43) 8.110338088s ago: executing program 6 (id=485): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000000)=ANY=[]) 8.109997327s ago: executing program 3 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x7, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000540)={[0x2, 0xce26, 0x4, 0xd646, 0x7, 0xf, 0x6, 0x1ff, 0x7ff, 0x8, 0x8000000000000001, 0x800000002, 0xffff, 0x101, 0x5, 0x1], 0x8000000, 0x141200}) ioctl$KVM_RUN(r0, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') unlinkat(r3, &(0x7f0000000040)='./file0\x00', 0x0) 7.440456999s ago: executing program 5 (id=489): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x41, 0x51b, &(0x7f0000000100)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x41, &(0x7f0000000000)={[{@test_dummy_encryption}, {@nomblk_io_submit}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7.36786301s ago: executing program 3 (id=490): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) open(0x0, 0x60142, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b) fallocate(r0, 0x3, 0x5000000, 0x8000c62) 5.482353195s ago: executing program 3 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600008008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) 5.134237785s ago: executing program 5 (id=497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220108, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x810) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) 4.669027037s ago: executing program 3 (id=498): sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040850) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0xa, 0x4622, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x4000044) 4.590265017s ago: executing program 34 (id=498): sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040850) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0xa, 0x4622, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x4000044) 4.531941327s ago: executing program 6 (id=501): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(&(0x7f0000000240)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000280)=ANY=[], 0xe01, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 3.820535769s ago: executing program 5 (id=504): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000965d06403e131508667e0102030109021b0001000000000904000001ff872800090505", @ANYRES32], 0x0) 3.806195739s ago: executing program 4 (id=505): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x10000007, 0x5, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3.60146532s ago: executing program 4 (id=506): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x3, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x810) 3.028923731s ago: executing program 6 (id=507): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x41, 0x51b, &(0x7f0000000100)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x41, &(0x7f0000000000)={[{@test_dummy_encryption}, {@nomblk_io_submit}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.992195601s ago: executing program 1 (id=508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600008008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) 2.040271034s ago: executing program 1 (id=509): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) dup2(r0, r1) 2.014432414s ago: executing program 4 (id=510): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) 1.712911565s ago: executing program 4 (id=511): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.692353635s ago: executing program 1 (id=512): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1, 0x4e23}, {@in6=@mcast1, 0x0, 0x32}, @in6=@private2, {}, {}, {0x9}, 0x10000}}}, 0xf8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1.559471456s ago: executing program 1 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', r4, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) io_uring_setup(0xad5, 0x0) eventfd2(0x8, 0x40800) preadv(r5, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x0) 629.913838ms ago: executing program 1 (id=514): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x509, &(0x7f0000000f80)="$eJzs3U1vY1cZAOD3Ol9OmjZp6QIQ0KEUBjQaJ/G0EeoChhVCqBKiS5CmIfFEUew4ip3ShFmk/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1IzEwuheX2c8iT1xJx+O4ueRru455zr3PWeie078ZuITwMi6FREHETEZEe9FxFzenuRH3G8f6es+PXy0enT4aDWJVuvdfyXZ9bQtur4m9UJ+z2JE/Pj7ET9LTsdt7O1vrlSrlZ12dXqhWdteaOzt392oraxX1itb5fLy0vLi1L23yhc21tdqk3npy5/88eBbv0i7NZu3dI/jIrWHPnEcJzUeET+8jGBDMJaPZ3LYHeG5FCLilYh4PXv+52Is+24CADdZqzUXrbnuOgBw0xWyHFhSKOW5gNkoFEqldg7v1ZgpVOuN5p2H9d2ttXaubD4mCg83qpXFPFc4HxNJWl/Kyk/q5RP1exHxckT8cmo6q5dW69W1Yf7gAwAj7IUT6/9/p9rrPwBwwxWH3QEA4MpZ/wFg9Fj/AWD0WP8BYPQ8Wf/vD7UfAMDV8f4fAEaP9R8ARsqP3nknPVpH+edfr72/t7tZf//uWqWxWartrpZW6zvbpfV6fT37zJ7aWfer1uvbS2/G7gfz39luNBcae/sPavXdreaD7HO9H1QmrmRUAMCzvPzax39JIuLg7ensiK69HKzVcLMVht0BYGjGht0BYGjs9gWj6xzv8aUH4IbosUXvU4oRMX2ysdVqtS6vS8Alu/0F+X8YVV35f/8LGEaM/D+MLvl/GF2tVjLonv8x6AsBgOtNjh/o8/v/V/Lz7/JfDvx07eQrPrrMXgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD11tn/t5TvBT4bhUKpFPFiRMzHRPJwo1pZjIiXIuLPUxNTaX1pyH0GAM6r8Pck3//r9twbsyevTiaPp7JzRPz81+/+6oOVZnPnT2n7v4/bmx/l7eVh9B8AOEtnnc7OXW/kPz18tNo5rrI///heRBTb8Y8OJ+PoOP54jGfnYkxExMx/krzelnTlLs7j4MOI+Hyv8Scxm+VA2jufnoyfxn7xSuMXnopfyK61z+m/xedO3XnqAnoHN9vH6fxzv9fzV4hb2bn381/MZqjzy+e/9FarR9kc+CR+Z/4b6zP/3Ro0xpt/+EG7NH362ocRXxyP6MQ+6pp/OvGTPvHfGDD+X7/0ldf7XWv9JuJ29I7fHWuhWdteaOzt392oraxX1itb5fLy0vLit++9VV7IctQL/VeDf75956Ws0OMl6fhn+sQvnjH+rw84/t/+772ffLXPtTT+N7/WK34hXn1G/HRN/MaA8Vdmfl/sdy2Nv9Zn/Gd9/+8MGP+Tv+2f2jYcABiext7+5kq1Wtm5ykLnB4krDaowWKGTN7gu/XmqcG07trlS/e5l3bl4omUyPtOXt1rPFb3fjHERWTfgOjh+6CPi8bA7AwAAAAAAAAAAAAAA9HSpfxSVtAvDHiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA31/8DAAD///9Uyqw=") r0 = creat(&(0x7f0000000080)='./file1\x00', 0x28) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) r1 = getegid() setfsgid(r1) fallocate(r0, 0x8, 0x8000, 0x1000) 561.009538ms ago: executing program 4 (id=515): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES8=0x0, @ANYRESHEX], 0x11, 0x6b8, &(0x7f0000000c40)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) write(r0, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) 403.200809ms ago: executing program 6 (id=516): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xf) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000980)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44900000c63d5f852c6769643d", @ANYRESOCT, @ANYRES16, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611ce543f067f1c9a066c3f796490d2bdc9080f333bbf7a34da740c63312339ad3c9a360f6fa56a3d9cea2667fb2bde2d8f4b", @ANYRES16=0x0, @ANYBLOB="4599"], 0x1, 0x709, &(0x7f0000001100)="$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") syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/198, 0xc6}], 0x1}, 0x4}], 0x1, 0x40010000, 0x0) 178.301439ms ago: executing program 5 (id=517): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000004c0)='./file1\x00', 0x82, &(0x7f0000000fc0)=ANY=[], 0x1, 0x1f6, &(0x7f0000000d00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = msgget$private(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) msgsnd(r4, &(0x7f0000000080)=ANY=[], 0x2000, 0x800) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000480)=@keyring) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$inet_udp(0x2, 0x2, 0x0) 102.645469ms ago: executing program 4 (id=518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600008008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB='\n\x00'], 0x3c}}, 0x0) 0s ago: executing program 1 (id=519): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x5, 0x2, 0x3, 0x1}, 0x8) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000009, 0x11, r2, 0x0) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): vsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.407974][ T4172] device veth0_macvtap entered promiscuous mode [ 62.418949][ T4172] device veth1_macvtap entered promiscuous mode [ 62.434456][ T1202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.445875][ T1202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.475503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.490148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.498329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.533150][ T4220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.550515][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.565730][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.577355][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.581320][ T4220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.588179][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.605429][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.616229][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.626681][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.637600][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.649170][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.674111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.683558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.693585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.713735][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.729813][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.740177][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.750944][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.760891][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.771580][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.782220][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.795448][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.806710][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.816244][ T1202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.827316][ T1202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.853836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.863876][ T1202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.872459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.874339][ T1202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.883371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.897645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.913642][ T4172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.925258][ T4172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.934028][ T4172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.943359][ T4172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.978709][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.990571][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.008911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.034869][ T4220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.042853][ T4220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.092314][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.166241][ T4220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.174571][ T4220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.234772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.271310][ T4220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.279715][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.294708][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.324153][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.335883][ T4220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.391218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.413943][ T1202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.442276][ T1202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.470744][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.485039][ T4210] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.679964][ T4262] loop0: detected capacity change from 0 to 2048 [ 63.808440][ T4269] loop4: detected capacity change from 0 to 1024 [ 63.823583][ T4269] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 63.835369][ T4262] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.842102][ T4269] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 63.855253][ T4210] usb 4-1: config 1 has an invalid descriptor of length 113, skipping remainder of the config [ 63.861087][ T4269] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #5: comm syz.4.7: unexpected bad inode w/o EXT4_IGET_BAD [ 63.888397][ T4269] EXT4-fs (loop4): no journal found [ 63.897270][ T4210] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.904022][ T4269] EXT4-fs (loop4): can't get journal size [ 63.922630][ T4269] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 63.946739][ T4210] usb 4-1: config 1 has no interface number 0 [ 63.961386][ T4210] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.979567][ T4210] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 63.990131][ T4210] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0xD has invalid maxpacket 56298, setting to 1024 [ 64.001546][ T4210] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0xD has invalid maxpacket 1024 [ 64.011756][ T4210] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.014406][ T4269] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 64.185057][ T4210] usb 4-1: New USB device found, idVendor=35b4, idProduct=a4a1, bcdDevice= 0.40 [ 64.205572][ T4210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.225382][ T4210] usb 4-1: Product: syz [ 64.235016][ T4210] usb 4-1: Manufacturer: syz [ 64.236151][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 64.242312][ T4210] usb 4-1: SerialNumber: syz [ 64.264163][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 64.264228][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 64.264288][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 64.283797][ T4277] loop0: detected capacity change from 0 to 1024 [ 64.315941][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 64.354505][ T4277] EXT4-fs (loop0): Ignoring removed orlov option [ 64.383353][ T4277] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000010000,orlov,barrier=0x0000000000000002,jqfmt=vfsv1,i_version,minixdf,data_err=abort,max_batch_time=0x0000000000000002,bsdgroups,min_batch_time=0x0000000000000002,quota,,errors=continue. Quota mode: writeback. [ 64.548336][ T4244] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 64.629823][ T4290] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.655792][ T4291] loop4: detected capacity change from 0 to 1764 [ 65.226336][ T4244] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 65.266372][ T4210] cdc_ncm 4-1:1.1: bind() failure [ 66.204875][ T13] usb 4-1: USB disconnect, device number 2 [ 66.865287][ T4210] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.114893][ T4210] usb 1-1: Using ep0 maxpacket: 32 [ 67.138365][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 67.166508][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 67.188880][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 67.194618][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 67.206792][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 67.216056][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 67.225209][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 67.238468][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 67.247624][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 67.256773][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.001409][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.264828][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 68.394919][ T13] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 68.409337][ T13] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 68.420684][ T13] usb 5-1: config 135 has no interface number 0 [ 68.433679][ T13] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.534606][ C1] sched: RT throttling activated [ 68.634863][ T13] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 68.658933][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.669892][ T4210] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.681060][ T4210] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 68.692366][ T13] usb 5-1: Product: syz [ 68.692387][ T13] usb 5-1: Manufacturer: syz [ 68.692404][ T13] usb 5-1: SerialNumber: syz [ 68.714689][ T4210] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 68.776912][ T13] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 68.783326][ T13] usb 5-1: No valid video chain found. [ 68.928140][ T4347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.30'. [ 69.044847][ T4210] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.061106][ T4210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.075978][ T4210] usb 1-1: Product: syz [ 69.093350][ T4210] usb 1-1: Manufacturer: syz [ 69.110055][ T4210] usb 1-1: SerialNumber: syz [ 69.154891][ T21] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 69.535821][ T21] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 69.579071][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.724945][ T4210] usb 1-1: can't set config #1, error -71 [ 69.766644][ T4210] usb 1-1: USB disconnect, device number 2 [ 69.784702][ T21] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 69.844136][ T13] usb 5-1: USB disconnect, device number 2 [ 69.901077][ T4357] loop0: detected capacity change from 0 to 2048 [ 69.920328][ T4359] loop3: detected capacity change from 0 to 1024 [ 69.931695][ T4361] loop4: detected capacity change from 0 to 1024 [ 69.969170][ T4359] hfsplus: failed to load root directory [ 70.019299][ T4363] loop2: detected capacity change from 0 to 1024 [ 70.046233][ T21] usb 2-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 70.056305][ T4357] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.072688][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.091215][ T21] usb 2-1: Product: syz [ 70.149470][ T21] usb 2-1: Manufacturer: syz [ 70.167875][ T4363] hfsplus: xattr searching failed [ 70.173942][ T4357] EXT4-fs error (device loop0): ext4_validate_block_bitmap:420: comm syz.0.34: bg 0: bad block bitmap checksum [ 70.194752][ T21] usb 2-1: SerialNumber: syz [ 70.217056][ T21] usb 2-1: config 0 descriptor?? [ 70.236458][ T4362] hfsplus: xattr search failed [ 70.273154][ T4374] loop3: detected capacity change from 0 to 1024 [ 71.564419][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.571024][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.660293][ T4374] hfsplus: bad catalog file entry [ 71.666737][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 71.711745][ T4374] hfsplus: failed to load root directory [ 71.720659][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 71.909780][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 71.927300][ T21] usb 2-1: USB disconnect, device number 2 [ 71.938149][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 71.967284][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 71.999277][ T4172] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /7/file0/lost+found: directory fails checksum at offset 0 [ 72.017237][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 72.207665][ T4385] mmap: syz.1.43 (4385): VmData 37400576 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 72.234461][ T4172] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /7/file0/lost+found: directory fails checksum at offset 2048 [ 72.290517][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 72.403202][ T4172] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /7/file0/lost+found: directory fails checksum at offset 4096 [ 72.601805][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 72.626062][ T4172] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /7/file0/lost+found: directory fails checksum at offset 6144 [ 73.285820][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 73.363260][ T4172] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /7/file0/lost+found: directory fails checksum at offset 8192 [ 73.440187][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 73.480268][ T4172] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /7/file0/lost+found: directory fails checksum at offset 10240 [ 73.513303][ T4172] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /7/file0/lost+found: directory fails checksum at offset 12288 [ 73.543699][ T4172] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum [ 73.581676][ T4172] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /7/file0/lost+found: directory fails checksum at offset 0 [ 73.604980][ T4211] Bluetooth: hci4: command 0x0405 tx timeout [ 73.617661][ T4156] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.678574][ T4412] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.729938][ T4407] loop1: detected capacity change from 0 to 512 [ 73.780900][ T4411] loop4: detected capacity change from 0 to 512 [ 73.785557][ T4407] ======================================================= [ 73.785557][ T4407] WARNING: The mand mount option has been deprecated and [ 73.785557][ T4407] and is ignored by this kernel. Remove the mand [ 73.785557][ T4407] option from the mount to silence this warning. [ 73.785557][ T4407] ======================================================= [ 73.882998][ T4407] EXT4-fs (loop1): bad s_want_extra_isize: 11962 [ 73.954924][ T4156] usb 3-1: Using ep0 maxpacket: 16 [ 74.085451][ T4156] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.893586][ T4156] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.903638][ T4156] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 74.917029][ T4156] usb 3-1: config 0 interface 0 has no altsetting 0 [ 74.957678][ T4156] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 74.998187][ T4156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.068708][ T4433] loop1: detected capacity change from 0 to 512 [ 75.196759][ T4172] EXT4-fs error: 630 callbacks suppressed [ 75.196775][ T4172] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum [ 75.379198][ T4172] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /7/file0/lost+found: directory fails checksum at offset 0 [ 75.657700][ T4156] usb 3-1: config 0 descriptor?? [ 75.669506][ T4172] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /7/file0/lost+found: directory fails checksum at offset 2048 [ 75.684735][ T4433] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 75.690469][ T4156] usb 3-1: can't set config #0, error -71 [ 75.708615][ T4433] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.716360][ T4156] usb 3-1: USB disconnect, device number 2 [ 75.734886][ T4172] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /7/file0/lost+found: directory fails checksum at offset 4096 [ 75.757008][ T4172] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /7/file0/lost+found: directory fails checksum at offset 6144 [ 75.780388][ T4172] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /7/file0/lost+found: directory fails checksum at offset 8192 [ 75.802324][ T4172] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /7/file0/lost+found: directory fails checksum at offset 10240 [ 75.824667][ T4172] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /7/file0/lost+found: directory fails checksum at offset 12288 [ 75.846141][ T4172] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum [ 75.866395][ T4172] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path /7/file0/lost+found: directory fails checksum at offset 0 [ 75.885518][ T4433] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.630715][ T4433] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.56: corrupted in-inode xattr [ 76.738081][ T4172] EXT4-fs warning: 714 callbacks suppressed [ 76.738097][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 76.775567][ T4433] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.56: couldn't read orphan inode 15 (err -117) [ 76.795891][ T4433] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,mblk_io_submit,user_xattr,auto_da_alloc,block_validity,quota,,errors=continue. Quota mode: writeback. [ 76.840005][ T4453] loop4: detected capacity change from 0 to 1024 [ 76.853101][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 76.881460][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 76.920652][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 76.943007][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 76.991124][ T4453] EXT4-fs error (device loop4): ext4_fill_super:4841: inode #2: comm syz.4.62: casefold flag without casefold feature [ 76.991917][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 77.041426][ T4453] EXT4-fs (loop4): get root inode failed [ 77.047285][ T4453] EXT4-fs (loop4): mount failed [ 77.086669][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 77.112487][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 77.149719][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 77.175201][ T4172] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 77.231236][ T4274] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.237919][ T4465] loop2: detected capacity change from 0 to 512 [ 77.286818][ T4453] loop4: detected capacity change from 0 to 2048 [ 77.290678][ T4463] loop1: detected capacity change from 0 to 2048 [ 77.350190][ T4463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.351586][ T4453] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 77.431432][ T4465] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,nombcache,stripe=0x0000000000000002,usrquota,,errors=continue. Quota mode: writeback. [ 77.451670][ T4453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.453402][ T4465] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.514873][ T4274] usb 4-1: Using ep0 maxpacket: 32 [ 77.520674][ T1106] Bluetooth: hci0: command 0x0c20 tx timeout [ 77.655074][ T4274] usb 4-1: config 0 has an invalid interface number: 154 but max is 0 [ 77.663612][ T4274] usb 4-1: config 0 has no interface number 0 [ 77.673828][ T4220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.044149][ T4220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.607434][ T4483] mmap: syz.4.73 (4483) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 78.732950][ T4274] usb 4-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=c4.04 [ 78.743051][ T4274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.751143][ T4274] usb 4-1: Product: syz [ 78.755347][ T4274] usb 4-1: Manufacturer: syz [ 78.759955][ T4274] usb 4-1: SerialNumber: syz [ 78.766742][ T4274] usb 4-1: config 0 descriptor?? [ 78.783259][ T4220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.860258][ T4490] loop4: detected capacity change from 0 to 128 [ 78.911763][ T4220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.007029][ T4490] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 79.089075][ T4490] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,nobarrier,,errors=continue. Quota mode: none. [ 79.175526][ T4490] ext2 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.235205][ T4490] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 79.245033][ T2350] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.246590][ T4274] asix 4-1:0.154 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 79.662783][ T4274] asix: probe of 4-1:0.154 failed with error -71 [ 80.086892][ T4274] usb 4-1: USB disconnect, device number 3 [ 80.173321][ T26] audit: type=1326 audit(1731237486.911:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f246ec719 code=0x7ffc0000 [ 80.230715][ T26] audit: type=1326 audit(1731237486.941:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f246ec719 code=0x7ffc0000 [ 80.331222][ T26] audit: type=1326 audit(1731237486.941:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f1f246ec719 code=0x7ffc0000 [ 80.357586][ T4492] chnl_net:caif_netlink_parms(): no params data found [ 80.374667][ T4242] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.377525][ T4522] loop4: detected capacity change from 0 to 2048 [ 80.444955][ T2350] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 80.454212][ T2350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.474692][ T26] audit: type=1326 audit(1731237486.941:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f246ec719 code=0x7ffc0000 [ 80.500769][ T2350] usb 2-1: config 0 descriptor?? [ 80.506171][ T26] audit: type=1326 audit(1731237486.941:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4513 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f246ec719 code=0x7ffc0000 [ 80.569695][ T4522] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: none. [ 80.592028][ T4522] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.614787][ T4242] usb 3-1: Using ep0 maxpacket: 8 [ 80.706832][ T4492] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.734932][ T4242] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 80.756666][ T4492] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.765020][ T2350] [drm] vendor descriptor length:6 data:06 5f 01 03 00 00 00 00 00 00 00 [ 80.779626][ T2350] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 80.808451][ T4242] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 80.841260][ T4492] device bridge_slave_0 entered promiscuous mode [ 80.860680][ T4242] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 80.985429][ T4542] fs-verity: sha512 using implementation "sha512-avx2" [ 81.197476][ T4542] syz.4.83 (4542) used greatest stack depth: 17560 bytes left [ 81.429607][ T7] cfg80211: failed to load regulatory.db [ 81.472651][ T2350] [drm:udl_init] *ERROR* Selecting channel failed [ 81.488170][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 81.500000][ T2350] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 81.508632][ T2350] [drm] Initialized udl on minor 2 [ 81.529910][ T4492] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.534899][ T2350] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 81.547886][ T2350] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 81.548061][ T4492] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.558844][ T2350] usb 2-1: USB disconnect, device number 3 [ 81.629336][ T4492] device bridge_slave_1 entered promiscuous mode [ 81.645534][ T4274] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.675571][ T4242] usb 3-1: string descriptor 0 read error: -22 [ 81.681838][ T4242] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.727985][ T4242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.955546][ T4492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.022880][ T4492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.044872][ T4274] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 82.061987][ T4274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.064916][ T4242] cdc_ncm 3-1:1.0: bind() failure [ 82.076627][ T4274] usb 4-1: config 0 descriptor?? [ 82.101976][ T4242] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 82.119052][ T4242] cdc_ncm 3-1:1.1: bind() failure [ 82.158793][ T4242] usb 3-1: USB disconnect, device number 3 [ 82.173905][ T4492] team0: Port device team_slave_0 added [ 82.242695][ T4492] team0: Port device team_slave_1 added [ 82.280340][ T4568] loop4: detected capacity change from 0 to 512 [ 82.338003][ T4565] loop1: detected capacity change from 0 to 512 [ 82.358871][ T4492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.368402][ T4492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.405490][ T4492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.443872][ T4565] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 82.492724][ T4568] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.93: inode #1: comm syz.4.93: iget: illegal inode # [ 82.507818][ T4565] EXT4-fs (loop1): 1 truncate cleaned up [ 82.513485][ T4565] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,noquota,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: none. [ 82.564498][ T4274] playstation 0003:054C:0DF2.0001: item fetching failed at offset 2/5 [ 82.621878][ T4568] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.93: error while reading EA inode 1 err=-117 [ 82.641123][ T4274] playstation 0003:054C:0DF2.0001: Parse failed [ 82.652883][ T4274] playstation: probe of 0003:054C:0DF2.0001 failed with error -22 [ 82.692207][ T4568] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.752031][ T4568] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.93: inode #1: comm syz.4.93: iget: illegal inode # [ 82.797910][ T4492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.805154][ T4492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.868677][ T4568] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.93: error while reading EA inode 1 err=-117 [ 82.887950][ T4568] EXT4-fs (loop4): 1 orphan inode deleted [ 82.893715][ T4568] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,resgid=0x0000000000000000,usrjquota=,,errors=continue. Quota mode: none. [ 82.902183][ T4492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.093775][ T4589] loop1: detected capacity change from 0 to 2048 [ 83.149765][ T4589] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.246544][ T4492] device hsr_slave_0 entered promiscuous mode [ 83.272607][ T4492] device hsr_slave_1 entered promiscuous mode [ 83.284040][ T4492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.292099][ T4492] Cannot create hsr debugfs directory [ 83.742073][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 84.960580][ T4167] usb 4-1: USB disconnect, device number 4 [ 85.090539][ T4220] device hsr_slave_0 left promiscuous mode [ 85.135914][ T4220] device hsr_slave_1 left promiscuous mode [ 85.151841][ T4220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.192770][ T4220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.238176][ T4220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.285824][ T4220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.307263][ T4614] netlink: 80 bytes leftover after parsing attributes in process `syz.1.103'. [ 85.332163][ T4220] device bridge_slave_1 left promiscuous mode [ 85.352899][ T4220] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.446013][ T4220] device bridge_slave_0 left promiscuous mode [ 85.455290][ T4220] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.497669][ T4220] device veth1_macvtap left promiscuous mode [ 85.504095][ T4220] device veth0_macvtap left promiscuous mode [ 85.521783][ T4220] device veth1_vlan left promiscuous mode [ 85.535397][ T4220] device veth0_vlan left promiscuous mode [ 85.825026][ T4167] Bluetooth: hci2: command 0x040f tx timeout [ 86.119780][ T4220] team0 (unregistering): Port device team_slave_1 removed [ 86.133951][ T4220] team0 (unregistering): Port device team_slave_0 removed [ 86.134772][ T4167] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.151626][ T4220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.171336][ T4220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.247448][ T4220] bond0 (unregistering): Released all slaves [ 86.304761][ T4242] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.413062][ T4636] loop2: detected capacity change from 0 to 512 [ 86.483536][ T4636] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 86.509516][ T4492] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.514960][ T4167] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 86.524823][ T4636] EXT4-fs (loop2): orphan cleanup on readonly fs [ 86.527036][ T4167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.551133][ T4492] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.552087][ T4167] usb 2-1: config 0 descriptor?? [ 86.562138][ T4636] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 86.575123][ T4242] usb 5-1: Using ep0 maxpacket: 32 [ 86.583618][ T4636] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 86.592955][ T4492] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.601198][ T4636] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.111: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 86.661216][ T4492] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.694907][ T4242] usb 5-1: config 1 interface 0 has no altsetting 0 [ 86.695057][ T4636] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.111: couldn't read orphan inode 13 (err -117) [ 86.722474][ T4636] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,debug,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 86.777163][ T4636] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 86.837595][ T4636] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 86.854947][ T4242] usb 5-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d [ 86.869212][ T4242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.918712][ T4242] usb 5-1: Product: syz [ 86.933925][ T4242] usb 5-1: Manufacturer: syz [ 86.940284][ T4636] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 86.949671][ T4242] usb 5-1: SerialNumber: syz [ 86.991872][ T4658] loop3: detected capacity change from 0 to 512 [ 87.018836][ T4492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.038713][ T4167] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 87.057111][ T4167] playstation 0003:054C:0DF2.0002: item fetching failed at offset 3/5 [ 87.066960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.090364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.098502][ T4167] playstation 0003:054C:0DF2.0002: Parse failed [ 87.123914][ T4167] playstation: probe of 0003:054C:0DF2.0002 failed with error -22 [ 87.124206][ T4492] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.154846][ T4658] EXT4-fs (loop3): Ignoring removed oldalloc option [ 87.172656][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.232208][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.244977][ T4242] aqc111: probe of 5-1:1.0 failed with error -22 [ 87.262361][ T4658] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.114: Parent and EA inode have the same ino 15 [ 87.280868][ T4658] EXT4-fs (loop3): Remounting filesystem read-only [ 87.295658][ T1202] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.302797][ T1202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.304857][ T4242] usb 5-1: USB disconnect, device number 3 [ 87.341767][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.353367][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.362045][ T4658] EXT4-fs (loop3): 1 orphan inode deleted [ 87.373603][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.392647][ T1202] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.399830][ T1202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.417194][ T4658] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x0000000000000000,. Quota mode: none. [ 87.430622][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.493617][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.515917][ T4658] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.114: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 87.548689][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.583861][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.599561][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.609768][ T4658] EXT4-fs (loop3): Remounting filesystem read-only [ 87.649068][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.672838][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.704168][ T4492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.743128][ T4492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.790799][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.809352][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.887382][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.904717][ T4167] Bluetooth: hci2: command 0x0419 tx timeout [ 87.945864][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.989000][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.880381][ T1106] usb 2-1: USB disconnect, device number 4 [ 90.841814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.891969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.020789][ T4492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.074746][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.116686][ T4724] netlink: 36 bytes leftover after parsing attributes in process `syz.2.126'. [ 91.195727][ T4724] device bridge_slave_1 left promiscuous mode [ 91.203229][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.279130][ T4724] device bridge_slave_0 left promiscuous mode [ 91.313223][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.565093][ T13] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1023 [ 91.612674][ T13] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.684642][ T13] usb 5-1: config 1 interface 0 has no altsetting 0 [ 91.753570][ T4736] loop2: detected capacity change from 0 to 2048 [ 91.840854][ T4736] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 96: 0x6c != 0x13 [ 91.873530][ T4736] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 91.884898][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 91.893951][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.904524][ T4736] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 91.934734][ T13] usb 5-1: Product: syz [ 91.938991][ T13] usb 5-1: Manufacturer: syz [ 91.943617][ T13] usb 5-1: SerialNumber: syz [ 91.947607][ T4736] UDF-fs: Scanning with blocksize 512 failed [ 91.968435][ T4736] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 91.988080][ T4736] UDF-fs: Scanning with blocksize 1024 failed [ 92.022011][ T4736] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 92.025148][ T4706] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 92.089310][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.098653][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.134170][ T4736] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 92.161956][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.175681][ T4736] UDF-fs: Scanning with blocksize 2048 failed [ 92.209590][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.219795][ T4736] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 92.239629][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.249397][ T4736] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 92.264084][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.274292][ T4736] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 92.325131][ T4492] device veth0_vlan entered promiscuous mode [ 92.334066][ T4736] UDF-fs: Scanning with blocksize 4096 failed [ 92.355447][ T13] usb 5-1: USB disconnect, device number 4 [ 92.372996][ T4736] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 92.412159][ T4753] loop4: detected capacity change from 0 to 2048 [ 92.425137][ T4492] device veth1_vlan entered promiscuous mode [ 92.474758][ T1106] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.484928][ T4753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.522542][ T4492] device veth0_macvtap entered promiscuous mode [ 92.534988][ T4753] UDF-fs: incorrect filename length (10) [ 92.543310][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.589386][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.645370][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.701770][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.714346][ T23] Bluetooth: hci2: command 0x0405 tx timeout [ 92.726328][ T4760] UDF-fs: incorrect filename length (10) [ 92.732899][ T4760] UDF-fs: incorrect filename length (10) [ 92.848663][ T4759] UDF-fs: incorrect filename length (10) [ 92.857025][ T4759] capability: warning: `syz.4.133' uses deprecated v2 capabilities in a way that may be insecure [ 93.294106][ T4492] device veth1_macvtap entered promiscuous mode [ 93.306676][ T4759] UDF-fs: error (device loop4): udf_read_inode: (ino 1346) failed !bh [ 93.412005][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.433536][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.481551][ T1106] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 93.496466][ T1106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.529380][ T1106] usb 4-1: config 0 descriptor?? [ 93.541185][ T4492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.590730][ T4765] loop4: detected capacity change from 0 to 1024 [ 93.604634][ T4492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.629832][ T4767] loop2: detected capacity change from 0 to 1764 [ 93.637410][ T4492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.664142][ T4765] EXT4-fs (loop4): Ignoring removed orlov option [ 93.674026][ T4492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.690573][ T4765] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 93.701767][ T4492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.723782][ T4492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.744546][ T4765] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 93.751664][ T4492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.812303][ T4492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.824123][ T4492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.850242][ T4773] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.875187][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.883954][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.935083][ T4492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.961851][ T4492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.998997][ T1106] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 94.021115][ T4765] process 'syz.4.135' launched './file0/file0' with NULL argv: empty string added [ 94.037430][ T1106] playstation 0003:054C:0DF2.0003: item fetching failed at offset 3/5 [ 94.048613][ T4492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.065302][ T1106] playstation 0003:054C:0DF2.0003: Parse failed [ 94.081357][ T4492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.092139][ T1106] playstation: probe of 0003:054C:0DF2.0003 failed with error -22 [ 94.120752][ T4492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.151367][ T4492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.162783][ T4492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.184864][ T4492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.203525][ T4492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.234795][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.263937][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.291955][ T4492] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.350111][ T4492] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.382586][ T4492] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.409238][ T4783] loop2: detected capacity change from 0 to 128 [ 94.429598][ T4492] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.470807][ T4783] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 94.526571][ T4783] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.144137][ T4794] loop4: detected capacity change from 0 to 256 [ 95.195284][ T4761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.203904][ T4761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.307498][ T4794] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 95.363867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.384328][ T4797] loop1: detected capacity change from 0 to 1024 [ 95.500920][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.535005][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.566952][ T4797] hfsplus: failed to load root directory [ 95.709665][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.905926][ T4798] loop1: detected capacity change from 0 to 1024 [ 96.008856][ T4798] hfsplus: bad catalog file entry [ 96.014012][ T4798] hfsplus: failed to load root directory [ 96.270547][ T4813] kvm [4812]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x5500000800 [ 96.351920][ T4813] kvm [4812]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7100000800 [ 97.077622][ T4211] usb 4-1: USB disconnect, device number 5 [ 97.640775][ T4858] loop2: detected capacity change from 0 to 2048 [ 97.700924][ T4864] loop4: detected capacity change from 0 to 1024 [ 97.735389][ T4858] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.838415][ T4869] loop5: detected capacity change from 0 to 512 [ 97.929951][ T4177] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 97.977398][ T4177] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 98.016677][ T4869] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.162: corrupted inode contents [ 98.062183][ T4882] loop1: detected capacity change from 0 to 256 [ 98.118679][ T4869] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #16: comm syz.5.162: mark_inode_dirty error [ 98.145108][ T4869] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.162: corrupted inode contents [ 98.174013][ T4869] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.162: mark_inode_dirty error [ 98.255171][ T4869] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.162: corrupted inode contents [ 98.328779][ T4869] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 98.476682][ T4242] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 98.851479][ T4869] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.162: corrupted inode contents [ 98.944557][ T4869] EXT4-fs error (device loop5): ext4_truncate:4272: inode #16: comm syz.5.162: mark_inode_dirty error [ 99.009529][ T4869] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 99.064968][ T4242] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 99.076054][ T4869] EXT4-fs (loop5): 1 truncate cleaned up [ 99.081802][ T4869] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.093333][ T4242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.103889][ T4869] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.172762][ T4242] usb 4-1: config 0 descriptor?? [ 99.304743][ T4894] kvm: pic: non byte write [ 99.333518][ T4899] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2246637823 (4493275646 ns) > initial count (2691688 ns). Using initial count to start timer. [ 99.688538][ T4242] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 99.726663][ T4242] playstation 0003:054C:0DF2.0004: item fetching failed at offset 3/5 [ 99.768822][ T4242] playstation 0003:054C:0DF2.0004: Parse failed [ 99.790375][ T4242] playstation: probe of 0003:054C:0DF2.0004 failed with error -22 [ 99.982068][ T4920] loop5: detected capacity change from 0 to 512 [ 100.203005][ T4920] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 100.271955][ T4920] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 100.341683][ T4920] System zones: 1-12 [ 100.381589][ T4920] EXT4-fs (loop5): 1 truncate cleaned up [ 100.389767][ T4920] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback. [ 100.476751][ T4922] chnl_net:caif_netlink_parms(): no params data found [ 100.494871][ T2350] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.649264][ T4947] loop4: detected capacity change from 0 to 2048 [ 100.734645][ T2350] usb 2-1: Using ep0 maxpacket: 32 [ 100.824352][ T4922] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.885698][ T4922] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.927036][ T4947] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 100.943974][ T4922] device bridge_slave_0 entered promiscuous mode [ 100.952755][ T4922] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.960486][ T4922] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.996816][ T4922] device bridge_slave_1 entered promiscuous mode [ 101.088613][ T2350] usb 2-1: New USB device found, idVendor=0e8d, idProduct=0003, bcdDevice=b2.0b [ 101.097788][ T2350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.106589][ T2350] usb 2-1: Product: syz [ 101.110772][ T2350] usb 2-1: Manufacturer: syz [ 101.115470][ T2350] usb 2-1: SerialNumber: syz [ 101.136718][ T2350] usb 2-1: config 0 descriptor?? [ 101.176780][ T2350] option 2-1:0.0: GSM modem (1-port) converter detected [ 101.220605][ T4922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.298581][ T1106] usb 4-1: USB disconnect, device number 6 [ 101.313880][ T4922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.360136][ T4960] loop5: detected capacity change from 0 to 512 [ 101.381257][ T4211] usb 2-1: USB disconnect, device number 5 [ 101.411981][ T4211] option 2-1:0.0: device disconnected [ 101.535280][ T4922] team0: Port device team_slave_0 added [ 101.551323][ T4960] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.182: corrupted inode contents [ 101.567639][ T4922] team0: Port device team_slave_1 added [ 101.591590][ T4960] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #16: comm syz.5.182: mark_inode_dirty error [ 101.642288][ T4960] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.182: corrupted inode contents [ 101.704063][ T4960] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.182: mark_inode_dirty error [ 101.771652][ T4960] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.182: corrupted inode contents [ 101.901273][ T4960] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 102.082949][ T4960] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.182: corrupted inode contents [ 102.288115][ T4960] EXT4-fs error (device loop5): ext4_truncate:4272: inode #16: comm syz.5.182: mark_inode_dirty error [ 102.454968][ T1106] Bluetooth: hci4: command 0x0409 tx timeout [ 102.476086][ T4960] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 102.508156][ T4922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.519352][ T4975] loop3: detected capacity change from 0 to 256 [ 102.527768][ T4922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.551314][ T4973] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 102.568752][ T4960] EXT4-fs (loop5): 1 truncate cleaned up [ 102.574422][ T4960] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.614914][ T4960] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.664699][ T4922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.735859][ T4922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.735873][ T4922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.735894][ T4922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.856776][ T4983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.186'. [ 102.935153][ T4922] device hsr_slave_0 entered promiscuous mode [ 102.952341][ T4981] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2246637823 (4493275646 ns) > initial count (2691688 ns). Using initial count to start timer. [ 102.958806][ T4922] device hsr_slave_1 entered promiscuous mode [ 102.975349][ T4922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.975412][ T4922] Cannot create hsr debugfs directory [ 103.452997][ T4999] loop5: detected capacity change from 0 to 512 [ 103.561318][ T5005] loop3: detected capacity change from 0 to 1024 [ 103.579107][ T4999] EXT4-fs (loop5): Ignoring removed orlov option [ 103.595018][ T4999] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.620544][ T4922] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 103.675654][ T4999] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.189: Attempting to read directory block (0) that is past i_size (256) [ 103.705879][ T4922] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 103.728745][ T4922] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 103.741794][ T4999] EXT4-fs (loop5): Remounting filesystem read-only [ 103.747718][ T4922] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 103.755583][ T4999] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 103.763874][ T4999] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,orlov,nogrpid,init_itable,dioread_nolock,grpjquota=.oldalloc,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 103.854821][ T4167] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.897208][ T4436] hfsplus: b-tree write err: -5, ino 4 [ 104.338569][ T5022] loop3: detected capacity change from 0 to 128 [ 104.873684][ T2350] Bluetooth: hci4: command 0x041b tx timeout [ 104.960604][ T4922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.979779][ T5022] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.016043][ T5022] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.091762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.104973][ T4167] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 105.106192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.114027][ T4167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.126890][ T4167] usb 2-1: config 0 descriptor?? [ 105.245937][ T4922] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.331969][ T5035] loop4: detected capacity change from 0 to 512 [ 105.345929][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.358145][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.380225][ T5037] loop3: detected capacity change from 0 to 128 [ 105.386173][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.393529][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.453963][ T5037] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 105.587629][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.605092][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.615293][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.639759][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.646926][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.648274][ T4167] playstation 0003:054C:0DF2.0005: unknown main item tag 0x2 [ 105.668630][ T5035] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.199: corrupted inode contents [ 105.686489][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.686506][ T4167] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 105.706919][ T5035] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #16: comm syz.4.199: mark_inode_dirty error [ 105.710112][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.730084][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.737940][ T5035] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.199: corrupted inode contents [ 105.739635][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.760590][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.793146][ T4922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.815171][ T4922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.850210][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.854541][ T5035] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.199: mark_inode_dirty error [ 105.872187][ T4167] playstation 0003:054C:0DF2.0005: Invalid reportID received, expected 9 got 210 [ 105.886938][ T4167] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense pairing info: -22 [ 105.902294][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.924709][ T4167] playstation 0003:054C:0DF2.0005: Failed to get MAC address from DualSense [ 105.928414][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.933477][ T4167] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 105.958271][ T5035] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.199: corrupted inode contents [ 105.960094][ T4167] playstation: probe of 0003:054C:0DF2.0005 failed with error -22 [ 105.976647][ T5035] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 105.987737][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.995055][ T5035] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #16: comm syz.4.199: corrupted inode contents [ 106.005912][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.027880][ T5035] EXT4-fs error (device loop4): ext4_truncate:4272: inode #16: comm syz.4.199: mark_inode_dirty error [ 106.041161][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.049915][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.062712][ T5035] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 106.116360][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.146273][ T4167] usb 2-1: USB disconnect, device number 6 [ 106.161800][ T4318] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 106.192070][ T5035] EXT4-fs (loop4): 1 truncate cleaned up [ 106.204369][ T5035] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.216568][ T5035] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.231248][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.256001][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.202'. [ 106.334377][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.384132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.401934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.422730][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.441107][ T4922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.490482][ T5035] kvm: pic: non byte write [ 106.498273][ T5035] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2246637823 (4493275646 ns) > initial count (2691688 ns). Using initial count to start timer. [ 106.729780][ T5069] loop5: detected capacity change from 0 to 256 [ 106.812797][ T5069] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 106.838184][ T5072] loop1: detected capacity change from 0 to 512 [ 106.866044][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.883273][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.934239][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.945274][ T4167] Bluetooth: hci4: command 0x040f tx timeout [ 106.949626][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.966748][ T5072] EXT4-fs (loop1): Ignoring removed orlov option [ 106.980315][ T5072] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.008031][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.061530][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.122163][ T5072] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.204: Attempting to read directory block (0) that is past i_size (256) [ 107.170570][ T5072] EXT4-fs (loop1): Remounting filesystem read-only [ 107.180180][ T4922] device veth0_vlan entered promiscuous mode [ 107.196445][ T5072] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 107.253081][ T5072] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,orlov,nogrpid,init_itable,dioread_nolock,grpjquota=.oldalloc,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 107.552367][ T4922] device veth1_vlan entered promiscuous mode [ 108.481576][ T5092] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.493112][ T5092] blk_update_request: I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.504208][ T5092] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 108.513922][ T5092] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.525364][ T5092] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 108.534929][ T5092] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 108.542547][ T5092] UDF-fs: Scanning with blocksize 512 failed [ 108.549110][ T5092] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.560362][ T5092] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.571414][ T5092] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 108.581087][ T5092] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.592223][ T5092] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 108.601799][ T5092] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 108.609429][ T5092] UDF-fs: Scanning with blocksize 1024 failed [ 108.615898][ T5092] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.627373][ T5092] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.638553][ T5092] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 108.648311][ T5092] blk_update_request: I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.659454][ T5092] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 108.669010][ T5092] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 108.676655][ T5092] UDF-fs: Scanning with blocksize 2048 failed [ 108.682982][ T5092] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.694107][ T5092] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 108.703748][ T5092] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 108.713438][ T5092] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 108.721390][ T5092] UDF-fs: Scanning with blocksize 4096 failed [ 108.727483][ T5092] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 109.388693][ T5030] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 109.409327][ T2350] Bluetooth: hci4: command 0x0419 tx timeout [ 109.441355][ T5030] EXT4-fs (loop1): Remounting filesystem read-only [ 109.564948][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.633951][ T5105] loop5: detected capacity change from 0 to 512 [ 109.712853][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.745882][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.780406][ T4922] device veth0_macvtap entered promiscuous mode [ 109.833466][ T5105] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.848718][ T4922] device veth1_macvtap entered promiscuous mode [ 109.898413][ T5105] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.984178][ T4922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.026329][ T5105] capability: warning: `syz.5.211' uses 32-bit capabilities (legacy support in use) [ 110.044930][ T4922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.076774][ T4922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.110516][ T4922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.131087][ T4922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.152039][ T4922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.191422][ T4922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.222398][ T4922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.278888][ T4922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.309902][ T4922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.314769][ T4211] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 110.339688][ T4922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.437984][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.497903][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.511075][ T5135] netlink: 20 bytes leftover after parsing attributes in process `syz.5.215'. [ 110.517176][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.538185][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.561282][ T4922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.574172][ T4922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.606873][ T4922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.622881][ T4922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.633418][ T4922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.653639][ T4922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.664329][ T4922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.679487][ T4922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.689887][ T4922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.701004][ T4922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.713877][ T4922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.769029][ T4211] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 111.154896][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.419612][ T4211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.458074][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.552563][ T4211] usb 4-1: config 0 descriptor?? [ 111.824347][ T5159] loop1: detected capacity change from 0 to 256 [ 111.943238][ T5163] kernel profiling enabled (shift: 9) [ 112.075126][ T4211] playstation 0003:054C:0DF2.0006: unknown main item tag 0x2 [ 112.097893][ T4211] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 112.301476][ T4211] playstation 0003:054C:0DF2.0006: Invalid reportID received, expected 9 got 210 [ 112.321864][ T4211] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -22 [ 112.350318][ T4211] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 112.371635][ T4211] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 112.420838][ T4211] playstation: probe of 0003:054C:0DF2.0006 failed with error -22 [ 112.537684][ T7] usb 4-1: USB disconnect, device number 7 [ 112.593786][ T4922] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.602623][ T4922] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.612119][ T4922] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.621123][ T4922] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.268323][ T9] device hsr_slave_0 left promiscuous mode [ 113.308144][ T9] device hsr_slave_1 left promiscuous mode [ 113.347773][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.409554][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.425344][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.433086][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.451812][ T9] device veth1_macvtap left promiscuous mode [ 113.459393][ T9] device veth0_macvtap left promiscuous mode [ 113.469438][ T9] device veth1_vlan left promiscuous mode [ 113.475605][ T9] device veth0_vlan left promiscuous mode [ 113.485307][ T5184] loop3: detected capacity change from 0 to 256 [ 113.545649][ T5184] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 113.564067][ T5190] loop5: detected capacity change from 0 to 128 [ 113.691886][ T5190] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.704815][ T5190] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.834692][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.074817][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 114.081026][ T5210] loop5: detected capacity change from 0 to 164 [ 114.180409][ T5210] attempt to access beyond end of device [ 114.180409][ T5210] loop5: rw=524288, want=263332, limit=164 [ 114.194513][ T9] team0 (unregistering): Port device team_slave_1 removed [ 114.197344][ T5210] attempt to access beyond end of device [ 114.197344][ T5210] loop5: rw=0, want=263332, limit=164 [ 114.228352][ T26] audit: type=1800 audit(1731237520.971:7): pid=5210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.234" name="file0" dev="loop5" ino=1862 res=0 errno=0 [ 114.256854][ T9] team0 (unregistering): Port device team_slave_0 removed [ 114.269144][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.282627][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.285049][ T21] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 114.373748][ T5215] loop5: detected capacity change from 0 to 2048 [ 114.399470][ T5215] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 114.399470][ T5215] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 114.399470][ T5215] [ 114.417834][ T4156] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 114.456484][ T21] usb 5-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40 [ 114.471110][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.474408][ T9] bond0 (unregistering): Released all slaves [ 114.482152][ T21] usb 5-1: Product: syz [ 114.495751][ T5215] EXT4-fs (loop5): mounted filesystem without journal. Opts: noacl,nombcache,,errors=continue. Quota mode: none. [ 114.496902][ T21] usb 5-1: Manufacturer: syz [ 114.519336][ T1202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.528801][ T21] usb 5-1: SerialNumber: syz [ 114.587250][ T21] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 114.624274][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.624796][ T1202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.633016][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.685792][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.720185][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.865073][ T4156] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.877221][ T21] usb 5-1: USB disconnect, device number 5 [ 114.888336][ T4156] usb 4-1: config 1 has no interface number 0 [ 114.906909][ T4156] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.930085][ T4156] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 114.969429][ T4156] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 114.994165][ T5230] loop6: detected capacity change from 0 to 512 [ 115.131642][ T5230] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.170: bg 0: block 393: padding at end of block bitmap is not set [ 115.159611][ T5230] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 115.179649][ T5230] EXT4-fs (loop6): 2 truncates cleaned up [ 115.198866][ T5230] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.214969][ T4156] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.230980][ T4156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.249339][ T4156] usb 4-1: Product: syz [ 115.253678][ T4156] usb 4-1: Manufacturer: syz [ 115.258428][ T4156] usb 4-1: SerialNumber: syz [ 115.314886][ T4211] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 115.364195][ T5245] loop1: detected capacity change from 0 to 512 [ 115.471561][ T5245] EXT4-fs (loop1): inline encryption not supported [ 115.486989][ T5245] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 115.530497][ T5245] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.252: inode #1: comm syz.1.252: iget: illegal inode # [ 115.562011][ T5245] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.252: error while reading EA inode 1 err=-117 [ 115.624495][ T5245] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.252: inode #1: comm syz.1.252: iget: illegal inode # [ 115.644053][ T5245] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.252: error while reading EA inode 1 err=-117 [ 115.679834][ T5245] EXT4-fs (loop1): 1 orphan inode deleted [ 115.708850][ T5258] loop6: detected capacity change from 0 to 128 [ 115.722625][ T5259] xt_NFQUEUE: number of total queues is 0 [ 115.734870][ T5245] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,inlinecrypt,bsdgroups,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 115.744908][ T4156] cdc_ncm 4-1:1.1: bind() failure [ 115.764398][ T4211] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 115.791468][ T4211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.818812][ T4211] usb 6-1: config 0 descriptor?? [ 115.825390][ T5258] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.843398][ T4156] usb 4-1: USB disconnect, device number 8 [ 115.892055][ T5258] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.987560][ T4176] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 116.065563][ T26] audit: type=1800 audit(1731237522.811:8): pid=5258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.245" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=12 res=0 errno=0 [ 116.136372][ T4176] EXT4-fs warning (device loop1): __ext4_unlink:3335: inode #15: comm syz-executor: Deleting file 'bus' with no links [ 116.166068][ T4176] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 234881024 (level 0) [ 116.272711][ T5267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 116.377315][ T4211] playstation 0003:054C:0DF2.0007: unknown main item tag 0x2 [ 116.404184][ T4211] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 116.604987][ T4211] playstation 0003:054C:0DF2.0007: Invalid reportID received, expected 9 got 210 [ 116.616616][ T4211] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -22 [ 116.659723][ T5284] input: syz0 as /devices/virtual/input/input6 [ 116.688098][ T4211] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 116.733972][ T4211] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 116.766318][ T5284] virtio-fs: tag <(null)> not found [ 116.797897][ T4211] playstation: probe of 0003:054C:0DF2.0007 failed with error -22 [ 117.025946][ T4211] usb 6-1: USB disconnect, device number 2 [ 117.592257][ T5313] loop5: detected capacity change from 0 to 256 [ 117.704344][ T5313] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 117.915235][ T5313] exFAT-fs (loop5): hint_cluster is invalid (17) [ 118.026151][ T5328] loop4: detected capacity change from 0 to 2048 [ 118.051980][ T26] audit: type=1800 audit(1731237524.791:9): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.261" name="file1" dev="loop5" ino=1048604 res=0 errno=0 [ 118.188122][ T5328] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.088667][ T5337] netlink: 408 bytes leftover after parsing attributes in process `syz.5.267'. [ 119.099228][ T5339] loop3: detected capacity change from 0 to 256 [ 119.158501][ T5319] loop1: detected capacity change from 0 to 8192 [ 119.247458][ T5346] loop4: detected capacity change from 0 to 8 [ 120.141286][ T5346] SQUASHFS error: zlib decompression failed, data probably corrupt [ 120.149989][ T5346] SQUASHFS error: Failed to read block 0x4de: -5 [ 120.165522][ T5346] SQUASHFS error: Failed to read block 0x4e2: -5 [ 120.230640][ T5355] loop3: detected capacity change from 0 to 256 [ 120.237455][ T5346] SQUASHFS error: Failed to read block 0x9ca: -5 [ 120.244082][ T5346] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 120.266563][ T5346] SQUASHFS error: Failed to read block 0x35f2: -5 [ 120.337204][ T26] audit: type=1800 audit(1731237527.081:10): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.269" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 120.588646][ T5369] loop1: detected capacity change from 0 to 1024 [ 120.704706][ T4242] Bluetooth: hci2: command 0x0406 tx timeout [ 120.725915][ T5379] input: syz1 as /devices/virtual/input/input7 [ 120.904431][ T5369] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 120.942854][ T5386] loop4: detected capacity change from 0 to 256 [ 121.046360][ T5386] FAT-fs (loop4): bogus sectors per cluster 255 [ 121.090855][ T5386] FAT-fs (loop4): Can't find a valid FAT filesystem [ 121.471108][ T5401] loop1: detected capacity change from 0 to 2048 [ 121.598636][ T5401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.708974][ T26] audit: type=1800 audit(1731237528.451:11): pid=5401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.283" name="bus" dev="loop1" ino=1436 res=0 errno=0 [ 122.004003][ T5423] loop6: detected capacity change from 0 to 1024 [ 122.661246][ T5448] loop4: detected capacity change from 0 to 1024 [ 123.421840][ T5448] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.675121][ T4242] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 123.806001][ T5471] loop6: detected capacity change from 0 to 256 [ 124.054804][ T4242] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.066213][ T4242] usb 6-1: config 1 has no interface number 0 [ 124.072319][ T4242] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.101669][ T4242] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 124.139987][ T4242] usb 6-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 124.168194][ T4210] Bluetooth: hci4: command 0x0401 tx timeout [ 124.325670][ T4242] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.362230][ T4242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.401603][ T4242] usb 6-1: Product: syz [ 124.414729][ T4242] usb 6-1: Manufacturer: syz [ 124.419895][ T4242] usb 6-1: SerialNumber: syz [ 124.681333][ T5494] loop4: detected capacity change from 0 to 8 [ 125.709231][ T5494] SQUASHFS error: zlib decompression failed, data probably corrupt [ 125.745022][ T4242] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 125.751323][ T4242] cdc_ncm 6-1:1.1: bind() failure [ 125.762098][ T5494] SQUASHFS error: Failed to read block 0x4de: -5 [ 125.769658][ T5494] SQUASHFS error: Failed to read block 0x4e2: -5 [ 125.776739][ T5494] SQUASHFS error: Failed to read block 0x9ca: -5 [ 125.777238][ T5509] loop3: detected capacity change from 0 to 512 [ 125.783216][ T5494] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 125.795985][ T5494] SQUASHFS error: Failed to read block 0x35f2: -5 [ 125.816620][ T4242] usb 6-1: USB disconnect, device number 3 [ 125.820176][ T26] audit: type=1800 audit(1731237532.561:12): pid=5494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.305" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 125.978153][ T5509] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 126.004806][ T5509] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.047601][ T5518] loop6: detected capacity change from 0 to 128 [ 126.454106][ T5548] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.457381][ T5550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.317'. [ 126.474873][ T4167] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 126.885746][ T4167] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.904792][ T4211] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 126.907503][ T4167] usb 4-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.00 [ 126.917673][ T5568] netlink: 'syz.6.321': attribute type 4 has an invalid length. [ 126.922253][ T4167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.095631][ T4167] usb 4-1: config 0 descriptor?? [ 127.234860][ T4211] usb 6-1: Using ep0 maxpacket: 8 [ 127.377026][ T4211] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.481088][ T4211] usb 6-1: config 0 has no interfaces? [ 127.610191][ T4167] wacom 0003:056A:00D1.0008: Unknown device_type for 'HID 056a:00d1'. Assuming pen. [ 127.661411][ T4167] wacom 0003:056A:00D1.0008: hidraw0: USB HID v0.00 Device [HID 056a:00d1] on usb-dummy_hcd.3-1/input0 [ 127.705222][ T4211] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 127.714311][ T4211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.728709][ T4167] input: Wacom Bamboo 2FG 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D1.0008/input/input8 [ 127.759768][ T4211] usb 6-1: Product: syz [ 127.763976][ T4211] usb 6-1: Manufacturer: syz [ 127.775263][ T5581] loop6: detected capacity change from 0 to 1024 [ 127.782709][ T4211] usb 6-1: SerialNumber: syz [ 127.789375][ T4211] usb 6-1: config 0 descriptor?? [ 127.842452][ T5587] loop4: detected capacity change from 0 to 512 [ 127.930878][ T5590] 9pnet_virtio: no channels available for device [ 128.016763][ T5590] loop1: detected capacity change from 0 to 1024 [ 128.303414][ T5590] attempt to access beyond end of device [ 128.303414][ T5590] loop1: rw=0, want=8589934592, limit=1024 [ 128.315282][ T5590] Buffer I/O error on dev loop1, logical block 4294967295, async page read [ 128.329855][ T5590] hfsplus: failed to load extents file [ 128.367383][ T5587] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.386501][ T4167] usb 4-1: USB disconnect, device number 9 [ 128.516239][ T5587] EXT4-fs (loop4): 1 truncate cleaned up [ 128.551579][ T5587] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 128.626911][ T154] hfsplus: b-tree write err: -5, ino 4 [ 128.712906][ T5597] loop1: detected capacity change from 0 to 512 [ 128.888454][ T5597] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 130.590611][ T21] usb 6-1: USB disconnect, device number 4 [ 131.246684][ T4211] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 131.915008][ T4211] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 131.939265][ T4211] usb 7-1: config 1 has no interface number 0 [ 131.974989][ T4211] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.016874][ T4211] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 132.067953][ T4211] usb 7-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 132.185956][ T4211] usb 7-1: string descriptor 0 read error: -71 [ 132.193556][ T4211] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.202982][ T4167] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.247244][ T4211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.324771][ T4211] usb 7-1: can't set config #1, error -71 [ 132.344112][ T4211] usb 7-1: USB disconnect, device number 2 [ 132.519164][ T5684] loop6: detected capacity change from 0 to 1024 [ 132.584759][ T4167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.627726][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.634828][ T4167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.634874][ T4167] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 132.634900][ T4167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.638529][ T5684] EXT4-fs (loop6): Ignoring removed orlov option [ 132.645708][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.662354][ T4167] usb 5-1: config 0 descriptor?? [ 132.726431][ T5684] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 132.801516][ T5684] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 133.535700][ T4167] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 133.677100][ T4167] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0009/input/input11 [ 133.982732][ T4167] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 134.046051][ T4167] usb 5-1: USB disconnect, device number 6 [ 134.444437][ T4173] Bluetooth: Wrong link type (-22) [ 134.450557][ T4173] Bluetooth: hci0: link tx timeout [ 134.456441][ T4173] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.700981][ T5726] loop3: detected capacity change from 0 to 1024 [ 134.828405][ T5734] loop1: detected capacity change from 0 to 8 [ 134.837988][ T5726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.906611][ T5737] loop4: detected capacity change from 0 to 1024 [ 135.425187][ T4242] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.212610][ T4211] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 140.221119][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 140.344706][ T4242] usb 5-1: unable to read config index 0 descriptor/all [ 140.364999][ T4242] usb 5-1: can't read configurations, error -71 [ 140.382168][ T26] audit: type=1326 audit(1731237547.121:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4a074719 code=0x7ffc0000 [ 140.466354][ T26] audit: type=1326 audit(1731237547.151:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4a074719 code=0x7ffc0000 [ 140.522960][ T5756] loop1: detected capacity change from 0 to 2048 [ 140.546415][ T5763] loop6: detected capacity change from 0 to 1024 [ 140.576410][ T26] audit: type=1326 audit(1731237547.151:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7f4a074719 code=0x7ffc0000 [ 140.603821][ T5766] loop4: detected capacity change from 0 to 512 [ 140.628129][ T5770] loop3: detected capacity change from 0 to 512 [ 140.652277][ T26] audit: type=1326 audit(1731237547.151:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7f4a074753 code=0x7ffc0000 [ 140.710630][ T5756] loop1: p1 < > p4 [ 140.735426][ T5749] loop5: detected capacity change from 0 to 512 [ 140.743185][ T5756] loop1: p4 size 8388608 extends beyond EOD, truncated [ 140.766450][ T5770] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 140.774228][ T5766] EXT4-fs (loop4): Ignoring removed nobh option [ 140.782641][ T5766] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.810787][ T5770] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 140.820022][ T4220] hfsplus: b-tree write err: -5, ino 4 [ 140.833753][ T5770] System zones: 1-12 [ 140.889545][ T26] audit: type=1326 audit(1731237547.181:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7f4a0731ff code=0x7ffc0000 [ 140.923488][ T26] audit: type=1326 audit(1731237547.261:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7f4a0747a7 code=0x7ffc0000 [ 140.948790][ T26] audit: type=1326 audit(1731237547.261:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f4a0730b0 code=0x7ffc0000 [ 140.967445][ T5770] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.372: corrupted in-inode xattr [ 140.998371][ T5766] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 141.018193][ T5766] EXT4-fs (loop4): 1 truncate cleaned up [ 141.024296][ T5766] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,nobh,usrjquota="errors=continue,dioread_nolock,noblock_validity,,errors=continue. Quota mode: writeback. [ 141.050888][ T26] audit: type=1326 audit(1731237547.261:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f4a07431b code=0x7ffc0000 [ 141.097328][ T5770] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.372: couldn't read orphan inode 15 (err -117) [ 141.154834][ T26] audit: type=1326 audit(1731237547.321:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7f4a0733aa code=0x7ffc0000 [ 141.192490][ T3544] loop1: p1 < > p4 [ 141.205985][ T5770] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 141.228416][ T3544] loop1: p4 size 8388608 extends beyond EOD, truncated [ 141.985941][ T26] audit: type=1326 audit(1731237547.321:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.1.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f4a07431b code=0x7ffc0000 [ 142.204195][ T5799] loop6: detected capacity change from 0 to 512 [ 142.333655][ T5802] loop3: detected capacity change from 0 to 512 [ 142.351930][ T5799] EXT4-fs (loop6): orphan cleanup on readonly fs [ 142.364761][ T5799] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #4: comm syz.6.376: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 142.413955][ T5799] EXT4-fs error (device loop6): ext4_quota_enable:6391: comm syz.6.376: Bad quota inode: 4, type: 1 [ 142.431484][ T5799] EXT4-fs warning (device loop6): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 143.695105][ T5806] netlink: 32 bytes leftover after parsing attributes in process `syz.4.378'. [ 143.714850][ T5799] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 143.721593][ T5799] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,abort,,errors=continue. Quota mode: writeback. [ 143.811403][ T5802] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.377: corrupted inode contents [ 143.925293][ T5802] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #16: comm syz.3.377: mark_inode_dirty error [ 143.966897][ T5802] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.377: corrupted inode contents [ 144.072818][ T4284] udevd[4284]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 144.083298][ T4507] udevd[4507]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 144.131616][ T5802] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.377: mark_inode_dirty error [ 144.209019][ T4510] udevd[4510]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 144.354154][ T5802] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.377: corrupted inode contents [ 144.646554][ T4604] udevd[4604]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 144.690462][ T5802] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 144.700391][ T5802] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.377: corrupted inode contents [ 144.940121][ T5802] EXT4-fs error (device loop3): ext4_truncate:4272: inode #16: comm syz.3.377: mark_inode_dirty error [ 144.965315][ T5802] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 144.988320][ T5802] EXT4-fs (loop3): 1 truncate cleaned up [ 145.006491][ T5802] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.074814][ T4156] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 145.074924][ T5802] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.237299][ T5856] loop6: detected capacity change from 0 to 256 [ 145.334768][ T4156] usb 2-1: Using ep0 maxpacket: 8 [ 145.364947][ T5856] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 145.387849][ T5802] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2246637823 (4493275646 ns) > initial count (2691688 ns). Using initial count to start timer. [ 145.465420][ T5860] futex_wake_op: syz.4.390 tries to shift op by 32; fix this program [ 145.494965][ T4156] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.525013][ T4156] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 145.732813][ T4156] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 146.501799][ T4156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.540996][ T4156] usb 2-1: Product: syz [ 146.556185][ T4156] usb 2-1: Manufacturer: syz [ 146.559798][ T5876] loop6: detected capacity change from 0 to 8 [ 146.561012][ T4156] usb 2-1: SerialNumber: syz [ 146.593614][ T4156] usb 2-1: config 0 descriptor?? [ 147.735769][ T5903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.399'. [ 148.015259][ T4215] usb 2-1: USB disconnect, device number 7 [ 148.057530][ T5925] loop5: detected capacity change from 0 to 128 [ 148.171027][ T5928] loop1: detected capacity change from 0 to 512 [ 148.186463][ T5931] loop3: detected capacity change from 0 to 8 [ 148.366782][ T5925] EXT4-fs warning (device loop5): ext4_fill_super:3982: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 148.414817][ T5925] EXT4-fs (loop5): Encoding requested by superblock is unknown [ 148.532816][ T5928] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.404: corrupted inode contents [ 148.584678][ T5928] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #16: comm syz.1.404: mark_inode_dirty error [ 148.602034][ T5928] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.404: corrupted inode contents [ 148.618525][ T5928] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.404: mark_inode_dirty error [ 148.787475][ T5928] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.404: corrupted inode contents [ 149.032359][ T5928] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 149.116947][ T5928] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.404: corrupted inode contents [ 149.210701][ T5928] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.404: mark_inode_dirty error [ 149.367480][ T5928] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 149.423019][ T5928] EXT4-fs (loop1): 1 truncate cleaned up [ 149.437830][ T5928] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.565261][ T5928] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.775716][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 149.775998][ T26] audit: type=1326 audit(1731237556.506:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f246ec719 code=0x7ffc0000 [ 150.281770][ T5967] loop5: detected capacity change from 0 to 512 [ 150.398689][ T26] audit: type=1326 audit(1731237556.506:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f246ec719 code=0x7ffc0000 [ 150.565256][ T5974] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2246637823 (4493275646 ns) > initial count (2691688 ns). Using initial count to start timer. [ 150.714756][ T4211] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 152.454863][ T4211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.492101][ T4211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.522721][ T4211] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 152.532283][ T4211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.556751][ T4211] usb 4-1: config 0 descriptor?? [ 152.673635][ T6002] loop4: detected capacity change from 0 to 8 [ 153.142494][ T4211] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 153.440062][ T4211] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000A/input/input12 [ 153.938166][ T4211] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 154.045134][ T4211] usb 4-1: USB disconnect, device number 10 [ 154.404776][ T13] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 154.654693][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 155.261227][ T6041] loop3: detected capacity change from 0 to 4096 [ 155.288925][ T6047] loop6: detected capacity change from 0 to 512 [ 155.359105][ T6047] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 155.383152][ T6041] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.469717][ T6047] EXT4-fs (loop6): 1 truncate cleaned up [ 155.476339][ T13] usb 6-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 155.487208][ T6047] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,nodelalloc,nombcache,usrjquota=,,errors=continue. Quota mode: none. [ 155.526797][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.614796][ T13] usb 6-1: Product: syz [ 155.629857][ T13] usb 6-1: Manufacturer: syz [ 155.634514][ T13] usb 6-1: SerialNumber: syz [ 155.663294][ T13] usb 6-1: config 0 descriptor?? [ 155.787520][ T6047] input: syz0 as /devices/virtual/input/input13 [ 156.454819][ T6081] loop6: detected capacity change from 0 to 128 [ 156.468979][ T6082] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 157.071311][ T6085] af_packet: tpacket_rcv: packet too big, clamped from 32834 to 3966. macoff=82 [ 158.043102][ T6094] kvm: emulating exchange as write [ 159.045798][ T6119] netlink: 32 bytes leftover after parsing attributes in process `syz.1.449'. [ 159.069640][ T6121] netlink: 'syz.3.450': attribute type 4 has an invalid length. [ 159.141574][ T6124] netlink: 'syz.3.450': attribute type 4 has an invalid length. [ 159.300092][ T6126] loop4: detected capacity change from 0 to 1024 [ 159.712878][ T6140] futex_wake_op: syz.3.456 tries to shift op by 144; fix this program [ 161.213704][ T6153] netlink: 32 bytes leftover after parsing attributes in process `syz.1.462'. [ 161.274933][ T13] rtl8150 6-1:0.0: couldn't reset the device [ 161.281118][ T13] rtl8150: probe of 6-1:0.0 failed with error -5 [ 161.341883][ T13] usb 6-1: USB disconnect, device number 5 [ 161.510853][ T6160] loop4: detected capacity change from 0 to 1024 [ 161.579697][ T6172] loop1: detected capacity change from 0 to 1764 [ 161.694637][ T6177] fuse: root generation should be zero [ 161.903230][ T6184] loop5: detected capacity change from 0 to 1024 [ 162.251317][ T6192] futex_wake_op: syz.1.469 tries to shift op by 144; fix this program [ 162.900580][ T4220] hfsplus: b-tree write err: -5, ino 4 [ 162.933056][ T6198] loop1: detected capacity change from 0 to 164 [ 163.378482][ T6211] netlink: 32 bytes leftover after parsing attributes in process `syz.6.474'. [ 163.546722][ T6216] loop6: detected capacity change from 0 to 8 [ 163.846379][ T6184] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,bsdgroups,resuid=0x0000000000000000,auto_da_alloc=0x000000000000007f,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback. [ 164.490026][ T6231] loop1: detected capacity change from 0 to 128 [ 164.787031][ T6238] loop3: detected capacity change from 0 to 1024 [ 164.838679][ T6245] loop5: detected capacity change from 0 to 512 [ 165.446704][ T6238] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.459937][ T6245] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 165.606258][ T6245] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 165.692210][ T6245] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 165.730101][ T6260] loop1: detected capacity change from 0 to 1024 [ 165.739177][ T6245] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 165.807489][ T6245] EXT4-fs (loop5): 1 truncate cleaned up [ 165.829049][ T6260] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 165.836735][ T6245] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,data_err=abort,noinit_itable,nouid32,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 165.998315][ T6260] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,nombcache,auto_da_alloc=0x0000000000000002,nombcache,noinit_itable,nomblk_io_submit,init_itable=0x0000000000000009,usrquota,errors=continue,,errors=continue. Quota mode: writeback. [ 166.470084][ T6281] loop3: detected capacity change from 0 to 512 [ 166.544257][ T6285] loop5: detected capacity change from 0 to 512 [ 166.568468][ T6281] EXT4-fs (loop3): Ignoring removed nobh option [ 166.585278][ T6282] netlink: 408 bytes leftover after parsing attributes in process `syz.4.488'. [ 166.600326][ T6281] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.662522][ T6281] EXT4-fs (loop3): 1 truncate cleaned up [ 166.680849][ T6281] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 166.704729][ T6295] loop1: detected capacity change from 0 to 8 [ 166.731136][ T6285] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.489: corrupted inode contents [ 166.816487][ T6297] loop6: detected capacity change from 0 to 512 [ 166.834829][ T6285] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #16: comm syz.5.489: mark_inode_dirty error [ 166.866157][ T6285] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.489: corrupted inode contents [ 167.019261][ T6285] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.489: mark_inode_dirty error [ 167.035592][ T6285] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.489: corrupted inode contents [ 167.666230][ T6285] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 167.693241][ T6285] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.489: corrupted inode contents [ 167.723888][ T6285] EXT4-fs error (device loop5): ext4_truncate:4272: inode #16: comm syz.5.489: mark_inode_dirty error [ 167.742931][ T6285] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 167.759445][ T6299] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 167.811527][ T6297] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.6.485: corrupted xattr block 95 [ 167.895959][ T6299] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #18: comm syz.3.490: mark_inode_dirty error [ 167.913182][ T6299] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.490: Invalid block bitmap block 596022198 in block_group 0 [ 167.933773][ T6299] EXT4-fs error (device loop3): ext4_discard_preallocations:5131: comm syz.3.490: Error -117 reading block bitmap for 0 [ 167.952675][ T6299] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 167.963664][ T6285] EXT4-fs (loop5): 1 truncate cleaned up [ 167.965010][ T6299] EXT4-fs error (device loop3): ext4_punch_hole:4112: inode #18: comm syz.3.490: mark_inode_dirty error [ 168.189598][ T6297] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.485: bg 0: block 7: invalid block bitmap [ 168.211711][ T6285] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.316436][ T6285] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.337879][ T4165] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 168.383980][ T4165] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 168.429063][ T4165] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #2: comm syz-executor: mark_inode_dirty error [ 168.521401][ T6297] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 168.542536][ T6297] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2932: inode #11: comm syz.6.485: corrupted xattr block 95 [ 168.622636][ T6297] EXT4-fs warning (device loop6): ext4_evict_inode:302: xattr delete (err -117) [ 168.639579][ T6326] loop1: detected capacity change from 0 to 512 [ 168.650196][ T6297] EXT4-fs (loop6): 1 orphan inode deleted [ 168.656615][ T6297] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.844860][ T6326] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.896295][ T6326] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.502520][ T26] audit: type=1326 audit(1731237576.236:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4a074719 code=0x7ffc0000 [ 169.599027][ T6341] loop6: detected capacity change from 0 to 2048 [ 169.631952][ T26] audit: type=1326 audit(1731237576.256:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f7f4a074719 code=0x7ffc0000 [ 169.699249][ T6348] loop1: detected capacity change from 0 to 8 [ 169.722652][ T6341] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.743537][ T6341] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.798321][ T26] audit: type=1326 audit(1731237576.256:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4a074719 code=0x7ffc0000 [ 169.821502][ T26] audit: type=1326 audit(1731237576.256:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f7f4a074719 code=0x7ffc0000 [ 169.921164][ T26] audit: type=1326 audit(1731237576.256:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4a074719 code=0x7ffc0000 [ 170.106306][ T6341] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #14: comm syz.6.501: attempt to clear invalid blocks 1886221359 len 1 [ 171.055591][ T6366] ODEBUG: Out of memory. ODEBUG disabled [ 171.430755][ T13] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 171.590163][ T6369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.508'. [ 171.736402][ T6375] loop6: detected capacity change from 0 to 512 [ 171.768100][ T6350] chnl_net:caif_netlink_parms(): no params data found [ 171.842415][ T6375] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.507: corrupted inode contents [ 171.904825][ T2350] Bluetooth: hci0: command 0x0409 tx timeout [ 171.914901][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 255, changing to 11 [ 171.952363][ T6375] EXT4-fs error (device loop6): ext4_dirty_inode:6010: inode #16: comm syz.6.507: mark_inode_dirty error [ 171.981571][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59391, setting to 1024 [ 172.003072][ T6375] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.507: corrupted inode contents [ 172.079291][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.094656][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.143511][ T6375] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #16: comm syz.6.507: mark_inode_dirty error [ 172.163112][ T6350] device bridge_slave_0 entered promiscuous mode [ 172.175546][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.182898][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.212163][ T6350] device bridge_slave_1 entered promiscuous mode [ 172.219785][ T6375] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.507: corrupted inode contents [ 172.245124][ T13] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 172.254197][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.284968][ T6375] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 172.306432][ T13] usb 6-1: Product: syz [ 172.310937][ T13] usb 6-1: Manufacturer: syz [ 172.322687][ T13] usb 6-1: SerialNumber: syz [ 172.327083][ T6350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.330662][ T6375] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.507: corrupted inode contents [ 172.392526][ T13] usb 6-1: config 0 descriptor?? [ 172.479864][ T6360] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 172.502529][ T6375] EXT4-fs error (device loop6): ext4_truncate:4272: inode #16: comm syz.6.507: mark_inode_dirty error [ 172.589773][ T6350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.666240][ T13] snd-usb-audio: probe of 6-1:0.0 failed with error -71 [ 172.680802][ T6375] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 172.846222][ T6375] EXT4-fs (loop6): 1 truncate cleaned up [ 172.970356][ T6375] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 173.029440][ T4215] usb 6-1: USB disconnect, device number 6 [ 173.082904][ T6375] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.147118][ T6350] team0: Port device team_slave_0 added [ 173.156980][ T6350] team0: Port device team_slave_1 added [ 173.214510][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.228130][ T6410] loop1: detected capacity change from 0 to 512 [ 173.242075][ T6409] loop4: detected capacity change from 0 to 1024 [ 173.255621][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.290214][ T6350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.304796][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.312165][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.341186][ T6350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.362658][ T6410] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 173.387822][ T6410] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.434883][ T6350] device hsr_slave_0 entered promiscuous mode [ 173.442155][ T6350] device hsr_slave_1 entered promiscuous mode [ 173.449605][ T6350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.479133][ T6350] Cannot create hsr debugfs directory [ 173.593545][ T6416] loop6: detected capacity change from 0 to 1024 [ 173.654212][ T6416] hfsplus: invalid extent btree flag [ 173.683196][ T6416] hfsplus: failed to load extents file [ 173.695377][ T6418] loop5: detected capacity change from 0 to 8 [ 173.833722][ T4173] [ 173.836171][ T4173] ===================================== [ 173.841804][ T4173] WARNING: bad unlock balance detected! [ 173.847342][ T4173] 5.15.171-syzkaller #0 Not tainted [ 173.850081][ T6420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.518'. [ 173.852527][ T4173] ------------------------------------- [ 173.852536][ T4173] kworker/u5:3/4173 is trying to release lock (&chan->lock) at: [ 173.874510][ T4173] [] l2cap_recv_frame+0x136f/0x8ae0 [ 173.881287][ T4173] but there are no more locks to release! [ 173.887001][ T4173] [ 173.887001][ T4173] other info that might help us debug this: [ 173.895055][ T4173] 2 locks held by kworker/u5:3/4173: [ 173.900333][ T4173] #0: ffff88807e82a938 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 173.911069][ T4173] #1: ffffc90002f17d20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 173.922484][ T4173] [ 173.922484][ T4173] stack backtrace: [ 173.928363][ T4173] CPU: 1 PID: 4173 Comm: kworker/u5:3 Not tainted 5.15.171-syzkaller #0 [ 173.936676][ T4173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 173.946717][ T4173] Workqueue: hci4 hci_rx_work [ 173.951396][ T4173] Call Trace: [ 173.954658][ T4173] [ 173.957576][ T4173] dump_stack_lvl+0x1e3/0x2d0 [ 173.962242][ T4173] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 173.967864][ T4173] ? panic+0x860/0x860 [ 173.971922][ T4173] ? l2cap_recv_frame+0x136f/0x8ae0 [ 173.977106][ T4173] print_unlock_imbalance_bug+0x248/0x2b0 [ 173.982817][ T4173] ? list_move_tail+0x130/0x130 [ 173.987666][ T4173] lock_release+0x596/0x9a0 [ 173.992246][ T4173] ? mark_lock+0x98/0x340 [ 173.996564][ T4173] ? l2cap_recv_frame+0x136f/0x8ae0 [ 174.001753][ T4173] ? __lock_acquire+0x1ff0/0x1ff0 [ 174.006766][ T4173] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 174.012839][ T4173] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 174.018842][ T4173] ? l2cap_recv_frame+0x136f/0x8ae0 [ 174.024126][ T4173] __mutex_unlock_slowpath+0xde/0x750 [ 174.029492][ T4173] ? __local_bh_enable_ip+0x164/0x1f0 [ 174.034855][ T4173] ? mutex_unlock+0x10/0x10 [ 174.039342][ T4173] ? do_raw_spin_unlock+0x137/0x8b0 [ 174.044533][ T4173] ? l2cap_sock_recv_cb+0x18a/0x1e0 [ 174.049750][ T4173] l2cap_recv_frame+0x136f/0x8ae0 [ 174.054788][ T4173] ? l2cap_conn_unreliable+0x1a0/0x1a0 [ 174.060248][ T4173] ? __mutex_unlock_slowpath+0x218/0x750 [ 174.065877][ T4173] ? rcu_lock_release+0x5/0x20 [ 174.070630][ T4173] ? mutex_unlock+0x10/0x10 [ 174.075116][ T4173] ? hci_conn_enter_active_mode+0x25c/0x360 [ 174.081000][ T4173] ? l2cap_recv_acldata+0x2ea/0x1560 [ 174.086280][ T4173] hci_rx_work+0x48f/0x990 [ 174.090688][ T4173] process_one_work+0x8a1/0x10c0 [ 174.095625][ T4173] ? worker_detach_from_pool+0x260/0x260 [ 174.101265][ T4173] ? _raw_spin_lock_irqsave+0x120/0x120 [ 174.106811][ T4173] ? kthread_data+0x4e/0xc0 [ 174.113169][ T4173] ? wq_worker_running+0x97/0x170 [ 174.118305][ T4173] worker_thread+0xaca/0x1280 [ 174.122995][ T4173] kthread+0x3f6/0x4f0 [ 174.127062][ T4173] ? rcu_lock_release+0x20/0x20 [ 174.131909][ T4173] ? kthread_blkcg+0xd0/0xd0 [ 174.136497][ T4173] ret_from_fork+0x1f/0x30 [ 174.140917][ T4173] [ 174.146667][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 174.163784][ T6422] loop1: detected capacity change from 0 to 2048 [ 174.196596][ T6350] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 174.208085][ T6350] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 174.246267][ T6422] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.309430][ T6350] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 174.332987][ T6350] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 174.355921][ T4176] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 174.560570][ T6350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.582538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.592531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.602899][ T6350] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.616476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.625730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.634161][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.641255][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.657840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.666174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.675114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.683564][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.690654][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.701517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.710507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.739679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.749221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.760314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.769139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.793867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.802866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.822796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.832837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.842880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.852699][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.906339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.914509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.929329][ T6350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.002100][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.011053][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.030347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.038581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.047721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.055541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.064184][ T6350] device veth0_vlan entered promiscuous mode [ 175.075801][ T6350] device veth1_vlan entered promiscuous mode [ 175.092076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.100047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 175.108430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.117038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.127644][ T6350] device veth0_macvtap entered promiscuous mode [ 175.137559][ T6350] device veth1_macvtap entered promiscuous mode [ 175.150482][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.161133][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.171076][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.182684][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.193505][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.204253][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.214157][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.225455][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.235327][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.246421][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.258195][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.267385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.275487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.283469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.292154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.302556][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.314051][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.324250][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.334976][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.344941][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.355381][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.365293][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.375761][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.385598][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.396551][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.409587][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.417778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.427684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.438976][ T6350] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.447814][ T6350] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.456757][ T6350] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.466370][ T6350] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.494420][ T6350] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 175.515155][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.516100][ T6350] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 175.527387][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.543931][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.553003][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.563173][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.570704][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready