last executing test programs: 2m14.388514107s ago: executing program 0 (id=215): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x216, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "977bcbbe"}, @global=@item_012={0x1, 0x1, 0x4, "d8"}]}}, 0x0}, 0x0) 2m11.272672256s ago: executing program 0 (id=227): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setresuid(0x0, 0xee00, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x84) 2m9.41538109s ago: executing program 0 (id=231): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f00000016c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 2m8.940672748s ago: executing program 0 (id=233): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xee, 0x469, &(0x7f0000000ac0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000008380)='./bus\x00', 0x14018, &(0x7f0000000880)=ANY=[@ANYBLOB="0010bbbe8b821e4cf6d79d4d501be8af339fd4bbd17d928c6d063cce0ce162684c47d7ced43a8371c6dd5466f6250eb5e73903a3df58f7df872e05470b03dfd44956cfbf6b2651360ae7880805ab8f419532c02aa5d40d1ed66a2ca647a20a37040700000000000000c701346399b0848c3fac7e886dbfcbcd516f5d261738410cf17d0cea70e5d3c6b7478c07b55e59876f1b7d68782cb16137784d64e37a4327377467b94266cde7f65690b41ccf9c1dca7a081990"], 0x1, 0x6fb, &(0x7f0000000180)="$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") ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001140)={0x0, 0x0, 0x0, 0xd, 0x6, 0x0, 0x2, 0x17, 0x0, "2f4d702bb82b8560716cc7378209883af27a5d3f2d84b1f5612536ed0d6c3b57dca8a0d730c7ac5bc6d30327449efdd4abcacd1f8adfa586eeb1853c980ac94d", "75c586016ba01ae69c957c70d12c3c6890a3764c13a45976d1d67ffd52c604e1881dfd0c5a2166fd3d0d6a78d69dba0bfc2d182d527b913f0b107093f2ecf268", "8dd299c7cca9c542c5fe1f06b00e11d6bd3ba9686d8081b458e3bba3dbde6428", [0x9, 0x3]}) 2m8.360851396s ago: executing program 0 (id=243): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) syz_open_dev$tty1(0xc, 0x4, 0x1) ioprio_set$pid(0x1, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 2m6.140561669s ago: executing program 0 (id=257): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setresuid(0x0, 0xee00, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x84) 2m5.903283857s ago: executing program 32 (id=257): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setresuid(0x0, 0xee00, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x84) 1m59.670442046s ago: executing program 4 (id=302): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 1m59.419616876s ago: executing program 4 (id=305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000050008000100000004000b00080007000200000004003400080026006c09000008003500"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m58.884899334s ago: executing program 4 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xc8, 0xff, 0xff}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x0, 0x6, 0x7, 0x0, 0x8000, 0x3, 0x1, 0x9, 0x8, 0xf8, 0x9, 0x10, 0x0, 0x800000, 0x7, 0x0, 0xff, 0x8c, 0x6, '\x00', 0x80, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m58.06071903s ago: executing program 4 (id=314): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f0000000040)={[{@adinicb}, {@unhide}, {@anchor={'anchor', 0x3d, 0xec1}}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@gid_ignore}, {@undelete}, {@volume={'volume', 0x3d, 0x7}}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x2}}]}, 0xde, 0xc2e, &(0x7f0000000f40)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) 1m57.644935899s ago: executing program 4 (id=320): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xdc1de) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x4}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 1m56.183487994s ago: executing program 4 (id=324): r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0xfffffffffffffc36, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 1m55.341914331s ago: executing program 33 (id=324): r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0xfffffffffffffc36, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 1m36.443243236s ago: executing program 2 (id=412): unshare(0x2020400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) 1m36.011675305s ago: executing program 2 (id=415): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x2000040, &(0x7f0000000480)={[{@auto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@data_err_ignore}, {@init_itable}, {@errors_continue}]}, 0x1, 0x4e7, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 1m34.988938081s ago: executing program 2 (id=419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000100)={0x0, r2}) close_range(r0, 0xffffffffffffffff, 0x0) 1m34.008886868s ago: executing program 2 (id=428): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m33.873392988s ago: executing program 2 (id=432): rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigtimedwait(&(0x7f0000000100)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 1m33.295791246s ago: executing program 2 (id=435): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m33.017709044s ago: executing program 34 (id=435): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 55.249201934s ago: executing program 6 (id=686): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x3, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x2}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6cfe6ec8355b5dc4e305886d95f0867070e5a036900"}, 0x3c) 53.907709979s ago: executing program 6 (id=690): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r2, 0x10e, 0x7, &(0x7f0000000980)=""/5, &(0x7f00000009c0)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write$cgroup_type(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) memfd_create(0x0, 0x2) r3 = socket$inet6(0xa, 0x803, 0x8) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x10) 53.104828977s ago: executing program 6 (id=695): syz_open_dev$sndctrl(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syslog(0x3, &(0x7f0000000140)=""/166, 0xa6) 51.364082771s ago: executing program 6 (id=698): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x2, 0xc17, &(0x7f0000000800)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) rmdir(&(0x7f0000000180)='./file0/../file0\x00') 50.926472339s ago: executing program 7 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x14, 0x1, 0x3, 0x5, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 50.816700909s ago: executing program 7 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000080)={0xfffffffffffffffe, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x58c1}, 0x4082) 50.632709768s ago: executing program 7 (id=703): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="140000000000000029000000430000000200000000000000280000000000000029000000390000004102008300000000fe880000000000000000000000000101580000000000000029000000390000002b0801040000000000000000000000000000ffff7f000001fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000000ffffac1e01012400000000000000290000003200000000000000000000000000ffffac1414bb", @ANYRES32=0x0, @ANYBLOB="000000002400000000000000290000003200000020010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00000000140000000000000029000000080000000000000000000000400100"], 0x240}}], 0x2, 0x0) 49.538978744s ago: executing program 7 (id=704): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0'}, 0xb) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x5207, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x37f, &(0x7f0000000440)="$eJzs3c9rI2UYwPFn0jQ/umyTgygK0ge96GVoq2e1SBeEgkt3I+4Kwux2oiFjUmZCJCK2nryKN/8BwWUPHhY8LKj/QC/e1osXT9vLgqCLiCPzK8l0p0mTZmm6+/3Abt7kfZ/M+04m5XkCeXP4/tefNOueWbc6kivdF0NE5KFIVXKSMKKbgmTYl1cv/HnvxSvXrhdFZHNb9dLG1dfWVXV55adPPy/Hw+4W5aD64eGD9T8Onj14/vC/qx83PG142mp31NIb7d871g3H1p2G1zRVLzu25dnaaHm2G/W3o/66097d7anV2rm4tOvanqdWq6dNu6edtnbcnlofWY2WmqapF5eyphsrjug7r0pTxNRubW9bG1Me8OaUcZi1f3zfH9HtuhvWgohZDt+vw2q3HvvcAADA3Enn//ptkrBXJddPKI24FiiE7XQZEOT/SXtra3Nbg2JhkP/ffumXzoX37izH+f/dQlb+//pvUXwq/w+OPvP8//sj98uzO5HzYm+SwafK/zEfVtLvyPuDij0W5P/Bu6Ff0X/5we3VsEH+DwAAAAAAAAAAAAAAAAAAAADAefDQ9yu+71eS2+Tf4CsE8f2QsT/yi8Y4d3KS/foX4x0F+tcDnkhXrl2XUvjFvfyyiPNVt9atRbdxfzJwVSryb3g9xKINJ6L9BDRQlZ+dvW5tMQ5YCP/fKIiKI7asSUWqqfiwfemdrc01jUTx4fH3ujUjvxTE16URxq9LRZ7Jjl/PjC/IKy8PxZtSkV9vSlsc2Qmv60H8F2uqb7+7dSS+HI7L8ubjfUkAAAAAAJg5U7UUl8/VdP0b1e+mqZrVH9TyMlyfP/r5QL++Xs2sz/OVF/Jnu3YAAAAAAJ4WXuGzpuU4tuv1jm2UZdyY5Pc0Rj9PdiM/yeCgcS9sLI4aszC0wpM+cyH+BY0JJi+TrdRynL+Kknkyky1cU12lU5xVy0nWf4LBpUlfAtfLTb522/VWgvnoVMsZaiQfG0WPLDxy6uTyceE/GEnUZAdNds4dN/i5b777e7p1GfGuvcNdb9wppVZ6TLhx5JH9MRftA98fO5/F7L8WP07zIzMAAAAA5kSS9Je95JG3znZCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8hU63E9vJGme9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBe/B8AAP//Tuzx8g==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 48.900691093s ago: executing program 6 (id=706): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRESHEX, @ANYRES16], 0x1, 0x1293, &(0x7f00000035c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x275a, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 48.09613218s ago: executing program 7 (id=707): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/165, 0xa5}, {0x0}], 0x2) 47.352220977s ago: executing program 6 (id=714): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='fd/3\x00') 47.126198106s ago: executing program 35 (id=714): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='fd/3\x00') 45.128190979s ago: executing program 7 (id=734): socket$inet6(0xa, 0x80000, 0x8000000003c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[]) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x4001c00) 44.059502276s ago: executing program 36 (id=734): socket$inet6(0xa, 0x80000, 0x8000000003c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[]) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x4001c00) 37.212736414s ago: executing program 3 (id=771): recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x2022, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) open_by_handle_at(0xffffffffffffffff, 0x0, 0x290300) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setresuid(0x0, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x4, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 32.004070668s ago: executing program 3 (id=788): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000200)='./bus\x00', 0x10090, &(0x7f00000000c0)=ANY=[], 0x3, 0x14de, &(0x7f0000002a40)="$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") creat(&(0x7f0000000140)='./bus\x00', 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./bus\x00', 0x0, 0x1004, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x44240, 0x100) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 31.524224057s ago: executing program 3 (id=794): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x20000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x61) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) lseek(r1, 0x100, 0x0) getdents(r1, 0x0, 0x0) 30.232730453s ago: executing program 3 (id=798): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000100)=0x3ff, 0x4) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40010000) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 30.133186253s ago: executing program 3 (id=801): lseek(0xffffffffffffffff, 0x130a, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@dioread_lock}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000540)={[{@journal_checksum}, {@discard}, {@nomblk_io_submit}, {@jqfmt_vfsv0}, {@commit={'commit', 0x3d, 0x5e}}, {@noblock_validity}, {@nodiscard}, {@sysvgroups}]}, 0x1, 0x263, &(0x7f0000000600)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) 28.406564237s ago: executing program 3 (id=812): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./cgroup/../file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r3 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) pipe2(&(0x7f0000000240), 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) 13.065652241s ago: executing program 37 (id=812): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./cgroup/../file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r3 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) pipe2(&(0x7f0000000240), 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) 4.786511105s ago: executing program 8 (id=919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) 4.549846214s ago: executing program 8 (id=922): r0 = syz_open_procfs(0x0, &(0x7f0000001d00)='net/unix\x00') r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x1, 0x40000011, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020) 4.392091554s ago: executing program 8 (id=924): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x891a, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xdffe, @remote}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) 4.341054084s ago: executing program 9 (id=925): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) 4.276891654s ago: executing program 8 (id=926): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x19, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x1, 0x151b, &(0x7f0000001580)="$eJzs3AuUjlXbOPB97b3vMaZJT5Mchn3t6+ZJg22SJIeEHJIkSZKcEpImSRISQ05JQxJynCSHISSHaUwa5/Mh56TJK0mSkJBk/5fe3k/93/d7D+vt+7zrm+u31l6zr7mfaz/Xfq5Z89zPvdb9fNNjZN3m9Wo1JSLxb4E//0gVQsQKIYYKIa4RQgRCiIoJFRMuHc+vIPXfexL2x3ow40pXwK4k7n/exv3P27j/eRv3P2/j/udt3P+8jfuft3H/GcvLts0uei2PvDv4+n9exu///4ccLjfpiw3lru/5L6Rw//M27n/exv3P27j/eRv3P2/j/v/fV/PvHOP+523cf8bysv+6FnzBe/8fcD2ax//uuNJ/f4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG8oZz/jIthPjL/ErXxRhjjDHGGGOMsT+Oz3elK2CMMcYYY4wxxtj/PBBSKKFFIGJEPhEr8os4cZWIF1eLAuIaERHXigRxnSgorheFRGFRRBQViaKYKC6MQGEFiVCUECVFVNwgSokbRZIoLcqIssKJciJZ3CTKi5tFBXGLqChuFZXEbaKyqCKqimridlFd3CFqiJqilrhT1BZ1RF1RT9wl6ou7RQNxj2go7hWNxH2isbhfNBEPiKbiQdFMPCSai4dFC/GIaClaidaijWj7+/wp/1z+C6KPeFH0Ff1EqugvBoiXxEAxSAwWQ8RQ8bIYJl4Rw8WrIk2MECPFa2KUeF2MFm+IMWKsGCfeFOPFBDFRTBKTxRSRLt4SU8XbYpp4R0wXM8RMMUtkiNlijnhXzBXzxHzxnlgg3hcLxSKxWCwRmeIDkSWWimzxoVgmPhI5YrlYIVaKVWK1WCPWinVivdggNopNYrPYIraKbeJjsV3sEDvFLrFb7BF7xSdin/hU7BefiVzx+b+Yf/b/y+8JAgRIkKBBQwzEQCzEQhzEQTzEQwEoABGIQAIkQEEoCIWgEBSBIpAIiVAcigMCAgFBCSgBUYhCKSgFSZAEZaAMOHCQDMlQHm6GClABKkJFqASVoDJUgSpQDapBdagONaAG1IJaUBtqQ12oC3fBXXA3NIAG0BAaQiNoBI2hMTSBJtAUmkIzaAbNoTm0gBbQElpCa2gNbaEttIN20B7aQ0foCJ2gE3SGzpACKdAFukBX6ArdoBt0h+7QA3pAT+gFveAFeAFehBehH9SW/WEADICBMBAGwxAYAi/DMHgFXoFXIQ1GwEh4DV6D12E0nIExMBbGwTioLifARJgEJKdAOqTDVJgK02AaTIcZMANmQQbMhjkwB+bCPJgH78ECeB/eh0WwCJZAJmRCFiyFbMiGZXAWcmA5rICVsApWwypYC+tgLWyAjbABNsNm2Apb4WP4GHbADtgFu2AP7IFP4BP4FD6FNMiFXDgAB+AgHIRDcAgOw2E4AkfgKByFY3AMjsNxOAEn4RSchNNwGs7AWTgH5+A8nIcL8FziV832lF6fJuQlWmoZI2NkrIyVcTJOxst4WUAWkBEZkQkyQRaUBWUhWUgWkUVkokyUxWVxiRIlyVCWkCVkVEZlKVlKJskkWUaWkU46mSyTZXlZXlaQFWRFeausJG+TlWUV2cFVk9VkddnR1ZA1ZS1ZS9aWdWRdWU/Wk/VlfdlANpANZUPZSDaSjeX9sonsD4PhQXmpM83lCGghR0JL2Uq2lm3k6/CobCdHQ3vZQXaUj8uxMAY6y3YuRT4lu8iJ0FU+IyfBs7K7nAI95POyp+wle8sXZB/Z3vWV/eR06C8HyFkwUA6Sg+UQORfqyEsdqytflWlyhBwpX5NL4HU5Wr4hx8ixcpx8U46XE+REOUlOllNkunxLTpVvy2nyHTldzpAz5SyZIWfLOfJdOVfOk/Ple3KBfF8ulIvkYrlEZsoPZJZcKrPlh3KZ/EjmyOVyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi9wqt8mP5Xa5Q+6Uu+RuuUfulZ/IffJTuV9+JnPl5/KA/JM8KL+Qh+SX8rD8Sh6RX8uj8ht5TH4rj8vv5Al5Up6S38vT8gd5Rp6V5+SP8rz8SV6QP8uL0kuhQEmllFaBilH5VKzKr+LUVSpeXa0KqGtURF2rEtR1qqC6XhVShVURVVQlqmKquDIKlVWkQlVClVRRdYMqpW5USaq0KqPKKqfKqWR1kyqvblYV1C2qorpVVVK3qcqqiqqqqqnbVXV1h6qhaqpa6k5VW9VRdVU9dZeqr+5WDdQ9qqG6VzVS96nG6n7VRD2gmqoHVTP1kGquHlYt1COqpWqlWqs2qq16VLVTj6n2qoPqqB5XndQTqrN6UqWop1QX9bTqqp5R3dSzqrt6TvVQz6ueqpfqrX5WF5VXfVU/lar6qwHqJTVQDVKD1RA1VL2shqlX1HD1qkpTI9RI9ZoapV5Xo9Ubaowaq8apN9V4NUFNVJPUZDVFpau31FT1tpqm3lHT1Qw1U81SGWq2GvzrSvP/ify3/0b+8F+efavapj5W29UOtVPtUrvVHrVX7VX71D61X+1XuSpXHVAH1EF1UB1Sh9RhdVgdUUfUUXVUHVPH1HF1XJ1QJ9WP6nt1Wv2gzqiz6qz6UZ1X59WFX18DoUFLrbTWgY7R+XSszq/j9FU6Xl+tC+hrdERfqxP0dbqgvl4X0oV1EV1UJ+piurg2GrXVpENdQpfUUX2DLqVv1Em6tC6jy2qny+lkfdO/nf+P6mur2+p2up1ur9vrjrqj7qQ76c66s07RKbqL7qK76q66m+6mu+vuuofuoXvqnrq37q376D66r+6rU3WqHqBf0gP1ID1YD9FD9ct6mB6mh+vhOk2n6ZF6pB6lR+nRerQeo8focXqcHq/H64l6op6sJ+t0na6n6ql6mp6mp+vpeqaeqTN0hp6j5+i5eq6er+frBXqBXqgX6sV6sc7UmTpLZ+lsna2X6WU6Ry/Xy/VKvVKv1qv1Wr1Wr9fr9Ua9UW/Wm3WO3qa36e16u96pd+rderfeq/fqfXqf3q/361ydqw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6or546bQvkIEMdKCDmCAmiA1ig7ggLogP4oMCQYEgEkSChCAhKBhcHxQKCgdFgqJBYlAsKB6YAAMbUBAGJYKSQTS4ISgV3BgkBaWDMkHZwAXlguTgpqB8cHNQIbglqBjcGlQKbgsqB1WCqkG14PagenBHUCOoGdQK7gxqB3WCukG94K6gfnB30CC4J2gY3Bs0Cu4LGgf3B02CB4KmwYNBs+ChoHnwcNAieCRoGbQKWgdtgrZ/6Prenyn8mOtr+plU098MMC+ZgWaQGWyGmKHmZTPMvGKGm1dNmhlhRprXzCjzuhlt3jBjzFgzzrxpxpsJZqKZZCabKSbdvGWmmrfNNPOOmW5mmJlmlskws80c866Za+aZ+eY9s8C8bxaaRWaxWWIyzQcmyyw12eZDs8x8ZHLMcrPCrDSrzGqzxqw168x6s8FsNJvMZrPFbDXbzMdmu9lhdppdZrfZY/aaT8w+86nZbz4zueZzc8D8yRw0X5hD5ktz2HxljpivzVHzjTlmvjXHzXfmhDlpTpnvzWnzgzljzppz5kdz3vxkLpifzUXjL53cX3p7R40aYzAGYzEW4zAO4zEeC2ABjGAEEzABC2JBLISFsAgWwURMxOJYHC8hJCyBJTCKUSyFpTAJk7AMlkGHDpMxGctjeayAFbAiVsRKWAkrY2WsilXxdrwd78A7sCbWxDvxTqyDdbAe1sP6WB8bYANsiA2xETbCxtgYm2ATbIpNsRk2w+bYHFtgC2yJLbE1tsa22BbbYTtsj+2xI3bETtgJO2NnTMEU7IJdsCt2xW7YDbtjd+yBPbAn9sTe2Bv7YB/si30xFVNxAA7AgTgQB+NgHIpDcRgOw+E4HNMwDUfiSByFo3A0jsYxOBbH4Zs4HifgRJyEk3EKpmM6TsWpOA2n4XScjjNxJmZgBs7BOTgX5+J8nI8LcAEuxIW4GBdjJmZiFmZhNmbjMlyGOZiDK3AFrsJVuAbX4DpchxtwA27CTbgFt+A23IbbcTvuxJ24G3fjXtyL+3Af7sf9mIu5eAAP4EE8iIfwEB7Gw3gEj+BRPIrH8Bgex+N4Ak/gKTyFp/E0nsEzeA7P4Xn8CS/gz3gRPcZaKeLsVTbeXm0L2GtsrM1vfxsXsUVtoi1mi1tjC9nCv4vRWptkS9sytqx2tpxNtjf9JbZ/iSvbKraqrWZvt9XtHbbGX8X17d22gb3HNrT32nr2rt/Fjex9trF92Daxj9imtpVtZtvY5vZh28I+YlvaVra1bWM72SdsZ/ukTbFP2S726b+Ks+xSu86utxvsRrvPfmrP2R/tUfuNPW9/sn1tPzvUvmyH2VfscPuqTbMj/ioeZ9+04+0EO9FOspPtlL+KZ9pZNsPOtnMsiLl23m/id+2lONN+YBdYAQvtIrvYLvklvlRTtv3QLrMf2Ry73K6wK+0qu9qusWv/q9aVdrPdYrfavfYTu93usDvtLrvb7vklvrSP/fYzm2s/t0fs1/ag/cIessfsYfvVL/Gl/R2z39rj9jt7wp60p+z39rT9wZ6xZ3/Z/6W9f29/thett4KAJCnSFFAM5aNYyk9xdBXF09VUgK6hCF1LCXQdFaTrqRAVpiJUlBKpGBUnQ0iWiEIqQSUpSjdQKbqRkqg0laGy5KgcJdNNVJ5upgp0C1WkW6kS3UaVqQpVpWp0O1WnO6gG1aRadCfVpjpUl+rRXVSf7qYGdA81pHupEd1Hjel+akIPUFN6kJrRQ9ScHqYW9Ai1pFbUmtpQW3qU2tFj1J46UEd6nDrRE9SZnqQUeoq60NPUlZ6hbvQsdafnqAc9Tz2pF/WmF6gPvUh9qR+lUn8aQC/RQBpEg2kIDaWXaRi9QsPpVUqjETSSXqNR9DqNpjdoDI2lcfQmjacJNJEm0WSaQun0Fk2lt2kavUPTaQbNpFmUQbNpDr1Lc2kezaf3aAG9TwtpES2mJZRJH1AWLaVs+pCW0UeUQ8tpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpGH9N22kE7aRftpj20lz6hffQp7afPKJc+pwP0JzpIX9Ah+pIO01d0hL6mo/QNHaNv6Th9RyfoJJ2i7+k0/UBn6Cydox/pPP1EF+hnukieRAihDFWowyCMCfOFsWH+MC68KowPrw4LhNeEkfDaMCG8LiwYXh8WCguHRcKiYWJYLCwemhBDG1IYhiXCkmE0vCEsFd4YJoWlwzJh2dCF5cLk8KawfHhzWCG8JawY3hpWCm8LK4dVwofvrRbeHlYP7whrhDXDWuGdYe2wTlg3rBfeFdYP7w4bhPeEDcN7wwrhfWHj8P6wSfhA2DR8MGwWPhQ2Dx8OW4SPhC3DVmHrsE3YNnw0bBc+FrYPO4Qdw8fDTuETYefwyTAlfCrsEj79D4+nhv3DAeFL4Uuh9/eoxdEl0czoB9Gs6NJodvTD6LLoR9Gc6PLoiujK6Kro6uia6Nrouuj66Iboxuim6ObolujWqPf18gkHTjrltAtcjMvnYl1+F+eucvHualfAXeMi7lqX4K5zBd31rpAr7Iq4oi7RFXPFnXHorCMXuhKupIu6G1wpd6NLcqVdGVfWOVfOJbs2rq1r69q5x1x718F1dI+7x90T7gn3pHvSPeW6uKddV/eM6+aedd3dc+4597zr6Xq53u4F18e96Pq6fi7VpboBboAb6Aa6wW6wG+qGumFumBvuhrs0l+ZGupFulBvlRrvRbowb48a5cW68G+8muoluspvs0l26m+qmumlumpvupruZbqbLcBlujpvj5rq5br6b7xYkLXAL3UK32C12mS7TZbksl+2y3TK3zOW4HLfCrXCr3Cq3xq1x69w6t8FtcJvcJrfFbXHb3Da33W13O91Ot9vtdnvdXrfP7XP73X6X63LdAXfAHXQH3SH3pTvsvnJH3NfuqPvGHXPfuuPuO3fCnXSn3PfutPvBnXFn3Tn3ozvvfnIX3M/uovMuPfJWZGrk7ci0yDuR6ZEZkZmRWZGMyOzInMi7kbmReZH5kfciCyLvRxZGFkUWR5ZEMiMfRLIiSyPZkQ8jyyIfRXIiyyMrIisjqyKrI94X2x76Er6kj/obfCl/o0/ypX0ZX9Y7X84n+5t8eX+zr+Bv8RX9rb6Sv81X9lV8Vf+Ib+lb+da+jW/rH/Xt/GO+ve/gO/rHfSf/hO/sn/Qp/infxT/tu/pnfDf/rO/un/M9/PO+p+/le/sXfB//ou/r+/lU398P8C/5gX6QH+yH+KH+ZT/Mv+KH+1d9mh/hR/rX/Cj/uh/t3/Bj/Fg/zr/px/sJfqKf5Cf7KT7dv+Wn+rf9NP+On+5n+Jl+ls/ws/0c/66f6+f5+f49v8C/7xf6RX6xX+Iz/Qc+yy/12f5Dv8x/5HP8cr/Cr/Sr/Gq/xq/16/x6v8Fv9Jv8Zr/Fb/Xb/Md+u9/hd/pdfrff4/f6T/w+/6nf7z/zuf5zf8D/yR/0X/hD/kt/2H/lj/iv/VH/jT/mv/XH/Xf+hD/pT/nv/Wn/gz/jz/pz/kd/3v/kL/if/UW+Z40xxhhj7J/yj+717/83fid/HZcMEEJcvaPos789roUQmwr9eT5IJnaKCCGe6tfjwb+M2rVTU1N/fWyOEkHJRUKIyOX8GHE5Xi46iidEiuggyv/N+gbJXufp76wPJ7yP3ipE3G9yYsXl+PL6N/836z/6+LisSuG5hN+vf+HX1+1S/dFFQiSVvJyTX1yOL69f4b9Zv3C7v1d/jhL5v0gXov1vcuLF5fjy+sniMfG0SPndIxljjDHGGGOMsT8bJKt2q/pPfD5P1Jdz8onL8T/6fM4YY4wxxhhjjLEr79levZ98NCWlQ7c8PYkR/xFl8IQn/zGTK/2fiTHGGGOMMfZHu3zS/y8k9Yb/wYoYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLG853/j68Su9B4ZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxK+3/BQAA//8vFUY1") mkdir(&(0x7f0000000280)='./file0\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x123642, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) rmdir(&(0x7f0000000000)='./file0\x00') 4.192733483s ago: executing program 9 (id=927): mount(&(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x1041804, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a5a44000000001010902440001010000000904000003020600000200"], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) syz_open_procfs(0x0, 0x0) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000100020019f6c16eb00bc2ce6330780e2a01994b98b953799ba9763b3a60a668e365c450f5348f72978b1d49d8bda81f5c3658f31c64e178b0b397bf390aa23e5e2acc6da21a18d0f808bc606b26c547cec52426496ab3d449526e64ea622bc1cb64b07d13144383348d1ff1fe486fd9944d67d6e06d82cf148919b15ee53c59b579c068eb92324eb49132033e78bf4658e3ce77137f5cb98a1d4c9060b2262b83b2591f26de"], 0x8) 3.520375531s ago: executing program 8 (id=929): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0x2) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'dummy0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x67}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5b5, &(0x7f0000002a80)="$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") 2.807599469s ago: executing program 5 (id=935): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40044583, 0x0) 2.640449629s ago: executing program 5 (id=937): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 2.577403308s ago: executing program 5 (id=938): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10410, &(0x7f0000000180)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@data_err_ignore}]}, 0x3, 0x4c4, &(0x7f00000011c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x4) 2.484496278s ago: executing program 1 (id=939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r7, 0x1, 0x70bd29, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "47aa32b137d401a50000001000"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0xd, 0xfffffffe, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c}, {@in=@broadcast, 0x0, 0x6c}, @in=@multicast2, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x21}, {}, 0x80, 0x3502, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000001940)='net/snmp\x00') read$FUSE(r11, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x33, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, [@routing={0x2c, 0x0, 0x0, 0x4}]}}}}}}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) 2.220864997s ago: executing program 8 (id=940): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') getdents64(r0, &(0x7f0000000000)=""/77, 0x2a) getdents64(r0, 0xffffffffffffffff, 0x43) 1.713033396s ago: executing program 38 (id=940): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') getdents64(r0, &(0x7f0000000000)=""/77, 0x2a) getdents64(r0, 0xffffffffffffffff, 0x43) 1.678552576s ago: executing program 9 (id=942): setresuid(0xee00, 0xee00, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000e80)={'nr0\x00', {0x2, 0x4e01, @empty}}) 1.545098775s ago: executing program 9 (id=943): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x1) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000002140)={0x20052fb, 0xfffffff8, 0x800, 0x5, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 1.460849255s ago: executing program 1 (id=944): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x120040a, &(0x7f0000000240), 0x2, 0x24d, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000003c0)={0x80d8}) fcntl$setstatus(r0, 0x4, 0x80c00) 1.053690954s ago: executing program 1 (id=945): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r0, 0x2) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000002080)) 863.061103ms ago: executing program 9 (id=946): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x8000000b, 0x7, 0x9, 0x100, 0x5, 0x2}) 708.712702ms ago: executing program 1 (id=947): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite6\x00') read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000003c0)={[{@nocompress}, {@utf8}, {@nocompress}, {@map_off}, {@map_acorn}, {@unhide}, {@overriderock}, {@map_acorn}, {}, {@overriderock}, {@gid}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@unhide}, {@dmode={'dmode', 0x3d, 0x2}}]}, 0x3f, 0x575, &(0x7f0000005bc0)="$eJzs3VFv09wZwPHHpX2bZRJ6NSaEUIFD2aQileAkEBRx5Tkn6YHEjmwHtVeooimqSGGiTFp7s/WGbdL2Ibjdh9jdtE+D9hGYfJyUhjZNUGlTdf9fBOfUPvZ5jhv5iZv4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDh+zXWLjjRN0FlVo/m1KGx9/bG/9ZEFcn+oOKFfESf9J7mc3MgW3fj119XX0/8WZSH7aUFyaZGTvV9e//nptdmZwfYnBHwudnb33qz3et330w7kDN2aH72uoQMTh6blNbQycaiqlYr7cKUeq7pp6ngtTnRL+ZH2kjBSS/59VaxWy0oX1sJO0Kh5TT1Y+ORByXUr6lmhrb0oDoOHzwqxv2KaTRM0bJt0ddrmSfpEfG4SlWivpdTmVq9bHjeAtFFxkkalcY1KbqlULJZKxcrj6uMnrjt7ZIH7DTnSYvpPWkzXDzx7A6cz08//0hQjgXRkVdSxD19qEkkorRHr+wb5/7cP9Yn9Hs7/gyzffx0g+/1yUW5nlduj8v+IWM7vsSO7sidvZF160pOuvJ96ROf7aIiWQIzEEoqRlnh2ieovUVKVilTElZeyInWJRUldjDRFSyxrEksi2j6jfIlEiyeJhBKJkiXx5b4oKUpVqlIWJVoKsiahdCSQhtTEs3vZlC173MuinFExHjQqjhxGfvC07ErphNGS/3F6P/T8DZzGl0H+P2RuatEAAAAAAICz4Ni/vjv2qv+WrdVNU7vTDgsAAAAAAPxA9p3/hbSw7/rfEofrfwAAAAAALhvH3mPniEhe7mS1TXHs7VL8EQAAAAAAgEvCvv9/Oy3sHCh3xDmYLoXrfwAAAAAALom/DmbbHTnHftyed/71X8lFc85+e/U3zraXtvO2r2TbXfl2j0n9pnO1vxNbVLJidtbXC04ua3QwCebnfrE5Zq7/f1dFjgbw5+8J4Nqs/F3uZm3ubmTlxmBN1ku+bpq64IfNp0XxvKsziV5N/vB2648iUTTn/C1oXXVkc6vXLbx619uwsdijt7/dn0DR+Y5YPtj5Fuw9F8eOeM7eiNHvN5/16x4e/0y2+cx39PlRFrM2i/0Zb/PD48+lfRYLQ6NP1x1EkZOtXrd4ypF/lHtZm3tL97LimChKhVG/g/6xKB2OYtSxGCyYMArn2yjKQ1E4R6MoTxLFCccCAKZlc0wWcuz5bv+UeWdcdnecKF1+mpcX9oy+lLVZumlPrLM3j8kr7ri84p4yu/3zyHcgjcqxab//OOg3y6qf0g0+fe33oOfshVPcLDlp9cqH7d/L9Z3dvQdb2+uvu6+7b0ulcsV95LqPSzJnh9EvDkX6ZZ7cAwDIjP+OnbEtnEfZVfXPIsdfVf/q4CMFBXkl76QnG7Js7zawnzg4dq/5Qx9DWB5z1Zq3STL7hpflE64tf7J3OQz2Wzqx7XAM5fP4VQAAcG4Wx+ThSfL/8pjr7uFcPnx1/JOMals892MBAMD/Cx19dvLJX5woMu2XxWq16CUrWkWh/1xFptbQygSJjvwVL2ho1Y7CJPTDZlp5YWo6VnGn3Q6jRNXDSLXD2Kzab35X/a9+j3XLCxLjx+2m9mKt/DBIPD9RNRP/QrU7v2uaeEVHduO4rX1TN76XmDBQcdiJfF1QKtb6UENT00Fi6iatBqodmZYXrakXYbPT0soRRyLTTsJsh4O+TFAPo5bdbWHaBxsAgAtiZ3fvzXqv131/hpVpjxEAAAwjSwMAAAAAAAAAAAAAAAAAAAAAcPGdx/1/VC55ZTAV9GRbzV6ImHvz/aAn38qZcIAXufIfmbTx2FPHn870xATgzP0vAAD//11/RtE=") 708.434992ms ago: executing program 5 (id=948): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) 663.182632ms ago: executing program 5 (id=949): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU") r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x2002, 0x1) write$UHID_INPUT(r1, &(0x7f0000002880)={0x8, {"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", 0x1000}}, 0x1006) write$UHID_DESTROY(r1, &(0x7f0000000140), 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) getdents(r0, 0x0, 0x22) 345.227281ms ago: executing program 1 (id=950): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) pselect6(0x40, &(0x7f0000000080)={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 228.892261ms ago: executing program 9 (id=951): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)='/', 0x1}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x197a, 0x4) read(r0, &(0x7f0000000140)=""/5, 0x5) 228.259971ms ago: executing program 5 (id=952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r7, 0x1, 0x70bd29, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "47aa32b137d401a50000001000"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0xd, 0xfffffffe, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c}, {@in=@broadcast, 0x0, 0x6c}, @in=@multicast2, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x21}, {}, 0x80, 0x3502, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000001940)='net/snmp\x00') read$FUSE(r11, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x33, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, [@routing={0x2c, 0x0, 0x0, 0x4}]}}}}}}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) 0s ago: executing program 1 (id=953): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0x7000000) kernel console output (not intermixed with test programs): loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 124.696432][ T5264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.710991][ T5264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.717947][ T5264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.769510][ T5339] loop3: detected capacity change from 0 to 2048 [ 124.776170][ T5264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.838867][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.856656][ T5339] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: none. [ 124.896037][ T5339] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.913383][ T5335] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.069175][ T4211] Bluetooth: hci1: command 0x041b tx timeout [ 125.079406][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.187720][ T5264] device hsr_slave_0 entered promiscuous mode [ 125.217654][ T5264] device hsr_slave_1 entered promiscuous mode [ 125.282438][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.315449][ T5351] loop3: detected capacity change from 0 to 2048 [ 125.725958][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.168247][ T5374] loop1: detected capacity change from 0 to 128 [ 126.321705][ T5374] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 127.086790][ T5264] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 127.130056][ T4214] Bluetooth: hci1: command 0x040f tx timeout [ 127.275251][ T5388] input: syz0 as /devices/virtual/input/input9 [ 127.288813][ T5264] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 127.329237][ T5264] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 127.414131][ T5264] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 127.593958][ T4264] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 127.792522][ T5264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.884803][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.895750][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.959448][ T5264] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.023912][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.046299][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.073449][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.080694][ T4267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.102059][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.120442][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.129729][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.153524][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.160648][ T4267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.297836][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.349862][ T144] device hsr_slave_0 left promiscuous mode [ 128.366953][ T144] device hsr_slave_1 left promiscuous mode [ 128.380139][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.397833][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.415187][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.430258][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.449585][ T144] device bridge_slave_1 left promiscuous mode [ 128.463718][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.492848][ T144] device bridge_slave_0 left promiscuous mode [ 128.499060][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.551783][ T5419] loop3: detected capacity change from 0 to 512 [ 128.588172][ T144] device veth1_macvtap left promiscuous mode [ 128.604900][ T144] device veth0_macvtap left promiscuous mode [ 128.627472][ T144] device veth1_vlan left promiscuous mode [ 128.653291][ T144] device veth0_vlan left promiscuous mode [ 128.678254][ T5419] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 128.698295][ T5419] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.381217][ T4845] Bluetooth: hci1: command 0x0419 tx timeout [ 129.408172][ T144] team0 (unregistering): Port device team_slave_1 removed [ 129.423601][ T144] team0 (unregistering): Port device team_slave_0 removed [ 129.436137][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.451985][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.527741][ T144] bond0 (unregistering): Released all slaves [ 129.575618][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.607137][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.626895][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.649622][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.688191][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.732494][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.773744][ T5443] loop1: detected capacity change from 0 to 128 [ 129.843558][ T5443] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.857021][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.891111][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.906520][ T5445] loop5: detected capacity change from 0 to 2048 [ 129.910404][ T5443] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.915463][ T5448] loop3: detected capacity change from 0 to 128 [ 129.945857][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.954608][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.985801][ T5264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 130.000235][ T1347] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 130.072751][ T5448] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 130.360286][ T1347] usb 3-1: config index 0 descriptor too short (expected 5668, got 36) [ 130.368632][ T1347] usb 3-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 130.501623][ T1347] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 130.560118][ T1347] usb 3-1: config 3 has no interface number 0 [ 130.600224][ T1347] usb 3-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 130.626527][ T1347] usb 3-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 130.830306][ T1347] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 130.936458][ T4264] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 130.966404][ T1347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.014877][ T1347] usb 3-1: Product: syz [ 131.079875][ T5475] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 131.138750][ T5264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.451749][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.513706][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.741899][ T1347] usb 3-1: Manufacturer: syz [ 131.748106][ T1347] usb 3-1: SerialNumber: syz [ 131.780547][ T5442] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.979485][ T5490] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 132.007778][ T5493] loop5: detected capacity change from 0 to 256 [ 132.031139][ T1347] usb-storage 3-1:3.20: USB Mass Storage device detected [ 132.062654][ T1347] usb-storage 3-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 132.155802][ T5493] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 132.167422][ T5499] loop3: detected capacity change from 0 to 512 [ 132.190215][ T1347] scsi host1: usb-storage 3-1:3.20 [ 132.226273][ T1347] usb 3-1: USB disconnect, device number 3 [ 132.388120][ T5499] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.389149][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.399750][ T5499] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.670858][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.678228][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.689816][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.713571][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.785752][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.870527][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.923488][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.132973][ T5264] device veth0_vlan entered promiscuous mode [ 133.183734][ T5264] device veth1_vlan entered promiscuous mode [ 133.363623][ T1347] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.895639][ T5537] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 134.141944][ T5264] device veth0_macvtap entered promiscuous mode [ 134.206054][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.232316][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.294318][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.330959][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.412048][ T5264] device veth1_macvtap entered promiscuous mode [ 134.427197][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.450114][ T1347] usb 4-1: Using ep0 maxpacket: 16 [ 134.541478][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.570207][ T1347] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 134.595082][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.628493][ T5551] loop5: detected capacity change from 0 to 1024 [ 134.631287][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.675836][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.697342][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.720030][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.730183][ T1347] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 134.739233][ T1347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.750299][ T5264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.757802][ T1347] usb 4-1: Product: syz [ 134.789609][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.801860][ T1347] usb 4-1: Manufacturer: syz [ 134.806648][ T1347] usb 4-1: SerialNumber: syz [ 134.812551][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.831855][ T1347] usb 4-1: config 0 descriptor?? [ 134.860867][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.872916][ T1347] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 134.886464][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.910678][ T1347] usb 4-1: Detected FT232RL [ 134.927179][ T5561] loop2: detected capacity change from 0 to 1024 [ 134.935759][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.953200][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.966986][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.983634][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.993832][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.009037][ T5561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.025626][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.051682][ T5264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.073323][ T5561] loop2: detected capacity change from 0 to 512 [ 135.089176][ T5561] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 135.100598][ T1347] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 135.108133][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.128172][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.171754][ T5264] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.191581][ T5561] EXT4-fs (loop2): orphan cleanup on readonly fs [ 135.199078][ T5561] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.393: Block bitmap for bg 0 marked uninitialized [ 135.219990][ T5264] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.229026][ T5264] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.238736][ T5264] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.243407][ T5561] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 135.280686][ T5561] EXT4-fs (loop2): 1 orphan inode deleted [ 135.286529][ T5561] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.350237][ T1347] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 135.395902][ T1347] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 135.561635][ T4243] usb 4-1: USB disconnect, device number 5 [ 135.590978][ T4243] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 135.616981][ T5573] loop2: detected capacity change from 0 to 1024 [ 135.714846][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.758389][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.795306][ T4243] ftdi_sio 4-1:0.0: device disconnected [ 135.849860][ T5573] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000101,,errors=continue. Quota mode: none. [ 135.875404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.883687][ T5573] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.177617][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.202395][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.263383][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.616678][ T5598] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 137.309044][ T5603] loop6: detected capacity change from 0 to 128 [ 137.363187][ T5608] loop2: detected capacity change from 0 to 1024 [ 137.482685][ T26] audit: type=1326 audit(1735789234.394:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.3.406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8674588d29 code=0x0 [ 137.507345][ T4211] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 137.618956][ T4243] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 137.653598][ T4264] hfsplus: b-tree write err: -5, ino 4 [ 137.760945][ T4211] usb 6-1: Using ep0 maxpacket: 16 [ 137.905889][ T4211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 138.035146][ T4243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.054253][ T4243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.093684][ T4243] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 138.108846][ T4243] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 138.118849][ T4211] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 138.128160][ T4211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.137205][ T4243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.145949][ T4211] usb 6-1: Product: syz [ 138.150701][ T4211] usb 6-1: Manufacturer: syz [ 138.159286][ T4243] usb 2-1: config 0 descriptor?? [ 138.165127][ T4211] usb 6-1: SerialNumber: syz [ 138.373114][ T4211] usb 6-1: config 0 descriptor?? [ 138.411296][ T4211] hub 6-1:0.0: bad descriptor, ignoring hub [ 138.417229][ T4211] hub: probe of 6-1:0.0 failed with error -5 [ 138.709031][ T4211] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input11 [ 138.751034][ T5647] loop2: detected capacity change from 0 to 512 [ 138.784786][ T4243] logitech 0003:046D:C29C.0004: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 138.812805][ T4211] usb 6-1: USB disconnect, device number 2 [ 138.819251][ T5647] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 138.860894][ T5647] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 138.945527][ T5647] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 138.962667][ T5647] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #16: comm syz.2.415: iget: bogus i_mode (5) [ 139.012758][ T5647] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.415: couldn't read orphan inode 16 (err -117) [ 139.027387][ T5647] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,jqfmt=vfsold,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,,errors=continue. Quota mode: writeback. [ 139.110382][ T26] audit: type=1800 audit(1735789236.024:10): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.415" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 139.147314][ T5647] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 139.340193][ T4243] logitech 0003:046D:C29C.0004: no inputs found [ 139.350158][ T4243] usb 2-1: USB disconnect, device number 8 [ 139.482061][ T5672] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 140.374224][ T5690] loop3: detected capacity change from 0 to 256 [ 140.461207][ T5690] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 140.486172][ T5703] loop1: detected capacity change from 0 to 16 [ 140.706225][ T5703] erofs: (device loop1): mounted with root inode @ nid 36. [ 141.024484][ T5690] loop3: detected capacity change from 0 to 1024 [ 141.156447][ T5715] loop6: detected capacity change from 0 to 512 [ 141.172955][ T4264] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.247967][ T5717] loop1: detected capacity change from 0 to 16 [ 141.281168][ T4264] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.360978][ T5717] erofs: Unknown parameter '' [ 141.547406][ T4264] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.695251][ T4264] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.992874][ T5743] loop5: detected capacity change from 0 to 1024 [ 142.062688][ T5749] loop3: detected capacity change from 0 to 16 [ 142.087935][ T5743] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.176835][ T5749] erofs: (device loop3): mounted with root inode @ nid 36. [ 142.215513][ T5756] loop6: detected capacity change from 0 to 256 [ 142.749369][ T5756] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 142.937158][ T5769] loop3: detected capacity change from 0 to 512 [ 143.025227][ T5769] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.126781][ T5776] loop6: detected capacity change from 0 to 128 [ 143.211964][ T5769] EXT4-fs (loop3): 1 truncate cleaned up [ 143.217722][ T5769] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.283824][ T5776] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.414767][ T5776] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.456863][ T5740] chnl_net:caif_netlink_parms(): no params data found [ 143.787163][ T5792] loop3: detected capacity change from 0 to 512 [ 143.878062][ T5792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 143.908264][ T5792] System zones: 1-12 [ 143.954560][ T5801] Bluetooth: hci0: service_discovery: expected 4420 bytes, got 7 bytes [ 144.009641][ T5792] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 33261: comm syz.3.453: invalid block [ 144.063864][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.080417][ T4253] Bluetooth: hci4: command 0x0409 tx timeout [ 144.086743][ T5792] EXT4-fs (loop3): Remounting filesystem read-only [ 144.093354][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.094520][ T5740] device bridge_slave_0 entered promiscuous mode [ 144.144056][ T5792] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.453: invalid indirect mapped block 8 (level 2) [ 144.165359][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.213922][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.237357][ T5792] EXT4-fs (loop3): Remounting filesystem read-only [ 144.248459][ T5792] EXT4-fs (loop3): 1 truncate cleaned up [ 144.259162][ T5792] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,data_err=ignore,noinit_itable,sysvgroups,errors=remount-ro,. Quota mode: none. [ 144.260538][ T5740] device bridge_slave_1 entered promiscuous mode [ 144.373805][ T5813] loop5: detected capacity change from 0 to 16 [ 144.400800][ T5815] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 5: comm syz.3.453: lblock 0 mapped to illegal pblock 5 (length 1) [ 144.421901][ T5815] EXT4-fs (loop3): Remounting filesystem read-only [ 144.431120][ T5813] erofs: (device loop5): mounted with root inode @ nid 36. [ 144.431132][ T5815] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.453: error -117 reading directory block [ 144.501068][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.547928][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.737591][ T5825] loop3: detected capacity change from 0 to 128 [ 145.279813][ T5740] team0: Port device team_slave_0 added [ 145.335688][ T5740] team0: Port device team_slave_1 added [ 145.415147][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.467760][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.490388][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.567880][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.587227][ T5843] loop1: detected capacity change from 0 to 2048 [ 145.606340][ T4264] device hsr_slave_0 left promiscuous mode [ 145.638927][ T4264] device hsr_slave_1 left promiscuous mode [ 145.671151][ T5843] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.687244][ T4264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.716901][ T4264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.737944][ T4264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.753299][ T4264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.765205][ T4264] device bridge_slave_1 left promiscuous mode [ 145.787495][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.836608][ T4264] device bridge_slave_0 left promiscuous mode [ 145.857262][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.872676][ T4264] device veth1_macvtap left promiscuous mode [ 145.878882][ T4264] device veth0_macvtap left promiscuous mode [ 145.885141][ T4264] device veth1_vlan left promiscuous mode [ 145.919391][ T4264] device veth0_vlan left promiscuous mode [ 146.170320][ T4243] Bluetooth: hci4: command 0x041b tx timeout [ 146.189891][ T5865] loop6: detected capacity change from 0 to 16 [ 146.283664][ T5865] erofs: (device loop6): mounted with root inode @ nid 36. [ 146.346621][ T5869] loop3: detected capacity change from 0 to 128 [ 146.429144][ T4264] team0 (unregistering): Port device team_slave_1 removed [ 146.451719][ T5871] loop6: detected capacity change from 0 to 128 [ 146.473578][ T4264] team0 (unregistering): Port device team_slave_0 removed [ 146.498150][ T4264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.514370][ T4264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.545804][ T5871] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 146.566301][ T5871] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.843765][ T4264] bond0 (unregistering): Released all slaves [ 146.936785][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.944017][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.062985][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.404988][ T5740] device hsr_slave_0 entered promiscuous mode [ 147.437552][ T5740] device hsr_slave_1 entered promiscuous mode [ 147.459218][ T5884] loop1: detected capacity change from 0 to 2048 [ 147.470658][ T5740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.489662][ T5886] loop5: detected capacity change from 0 to 128 [ 147.496427][ T5740] Cannot create hsr debugfs directory [ 147.541973][ T5886] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 147.696057][ T5892] loop6: detected capacity change from 0 to 128 [ 147.705906][ T5884] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,stripe=0x0000000000000020,,errors=continue. Quota mode: none. [ 147.790227][ T5884] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.820415][ T5886] attempt to access beyond end of device [ 147.820415][ T5886] loop5: rw=3, want=6952, limit=128 [ 147.849219][ T5892] EXT4-fs (loop6): Unrecognized mount option "dont_measure" or missing value [ 147.850718][ T5886] attempt to access beyond end of device [ 147.850718][ T5886] loop5: rw=2051, want=7894, limit=128 [ 147.987051][ T5900] loop1: detected capacity change from 0 to 8 [ 148.085487][ T5900] SQUASHFS error: Unable to read directory block [629:0] [ 148.106514][ T5904] loop5: detected capacity change from 0 to 512 [ 148.135269][ T5740] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 148.177021][ T5740] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 148.241550][ T4211] Bluetooth: hci4: command 0x040f tx timeout [ 148.262648][ T5740] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 148.273693][ T5911] loop1: detected capacity change from 0 to 8 [ 148.316211][ T5740] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 148.368684][ T5904] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.448835][ T5904] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.567890][ T5904] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.485: bg 0: block 18: invalid block bitmap [ 148.648822][ T5904] Quota error (device loop5): write_blk: dquota write failed [ 148.678079][ T5904] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 148.733814][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.763721][ T5904] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.485: Failed to acquire dquot type 1 [ 148.765266][ T5919] Quota error (device loop5): write_blk: dquota write failed [ 148.828774][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.852061][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.880659][ T5919] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 148.903460][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.939046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.964476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.975162][ T5919] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.485: Failed to acquire dquot type 1 [ 148.977644][ T5904] syz.5.485 (5904) used greatest stack depth: 18688 bytes left [ 149.014324][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.021472][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.065569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.114045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.133835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.165515][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.172641][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.242818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.283466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.318176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.347605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.416877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.431521][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.457678][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.496559][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.507014][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.538666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.557628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.586677][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.838018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.861526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.875619][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.243616][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.259597][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.300631][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.320081][ T4211] Bluetooth: hci4: command 0x0419 tx timeout [ 150.320652][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.352957][ T5740] device veth0_vlan entered promiscuous mode [ 150.361664][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.380725][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.398158][ T5740] device veth1_vlan entered promiscuous mode [ 150.464015][ T5740] device veth0_macvtap entered promiscuous mode [ 150.498994][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.511881][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.540827][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.561802][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.593639][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.618067][ T5740] device veth1_macvtap entered promiscuous mode [ 150.672064][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.691244][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.710263][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.740022][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.749844][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.783121][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.802494][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.826368][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.850095][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.892353][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.924977][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.945967][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.984740][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.005297][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.045954][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.071068][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.078497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.087423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.096481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.105206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.142653][ T5740] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.161549][ T5740] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.180040][ T5740] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.188923][ T5740] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.361462][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.369534][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.416330][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.420332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.441522][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.473587][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.580718][ T5979] loop5: detected capacity change from 0 to 16 [ 151.587145][ T5977] loop1: detected capacity change from 0 to 256 [ 151.623415][ T5981] loop6: detected capacity change from 0 to 1024 [ 151.667586][ T5979] erofs: (device loop5): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffe [ 151.704099][ T5977] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 151.746359][ T5977] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 151.747729][ T5989] loop3: detected capacity change from 0 to 8 [ 151.775068][ T5977] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 151.816716][ T5977] UDF-fs: Scanning with blocksize 512 failed [ 151.848416][ T5977] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 151.856717][ T5989] squashfs: Unknown parameter 'W‡/½Øª<¡HbãK;  |ÄW.p)2&ñ¨œn' [ 151.875565][ T5977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.481309][ T4211] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 152.564594][ T4213] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 152.727088][ T6027] loop5: detected capacity change from 0 to 1024 [ 152.741468][ T4211] usb 2-1: Using ep0 maxpacket: 8 [ 152.811814][ T6027] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 152.900437][ T6027] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 152.950316][ T4211] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 152.967998][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.974897][ T6027] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 152.983793][ T4211] usb 2-1: config 0 descriptor?? [ 152.990183][ T4213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.029838][ T6027] EXT4-fs (loop5): This should not happen!! Data will be lost [ 153.029838][ T6027] [ 153.050029][ T4213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.059795][ T4213] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 153.074683][ T6027] EXT4-fs (loop5): Total free blocks count 0 [ 153.101758][ T6027] EXT4-fs (loop5): Free/Dirty block details [ 153.159810][ T4213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.209632][ T6027] EXT4-fs (loop5): free_blocks=68451041280 [ 153.395062][ T6027] EXT4-fs (loop5): dirty_blocks=32 [ 153.442119][ T4213] usb 4-1: config 0 descriptor?? [ 153.501402][ T6027] EXT4-fs (loop5): Block reservation details [ 153.899077][ T6027] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 153.933684][ T4211] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 153.990169][ T4211] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 154.000769][ T4211] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 154.011268][ T4211] asix: probe of 2-1:0.0 failed with error -32 [ 154.012863][ T4213] hid-generic 0003:05AC:4262.0005: unbalanced delimiter at end of report description [ 154.032128][ T6026] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131091 with max blocks 1 with error 28 [ 154.090097][ T6026] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.090097][ T6026] [ 154.134389][ T4213] hid-generic: probe of 0003:05AC:4262.0005 failed with error -22 [ 154.242494][ T4213] usb 4-1: USB disconnect, device number 6 [ 154.491690][ T6070] loop5: detected capacity change from 0 to 256 [ 154.508490][ T6072] loop6: detected capacity change from 0 to 256 [ 154.559637][ T6072] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 154.994699][ T6092] kvm: pic: single mode not supported [ 154.994886][ T6092] kvm: pic: level sensitive irq not supported [ 155.479454][ T1347] usb 2-1: USB disconnect, device number 9 [ 155.919889][ T6113] loop1: detected capacity change from 0 to 1764 [ 156.152630][ T6133] loop3: detected capacity change from 0 to 256 [ 156.328292][ T6138] loop6: detected capacity change from 0 to 1024 [ 156.462560][ T6138] hfsplus: xattr searching failed [ 156.710037][ T4213] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 156.750154][ T1347] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 157.230102][ T4213] usb 4-1: Using ep0 maxpacket: 8 [ 157.354887][ T4213] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 157.363280][ T1347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.390102][ T4213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.406737][ T1347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.425911][ T4213] usb 4-1: config 0 has no interface number 0 [ 157.446498][ T1347] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.575467][ T1347] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 157.586239][ T1347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.606944][ T1347] usb 2-1: config 0 descriptor?? [ 157.686193][ T6171] loop6: detected capacity change from 0 to 1764 [ 157.690128][ T4213] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 157.720188][ T4213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.748538][ T4213] usb 4-1: Product: syz [ 157.758166][ T4213] usb 4-1: Manufacturer: syz [ 157.769976][ T4213] usb 4-1: SerialNumber: syz [ 157.785748][ T4213] usb 4-1: config 0 descriptor?? [ 157.849131][ T4213] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 157.870163][ T4213] usb 4-1: No valid video chain found. [ 157.950050][ T1347] usbhid 2-1:0.0: can't add hid device: -71 [ 157.956052][ T1347] usbhid: probe of 2-1:0.0 failed with error -71 [ 158.010155][ T1347] usb 2-1: USB disconnect, device number 10 [ 158.094085][ T6144] loop3: detected capacity change from 0 to 1024 [ 158.111662][ T6187] loop6: detected capacity change from 0 to 256 [ 158.206034][ T6187] FAT-fs (loop6): Directory bread(block 64) failed [ 158.216927][ T6187] FAT-fs (loop6): Directory bread(block 65) failed [ 158.251572][ T6187] FAT-fs (loop6): Directory bread(block 66) failed [ 158.309813][ T6187] FAT-fs (loop6): Directory bread(block 67) failed [ 158.318413][ T6144] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.359881][ T6187] FAT-fs (loop6): Directory bread(block 68) failed [ 158.366516][ T6187] FAT-fs (loop6): Directory bread(block 69) failed [ 158.381097][ T6187] FAT-fs (loop6): Directory bread(block 70) failed [ 158.387689][ T6187] FAT-fs (loop6): Directory bread(block 71) failed [ 158.393448][ T4214] usb 4-1: USB disconnect, device number 7 [ 158.418193][ T6187] FAT-fs (loop6): Directory bread(block 72) failed [ 158.436614][ T6187] FAT-fs (loop6): Directory bread(block 73) failed [ 158.482543][ T6202] loop1: detected capacity change from 0 to 1024 [ 158.634728][ T6202] hfsplus: xattr search failed [ 158.755778][ T4168] hfsplus: node 4:3 still has 1 user(s)! [ 159.620086][ T1347] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 159.666958][ T6246] loop1: detected capacity change from 0 to 1024 [ 159.807877][ T6255] loop6: detected capacity change from 0 to 1024 [ 159.880561][ T1347] usb 6-1: Using ep0 maxpacket: 32 [ 159.906066][ T6255] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 159.932364][ T6261] loop1: detected capacity change from 0 to 256 [ 159.969644][ T6255] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,nomblk_io_submit,noblock_validity,,errors=continue. Quota mode: none. [ 159.982037][ T6261] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 160.032524][ T26] audit: type=1800 audit(1735789256.944:11): pid=6255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.561" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 160.055098][ T1347] usb 6-1: unable to get BOS descriptor or descriptor too short [ 160.140199][ T1347] usb 6-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.163368][ T1347] usb 6-1: config 1 interface 0 has no altsetting 0 [ 160.173184][ T6270] loop7: detected capacity change from 0 to 512 [ 160.401509][ T6275] loop3: detected capacity change from 0 to 2048 [ 160.465995][ T5753] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 160.500086][ T1347] usb 6-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 160.509511][ T1347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.530004][ T1347] usb 6-1: Product: syz [ 160.534412][ T1347] usb 6-1: Manufacturer: syz [ 160.539068][ T1347] usb 6-1: SerialNumber: syz [ 160.589037][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.7.565'. [ 160.722342][ T5753] usb 2-1: Using ep0 maxpacket: 32 [ 160.881679][ T5753] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.928210][ T6275] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.170220][ T5753] usb 2-1: config 7 has an invalid interface number: 128 but max is 0 [ 161.188822][ T5753] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 161.216142][ T6275] EXT4-fs error (device loop3): __ext4_new_inode:1076: comm syz.3.567: reserved inode found cleared - inode=1 [ 161.248886][ T5753] usb 2-1: config 7 has an invalid descriptor of length 253, skipping remainder of the config [ 161.299161][ T5753] usb 2-1: config 7 has no interface number 0 [ 161.330140][ T1347] appletouch 6-1:1.0: Failed to request geyser raw mode [ 161.347508][ T1347] appletouch: probe of 6-1:1.0 failed with error -5 [ 161.356454][ T5753] usb 2-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 161.531386][ T5753] usb 2-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 161.544165][ T5753] usb 2-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 161.557412][ T5753] usb 2-1: config 7 interface 128 has no altsetting 0 [ 161.589138][ T1347] usb 6-1: USB disconnect, device number 3 [ 161.741185][ T5753] usb 2-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 161.910020][ T5753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.943032][ T5753] usb 2-1: Product: syz [ 161.958418][ T5753] usb 2-1: Manufacturer: syz [ 161.968489][ T6297] loop3: detected capacity change from 0 to 136 [ 161.982431][ T5753] usb 2-1: SerialNumber: syz [ 162.020392][ T6261] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 162.375964][ T6312] loop3: detected capacity change from 0 to 256 [ 162.400243][ T5753] usb 2-1: MIDIStreaming interface descriptor not found [ 162.526257][ T5753] usb 2-1: USB disconnect, device number 11 [ 162.589580][ T6321] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.620228][ T6319] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 162.662187][ T6321] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 162.745214][ T6323] loop3: detected capacity change from 0 to 4096 [ 162.882374][ T6323] EXT4-fs (loop3): Test dummy encryption mode enabled [ 162.927909][ T6323] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 162.991892][ T4524] udevd[4524]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.019423][ T6323] System zones: 0-5 [ 163.057568][ T6323] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,nodelalloc,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 163.088212][ T6334] loop1: detected capacity change from 0 to 2048 [ 163.186064][ T6334] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.438413][ T6349] loop3: detected capacity change from 0 to 1024 [ 163.514902][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.5.583'. [ 163.562638][ T6349] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.585313][ T6360] loop1: detected capacity change from 0 to 1024 [ 163.611750][ T6349] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #11: comm syz.3.580: directory missing '..' [ 163.678334][ T6368] loop6: detected capacity change from 0 to 256 [ 163.689673][ T6365] loop7: detected capacity change from 0 to 512 [ 163.704855][ T6360] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.778967][ T6365] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.585: couldn't read orphan inode 26 (err -116) [ 163.818002][ T6368] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 163.906424][ T6365] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.930079][ T6365] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.972912][ T26] audit: type=1800 audit(1735789260.884:12): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.586" name="bus" dev="loop6" ino=1048627 res=0 errno=0 [ 164.069138][ T6365] EXT4-fs error (device loop7): ext4_do_update_inode:5174: inode #3: comm syz.7.585: corrupted inode contents [ 164.198157][ T6365] EXT4-fs error (device loop7): ext4_dirty_inode:6010: inode #3: comm syz.7.585: mark_inode_dirty error [ 164.247585][ T6390] loop3: detected capacity change from 0 to 2048 [ 164.279117][ T6396] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 164.328031][ T6365] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.585: bg 0: block 64: padding at end of block bitmap is not set [ 164.368626][ T6390] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.416687][ T6365] Quota error (device loop7): write_blk: dquota write failed [ 164.438708][ T6365] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 164.512483][ T6386] Quota error (device loop7): write_blk: dquota write failed [ 164.520998][ T6365] EXT4-fs error (device loop7): ext4_acquire_dquot:6197: comm syz.7.585: Failed to acquire dquot type 0 [ 164.536036][ T6386] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 164.548767][ T6386] EXT4-fs error (device loop7): ext4_acquire_dquot:6197: comm syz.7.585: Failed to acquire dquot type 0 [ 164.816724][ T6415] loop6: detected capacity change from 0 to 256 [ 164.904942][ T6415] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 164.935347][ T6419] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 165.027420][ T6419] kvm: pic: level sensitive irq not supported [ 165.027754][ T6419] kvm: pic: non byte read [ 165.050687][ T6419] kvm: pic: level sensitive irq not supported [ 165.050758][ T6419] kvm: pic: non byte read [ 165.227222][ T6419] kvm: pic: level sensitive irq not supported [ 165.227298][ T6419] kvm: pic: non byte read [ 165.264905][ T6419] kvm: pic: level sensitive irq not supported [ 165.265011][ T6419] kvm: pic: non byte read [ 165.951126][ T6449] loop6: detected capacity change from 0 to 512 [ 166.076100][ T26] audit: type=1326 audit(1735789262.984:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.5.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd4698d29 code=0x7ffc0000 [ 166.121633][ T6449] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.601: casefold flag without casefold feature [ 166.216836][ T6460] netlink: 20 bytes leftover after parsing attributes in process `syz.5.609'. [ 166.267951][ T6449] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.601: couldn't read orphan inode 15 (err -117) [ 166.294168][ T6449] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.318796][ T6458] loop7: detected capacity change from 0 to 1764 [ 166.330572][ T26] audit: type=1326 audit(1735789263.024:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.5.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdfd4698d29 code=0x7ffc0000 [ 166.458376][ T6455] loop3: detected capacity change from 0 to 8192 [ 166.464984][ T26] audit: type=1326 audit(1735789263.024:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.5.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd4698d29 code=0x7ffc0000 [ 166.710325][ T26] audit: type=1326 audit(1735789263.024:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.5.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fdfd4698d29 code=0x7ffc0000 [ 166.805640][ T6455] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 166.893979][ T26] audit: type=1326 audit(1735789263.024:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.5.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd4698d29 code=0x7ffc0000 [ 166.996573][ T26] audit: type=1326 audit(1735789263.024:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.5.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdfd4698d29 code=0x7ffc0000 [ 167.025153][ T26] audit: type=1326 audit(1735789263.024:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6453 comm="syz.5.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd4698d29 code=0x7ffc0000 [ 167.040139][ T1347] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 167.918878][ T6486] loop3: detected capacity change from 0 to 512 [ 167.989516][ T6490] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 168.230967][ T6496] loop1: detected capacity change from 0 to 128 [ 168.251853][ T6490] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 168.331916][ T6496] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 168.352156][ T6486] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 168.430452][ T6496] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.452474][ T6486] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.565951][ T26] audit: type=1800 audit(1735789265.474:20): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.614" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 168.671477][ T26] audit: type=1800 audit(1735789265.494:21): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.614" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 168.997154][ T6506] loop1: detected capacity change from 0 to 4096 [ 169.030013][ T1347] usb 8-1: Using ep0 maxpacket: 16 [ 169.137800][ T6506] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.350067][ T1347] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 169.357709][ T1347] usb 8-1: can't read configurations, error -71 [ 169.365002][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.622'. [ 169.420707][ T6521] loop7: detected capacity change from 0 to 256 [ 169.542888][ T6521] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 169.925961][ T6540] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 169.949851][ T6554] loop7: detected capacity change from 0 to 512 [ 169.988922][ T6540] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 170.147431][ T6554] EXT4-fs (loop7): Test dummy encryption mode enabled [ 170.179963][ T6554] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 170.261678][ T6554] EXT4-fs (loop7): 1 truncate cleaned up [ 170.267360][ T6554] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,block_validity,data_err=ignore,nolazytime,test_dummy_encryption,acl,,errors=continue. Quota mode: none. [ 170.312572][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.619'. [ 170.606026][ T6574] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 170.689564][ T6574] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 170.710066][ T1347] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 170.838705][ T6584] netlink: 'syz.5.637': attribute type 2 has an invalid length. [ 170.847622][ T6584] netlink: 'syz.5.637': attribute type 1 has an invalid length. [ 171.748622][ T6593] loop1: detected capacity change from 0 to 16 [ 171.844508][ T6593] erofs: (device loop1): mounted with root inode @ nid 36. [ 171.866880][ T6598] loop6: detected capacity change from 0 to 2048 [ 171.874162][ T1347] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.894384][ T1347] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 171.939093][ T1347] usb 8-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 171.954366][ T1347] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.977057][ T1347] usb 8-1: config 0 descriptor?? [ 172.002324][ T6598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.050723][ T1347] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 172.087054][ T6606] loop1: detected capacity change from 0 to 128 [ 172.103351][ T4211] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 172.266579][ T6610] input: syz0 as /devices/virtual/input/input14 [ 172.350847][ T6614] loop6: detected capacity change from 0 to 512 [ 172.384966][ T4211] usb 4-1: Using ep0 maxpacket: 8 [ 172.391559][ T6614] EXT4-fs (loop6): Test dummy encryption mode enabled [ 172.444013][ T6614] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:163: inode #12: comm syz.6.651: inline data xattr refers to an external xattr inode [ 172.586758][ T6614] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.651: couldn't read orphan inode 12 (err -117) [ 172.635898][ T6614] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,usrjquota=,lazytime,errors=continue,test_dummy_encryption,data_err=abort,,errors=continue. Quota mode: writeback. [ 172.720521][ T4211] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 172.743304][ T4211] usb 4-1: config 179 has no interface number 0 [ 173.319172][ T4211] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 173.616299][ T6625] loop1: detected capacity change from 0 to 512 [ 173.691042][ T6625] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.712555][ T1347] usb 8-1: USB disconnect, device number 4 [ 173.719388][ T4211] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 173.731722][ T4211] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 173.743156][ T4211] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 173.754845][ T4211] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 173.785959][ T4211] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 173.814300][ T4211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.825242][ T6625] EXT4-fs (loop1): 1 truncate cleaned up [ 173.833578][ T6625] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,jqfmt=vfsv0,nombcache,quota,,errors=continue. Quota mode: writeback. [ 173.890461][ T6601] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 174.175996][ T4211] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input15 [ 174.326372][ T6601] udc-core: couldn't find an available UDC or it's busy [ 174.349308][ T6601] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 174.470126][ T7] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 174.730970][ T6653] loop6: detected capacity change from 0 to 8192 [ 174.769728][ T6662] loop7: detected capacity change from 0 to 256 [ 174.784043][ T6653] loop6: p2 < > p3 p4 < > [ 174.794396][ T6653] loop6: p3 size 131072 extends beyond EOD, truncated [ 174.820766][ T6662] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000003' [ 174.840413][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 174.885570][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 919, setting to 64 [ 174.929707][ T7] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 174.959357][ T4213] usb 4-1: USB disconnect, device number 8 [ 174.970146][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 174.982473][ T4213] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 175.009822][ T4159] udevd[4159]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 175.015739][ T4184] udevd[4184]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 175.030720][ T4518] udevd[4518]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 175.110223][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.147994][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.184800][ T7] usb 2-1: Product: syz [ 175.194468][ T7] usb 2-1: Manufacturer: syz [ 175.204553][ T7] usb 2-1: SerialNumber: syz [ 175.240644][ T6645] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 175.462753][ T6645] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 176.710150][ T4243] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 176.842178][ T6698] loop6: detected capacity change from 0 to 1024 [ 176.986675][ T6645] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.086081][ T6698] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 177.096813][ T6698] EXT4-fs (loop6): Ignoring removed bh option [ 177.110268][ T4243] usb 4-1: config 0 has no interfaces? [ 177.116186][ T4243] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 177.136423][ T4243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.163724][ T4243] usb 4-1: config 0 descriptor?? [ 177.181207][ T6698] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,auto_da_alloc=0x0000000000000000,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,bh,nodelalloc,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 177.230905][ T13] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 177.240257][ T7] cdc_ncm 2-1:1.0: failed to get mac address [ 177.422636][ T13] usb 8-1: device descriptor read/64, error -71 [ 177.434103][ T6691] udc-core: couldn't find an available UDC or it's busy [ 177.456725][ T6691] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 177.466164][ T7] cdc_ncm 2-1:1.0: bind() failure [ 177.520063][ T7] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 177.541074][ T7] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 177.580080][ T7] usbtest: probe of 2-1:1.1 failed with error -71 [ 177.611222][ T7] usb 2-1: USB disconnect, device number 12 [ 177.693637][ T13] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 178.660113][ T13] usb 8-1: device descriptor read/64, error -71 [ 178.780969][ T13] usb usb8-port1: attempt power cycle [ 178.786521][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.170004][ T1347] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 179.210327][ T13] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 180.385561][ T5753] usb 4-1: USB disconnect, device number 9 [ 180.398897][ T13] usb 8-1: device descriptor read/8, error -71 [ 180.528025][ T6778] loop6: detected capacity change from 0 to 256 [ 180.575686][ T6773] loop3: detected capacity change from 0 to 4096 [ 180.623648][ T6782] loop7: detected capacity change from 0 to 1024 [ 180.657735][ T6773] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.672239][ T1347] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.718953][ T1347] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.990923][ T1347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.020351][ T1347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.092969][ T1347] usb 6-1: Product: syz [ 181.125850][ T1347] usb 6-1: Manufacturer: syz [ 181.166790][ T1347] usb 6-1: SerialNumber: syz [ 181.550879][ T1347] cdc_ncm 6-1:1.0: bind() failure [ 181.737901][ T1347] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 181.928472][ T1347] cdc_ncm 6-1:1.1: bind() failure [ 182.170104][ T1347] usb 6-1: USB disconnect, device number 4 [ 183.185873][ T6826] loop6: detected capacity change from 0 to 2048 [ 183.339159][ T6826] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 183.408485][ T6826] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.752563][ T1347] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 184.946147][ T6855] loop7: detected capacity change from 0 to 1024 [ 184.963030][ T6854] loop3: detected capacity change from 0 to 512 [ 185.040006][ T6854] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 185.120298][ T1347] usb 6-1: Using ep0 maxpacket: 16 [ 185.136842][ T6855] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 185.150027][ T6854] EXT4-fs (loop3): 1 truncate cleaned up [ 185.155694][ T6854] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.260188][ T1347] usb 6-1: config 0 has an invalid interface number: 147 but max is 0 [ 185.268387][ T1347] usb 6-1: config 0 has no interface number 0 [ 185.372619][ T26] audit: type=1800 audit(1735789282.254:22): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.704" name="bus" dev="loop7" ino=19 res=0 errno=0 [ 185.437301][ T6855] EXT4-fs error (device loop7): ext4_ind_map_blocks:604: inode #18: comm syz.7.704: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 185.540947][ T5264] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 185.962211][ T5264] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 186.259732][ T1347] usb 6-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=55.dc [ 186.268871][ T1347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.276957][ T1347] usb 6-1: Product: syz [ 186.281168][ T1347] usb 6-1: Manufacturer: syz [ 186.285774][ T1347] usb 6-1: SerialNumber: syz [ 186.297118][ T1347] usb 6-1: config 0 descriptor?? [ 186.308165][ T5740] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 186.330474][ T5740] EXT4-fs error (device loop7): ext4_readdir:220: inode #11: comm syz-executor: path /47/file1/lost+found: directory fails checksum at offset 0 [ 186.370506][ T5740] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 186.458031][ T5740] EXT4-fs error (device loop7): ext4_readdir:220: inode #11: comm syz-executor: path /47/file1/lost+found: directory fails checksum at offset 1024 [ 186.530284][ T1347] snd-usb-audio: probe of 6-1:0.147 failed with error -71 [ 186.560485][ T1347] usb 6-1: USB disconnect, device number 5 [ 186.581786][ T5740] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 186.601758][ T5740] EXT4-fs error (device loop7): ext4_readdir:220: inode #11: comm syz-executor: path /47/file1/lost+found: directory fails checksum at offset 2048 [ 186.617122][ T6883] loop3: detected capacity change from 0 to 1024 [ 186.636623][ T5740] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 186.661129][ T5740] EXT4-fs error (device loop7): ext4_readdir:220: inode #11: comm syz-executor: path /47/file1/lost+found: directory fails checksum at offset 3072 [ 186.697387][ T5740] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 186.779584][ T5740] EXT4-fs error (device loop7): ext4_readdir:220: inode #11: comm syz-executor: path /47/file1/lost+found: directory fails checksum at offset 4096 [ 186.810903][ T4845] Bluetooth: hci2: command 0x0406 tx timeout [ 186.819388][ T5740] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 186.853084][ T5740] EXT4-fs error (device loop7): ext4_readdir:220: inode #11: comm syz-executor: path /47/file1/lost+found: directory fails checksum at offset 5120 [ 186.917801][ T5740] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 186.942550][ T5740] EXT4-fs error (device loop7): ext4_readdir:220: inode #11: comm syz-executor: path /47/file1/lost+found: directory fails checksum at offset 6144 [ 186.965061][ T5740] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 187.040756][ T5740] EXT4-fs error (device loop7): ext4_readdir:220: inode #11: comm syz-executor: path /47/file1/lost+found: directory fails checksum at offset 7168 [ 187.107389][ T5740] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 187.190968][ T5740] EXT4-fs error (device loop7): ext4_readdir:220: inode #11: comm syz-executor: path /47/file1/lost+found: directory fails checksum at offset 8192 [ 187.240440][ T5740] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 187.996907][ T6925] loop3: detected capacity change from 0 to 512 [ 188.143234][ T6925] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 188.192746][ T6925] EXT4-fs (loop3): 1 truncate cleaned up [ 188.198420][ T6925] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,resgid=0x0000000000000000,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 188.290009][ T6914] chnl_net:caif_netlink_parms(): no params data found [ 188.313430][ T6939] loop1: detected capacity change from 0 to 1024 [ 188.342307][ T6925] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.721: corrupted in-inode xattr [ 188.374546][ T6925] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1751: inode #15: comm syz.3.721: unable to update i_inline_off [ 188.394696][ T6939] EXT4-fs (loop1): Ignoring removed nobh option [ 188.403854][ T6925] EXT4-fs error (device loop3): ext4_xattr_ibody_get:603: inode #15: comm syz.3.721: corrupted in-inode xattr [ 188.417508][ T6939] EXT4-fs (loop1): Ignoring removed bh option [ 188.456355][ T6939] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.469165][ T6925] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.721: corrupted in-inode xattr [ 188.612931][ T6939] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 188.610089][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.720017][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.775367][ T6914] device bridge_slave_0 entered promiscuous mode [ 188.816803][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.849372][ T6963] binder: 6962:6963 ioctl c018620c 20000140 returned -22 [ 188.858415][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.920313][ T6914] device bridge_slave_1 entered promiscuous mode [ 188.929373][ T6967] loop1: detected capacity change from 0 to 256 [ 188.974878][ T6967] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 189.062873][ T13] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 189.103960][ T6914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.212300][ T4264] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.272085][ T6914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.345245][ T4264] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.551058][ T4264] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.840009][ T4845] Bluetooth: hci1: command 0x0409 tx timeout [ 190.158448][ T4264] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.257240][ T13] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 190.269778][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.279734][ T13] usb 6-1: config 0 descriptor?? [ 190.304835][ T6914] team0: Port device team_slave_0 added [ 190.321411][ T13] cp210x 6-1:0.0: cp210x converter detected [ 190.331345][ T6914] team0: Port device team_slave_1 added [ 190.444418][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.462636][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.493067][ T6914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.514817][ T6996] loop3: detected capacity change from 0 to 512 [ 190.545490][ T13] usb 6-1: cp210x converter now attached to ttyUSB0 [ 190.565759][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.574993][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.634781][ T6914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.645206][ T6996] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 190.731906][ T6996] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 190.743709][ T13] usb 6-1: USB disconnect, device number 6 [ 190.770889][ T6996] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.738: Corrupt directory, running e2fsck is recommended [ 190.770944][ T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 190.791253][ T6996] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 190.819020][ T13] cp210x 6-1:0.0: device disconnected [ 190.821897][ T6996] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.738: corrupted in-inode xattr [ 190.882196][ T6996] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.738: couldn't read orphan inode 15 (err -117) [ 190.913245][ T6914] device hsr_slave_0 entered promiscuous mode [ 190.921910][ T6996] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 190.946170][ T6914] device hsr_slave_1 entered promiscuous mode [ 190.980668][ T6914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.998529][ T6914] Cannot create hsr debugfs directory [ 191.256370][ T7024] loop3: detected capacity change from 0 to 512 [ 191.309186][ T7024] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 191.394667][ T7024] EXT4-fs (loop3): 1 truncate cleaned up [ 191.428395][ T7024] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.920157][ T4845] Bluetooth: hci1: command 0x041b tx timeout [ 192.085560][ T6999] chnl_net:caif_netlink_parms(): no params data found [ 192.131894][ T6914] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 192.237931][ T6914] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 192.255266][ T7061] loop3: detected capacity change from 0 to 1024 [ 192.264165][ T6914] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 192.303416][ T6914] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 192.381450][ T7061] hfsplus: request for non-existent node 3 in B*Tree [ 192.397848][ T7061] hfsplus: request for non-existent node 3 in B*Tree [ 192.481414][ T6999] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.519446][ T6999] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.545104][ T6999] device bridge_slave_0 entered promiscuous mode [ 192.604047][ T7078] loop1: detected capacity change from 0 to 128 [ 192.679512][ T6999] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.690865][ T6999] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.699158][ T6999] device bridge_slave_1 entered promiscuous mode [ 192.730889][ T4211] Bluetooth: hci4: command 0x0409 tx timeout [ 192.841301][ T7089] attempt to access beyond end of device [ 192.841301][ T7089] loop1: rw=2051, want=1041, limit=128 [ 192.909582][ T6999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.966329][ T6914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.021957][ T6999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.149207][ T7098] loop3: detected capacity change from 0 to 764 [ 193.161640][ T6999] team0: Port device team_slave_0 added [ 193.175804][ T4264] device hsr_slave_0 left promiscuous mode [ 193.196923][ T4264] device hsr_slave_1 left promiscuous mode [ 193.212857][ T4264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.290929][ T4264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.337333][ T4264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.385307][ T4264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.404147][ T4264] device bridge_slave_1 left promiscuous mode [ 193.410489][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.421176][ T4264] device bridge_slave_0 left promiscuous mode [ 193.427394][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.436072][ T7098] rock: directory entry would overflow storage [ 193.480059][ T7098] rock: sig=0x4654, size=5, remaining=4 [ 193.764352][ T4264] device veth1_macvtap left promiscuous mode [ 193.794734][ T4264] device veth0_macvtap left promiscuous mode [ 193.810617][ T4264] device veth1_vlan left promiscuous mode [ 193.867876][ T4264] device veth0_vlan left promiscuous mode [ 194.010378][ T4845] Bluetooth: hci1: command 0x040f tx timeout [ 194.083385][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.089810][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.498857][ T4264] team0 (unregistering): Port device team_slave_1 removed [ 194.514896][ T4264] team0 (unregistering): Port device team_slave_0 removed [ 194.529245][ T4264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.550267][ T4264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.590015][ T4845] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 194.624052][ T4264] bond0 (unregistering): Released all slaves [ 194.683939][ T6999] team0: Port device team_slave_1 added [ 194.701880][ T6914] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.797825][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.806372][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.813941][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 194.820961][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.829483][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.838213][ T4224] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.845313][ T4224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.853348][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.865774][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.874507][ T4224] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.881687][ T4224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.889649][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.898422][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.920000][ T4845] usb 2-1: Using ep0 maxpacket: 8 [ 194.929833][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.952337][ T6999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.959300][ T6999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.995393][ T6999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.016230][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.028794][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.037918][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.047790][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.060508][ T4845] usb 2-1: config 0 has an invalid interface number: 242 but max is 0 [ 195.061538][ T6999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.068691][ T4845] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 195.077107][ T6999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.094128][ T4845] usb 2-1: config 0 has no interface number 0 [ 195.116600][ T4845] usb 2-1: config 0 interface 242 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 195.117728][ T6999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.133090][ T4845] usb 2-1: config 0 interface 242 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 195.155009][ T6914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.193669][ T6914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.207626][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.217101][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.229390][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.238362][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.247744][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.257370][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.327789][ T6999] device hsr_slave_0 entered promiscuous mode [ 195.349665][ T6999] device hsr_slave_1 entered promiscuous mode [ 195.370746][ T4845] usb 2-1: New USB device found, idVendor=05ef, idProduct=8888, bcdDevice=3d.e5 [ 195.381236][ T4845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.385748][ T6999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.389238][ T4845] usb 2-1: Product: syz [ 195.389259][ T4845] usb 2-1: Manufacturer: syz [ 195.389277][ T4845] usb 2-1: SerialNumber: syz [ 195.410844][ T6999] Cannot create hsr debugfs directory [ 195.418989][ T4845] usb 2-1: config 0 descriptor?? [ 195.577819][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.600078][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.623168][ T6914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.814763][ T4845] usb 2-1: USB disconnect, device number 13 [ 195.819025][ T6999] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 195.833052][ T6999] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 195.884320][ T6999] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 195.919580][ T6999] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 195.956102][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.966588][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.004825][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.021667][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.041396][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.066401][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.081070][ T4243] Bluetooth: hci1: command 0x0419 tx timeout [ 196.105081][ T6914] device veth0_vlan entered promiscuous mode [ 196.175464][ T6914] device veth1_vlan entered promiscuous mode [ 196.223015][ T6999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.271931][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 196.297339][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 196.326502][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.370711][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.463446][ T6999] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.526329][ T6914] device veth0_macvtap entered promiscuous mode [ 196.582051][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.653339][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.880263][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 196.907939][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.985317][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.025379][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.093202][ T4586] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.100329][ T4586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.142720][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.151603][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.169085][ T4586] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.176203][ T4586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.219596][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.249352][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.271836][ T7199] ipt_CLUSTERIP: Please specify destination IP [ 197.278851][ T6914] device veth1_macvtap entered promiscuous mode [ 197.347714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.367100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.418614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.453397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.502172][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'. [ 197.542707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.556605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.566032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.581816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.594918][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.618793][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.638924][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.663443][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.687228][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.719974][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.756209][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.784627][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.801042][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.827263][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.857620][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.890359][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.937263][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.959971][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.995475][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.026677][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.059593][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.079951][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.101444][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.133722][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.160443][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.178727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.216291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.254282][ T6914] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.277193][ T6914] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.306629][ T6914] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.322166][ T6914] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.584263][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.610868][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.660024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.689184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.704387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.729080][ T6999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.825874][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.849229][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.884652][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.000795][ T4243] Bluetooth: hci4: command 0x0419 tx timeout [ 199.236498][ T7254] loop8: detected capacity change from 0 to 512 [ 199.277690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.325915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.432677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.460988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.486526][ T6999] device veth0_vlan entered promiscuous mode [ 199.502658][ T7254] EXT4-fs (loop8): 1 orphan inode deleted [ 199.519519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.530137][ T7254] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.530669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.589038][ T7254] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.631366][ T6999] device veth1_vlan entered promiscuous mode [ 199.738310][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 199.788518][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.817865][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.827153][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.871329][ T6999] device veth0_macvtap entered promiscuous mode [ 199.939026][ T6999] device veth1_macvtap entered promiscuous mode [ 200.002668][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.053470][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.094203][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.125168][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.141345][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.162317][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.183415][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.206996][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.236617][ T6999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.302199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.315257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.333459][ T7279] loop8: detected capacity change from 0 to 1024 [ 200.345530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.373450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.401063][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.427042][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.447331][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.469664][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.500035][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.519944][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.540131][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.560017][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.570158][ T6999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.581040][ T6999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.594499][ T6999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.606496][ T7279] EXT4-fs (loop8): Ignoring removed nobh option [ 200.627327][ T7279] EXT4-fs (loop8): Ignoring removed nobh option [ 200.640240][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.649092][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.686608][ T6999] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.704527][ T6999] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.718609][ T6999] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.751000][ T7279] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000008,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 200.769089][ T6999] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.062351][ T7287] mmap: syz.5.789 (7287) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 201.092359][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.130122][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.185281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.362560][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.401065][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.696137][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 202.340137][ T4845] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 202.498583][ T7328] loop3: detected capacity change from 0 to 256 [ 202.620657][ T7328] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 202.740299][ T4845] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.750575][ T7328] loop_set_block_size: loop3 () has still dirty pages (nrpages=2) [ 202.789977][ T4845] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 202.910237][ T4845] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.928794][ T4845] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 202.949377][ T7345] loop1: detected capacity change from 0 to 512 [ 202.960694][ T4845] usb 10-1: SerialNumber: syz [ 203.175635][ T7345] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 203.211671][ T4845] cdc_ether 10-1:1.0: invalid descriptor buffer length [ 203.244805][ T4845] cdc_ether: probe of 10-1:1.0 failed with error -22 [ 203.983321][ T7345] EXT4-fs (loop1): 1 truncate cleaned up [ 203.988999][ T7345] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,abort,quota,nolazytime,nojournal_checksum,acl,. Quota mode: writeback. [ 204.059971][ T4845] usb 10-1: USB disconnect, device number 2 [ 204.187981][ T7359] loop8: detected capacity change from 0 to 512 [ 204.297085][ T7359] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.472281][ T7372] loop3: detected capacity change from 0 to 512 [ 204.607073][ T7372] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,dioread_lock,minixdf,,errors=continue. Quota mode: writeback. [ 204.729332][ T7372] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.773023][ T7388] loop8: detected capacity change from 0 to 512 [ 204.817021][ T7372] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 204.853019][ T7372] EXT4-fs (loop3): Cannot change journaled quota options when quota turned on [ 205.062912][ T7388] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 205.833802][ T7388] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c019, mo2=0002] [ 205.866133][ T7388] System zones: 1-12 [ 205.930250][ T7388] EXT4-fs (loop8): 1 truncate cleaned up [ 205.955464][ T7404] loop9: detected capacity change from 0 to 512 [ 205.960053][ T7388] EXT4-fs (loop8): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,noauto_da_alloc,debug,barrier=0x0000000000000007,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 205.966601][ T4170] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /155/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 206.045905][ T7404] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 206.269219][ T7404] EXT4-fs (loop9): 1 truncate cleaned up [ 206.837453][ T7404] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.603572][ T7440] loop1: detected capacity change from 0 to 512 [ 207.658740][ T7443] loop8: detected capacity change from 0 to 256 [ 207.708336][ T7440] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 207.741503][ T26] audit: type=1800 audit(1735789304.654:23): pid=7443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.822" name="bus" dev="loop8" ino=1048648 res=0 errno=0 [ 207.777945][ T7440] EXT4-fs (loop1): Ignoring removed orlov option [ 207.873472][ T7440] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 207.917033][ T7444] kvm: emulating exchange as write [ 207.930481][ T7440] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.049787][ T7457] TCP: tcp_parse_options: Illegal window scaling value 42 > 14 received [ 208.597426][ T1347] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 209.443980][ T7482] loop9: detected capacity change from 0 to 1024 [ 209.522299][ T7484] loop8: detected capacity change from 0 to 128 [ 209.942875][ T1347] usb 6-1: config 5 has an invalid interface number: 192 but max is 0 [ 209.992583][ T1347] usb 6-1: config 5 has no interface number 0 [ 210.144552][ T1347] usb 6-1: config 5 interface 192 has no altsetting 0 [ 210.205028][ T7484] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 210.332989][ T7482] EXT4-fs (loop9): Ignoring removed bh option [ 210.540184][ T1347] usb 6-1: New USB device found, idVendor=19d2, idProduct=ff86, bcdDevice=70.d5 [ 210.569783][ T1347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.649964][ T1347] usb 6-1: Product: syz [ 210.657401][ T1347] usb 6-1: Manufacturer: syz [ 210.677778][ T1347] usb 6-1: SerialNumber: syz [ 210.688181][ T7482] EXT4-fs (loop9): mounted filesystem without journal. Opts: usrjquota=,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nombcache,max_batch_time=0x0000000000000002,user_xattr,bh,grpquota,,errors=continue. Quota mode: writeback. [ 211.011123][ T7482] device syzkaller0 entered promiscuous mode [ 211.070701][ T1347] usb 6-1: bad CDC descriptors [ 211.097989][ T1347] usb 6-1: USB disconnect, device number 7 [ 211.173794][ T7510] loop1: detected capacity change from 0 to 512 [ 211.330095][ T7510] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 211.430970][ T7510] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.568188][ T7518] loop8: detected capacity change from 0 to 1024 [ 211.695474][ T7518] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 211.846896][ T7518] EXT4-fs (loop8): shut down requested (0) [ 212.147613][ T7539] loop9: detected capacity change from 0 to 2048 [ 212.202772][ T7540] loop1: detected capacity change from 0 to 1764 [ 212.292455][ T7539] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.500739][ T7539] UDF-fs: error (device loop9): udf_fiiter_advance_blk: extent after position 1024 not allocated in directory (ino 1376) [ 212.520246][ T7539] UDF-fs: error (device loop9): udf_fiiter_advance_blk: extent after position 1024 not allocated in directory (ino 1376) [ 213.359110][ T7539] UDF-fs: error (device loop9): udf_verify_fi: directory (ino 1376) has entry at pos 1024 with incorrect tag 6161 [ 213.598113][ T7561] loop8: detected capacity change from 0 to 512 [ 213.727999][ T7561] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 213.772144][ T7561] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 213.809174][ T7561] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 213.825952][ T7566] loop9: detected capacity change from 0 to 512 [ 213.917329][ T7561] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 213.930767][ T7561] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 213.939617][ T7561] EXT4-fs (loop8): orphan cleanup on readonly fs [ 214.040849][ T7561] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.850: bg 0: block 34: padding at end of block bitmap is not set [ 214.058584][ T7566] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.070742][ T7561] Quota error (device loop8): write_blk: dquota write failed [ 214.124535][ T7566] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.174921][ T7561] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 214.207827][ T7561] EXT4-fs error (device loop8): ext4_acquire_dquot:6197: comm syz.8.850: Failed to acquire dquot type 1 [ 214.267731][ T7561] EXT4-fs (loop8): 1 truncate cleaned up [ 214.312664][ T7561] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,bsdgroups,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 214.962006][ T7602] loop8: detected capacity change from 0 to 512 [ 215.053034][ T7602] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 215.110108][ T7602] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 215.322244][ T7602] Quota error (device loop8): do_check_range: Getting dqdh_next_free 15 out of range 0-5 [ 215.351194][ T7602] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 216.108166][ T7602] EXT4-fs error (device loop8): ext4_acquire_dquot:6197: comm syz.8.858: Failed to acquire dquot type 1 [ 216.285040][ T7602] EXT4-fs (loop8): Remounting filesystem read-only [ 216.293641][ T7602] EXT4-fs error (device loop8): mb_free_blocks:1865: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 216.347571][ T7615] loop9: detected capacity change from 0 to 1024 [ 216.567191][ T7602] EXT4-fs (loop8): Remounting filesystem read-only [ 216.680385][ T7602] EXT4-fs error (device loop8): ext4_do_update_inode:5174: inode #12: comm syz.8.858: corrupted inode contents [ 216.737929][ T7602] EXT4-fs (loop8): Remounting filesystem read-only [ 216.776860][ T7602] EXT4-fs error (device loop8): ext4_dirty_inode:6010: inode #12: comm syz.8.858: mark_inode_dirty error [ 216.826980][ T7602] EXT4-fs (loop8): Remounting filesystem read-only [ 216.856392][ T7602] EXT4-fs error (device loop8): ext4_do_update_inode:5174: inode #12: comm syz.8.858: corrupted inode contents [ 216.893287][ T7602] EXT4-fs (loop8): Remounting filesystem read-only [ 216.910672][ T7602] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #12: comm syz.8.858: mark_inode_dirty error [ 216.942499][ T7602] EXT4-fs (loop8): Remounting filesystem read-only [ 216.965097][ T7602] EXT4-fs error (device loop8): ext4_do_update_inode:5174: inode #12: comm syz.8.858: corrupted inode contents [ 217.018763][ T7602] EXT4-fs (loop8): Remounting filesystem read-only [ 217.041186][ T7602] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 217.087799][ T7602] EXT4-fs (loop8): Remounting filesystem read-only [ 217.120709][ T7602] EXT4-fs error (device loop8): ext4_do_update_inode:5174: inode #12: comm syz.8.858: corrupted inode contents [ 217.188121][ T7602] EXT4-fs (loop8): Remounting filesystem read-only [ 217.208659][ T7602] EXT4-fs error (device loop8): ext4_truncate:4272: inode #12: comm syz.8.858: mark_inode_dirty error [ 217.228311][ T7636] loop9: detected capacity change from 0 to 256 [ 217.234016][ T7602] EXT4-fs (loop8): Remounting filesystem read-only [ 217.252261][ T7602] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 217.287761][ T7602] EXT4-fs (loop8): Remounting filesystem read-only [ 217.314564][ T7636] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 217.330872][ T7602] EXT4-fs (loop8): 1 truncate cleaned up [ 217.337153][ T7602] EXT4-fs (loop8): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000200,noblock_validity,mblk_io_submit,nodiscard,noinit_itable,abort,nouid32,errors=remount-ro,resgid=0x000000000000ee002. Quota mode: writeback. [ 217.403858][ T26] audit: type=1800 audit(1735789314.304:24): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.864" name="bus" dev="loop9" ino=1048649 res=0 errno=0 [ 218.909995][ T4845] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 219.720443][ T4845] usb 10-1: Using ep0 maxpacket: 32 [ 220.250276][ T4845] usb 10-1: unable to get BOS descriptor or descriptor too short [ 220.263769][ T7681] loop8: detected capacity change from 0 to 256 [ 220.270407][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.875'. [ 220.380176][ T4845] usb 10-1: config 7 has an invalid interface number: 128 but max is 0 [ 220.382021][ T7681] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 220.388460][ T4845] usb 10-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 220.466399][ T4845] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 220.499206][ T4845] usb 10-1: config 7 has no interface number 0 [ 220.516605][ T7681] exFAT-fs (loop8): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 220.516605][ T7681] [ 220.520700][ T4845] usb 10-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 220.580406][ T4845] usb 10-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 220.617363][ T4845] usb 10-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 220.651288][ T4845] usb 10-1: config 7 interface 128 has no altsetting 0 [ 220.797058][ T7687] loop8: detected capacity change from 0 to 256 [ 220.834403][ T7689] loop9: detected capacity change from 0 to 512 [ 220.870282][ T4845] usb 10-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 220.899798][ T4845] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.950337][ T4845] usb 10-1: can't set config #7, error -71 [ 220.974983][ T4845] usb 10-1: USB disconnect, device number 3 [ 220.981227][ T7689] EXT4-fs (loop9): Ignoring removed bh option [ 220.987328][ T7689] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 221.108071][ T7689] EXT4-fs (loop9): 1 truncate cleaned up [ 221.130053][ T7689] EXT4-fs (loop9): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,grpquota,block_validity,bh,,errors=continue. Quota mode: writeback. [ 222.543702][ T7702] loop9: detected capacity change from 0 to 256 [ 222.628389][ T7702] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.986302][ T7714] loop9: detected capacity change from 0 to 512 [ 223.935360][ T7714] EXT4-fs (loop9): 1 truncate cleaned up [ 223.976155][ T7714] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 224.111763][ T7714] 9pnet: p9_errstr2errno: server reported unknown error loc_perc [ 224.314378][ T7734] loop9: detected capacity change from 0 to 164 [ 224.533400][ T7710] chnl_net:caif_netlink_parms(): no params data found [ 224.666066][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.677330][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.694267][ T7710] device bridge_slave_0 entered promiscuous mode [ 224.703113][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.801574][ T7] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 224.838925][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.915023][ T7710] device bridge_slave_1 entered promiscuous mode [ 224.960339][ T1347] Bluetooth: hci5: command 0x0409 tx timeout [ 225.060033][ T7] usb 9-1: Using ep0 maxpacket: 8 [ 225.190989][ T7] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 225.603265][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.639626][ T7] usb 9-1: config 0 has an invalid descriptor of length 113, skipping remainder of the config [ 225.650660][ T7] usb 9-1: config 0 has no interface number 0 [ 225.690325][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.748910][ T7757] device veth0_macvtap left promiscuous mode [ 225.810255][ T7] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 225.819354][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.860971][ T7] usb 9-1: Product: syz [ 225.865164][ T7] usb 9-1: Manufacturer: syz [ 225.869783][ T7] usb 9-1: SerialNumber: syz [ 225.927122][ T7] usb 9-1: config 0 descriptor?? [ 226.726262][ T7] usb 9-1: Found Unit with invalid ID 0. [ 226.734238][ T7] usb 9-1: USB disconnect, device number 2 [ 226.782811][ T7710] team0: Port device team_slave_0 added [ 226.828689][ T7710] team0: Port device team_slave_1 added [ 226.888584][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.906599][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.975706][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.998556][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.008676][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.040033][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 227.067882][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.087621][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.907'. [ 227.106084][ T7777] loop9: detected capacity change from 0 to 1024 [ 227.154771][ T7710] device hsr_slave_0 entered promiscuous mode [ 227.260385][ T7710] device hsr_slave_1 entered promiscuous mode [ 227.280409][ T7710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.287993][ T7710] Cannot create hsr debugfs directory [ 227.299765][ T7783] loop8: detected capacity change from 0 to 16 [ 227.307341][ T1221] hfsplus: b-tree write err: -5, ino 4 [ 227.406978][ T7783] erofs: (device loop8): mounted with root inode @ nid 36. [ 227.649985][ T7] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 229.379581][ T1347] Bluetooth: hci5: command 0x040f tx timeout [ 229.564583][ T7814] loop9: detected capacity change from 0 to 256 [ 229.680234][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.701617][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.725163][ T7] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 229.760154][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.817968][ T7] usb 6-1: config 0 descriptor?? [ 230.038455][ T7832] loop1: detected capacity change from 0 to 1024 [ 230.135798][ T7832] hfsplus: xattr searching failed [ 230.208836][ T7839] loop8: detected capacity change from 0 to 256 [ 230.231438][ T9] hfsplus: b-tree write err: -5, ino 3 [ 230.312761][ T7] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 230.323977][ T7839] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 230.373830][ T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0006/input/input18 [ 230.510033][ T13] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 230.884829][ T6914] exFAT-fs (loop8): error, invalid access to FAT free cluster (entry 0x00000005) [ 230.912721][ T6914] exFAT-fs (loop8): Filesystem has been set read-only [ 230.934963][ T6914] exFAT-fs (loop8): error, invalid access to FAT free cluster (entry 0x00000005) [ 231.114904][ T7710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.133100][ T7710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.151961][ T7710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.169491][ T7710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.230294][ T7] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 231.292369][ T7] usb 6-1: USB disconnect, device number 8 [ 231.340290][ T13] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.363468][ T13] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.446248][ T6483] Bluetooth: hci5: command 0x0419 tx timeout [ 231.450958][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.470089][ T13] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 231.500007][ T13] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 231.505344][ T7869] loop1: detected capacity change from 0 to 256 [ 231.524588][ T13] usb 10-1: SerialNumber: syz [ 231.580649][ T13] cdc_ether 10-1:1.0: invalid descriptor buffer length [ 231.587843][ T13] usb 10-1: bad CDC descriptors [ 231.600922][ T7869] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.605629][ T13] usb-storage 10-1:1.0: USB Mass Storage device detected [ 231.648822][ T7869] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0xe6f0f21a, utbl_chksum : 0xe619d30d) [ 231.691190][ T13] usb-storage 10-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 231.756610][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.770293][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.793095][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.820009][ T13] usb 10-1: USB disconnect, device number 4 [ 231.870600][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.897718][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.950328][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.957545][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.010895][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 232.155416][ T4264] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.696642][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.708101][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.717767][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.726943][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.734067][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.742490][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.761021][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.798802][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.819435][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.861680][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.903861][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.939905][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.969300][ T7905] loop1: detected capacity change from 0 to 128 [ 232.980320][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.995675][ T7906] loop9: detected capacity change from 0 to 512 [ 233.010376][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.044667][ T4264] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.085469][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.105491][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.119187][ T7710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.143212][ T7905] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.144393][ T7906] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 233.185462][ T7906] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.195994][ T7905] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.211666][ T4264] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.223454][ T26] audit: type=1800 audit(1735789330.134:25): pid=7905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.944" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 233.341708][ T26] audit: type=1804 audit(1735789330.184:26): pid=7905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.944" name="/newroot/199/file0/file1" dev="loop1" ino=12 res=1 errno=0 [ 233.378383][ T4264] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.739839][ T7935] loop9: detected capacity change from 0 to 512 [ 233.773602][ T7933] loop1: detected capacity change from 0 to 164 [ 233.791663][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.799095][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.846338][ T7935] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 233.859777][ T7935] EXT4-fs (loop9): invalid journal inode [ 233.866537][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.888938][ T7935] EXT4-fs (loop9): can't get journal size [ 234.011373][ T7935] EXT4-fs (loop9): 1 truncate cleaned up [ 234.017052][ T7935] EXT4-fs (loop9): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 234.081403][ T7935] EXT4-fs warning (device loop9): verify_group_input:147: Cannot add at group 2147483659 (only 1 groups) [ 234.244548][ T7710] device veth0_vlan entered promiscuous mode [ 234.288593][ T7916] chnl_net:caif_netlink_parms(): no params data found [ 234.383232][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.397271][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 234.427307][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.440521][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.452076][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.676451][ T7957] ------------[ cut here ]------------ [ 234.690764][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 234.700692][ T7957] WARNING: CPU: 1 PID: 7957 at block/genhd.c:586 del_gendisk+0x6fb/0x770 [ 234.716205][ T7710] device veth1_vlan entered promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 234.855694][ T7957] Modules linked in: [ 234.920044][ T7957] CPU: 1 PID: 7957 Comm: syz.1.953 Not tainted 5.15.175-syzkaller #0 [ 234.950417][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 234.985242][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.041349][ T7957] RIP: 0010:del_gendisk+0x6fb/0x770 [ 235.159388][ T7957] Code: 00 00 4c 89 f6 e8 35 85 fa ff 4c 89 f7 be 01 00 00 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0a 12 fd ff e8 85 8c 83 fd <0f> 0b 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 89 e9 80 e1 07 [ 235.180894][ T7957] RSP: 0018:ffffc9000335fdf0 EFLAGS: 00010287 [ 235.187001][ T7957] RAX: ffffffff83fcf85b RBX: 0000000000000240 RCX: 0000000000080000 [ 235.195069][ T7957] RDX: ffffc900040a4000 RSI: 0000000000000408 RDI: 0000000000000409 [ 235.206934][ T7957] RBP: 0000000000000000 R08: ffffffff83fcf278 R09: fffff5200066bfb9 [ 235.280025][ T7957] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11004a01590 [ 235.288044][ T7957] R13: ffff88802500ac00 R14: ffff8880242ab900 R15: ffff88802500ac80 [ 235.341899][ T7957] FS: 00007f60177866c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 235.353587][ T7957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.360349][ T6483] Bluetooth: hci1: command 0x0409 tx timeout [ 235.480138][ T7957] CR2: 000055ccf1418770 CR3: 00000000545d5000 CR4: 00000000003506e0 [ 235.488165][ T7957] DR0: 0040000000000007 DR1: 0000000000000006 DR2: 0000000000000002 [ 235.550246][ T7957] DR3: 0000000000000010 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.558386][ T7957] Call Trace: [ 235.571848][ T7957] [ 235.574941][ T7957] ? __warn+0x15b/0x300 [ 235.579121][ T7957] ? del_gendisk+0x6fb/0x770 [ 235.619989][ T7957] ? report_bug+0x1b7/0x2e0 [ 235.624625][ T7957] ? handle_bug+0x3d/0x70 [ 235.628974][ T7957] ? exc_invalid_op+0x16/0x40 [ 235.661658][ T7957] ? asm_exc_invalid_op+0x16/0x20 [ 235.667110][ T7957] ? del_gendisk+0x118/0x770 [ 235.672850][ T7957] ? del_gendisk+0x6fb/0x770 [ 235.677524][ T7957] ? del_gendisk+0x6fb/0x770 [ 235.682859][ T7957] loop_control_ioctl+0x552/0x700 [ 235.687940][ T7957] ? xor_init+0x60/0x60 [ 235.698692][ T7957] ? bpf_lsm_file_ioctl+0x5/0x10 [ 235.708843][ T7957] ? security_file_ioctl+0x7d/0xa0 [ 235.714343][ T7957] ? xor_init+0x60/0x60 [ 235.718539][ T7957] __se_sys_ioctl+0xf1/0x160 [ 235.723490][ T7957] do_syscall_64+0x3b/0xb0 [ 235.727944][ T7957] ? clear_bhb_loop+0x15/0x70 [ 235.733136][ T7957] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 235.739088][ T7957] RIP: 0033:0x7f6019915d29 [ 235.744040][ T7957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.779238][ T7957] RSP: 002b:00007f6017786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.791614][ T7957] RAX: ffffffffffffffda RBX: 00007f6019b05fa0 RCX: 00007f6019915d29 [ 235.799617][ T7957] RDX: 0000000007000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 235.815950][ T7957] RBP: 00007f6019991b08 R08: 0000000000000000 R09: 0000000000000000 [ 235.840027][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.848192][ T7957] R13: 0000000000000000 R14: 00007f6019b05fa0 R15: 00007ffccc7049a8 [ 235.868973][ T7957] [ 235.872847][ T7957] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 235.880146][ T7957] CPU: 0 PID: 7957 Comm: syz.1.953 Not tainted 5.15.175-syzkaller #0 [ 235.888225][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 235.898291][ T7957] Call Trace: [ 235.901612][ T7957] [ 235.904557][ T7957] dump_stack_lvl+0x1e3/0x2d0 [ 235.909258][ T7957] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 235.914910][ T7957] ? panic+0x860/0x860 [ 235.919007][ T7957] ? del_gendisk+0x6a0/0x770 [ 235.923619][ T7957] ? del_gendisk+0x6a0/0x770 [ 235.928229][ T7957] panic+0x318/0x860 [ 235.932150][ T7957] ? __warn+0x16a/0x300 [ 235.936324][ T7957] ? fb_is_primary_device+0xd0/0xd0 [ 235.941547][ T7957] ? del_gendisk+0x6fb/0x770 [ 235.946142][ T7957] __warn+0x2b2/0x300 [ 235.950130][ T7957] ? del_gendisk+0x6fb/0x770 [ 235.954720][ T7957] report_bug+0x1b7/0x2e0 [ 235.959056][ T7957] handle_bug+0x3d/0x70 [ 235.963205][ T7957] exc_invalid_op+0x16/0x40 [ 235.967703][ T7957] asm_exc_invalid_op+0x16/0x20 [ 235.972554][ T7957] RIP: 0010:del_gendisk+0x6fb/0x770 [ 235.977761][ T7957] Code: 00 00 4c 89 f6 e8 35 85 fa ff 4c 89 f7 be 01 00 00 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0a 12 fd ff e8 85 8c 83 fd <0f> 0b 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 89 e9 80 e1 07 [ 235.997365][ T7957] RSP: 0018:ffffc9000335fdf0 EFLAGS: 00010287 [ 236.003438][ T7957] RAX: ffffffff83fcf85b RBX: 0000000000000240 RCX: 0000000000080000 [ 236.011408][ T7957] RDX: ffffc900040a4000 RSI: 0000000000000408 RDI: 0000000000000409 [ 236.019375][ T7957] RBP: 0000000000000000 R08: ffffffff83fcf278 R09: fffff5200066bfb9 [ 236.027430][ T7957] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11004a01590 [ 236.035395][ T7957] R13: ffff88802500ac00 R14: ffff8880242ab900 R15: ffff88802500ac80 [ 236.043370][ T7957] ? del_gendisk+0x118/0x770 [ 236.047959][ T7957] ? del_gendisk+0x6fb/0x770 [ 236.052551][ T7957] loop_control_ioctl+0x552/0x700 [ 236.057574][ T7957] ? xor_init+0x60/0x60 [ 236.061726][ T7957] ? bpf_lsm_file_ioctl+0x5/0x10 [ 236.066663][ T7957] ? security_file_ioctl+0x7d/0xa0 [ 236.071772][ T7957] ? xor_init+0x60/0x60 [ 236.075922][ T7957] __se_sys_ioctl+0xf1/0x160 [ 236.080510][ T7957] do_syscall_64+0x3b/0xb0 [ 236.084928][ T7957] ? clear_bhb_loop+0x15/0x70 [ 236.089714][ T7957] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 236.095608][ T7957] RIP: 0033:0x7f6019915d29 [ 236.100037][ T7957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.119726][ T7957] RSP: 002b:00007f6017786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.128138][ T7957] RAX: ffffffffffffffda RBX: 00007f6019b05fa0 RCX: 00007f6019915d29 [ 236.136105][ T7957] RDX: 0000000007000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 236.144071][ T7957] RBP: 00007f6019991b08 R08: 0000000000000000 R09: 0000000000000000 [ 236.152034][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.159996][ T7957] R13: 0000000000000000 R14: 00007f6019b05fa0 R15: 00007ffccc7049a8 [ 236.167973][ T7957] [ 236.171248][ T7957] Kernel Offset: disabled [ 236.175597][ T7957] Rebooting in 86400 seconds..