last executing test programs: 1m31.702570021s ago: executing program 0 (id=30): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 1m31.441155469s ago: executing program 0 (id=31): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r0, 0x0, 0x49) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x8e2b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 1m29.737255325s ago: executing program 0 (id=37): symlink(0x0, &(0x7f0000000100)='./file0\x00') r0 = syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x3010400, &(0x7f00000004c0)=ANY=[], 0x41, 0x240, &(0x7f0000001280)="$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") openat$null(0xffffffffffffff9c, &(0x7f0000005080), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008890) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64=r0], 0x2, 0x199, &(0x7f0000000400)="$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") socket$inet_udp(0x2, 0x2, 0x0) chmod(0x0, 0x23f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1m26.482216851s ago: executing program 0 (id=40): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0xc0086c43, &(0x7f0000000080)=0x6ff) 1m24.785826566s ago: executing program 0 (id=46): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x200000, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) mknod(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x0) 1m23.543818376s ago: executing program 0 (id=49): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x11, 0x6fd, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) 1m22.415586153s ago: executing program 32 (id=49): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x11, 0x6fd, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) 5.581847779s ago: executing program 2 (id=261): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f34, 0x20}, {0x100000000, 0x2, 0xfffffffffffffffa, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x7fffffff, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x210000, 0x33}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 5.2497468s ago: executing program 4 (id=265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x38, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac02, 0xfac02, 0xfac05]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x810) 5.098787565s ago: executing program 4 (id=267): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x28) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) 4.969968389s ago: executing program 4 (id=268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2005) close_range(r0, 0xffffffffffffffff, 0x0) 4.846976693s ago: executing program 2 (id=269): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000015840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000029c0)=""/4099, 0x1003}, {&(0x7f0000015580)=""/102, 0x66}, {&(0x7f0000000b40)=""/64, 0x40}], 0x3}, 0x5}], 0x1, 0x2022, 0x0) 4.719685997s ago: executing program 4 (id=270): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0x114, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x8, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x4, 0x1, 0x25, 0x30, 0x7}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd4, 0x4, {0xa, 0x25, 0x25, 0x0, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf8, 0x5, 0x2, {0xa, 0x25, 0x25, 0x400, 0x5, 0x809}}}}}}}}]}}, 0x0) 4.449198966s ago: executing program 2 (id=272): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000a40)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000980)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x21}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000a00)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 3.268902814s ago: executing program 1 (id=276): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpeername(0xffffffffffffffff, 0x0, 0x0) 3.267709674s ago: executing program 2 (id=277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xffd3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x810) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x794, 0x4e23, 0x8, 0x0, 0x0, 0x0, 0x1f, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) syz_emit_ethernet(0x72, &(0x7f00000003c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [@routing={0x80}]}}}}}}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r6, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 2.974538424s ago: executing program 3 (id=280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x4}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x9}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.137852351s ago: executing program 2 (id=281): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x2, 0x2ca, &(0x7f0000000f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x119) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0xff, 0x50f, &(0x7f0000000140)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 2.137460691s ago: executing program 1 (id=282): r0 = socket(0x28, 0x801, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00001b1900000825bd7000fbdbdf250200000500fb0300802900007f00000006001c004e240000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.993544465s ago: executing program 1 (id=283): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) 1.901398298s ago: executing program 2 (id=284): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000008c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000d80)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00174c000000ad6f10f31fff2353af297ae41836ca445244efdf2f98713a95bf1ac01d37b3470751728c0909e8383dd727c37496ee90f1136316f8e3a0c4c605853ac33179763b2d5957eddadbe4423ec7220f045a94b8ff13b522d01956000000000000000000000000003e7c3616d65fd22980280b0cfecdcc4e6ebd408d3f8907f913c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.836959521s ago: executing program 3 (id=285): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000a40)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000980)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x21}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000a00)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 1.761713823s ago: executing program 1 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064000000000000002020207bd2000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2a08018, &(0x7f0000000080), 0x1, 0x49e, &(0x7f0000002140)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c900200200000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000009000000000000ffffffffffffffff00000000000000000a00000000000000000000000000000000000000000000000000000000000000ffffffff04000000090066e2e60318ed172ff31ddffe87d90000000000000a000000000000000000000000000000000000000000000c00"/192]) ptrace(0x10, r4) sync_file_range(0xffffffffffffffff, 0x7, 0x9f8, 0x3) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85513, &(0x7f0000002600)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x7, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25c, 0x9, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7b, 0x1, 0x0, 0xca, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x5, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0xffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x6, 0x8000, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x9]}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 713.218667ms ago: executing program 1 (id=287): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_ENTRY(r1, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r1, 0x4, 0x6800) splice(r0, 0x0, r2, 0x0, 0xea, 0x4) 696.878957ms ago: executing program 3 (id=288): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1f4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB]) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f00000008c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sync_file_range(r1, 0xc38d, 0x8, 0x2) 637.88176ms ago: executing program 4 (id=289): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x3, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0xb, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 480.742235ms ago: executing program 4 (id=290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x0, 0x9, 0xdc, 0x0, 0x7, 0x40, 0xfc, 0x8, 0x9, 0x6, 0x0, 0x8f, 0x0, 0xfffffffe, 0xe, 0x0, 0x9, 0x1, 0x7, '\x00', 0x4, 0x8bd5}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 345.929489ms ago: executing program 1 (id=291): getpid() syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x255, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r1, &(0x7f0000000080)="cc", 0x1, 0x200980) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 301.94958ms ago: executing program 3 (id=292): r0 = socket(0x28, 0x801, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00001b1900000825bd7000fbdbdf250200000500fb0300802900007f00000006001c004e240000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 124.173406ms ago: executing program 3 (id=293): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000800)={0x5, 0x8}, 0x0) pipe2$9p(0x0, 0x80000) 0s ago: executing program 3 (id=294): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. [ 79.423556][ T5762] cgroup: Unknown subsys name 'net' [ 79.562740][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.168136][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.310800][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.319230][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.328028][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.345257][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.354350][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.362056][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.370912][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.379741][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.387697][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.404877][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.413524][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.420101][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.421841][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.440890][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.448632][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.450445][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.464070][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.464443][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.479969][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.489783][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.497350][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.514149][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.521744][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.530249][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.006277][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 84.079409][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 84.090034][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 84.168522][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 84.256198][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.263432][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.271416][ T5775] bridge_slave_0: entered allmulticast mode [ 84.278974][ T5775] bridge_slave_0: entered promiscuous mode [ 84.319857][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.327951][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.335334][ T5775] bridge_slave_1: entered allmulticast mode [ 84.342316][ T5775] bridge_slave_1: entered promiscuous mode [ 84.377363][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.384729][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.391894][ T5777] bridge_slave_0: entered allmulticast mode [ 84.399077][ T5777] bridge_slave_0: entered promiscuous mode [ 84.417637][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.424979][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.432137][ T5778] bridge_slave_0: entered allmulticast mode [ 84.439589][ T5778] bridge_slave_0: entered promiscuous mode [ 84.448041][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.455542][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.462719][ T5778] bridge_slave_1: entered allmulticast mode [ 84.469851][ T5778] bridge_slave_1: entered promiscuous mode [ 84.482572][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.490082][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.497729][ T5777] bridge_slave_1: entered allmulticast mode [ 84.504945][ T5777] bridge_slave_1: entered promiscuous mode [ 84.561895][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.593705][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.616531][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.637840][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.651706][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.662901][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.721304][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.728743][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.736809][ T5776] bridge_slave_0: entered allmulticast mode [ 84.744163][ T5776] bridge_slave_0: entered promiscuous mode [ 84.755839][ T5775] team0: Port device team_slave_0 added [ 84.764090][ T5775] team0: Port device team_slave_1 added [ 84.783867][ T5777] team0: Port device team_slave_0 added [ 84.792564][ T5777] team0: Port device team_slave_1 added [ 84.810810][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.818616][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.826037][ T5776] bridge_slave_1: entered allmulticast mode [ 84.833009][ T5776] bridge_slave_1: entered promiscuous mode [ 84.853045][ T5778] team0: Port device team_slave_0 added [ 84.882171][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.889643][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.915828][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.939583][ T5778] team0: Port device team_slave_1 added [ 84.969360][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.979592][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.987248][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.013518][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.033150][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.040238][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.067385][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.092457][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.132995][ T5776] team0: Port device team_slave_0 added [ 85.140106][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.147553][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.174341][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.215959][ T5776] team0: Port device team_slave_1 added [ 85.244418][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.251707][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.278399][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.290757][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.298159][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.325320][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.338415][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.351712][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.378286][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.411696][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.418876][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.444962][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.474775][ T5777] hsr_slave_0: entered promiscuous mode [ 85.481287][ T5777] hsr_slave_1: entered promiscuous mode [ 85.507029][ T5775] hsr_slave_0: entered promiscuous mode [ 85.513499][ T5775] hsr_slave_1: entered promiscuous mode [ 85.520209][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.527315][ T5779] Bluetooth: hci1: command tx timeout [ 85.530122][ T5775] Cannot create hsr debugfs directory [ 85.596579][ T5778] hsr_slave_0: entered promiscuous mode [ 85.603005][ T5778] hsr_slave_1: entered promiscuous mode [ 85.605187][ T5779] Bluetooth: hci2: command tx timeout [ 85.610865][ T51] Bluetooth: hci3: command tx timeout [ 85.614192][ T5779] Bluetooth: hci0: command tx timeout [ 85.625743][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.633343][ T5778] Cannot create hsr debugfs directory [ 85.659291][ T5776] hsr_slave_0: entered promiscuous mode [ 85.665964][ T5776] hsr_slave_1: entered promiscuous mode [ 85.672330][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.680574][ T5776] Cannot create hsr debugfs directory [ 86.125423][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.138704][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.151728][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.179774][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.237244][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.250164][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.261471][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.293422][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.365907][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.396357][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.438774][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.453233][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.467416][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.479240][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.489997][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.508210][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.579080][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.618075][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.675459][ T4806] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.682776][ T4806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.710068][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.717282][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.803823][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.853511][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.866857][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.883276][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.901759][ T4806] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.908953][ T4806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.951903][ T4806] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.959078][ T4806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.973445][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.995776][ T4806] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.002949][ T4806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.050116][ T4806] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.057360][ T4806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.072213][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.106732][ T4806] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.113974][ T4806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.170371][ T4806] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.177610][ T4806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.470426][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.584077][ T5775] veth0_vlan: entered promiscuous mode [ 87.605467][ T5779] Bluetooth: hci1: command tx timeout [ 87.656438][ T5775] veth1_vlan: entered promiscuous mode [ 87.678975][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.685026][ T5779] Bluetooth: hci0: command tx timeout [ 87.691236][ T5779] Bluetooth: hci3: command tx timeout [ 87.693174][ T51] Bluetooth: hci2: command tx timeout [ 87.769623][ T5775] veth0_macvtap: entered promiscuous mode [ 87.781845][ T5775] veth1_macvtap: entered promiscuous mode [ 87.850794][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.865414][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.879675][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.888962][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.898497][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.907708][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.928367][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.948580][ T5777] veth0_vlan: entered promiscuous mode [ 87.992466][ T5777] veth1_vlan: entered promiscuous mode [ 88.027551][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.091501][ T5777] veth0_macvtap: entered promiscuous mode [ 88.109014][ T5777] veth1_macvtap: entered promiscuous mode [ 88.164248][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.181854][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.198943][ T5778] veth0_vlan: entered promiscuous mode [ 88.269012][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.281152][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.292988][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.307161][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.315537][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.336261][ T5778] veth1_vlan: entered promiscuous mode [ 88.343095][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.354139][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.366372][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.382869][ T5776] veth0_vlan: entered promiscuous mode [ 88.410369][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.422064][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.431363][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.440501][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.469003][ T5776] veth1_vlan: entered promiscuous mode [ 88.530205][ T5778] veth0_macvtap: entered promiscuous mode [ 88.563513][ T5778] veth1_macvtap: entered promiscuous mode [ 88.674078][ T5776] veth0_macvtap: entered promiscuous mode [ 88.692162][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.704534][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.714415][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.726298][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.738192][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.757929][ T5776] veth1_macvtap: entered promiscuous mode [ 88.765107][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.772975][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.826698][ T5844] syzkaller0: entered promiscuous mode [ 88.832242][ T5844] syzkaller0: entered allmulticast mode [ 88.841835][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.856699][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.867065][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.878484][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.892002][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.939716][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.947513][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.947604][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.947633][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.947661][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.988712][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.994448][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.014889][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.033569][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.044402][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.064693][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.084980][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.112303][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.188014][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.202092][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.222319][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.224217][ T5846] Bluetooth: MGMT ver 1.22 [ 89.233862][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.252733][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.263350][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.288475][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.381055][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.401457][ T5848] syz.2.6[5848]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.414946][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.423701][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.448177][ T5848] loop2: detected capacity change from 0 to 256 [ 89.463788][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.559572][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.570705][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.644016][ T5850] loop3: detected capacity change from 0 to 4096 [ 89.684811][ T5790] Bluetooth: hci1: command tx timeout [ 89.764794][ T5790] Bluetooth: hci2: command tx timeout [ 89.767351][ T51] Bluetooth: hci3: command tx timeout [ 89.770301][ T5790] Bluetooth: hci0: command tx timeout [ 89.811235][ T5854] loop2: detected capacity change from 0 to 128 [ 89.846189][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.879872][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.912916][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.938325][ T5854] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.951692][ T5854] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.972447][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.049747][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.094388][ T5850] EXT4-fs: Ignoring removed orlov option [ 90.125977][ T5850] EXT4-fs (loop3): Test dummy encryption mode enabled [ 90.133254][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.180401][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.215834][ T5850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.307335][ T5861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 90.401783][ T5861] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.494427][ T5864] loop1: detected capacity change from 0 to 2048 [ 90.579606][ T5864] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.800961][ T5850] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 90.895102][ T5867] fuse: Bad value for 'fd' [ 91.266530][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.375100][ T5885] loop1: detected capacity change from 0 to 256 [ 91.484821][ T5889] loop3: detected capacity change from 0 to 512 [ 91.501010][ T5889] ======================================================= [ 91.501010][ T5889] WARNING: The mand mount option has been deprecated and [ 91.501010][ T5889] and is ignored by this kernel. Remove the mand [ 91.501010][ T5889] option from the mount to silence this warning. [ 91.501010][ T5889] ======================================================= [ 91.564111][ T5889] EXT4-fs: Ignoring removed i_version option [ 91.585208][ T5889] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.625300][ T5824] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 91.669339][ T5889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.682140][ T5889] ext4 filesystem being mounted at /1/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.694577][ T5852] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.714656][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.763613][ T5791] udevd[5791]: incorrect ext4 checksum on /dev/loop3 [ 91.771585][ T5790] Bluetooth: hci1: command tx timeout [ 91.771929][ T5889] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.12: Unrecognised inode hash code 20 [ 91.790299][ T5889] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.12: Corrupt directory, running e2fsck is recommended [ 91.803841][ T5889] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.12: Unrecognised inode hash code 20 [ 91.819386][ T5889] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.12: Corrupt directory, running e2fsck is recommended [ 91.822224][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.836412][ T5889] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:106: comm syz.3.12: Corrupt inode bitmap - block_group = 0, inode_bitmap = 18 [ 91.860587][ T5790] Bluetooth: hci0: command tx timeout [ 91.866254][ T5790] Bluetooth: hci3: command tx timeout [ 91.871768][ T5790] Bluetooth: hci2: command tx timeout [ 91.883905][ T5889] EXT4-fs (loop3): Remounting filesystem read-only [ 91.891036][ T5852] usb 3-1: Using ep0 maxpacket: 16 [ 91.897878][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.912123][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.936756][ T5824] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 91.946677][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 91.961259][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.975297][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.994752][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.002831][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.012542][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.012594][ T5852] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.012619][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.044485][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.051249][ T9] cfg80211: failed to load regulatory.db [ 92.069537][ T5852] usb 3-1: config 0 descriptor?? [ 92.079744][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 92.104133][ T5824] usb 1-1: config 0 descriptor?? [ 92.115500][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.150063][ T27] usb 2-1: config 0 descriptor?? [ 92.187030][ T27] hub 2-1:0.0: USB hub found [ 92.364113][ T27] hub 2-1:0.0: 1 port detected [ 92.520258][ T5852] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 92.532750][ T5852] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 92.544466][ T5852] microsoft 0003:045E:07DA.0001: no inputs found [ 92.566875][ T5852] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 92.581997][ T27] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 92.593869][ T5891] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 92.601571][ T27] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 92.631462][ T5824] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 92.645341][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 92.651456][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 92.697422][ T27] usb 2-1: USB disconnect, device number 2 [ 92.792036][ T5824] usb 3-1: USB disconnect, device number 2 [ 92.804406][ T5891] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 92.826616][ T5891] usb 4-1: config 0 has no interface number 0 [ 92.850758][ T5891] usb 4-1: too many endpoints for config 0 interface 11 altsetting 253: 34, using maximum allowed: 30 [ 92.868181][ T5891] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 92.881649][ T5891] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 253, changing to 4 [ 92.896144][ T5891] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 2243, setting to 1023 [ 92.913473][ T5891] usb 4-1: config 0 interface 11 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 34 [ 92.932960][ T27] usb 1-1: USB disconnect, device number 2 [ 92.950398][ T5891] usb 4-1: config 0 interface 11 has no altsetting 0 [ 92.958484][ T5891] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 92.968700][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.996076][ T5891] usb 4-1: config 0 descriptor?? [ 93.004061][ T5895] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 93.025811][ T5891] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 93.044221][ T5891] keyspan 4-1:0.11: unsupported endpoint type 1 [ 93.053124][ T5891] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 93.064833][ T5891] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 93.072772][ T5891] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 93.083040][ T5891] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 93.091230][ T5891] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 93.099373][ T5891] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 93.109291][ T5891] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 93.120416][ T5891] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 93.131228][ T5891] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 93.139734][ T5891] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 93.160395][ T5891] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 93.175031][ T5891] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 93.184091][ T5891] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 93.198147][ T5891] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 93.275607][ T5842] usb 4-1: USB disconnect, device number 2 [ 93.306766][ T5842] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 93.337411][ T5842] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 93.357039][ T5842] keyspan 4-1:0.11: device disconnected [ 93.673247][ T5905] netlink: 160 bytes leftover after parsing attributes in process `syz.2.17'. [ 93.840155][ T5905] netlink: 160 bytes leftover after parsing attributes in process `syz.2.17'. [ 94.455620][ T5911] loop3: detected capacity change from 0 to 16 [ 94.467955][ T5909] loop0: detected capacity change from 0 to 256 [ 94.478079][ T5913] loop1: detected capacity change from 0 to 8 [ 94.516472][ T5911] erofs: (device loop3): mounted with root inode @ nid 36. [ 94.528596][ T5909] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 94.667951][ T5911] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 94.742350][ T5914] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 94.779420][ T5914] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 95.267975][ T5825] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 96.176532][ T5926] loop0: detected capacity change from 0 to 2048 [ 96.190078][ T5825] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.190996][ T5928] loop3: detected capacity change from 0 to 1024 [ 96.238660][ T5825] usb 2-1: not running at top speed; connect to a high speed hub [ 96.257512][ T5825] usb 2-1: config 1 has an invalid interface number: 80 but max is 0 [ 96.267833][ T5825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.307395][ T5825] usb 2-1: config 1 has no interface number 0 [ 96.330939][ T5926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 96.339463][ T5825] usb 2-1: config 1 interface 80 has no altsetting 0 [ 96.364606][ T5825] usb 2-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=27.31 [ 96.373912][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.392275][ T5825] usb 2-1: Product: syz [ 96.397725][ T5825] usb 2-1: Manufacturer: syz [ 96.402380][ T5825] usb 2-1: SerialNumber: syz [ 96.476886][ T5926] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.520948][ T5926] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 96.551201][ T5926] EXT4-fs (loop0): This should not happen!! Data will be lost [ 96.551201][ T5926] [ 96.563584][ T5926] EXT4-fs (loop0): Total free blocks count 0 [ 96.572915][ T5926] EXT4-fs (loop0): Free/Dirty block details [ 96.579375][ T5926] EXT4-fs (loop0): free_blocks=2415919104 [ 96.590279][ T5926] EXT4-fs (loop0): dirty_blocks=48 [ 96.595566][ T5926] EXT4-fs (loop0): Block reservation details [ 96.601977][ T5926] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 96.682064][ T5928] hfsplus: catalog searching failed [ 96.684024][ T5825] usb 2-1: bad CDC descriptors [ 96.715672][ T5825] usb 2-1: bad CDC descriptors [ 96.744840][ T5825] usb 2-1: USB disconnect, device number 3 [ 96.754995][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 96.771868][ T147] hfsplus: b-tree write err: -5, ino 3 [ 96.815253][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.931720][ T5940] loop3: detected capacity change from 0 to 256 [ 96.940888][ T5940] exfat: Deprecated parameter 'utf8' [ 96.962932][ T5940] exfat: Deprecated parameter 'namecase' [ 97.001828][ T5940] exfat: Deprecated parameter 'utf8' [ 97.024330][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.048154][ T5940] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 97.051824][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 97.084288][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.121359][ T27] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 97.141605][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.161855][ T27] usb 3-1: Product: syz [ 97.169714][ T27] usb 3-1: Manufacturer: syz [ 97.174984][ T27] usb 3-1: SerialNumber: syz [ 97.205602][ T27] usb 3-1: config 0 descriptor?? [ 97.428424][ T5946] loop1: detected capacity change from 0 to 8 [ 97.442646][ T5946] SQUASHFS error: lzo decompression failed, data probably corrupt [ 97.462133][ T5946] SQUASHFS error: Failed to read block 0x91: -5 [ 97.469074][ T5946] SQUASHFS error: Unable to read metadata cache entry [8f] [ 97.506774][ T5946] SQUASHFS error: Unable to read inode 0x11f [ 98.386046][ T27] usb 3-1: USB disconnect, device number 3 [ 98.443209][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.323911][ T5969] loop3: detected capacity change from 0 to 512 [ 99.332630][ T5969] ext4: Unknown parameter 'euid' [ 100.334506][ C0] sched: RT throttling activated [ 101.257705][ T5974] loop0: detected capacity change from 0 to 16 [ 101.415089][ T5974] erofs: (device loop0): mounted with root inode @ nid 36. [ 102.411733][ T5979] loop0: detected capacity change from 0 to 2048 [ 102.440734][ T5979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.803863][ T5981] syz.3.41 (5981) used greatest stack depth: 17896 bytes left [ 103.036924][ T5990] loop1: detected capacity change from 0 to 1024 [ 103.044390][ T5990] EXT4-fs: Ignoring removed bh option [ 103.228849][ T5990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.630625][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.943495][ T5776] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 103.958186][ T5776] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 104.526812][ T788] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 104.840700][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.978429][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 200, setting to 64 [ 105.072236][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.146673][ T788] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.173689][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.224756][ T788] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 105.278627][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.345826][ T788] usb 2-1: config 0 descriptor?? [ 105.353641][ T5998] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 105.544201][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.713076][ T5852] usb 2-1: USB disconnect, device number 4 [ 105.928866][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.174186][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.439645][ T6008] loop2: detected capacity change from 0 to 1024 [ 106.737335][ T6010] loop1: detected capacity change from 0 to 2048 [ 106.881524][ T6010] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.266793][ T6014] loop2: detected capacity change from 0 to 512 [ 107.570200][ T27] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 107.938381][ T6014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.965305][ T27] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.994916][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.005161][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.012406][ T6014] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.148093][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.177514][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.185401][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.192908][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.360822][ T6027] fido_id[6027]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.457788][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.410513][ T6039] loop2: detected capacity change from 0 to 256 [ 109.805388][ T6043] loop1: detected capacity change from 0 to 512 [ 110.023920][ T6043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.244880][ T5790] Bluetooth: hci1: command tx timeout [ 110.368195][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.408563][ T6024] chnl_net:caif_netlink_parms(): no params data found [ 110.831863][ T49] hsr_slave_0: left promiscuous mode [ 110.884908][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.939250][ T49] hsr_slave_1: left promiscuous mode [ 110.964092][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.994863][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.034100][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.052127][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.066965][ T49] bridge_slave_1: left allmulticast mode [ 111.072717][ T49] bridge_slave_1: left promiscuous mode [ 111.081573][ T6077] loop3: detected capacity change from 0 to 2048 [ 111.090078][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.111763][ T6080] loop2: detected capacity change from 0 to 512 [ 111.123123][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.135710][ T49] bridge_slave_0: left allmulticast mode [ 111.141480][ T49] bridge_slave_0: left promiscuous mode [ 111.152888][ T27] usb 2-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40 [ 111.164344][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.181172][ T6080] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.62: inode has both inline data and extents flags [ 111.194692][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.202727][ T27] usb 2-1: Product: syz [ 111.222334][ T6080] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.62: couldn't read orphan inode 15 (err -117) [ 111.224110][ T6077] Alternate GPT is invalid, using primary GPT. [ 111.264571][ T27] usb 2-1: Manufacturer: syz [ 111.269257][ T27] usb 2-1: SerialNumber: syz [ 111.293781][ T49] veth1_macvtap: left promiscuous mode [ 111.301908][ T6077] loop3: p1 p2 p3 [ 111.307606][ T49] veth0_macvtap: left promiscuous mode [ 111.313238][ T6077] loop3: partition table partially beyond EOD, truncated [ 111.320830][ T49] veth1_vlan: left promiscuous mode [ 111.327499][ T6080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.345365][ T49] veth0_vlan: left promiscuous mode [ 111.397519][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 111.550196][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.580066][ T27] usb 2-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 111.608986][ T27] usb 2-1: 1:1 : sample bitwidth 251 in over sample bytes 2 [ 111.662236][ T27] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 111.705467][ T27] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 111.779539][ T27] usb 2-1: USB disconnect, device number 5 [ 111.855422][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.463821][ T5790] Bluetooth: hci1: command tx timeout [ 112.578675][ T6093] loop2: detected capacity change from 0 to 2048 [ 112.812339][ T6093] UDF-fs: warning (device loop2): udf_fill_super: No fileset found [ 113.586503][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 113.951363][ T6098] loop2: detected capacity change from 0 to 2048 [ 114.193250][ T49] team0 (unregistering): Port device team_slave_1 removed [ 114.257455][ T49] team0 (unregistering): Port device team_slave_0 removed [ 114.332930][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.380673][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.606024][ T6102] loop2: detected capacity change from 0 to 512 [ 114.624628][ T5790] Bluetooth: hci1: command tx timeout [ 114.846003][ T6102] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.67: invalid block [ 114.868801][ T6102] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.67: invalid indirect mapped block 10 (level 1) [ 114.888210][ T6102] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.67: invalid indirect mapped block 8 (level 1) [ 114.921688][ T6102] EXT4-fs (loop2): 1 truncate cleaned up [ 114.935355][ T6102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.598748][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.736581][ T6107] loop1: detected capacity change from 0 to 1024 [ 115.816423][ T6107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.853734][ T6107] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.033970][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 116.270127][ T6116] Zero length message leads to an empty skb [ 116.304258][ T49] bond0 (unregistering): Released all slaves [ 116.484176][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.511734][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.535011][ T6024] bridge_slave_0: entered allmulticast mode [ 116.543363][ T6024] bridge_slave_0: entered promiscuous mode [ 116.554219][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.592896][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.614784][ T6024] bridge_slave_1: entered allmulticast mode [ 116.636272][ T6024] bridge_slave_1: entered promiscuous mode [ 116.694771][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 116.714597][ T5790] Bluetooth: hci1: command tx timeout [ 116.776638][ T6024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.833078][ T6024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.945873][ T6024] team0: Port device team_slave_0 added [ 116.965435][ T6024] team0: Port device team_slave_1 added [ 117.095163][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.105595][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 117.114820][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.139472][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.150003][ T9] usb 2-1: config 0 descriptor?? [ 117.155352][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.456913][ T6024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.926082][ T9] usb 2-1: USB disconnect, device number 6 [ 118.035137][ T6024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.069058][ T6024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.153643][ T6024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.331628][ T6140] loop1: detected capacity change from 0 to 16 [ 118.373160][ T6024] hsr_slave_0: entered promiscuous mode [ 118.390877][ T6140] erofs: (device loop1): mounted with root inode @ nid 36. [ 118.436101][ T6024] hsr_slave_1: entered promiscuous mode [ 118.448998][ T6024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.475952][ T6024] Cannot create hsr debugfs directory [ 118.819785][ T6147] loop1: detected capacity change from 0 to 1024 [ 119.376316][ T6024] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.419897][ T6024] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.440004][ T6024] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.459714][ T6024] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.795871][ T6024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.863239][ T6024] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.893294][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.900532][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.933422][ T6159] warning: `syz.1.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.967177][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.975266][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.095469][ T6163] binder: 6162:6163 ioctl 4018620d 0 returned -22 [ 120.725679][ T6024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.756360][ T6195] loop3: detected capacity change from 0 to 16 [ 121.775264][ T6195] erofs: (device loop3): mounted with root inode @ nid 36. [ 121.960383][ T6199] loop3: detected capacity change from 0 to 1024 [ 122.236945][ T5852] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 122.343708][ T6024] veth0_vlan: entered promiscuous mode [ 122.368738][ T6024] veth1_vlan: entered promiscuous mode [ 122.423591][ T6024] veth0_macvtap: entered promiscuous mode [ 122.438981][ T5852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.457612][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 122.473678][ T5852] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 122.479850][ T6024] veth1_macvtap: entered promiscuous mode [ 122.490083][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.505752][ T5852] usb 3-1: config 0 descriptor?? [ 122.512350][ T6196] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.562055][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.587805][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.602362][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.613713][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.628378][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.641269][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.671062][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.720192][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.917861][ T5891] usb 3-1: USB disconnect, device number 4 [ 122.934990][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.977926][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.011283][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.038899][ T6024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.060609][ T6024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.097989][ T6024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.148487][ T6024] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.184546][ T6024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.193360][ T6024] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.214553][ T6024] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.465960][ T4806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.473877][ T4806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.629544][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.647567][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.264079][ T6233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.91'. [ 124.698114][ T6238] loop4: detected capacity change from 0 to 512 [ 124.757255][ T6238] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.50: iget: bad i_size value: 38620345925642 [ 124.770026][ T6240] loop2: detected capacity change from 0 to 16 [ 124.810387][ T6240] erofs: (device loop2): mounted with root inode @ nid 36. [ 124.863485][ T6238] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.50: couldn't read orphan inode 15 (err -117) [ 124.964429][ T6238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.091392][ T6246] binder: 6245:6246 ioctl 4018620d 0 returned -22 [ 125.158097][ T6238] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.50: bg 0: block 5: invalid block bitmap [ 125.186460][ T6238] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 256 with error 28 [ 125.212930][ T6238] EXT4-fs (loop4): This should not happen!! Data will be lost [ 125.212930][ T6238] [ 125.238516][ T6238] EXT4-fs (loop4): Total free blocks count 0 [ 125.254324][ T6238] EXT4-fs (loop4): Free/Dirty block details [ 125.263119][ T6238] EXT4-fs (loop4): free_blocks=0 [ 125.270777][ T6238] EXT4-fs (loop4): dirty_blocks=260 [ 125.290492][ T6238] EXT4-fs (loop4): Block reservation details [ 125.301254][ T6238] EXT4-fs (loop4): i_reserved_data_blocks=260 [ 125.356714][ T6238] EXT4-fs (loop4): shut down requested (0) [ 125.709970][ T6261] syz.4.96 uses obsolete (PF_INET,SOCK_PACKET) [ 125.793983][ T6261] loop4: detected capacity change from 0 to 1024 [ 126.587809][ T5764] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 126.975582][ T6285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.101'. [ 127.700869][ T5764] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.731367][ T5764] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 127.761484][ T5764] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 127.818938][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.999471][ T5764] usb 4-1: config 0 descriptor?? [ 128.044548][ T6295] loop1: detected capacity change from 0 to 512 [ 128.085626][ T6299] loop2: detected capacity change from 0 to 16 [ 128.106383][ T6299] erofs: (device loop2): mounted with root inode @ nid 36. [ 128.136182][ T6295] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.103: invalid block [ 128.157165][ T6295] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.103: invalid indirect mapped block 10 (level 1) [ 128.176768][ T6295] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.103: invalid indirect mapped block 8 (level 1) [ 128.227796][ T6295] EXT4-fs (loop1): 1 truncate cleaned up [ 128.236066][ T6295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.424424][ T6271] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 128.648197][ T9] usb 4-1: USB disconnect, device number 3 [ 128.687801][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.537657][ T6327] binder: BINDER_SET_CONTEXT_MGR already set [ 129.545312][ T6327] binder: 6326:6327 ioctl 4018620d 200000004a80 returned -16 [ 129.609429][ T6331] loop2: detected capacity change from 0 to 1024 [ 130.340057][ T6346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.113'. [ 131.570585][ T6353] loop3: detected capacity change from 0 to 512 [ 131.821395][ T6353] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.116: invalid block [ 131.839532][ T6353] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.116: invalid indirect mapped block 10 (level 1) [ 131.854436][ T6353] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.116: invalid indirect mapped block 8 (level 1) [ 131.873019][ T6353] EXT4-fs (loop3): 1 truncate cleaned up [ 131.887082][ T6353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.136023][ T6355] loop4: detected capacity change from 0 to 16 [ 132.195278][ T6355] erofs: (device loop4): mounted with root inode @ nid 36. [ 132.299482][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.969507][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.976406][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.014650][ T5824] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 133.207079][ T5824] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.256439][ T5824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 133.287327][ T5824] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 133.304085][ T6381] loop3: detected capacity change from 0 to 1024 [ 133.306590][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.355363][ T5824] usb 2-1: config 0 descriptor?? [ 133.368718][ T6370] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 133.677488][ T5824] usb 2-1: USB disconnect, device number 7 [ 133.763754][ T6386] binder: BINDER_SET_CONTEXT_MGR already set [ 133.771267][ T6386] binder: 6385:6386 ioctl 4018620d 200000004a80 returned -16 [ 134.159566][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 134.934784][ T6399] loop2: detected capacity change from 0 to 16 [ 134.946784][ T6399] erofs: (device loop2): mounted with root inode @ nid 36. [ 136.111619][ T6426] loop2: detected capacity change from 0 to 512 [ 136.234660][ T6426] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.134: invalid block [ 136.252571][ T6426] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.134: invalid indirect mapped block 10 (level 1) [ 136.269553][ T6426] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.134: invalid indirect mapped block 8 (level 1) [ 136.286552][ T6426] EXT4-fs (loop2): 1 truncate cleaned up [ 136.297784][ T6426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.944231][ T6432] loop3: detected capacity change from 0 to 1024 [ 136.990725][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.338191][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 138.025902][ T6446] loop1: detected capacity change from 0 to 16 [ 138.058316][ T6446] erofs: (device loop1): mounted with root inode @ nid 36. [ 138.085323][ T27] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 138.316941][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.342267][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.369389][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.401489][ T27] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 138.432818][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.457030][ T27] usb 3-1: config 0 descriptor?? [ 138.469848][ T6441] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.708626][ T5824] usb 3-1: USB disconnect, device number 5 [ 139.197362][ T6474] loop3: detected capacity change from 0 to 512 [ 139.263196][ T6474] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.147: invalid indirect mapped block 10 (level 1) [ 139.324754][ T6474] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.147: invalid indirect mapped block 8 (level 1) [ 139.346675][ T6474] EXT4-fs (loop3): 1 truncate cleaned up [ 139.432312][ T6474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.623295][ T6481] loop2: detected capacity change from 0 to 1024 [ 140.035563][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 140.778578][ T6493] loop1: detected capacity change from 0 to 16 [ 140.843520][ T6493] erofs: (device loop1): mounted with root inode @ nid 36. [ 141.423567][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.924720][ T787] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 142.104732][ T5825] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 142.189533][ T787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.341981][ T787] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 142.447572][ T5825] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 142.474162][ T787] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.553178][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.564921][ T787] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 142.576194][ T6519] loop1: detected capacity change from 0 to 1024 [ 142.601008][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.646207][ T5825] usb 5-1: config 0 descriptor?? [ 142.687656][ T787] usb 4-1: config 0 descriptor?? [ 142.694325][ T6510] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.706752][ T5825] cp210x 5-1:0.0: cp210x converter detected [ 142.889129][ T6522] loop2: detected capacity change from 0 to 16 [ 142.905581][ T6522] erofs: (device loop2): mounted with root inode @ nid 36. [ 143.462096][ T787] usb 4-1: USB disconnect, device number 4 [ 143.515402][ T6528] loop2: detected capacity change from 0 to 512 [ 143.855791][ T6528] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.162: invalid block [ 143.881886][ T6528] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.162: invalid indirect mapped block 10 (level 1) [ 143.897536][ T6528] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.162: invalid indirect mapped block 8 (level 1) [ 143.928532][ T6528] EXT4-fs (loop2): 1 truncate cleaned up [ 143.941108][ T6528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.307452][ T5825] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 144.347189][ T5825] usb 5-1: cp210x converter now attached to ttyUSB0 [ 144.357807][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.596062][ T5824] usb 5-1: USB disconnect, device number 2 [ 144.629263][ T5824] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 144.688038][ T6545] loop3: detected capacity change from 0 to 512 [ 144.693386][ T5824] cp210x 5-1:0.0: device disconnected [ 144.806386][ T6545] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.165: invalid indirect mapped block 10 (level 1) [ 144.840135][ T788] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 144.918036][ T788] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.952562][ T6545] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.165: invalid indirect mapped block 8 (level 1) [ 145.100366][ T6545] EXT4-fs (loop3): 1 truncate cleaned up [ 145.167138][ T6545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.185629][ T6552] fido_id[6552]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.617879][ T6562] loop4: detected capacity change from 0 to 16 [ 145.626635][ T6562] erofs: (device loop4): mounted with root inode @ nid 36. [ 146.004712][ T6532] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 146.613128][ T6568] loop2: detected capacity change from 0 to 1024 [ 147.399146][ T6581] binder: 6579:6581 ioctl c0306201 0 returned -14 [ 147.783425][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.914654][ T788] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 149.929773][ T6599] loop3: detected capacity change from 0 to 512 [ 149.977096][ T6597] loop4: detected capacity change from 0 to 512 [ 150.362010][ T6597] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.177: invalid block [ 150.375013][ T6599] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.176: invalid block [ 150.387614][ T788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.398062][ T788] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 150.409216][ T6597] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.177: invalid indirect mapped block 10 (level 1) [ 150.422803][ T6599] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.176: invalid indirect mapped block 10 (level 1) [ 150.436276][ T6597] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.177: invalid indirect mapped block 8 (level 1) [ 150.449561][ T6599] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.176: invalid indirect mapped block 8 (level 1) [ 150.463366][ T6597] EXT4-fs (loop4): 1 truncate cleaned up [ 150.470970][ T6599] EXT4-fs (loop3): 1 truncate cleaned up [ 150.477821][ T788] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.493113][ T6599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.506369][ T788] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 150.515611][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.524845][ T6597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.559965][ T788] usb 3-1: config 0 descriptor?? [ 150.575283][ T6585] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.736031][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.795057][ T6024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.806635][ T5764] usb 3-1: USB disconnect, device number 6 [ 151.027245][ T6612] loop3: detected capacity change from 0 to 16 [ 151.063755][ T6612] erofs: (device loop3): mounted with root inode @ nid 36. [ 152.278148][ T6632] loop3: detected capacity change from 0 to 1024 [ 152.857184][ T6649] binder: 6647:6649 ioctl c0306201 0 returned -14 [ 153.358093][ T6657] loop4: detected capacity change from 0 to 512 [ 153.601604][ T6657] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.187: invalid block [ 153.623830][ T6657] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.187: invalid indirect mapped block 10 (level 1) [ 153.640686][ T6657] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.187: invalid indirect mapped block 8 (level 1) [ 153.658566][ T6657] EXT4-fs (loop4): 1 truncate cleaned up [ 153.671092][ T6657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.172550][ T6024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.449225][ T6668] loop3: detected capacity change from 0 to 512 [ 154.739370][ T6668] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.188: invalid block [ 154.753541][ T6668] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.188: invalid indirect mapped block 10 (level 1) [ 154.770653][ T6668] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.188: invalid indirect mapped block 8 (level 1) [ 154.789136][ T6668] EXT4-fs (loop3): 1 truncate cleaned up [ 154.801945][ T6668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.994809][ T27] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 155.236337][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.299309][ T6675] loop1: detected capacity change from 0 to 16 [ 155.325286][ T6675] erofs: (device loop1): mounted with root inode @ nid 36. [ 155.398349][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.439890][ T27] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 155.476468][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.521239][ T27] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 155.554548][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.583825][ T27] usb 5-1: config 0 descriptor?? [ 155.603738][ T6667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 155.855605][ T27] usb 5-1: USB disconnect, device number 3 [ 158.856413][ T6702] loop4: detected capacity change from 0 to 512 [ 158.973865][ T6704] loop3: detected capacity change from 0 to 512 [ 159.164237][ T6704] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.198: invalid block [ 159.177286][ T6702] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.197: invalid block [ 159.194067][ T6704] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.198: invalid indirect mapped block 10 (level 1) [ 159.208299][ T6702] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.197: invalid indirect mapped block 10 (level 1) [ 159.221740][ T6704] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.198: invalid indirect mapped block 8 (level 1) [ 159.235274][ T6702] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.197: invalid indirect mapped block 8 (level 1) [ 159.249036][ T6704] EXT4-fs (loop3): 1 truncate cleaned up [ 159.255423][ T6702] EXT4-fs (loop4): 1 truncate cleaned up [ 159.273508][ T6704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.299887][ T6702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.544959][ T6024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.633286][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.936859][ T6723] loop1: detected capacity change from 0 to 16 [ 160.012242][ T6723] erofs: (device loop1): mounted with root inode @ nid 36. [ 162.198140][ T6748] loop4: detected capacity change from 0 to 512 [ 162.480502][ T6748] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.209: invalid block [ 162.494811][ T6748] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.209: invalid indirect mapped block 10 (level 1) [ 162.509806][ T6748] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.209: invalid indirect mapped block 8 (level 1) [ 162.526633][ T6748] EXT4-fs (loop4): 1 truncate cleaned up [ 162.538937][ T6748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.851993][ T787] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 162.883486][ T6024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.892814][ T6761] loop4: detected capacity change from 0 to 2048 [ 163.917555][ T787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.933881][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.954641][ T787] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.009779][ T787] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 164.019028][ T6761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.040657][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.301984][ T787] usb 4-1: config 0 descriptor?? [ 164.307732][ T787] usb 4-1: can't set config #0, error -71 [ 164.315060][ T787] usb 4-1: USB disconnect, device number 5 [ 166.142592][ T6777] loop2: detected capacity change from 0 to 1024 [ 166.151879][ T6787] loop3: detected capacity change from 0 to 1024 [ 166.230764][ T6777] hfsplus: unable to parse mount options [ 167.329629][ T6777] loop2: detected capacity change from 0 to 8 [ 167.412076][ T6777] SQUASHFS error: lzo decompression failed, data probably corrupt [ 167.412135][ T6777] SQUASHFS error: Failed to read block 0x82: -5 [ 167.412152][ T6777] SQUASHFS error: Unable to read metadata cache entry [80] [ 167.412166][ T6777] SQUASHFS error: Unable to read inode 0x11f [ 167.514733][ T5957] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.692729][ T6777] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 167.754703][ T6777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.144825][ T6814] loop1: detected capacity change from 0 to 512 [ 168.495906][ T6814] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.222: invalid block [ 168.510017][ T6814] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.222: invalid indirect mapped block 10 (level 1) [ 168.527155][ T6814] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.222: invalid indirect mapped block 8 (level 1) [ 168.554857][ T6814] EXT4-fs (loop1): 1 truncate cleaned up [ 168.567238][ T6814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.919941][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.824851][ T6830] syzkaller0: entered promiscuous mode [ 169.945649][ T6830] syzkaller0: entered allmulticast mode [ 171.060049][ T6849] loop4: detected capacity change from 0 to 1024 [ 171.211139][ T6853] loop3: detected capacity change from 0 to 256 [ 171.333733][ T6853] exfat: Deprecated parameter 'utf8' [ 171.366646][ T6853] exfat: Deprecated parameter 'namecase' [ 171.400226][ T6853] exfat: Deprecated parameter 'utf8' [ 171.441843][ T6853] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 172.825182][ T6866] loop3: detected capacity change from 0 to 512 [ 173.165209][ T6866] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.235: invalid indirect mapped block 10 (level 1) [ 173.183555][ T6866] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.235: invalid indirect mapped block 8 (level 1) [ 173.207686][ T6866] EXT4-fs (loop3): 1 truncate cleaned up [ 173.225453][ T6866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.640115][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.695661][ T6871] loop2: detected capacity change from 0 to 2048 [ 173.793502][ T6871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.858135][ T6871] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 173.900232][ T6871] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 173.913802][ T6871] EXT4-fs (loop2): This should not happen!! Data will be lost [ 173.913802][ T6871] [ 173.931543][ T6871] EXT4-fs (loop2): Total free blocks count 0 [ 173.947778][ T6871] EXT4-fs (loop2): Free/Dirty block details [ 173.953932][ T6871] EXT4-fs (loop2): free_blocks=2415919104 [ 173.960086][ T6871] EXT4-fs (loop2): dirty_blocks=64 [ 173.965503][ T6871] EXT4-fs (loop2): Block reservation details [ 173.971520][ T6871] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 174.147037][ T6096] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 174.274335][ T6881] loop2: detected capacity change from 0 to 512 [ 174.294232][ T6881] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 174.310648][ T6881] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.353113][ T6881] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.238: bad orphan inode 131083 [ 174.371167][ T6881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.414367][ T28] audit: type=1800 audit(1780726870.952:2): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.238" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 174.536436][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.803973][ T6886] loop2: detected capacity change from 0 to 512 [ 175.111912][ T6886] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.239: invalid indirect mapped block 10 (level 1) [ 175.134635][ T6886] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.239: invalid indirect mapped block 8 (level 1) [ 175.153580][ T6886] EXT4-fs (loop2): 1 truncate cleaned up [ 175.165668][ T6886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.587782][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.972061][ T6907] loop1: detected capacity change from 0 to 128 [ 177.251097][ T6907] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.419876][ T6907] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.797196][ T6921] loop2: detected capacity change from 0 to 16 [ 177.826075][ T6907] EXT4-fs warning (device loop1): ext4_group_extend:1868: can't shrink FS - resize aborted [ 177.858364][ T6921] erofs: (device loop2): mounted with root inode @ nid 36. [ 177.976294][ T5778] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.978659][ T6928] loop4: detected capacity change from 0 to 512 [ 180.167827][ T6926] loop3: detected capacity change from 0 to 512 [ 180.279542][ T6928] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.249: invalid block [ 180.429459][ T6926] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.248: invalid block [ 180.441474][ T6928] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.249: invalid indirect mapped block 10 (level 1) [ 180.455742][ T6926] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.248: invalid indirect mapped block 10 (level 1) [ 180.469143][ T6928] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.249: invalid indirect mapped block 8 (level 1) [ 180.482470][ T6926] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.248: invalid indirect mapped block 8 (level 1) [ 180.496269][ T6928] EXT4-fs (loop4): 1 truncate cleaned up [ 180.503330][ T6928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.516791][ T6926] EXT4-fs (loop3): 1 truncate cleaned up [ 180.523966][ T6926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.746552][ T6024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.804779][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.839147][ T6939] loop2: detected capacity change from 0 to 1024 [ 180.926301][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 181.342299][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 181.364111][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.398855][ T27] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 181.419966][ T27] usb 2-1: string descriptor 0 read error: -22 [ 181.432857][ T27] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 181.466973][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.752228][ T6961] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.352418][ T27] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 182.449321][ T6965] loop2: detected capacity change from 0 to 256 [ 182.478004][ T27] usb 2-1: USB disconnect, device number 8 [ 182.485772][ T6084] udevd[6084]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.534098][ T6965] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8943bfe8, utbl_chksum : 0xe619d30d) [ 182.555100][ T6965] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 182.690181][ T6974] loop4: detected capacity change from 0 to 1024 [ 182.698043][ T6975] kvm: emulating exchange as write [ 182.911607][ T6096] hfsplus: b-tree write err: -5, ino 25 [ 182.934677][ T6096] hfsplus: b-tree write err: -5, ino 4 [ 182.940471][ T6096] hfsplus: b-tree write err: -5, ino 2 [ 182.952829][ T6096] hfsplus: b-tree write err: -5, ino 26 [ 183.061714][ T6982] loop3: detected capacity change from 0 to 512 [ 183.116772][ T6984] loop4: detected capacity change from 0 to 16 [ 183.180749][ T6988] loop2: detected capacity change from 0 to 512 [ 183.181136][ T6982] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 183.202841][ T6984] erofs: (device loop4): mounted with root inode @ nid 36. [ 183.236263][ T6988] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 183.277271][ T6982] System zones: 0-2, 18-18, 34-34 [ 183.430407][ T6988] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 183.462037][ T6982] EXT4-fs (loop3): 1 orphan inode deleted [ 183.485136][ T6988] EXT4-fs (loop2): 1 truncate cleaned up [ 183.492202][ T6988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.525945][ T6982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.627695][ T6982] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.708594][ T6982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.836282][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.263027][ T7021] binder: 7020:7021 ioctl 4018620d 0 returned -22 [ 184.333302][ T7023] loop3: detected capacity change from 0 to 16 [ 184.354169][ T7023] erofs: (device loop3): mounted with root inode @ nid 36. [ 184.521646][ T787] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 184.593085][ T7029] loop1: detected capacity change from 0 to 512 [ 184.861275][ T7029] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.274: invalid block [ 184.876793][ T7029] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.274: invalid indirect mapped block 10 (level 1) [ 184.892206][ T7029] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.274: invalid indirect mapped block 8 (level 1) [ 184.908902][ T7029] EXT4-fs (loop1): 1 truncate cleaned up [ 184.921205][ T7029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.412034][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.893244][ T787] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 186.022729][ T787] usb 5-1: config 1 has no interface number 0 [ 186.139747][ T787] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 186.367077][ T787] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 186.427875][ T787] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 186.439661][ T7042] syzkaller0: entered promiscuous mode [ 186.467537][ T7042] syzkaller0: entered allmulticast mode [ 186.497820][ T787] usb 5-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 186.539170][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.582736][ T787] usb 5-1: Product: syz [ 186.597776][ T787] usb 5-1: Manufacturer: syz [ 186.609873][ T787] usb 5-1: SerialNumber: syz [ 186.628165][ T7049] loop2: detected capacity change from 0 to 256 [ 186.866496][ T787] usb 5-1: 1:0 : does not exist [ 186.871442][ T787] usb 5-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 186.895786][ T787] usb 5-1: 1:3 : does not exist [ 186.904782][ T787] usb 5-1: incorrect wMaxPacketSize 0x10 for BADD profile [ 186.937161][ T7055] binder: 7054:7055 ioctl 4018620d 0 returned -22 [ 186.976989][ T787] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 186.992017][ T787] usb 5-1: USB disconnect, device number 4 [ 187.021348][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.178109][ T7060] loop1: detected capacity change from 0 to 512 [ 187.436447][ T7060] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.286: invalid block [ 187.451392][ T7060] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.286: invalid indirect mapped block 10 (level 1) [ 187.469036][ T7060] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.286: invalid indirect mapped block 8 (level 1) [ 187.486290][ T7060] EXT4-fs (loop1): 1 truncate cleaned up [ 187.498800][ T7060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.953106][ T5764] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 188.019435][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.088684][ T7065] fuse: Unknown parameter '00000000000000000000' [ 188.107302][ T7065] loop3: detected capacity change from 0 to 128 [ 188.114415][ T7067] binder_alloc: 7066: binder_alloc_buf, no vma [ 188.149339][ T7065] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 188.182849][ T5764] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 188.224508][ T5764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.247147][ T5764] usb 3-1: config 0 descriptor?? [ 188.280902][ T5764] cp210x 3-1:0.0: cp210x converter detected [ 188.334666][ T147] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 188.342846][ T147] FAT-fs (loop3): Filesystem has been set read-only [ 188.385095][ T147] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 188.493428][ T7076] loop1: detected capacity change from 0 to 128 [ 188.523900][ T7076] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.560672][ T7076] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 188.666218][ T5764] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 188.697899][ T5764] usb 3-1: cp210x converter now attached to ttyUSB0 [ 188.710645][ T7076] BUG: unable to handle page fault for address: ffffffffffffffec [ 188.718420][ T7076] #PF: supervisor read access in kernel mode [ 188.724448][ T7076] #PF: error_code(0x0000) - not-present page [ 188.730476][ T7076] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 188.736540][ T7076] Oops: 0000 [#1] PREEMPT SMP KASAN [ 188.741795][ T7076] CPU: 1 PID: 7076 Comm: syz.1.291 Not tainted syzkaller #0 [ 188.749116][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 188.759208][ T7076] RIP: 0010:ext4_free_ext_path+0x45/0x110 [ 188.764999][ T7076] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89 [ 188.784647][ T7076] RSP: 0018:ffffc9000c417638 EFLAGS: 00010246 [ 188.790765][ T7076] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 188.798774][ T7076] RDX: ffffc9000d179000 RSI: 000000000000779b RDI: ffffffffffffffec [ 188.806786][ T7076] RBP: ffffc9000c417758 R08: ffff88805c04481f R09: 1ffff1100b808903 [ 188.814801][ T7076] R10: dffffc0000000000 R11: ffffed100b808904 R12: ffff88805c0448b0 [ 188.822837][ T7076] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 188.830875][ T7076] FS: 00007f9f286496c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 188.839846][ T7076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.846477][ T7076] CR2: ffffffffffffffec CR3: 000000002ad21000 CR4: 00000000003526e0 [ 188.854500][ T7076] Call Trace: [ 188.857823][ T7076] [ 188.860798][ T7076] finish_range+0x234/0x340 [ 188.865367][ T7076] ? update_tind_extent_range+0x3f0/0x3f0 [ 188.871148][ T7076] ? __ext4_sb_bread_gfp+0x14c/0x210 [ 188.876488][ T7076] update_ind_extent_range+0x2e3/0x520 [ 188.882007][ T7076] ext4_ext_migrate+0xb07/0x1080 [ 188.887003][ T7076] ? mb_regenerate_buddy+0x510/0x510 [ 188.892337][ T7076] ? down_read_killable+0x340/0x340 [ 188.897583][ T7076] ? sb_start_write+0x110/0x1c0 [ 188.902485][ T7076] ? mnt_want_write_file+0x16a/0x200 [ 188.907814][ T7076] ext4_ioctl+0x1ee3/0x3b80 [ 188.912360][ T7076] ? ext4_fileattr_set+0x16d0/0x16d0 [ 188.917683][ T7076] ? mark_lock+0x94/0x320 [ 188.922053][ T7076] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 188.928078][ T7076] ? do_vfs_ioctl+0x1573/0x1cc0 [ 188.932979][ T7076] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 188.938746][ T7076] ? tomoyo_path_number_perm+0x217/0x620 [ 188.944429][ T7076] ? __lock_acquire+0x7d40/0x7d40 [ 188.949494][ T7076] ? slab_free_freelist_hook+0x130/0x1a0 [ 188.955195][ T7076] ? tomoyo_path_number_perm+0x500/0x620 [ 188.960880][ T7076] ? __kmem_cache_free+0xba/0x1e0 [ 188.965959][ T7076] ? tomoyo_path_number_perm+0x5b4/0x620 [ 188.971641][ T7076] ? tomoyo_path_number_perm+0x217/0x620 [ 188.977315][ T7076] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 188.982837][ T7076] ? __fget_files+0x28/0x4b0 [ 188.987482][ T7076] ? __fget_files+0x28/0x4b0 [ 188.992120][ T7076] ? bpf_lsm_file_ioctl+0x9/0x10 [ 188.997098][ T7076] ? security_file_ioctl+0x80/0xa0 [ 189.002248][ T7076] ? ext4_fileattr_set+0x16d0/0x16d0 [ 189.007572][ T7076] __se_sys_ioctl+0xfd/0x170 [ 189.012210][ T7076] do_syscall_64+0x55/0xb0 [ 189.016687][ T7076] ? clear_bhb_loop+0x40/0x90 [ 189.021400][ T7076] ? clear_bhb_loop+0x40/0x90 [ 189.026111][ T7076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.032028][ T7076] RIP: 0033:0x7f9f2779ce59 [ 189.036484][ T7076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.056099][ T7076] RSP: 002b:00007f9f28649028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.064534][ T7076] RAX: ffffffffffffffda RBX: 00007f9f27a15fa0 RCX: 00007f9f2779ce59 [ 189.072528][ T7076] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 189.080504][ T7076] RBP: 00007f9f27832d6f R08: 0000000000000000 R09: 0000000000000000 [ 189.088482][ T7076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.096459][ T7076] R13: 00007f9f27a16038 R14: 00007f9f27a15fa0 R15: 00007ffde37b6e88 [ 189.104457][ T7076] [ 189.107522][ T7076] Modules linked in: [ 189.111465][ T7076] CR2: ffffffffffffffec [ 189.115627][ T7076] ---[ end trace 0000000000000000 ]--- [ 189.121110][ T7076] RIP: 0010:ext4_free_ext_path+0x45/0x110 [ 189.126858][ T7076] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89 [ 189.146484][ T7076] RSP: 0018:ffffc9000c417638 EFLAGS: 00010246 [ 189.152573][ T7076] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 189.160559][ T7076] RDX: ffffc9000d179000 RSI: 000000000000779b RDI: ffffffffffffffec [ 189.168551][ T7076] RBP: ffffc9000c417758 R08: ffff88805c04481f R09: 1ffff1100b808903 [ 189.176555][ T7076] R10: dffffc0000000000 R11: ffffed100b808904 R12: ffff88805c0448b0 [ 189.184564][ T7076] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 189.192557][ T7076] FS: 00007f9f286496c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 189.201504][ T7076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.208146][ T7076] CR2: ffffffffffffffec CR3: 000000002ad21000 CR4: 00000000003526e0 [ 189.216145][ T7076] Kernel panic - not syncing: Fatal exception [ 189.222813][ T7076] Kernel Offset: disabled [ 189.227146][ T7076] Rebooting in 86400 seconds..