last executing test programs: 4.376304227s ago: executing program 1 (id=1364): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.214378142s ago: executing program 1 (id=1366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000000080)=""/1) 4.161829897s ago: executing program 1 (id=1367): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') io_uring_setup(0x1c44, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x0, 0x0, 0x0, r0}) socket$inet6(0xa, 0x6, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0), 0x8, 0x0) io_uring_setup(0x3e76, &(0x7f0000000000)={0x0, 0xf851, 0x2, 0xffffffff, 0x333, 0x0, r1}) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.488221459s ago: executing program 4 (id=1377): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.115315944s ago: executing program 4 (id=1380): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x6040802) recvmmsg(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000001940)=""/4112, 0x1010}, {&(0x7f00000002c0)=""/228, 0xe4}, {&(0x7f0000001540)=""/245, 0xf5}], 0x5}, 0x7}], 0x2, 0x40000002, 0x0) recvmmsg(r0, &(0x7f0000005840), 0x4000000000000ef, 0x2000, 0x0) 3.030322691s ago: executing program 2 (id=1381): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) 2.678284894s ago: executing program 3 (id=1386): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x8001, 0x3, 0x0, 0x3}) 2.524072468s ago: executing program 3 (id=1389): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1c0, 0x12, 0x60a, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) 2.136621923s ago: executing program 2 (id=1390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x0) 2.136234414s ago: executing program 4 (id=1391): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.117413125s ago: executing program 3 (id=1392): openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x103002, 0x0) close(0x3) 2.0623243s ago: executing program 3 (id=1393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES64=r0, @ANYRES32, @ANYRES16, @ANYRES16=0x0], 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) 1.95115381s ago: executing program 2 (id=1395): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x0, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\"\x00'}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x80000011, 0x0, 0x0, 0x0, "0ea4fc7b9ff53acfc3b072570d9763d021c778"}) 1.752942309s ago: executing program 0 (id=1396): getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020aed2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.751595079s ago: executing program 4 (id=1397): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "0000101000"}}}]}, 0x48}}, 0x0) 1.578203315s ago: executing program 4 (id=1398): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200800, &(0x7f0000000580)={[{@nodiscard}, {}, {@nodioread_nolock}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@debug}, {@nodelalloc}, {@auto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x5, 0x598, &(0x7f0000001540)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000d00)={0x1a4, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2dcd}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x6e, 0x6, 0x6481}, {0x4, 0x4, 0x13, 0x4c64}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x3, 0x0, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r8, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.577969475s ago: executing program 0 (id=1399): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x8001, 0x3, 0x0, 0x3}) 1.432253149s ago: executing program 0 (id=1400): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b400000000000000791048000000000069003b0000000000950074000000000022187069f9fb6bdbca6359d81e8eecd7934bdcd758593c4e4ead4367ee3caad7a68421695cdba2a119ca79a0a9a842dbeba155bc24"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x5d) 1.229730657s ago: executing program 3 (id=1401): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) 934.450184ms ago: executing program 1 (id=1402): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, 0x0) 934.265444ms ago: executing program 2 (id=1403): creat(&(0x7f0000000240)='./file1\x00', 0xd) truncate(&(0x7f0000000000)='./file1\x00', 0x0) 295.320853ms ago: executing program 4 (id=1404): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000340)="9998f04ea66d3857245b4f630da8816de312ec336c548975c7689a1d31cfefa3cc8d0cc0e1ee7c8b2b2437bac3bc6f7c882feb1ed019f2bef5b30a62779db8ac6b87196b0529396e242ec8b662be2ea5e0b095fdea5f653751e9875c39f5a85eaeb751646e385af275f2c7c5549a48fab9f2414d971b22757d9bda636eebc3cdff113bb22698fdd8f69fa83ca7fc1e18fe112c0ad27e92f35b21671d6e56c05bb69ea349c9660a672ecf08d6722eda4f4adbb366852bb7674c306a6e2cd94a12561e129bbaae9646ca0e", 0xca}, {&(0x7f0000000940)="981aa0f398061c2b8396ff5171976de8580c4215a719945f7a29ca8ae5740eb3f44a0e75c6d51cdad6b6a4402ad8585b59e21c4f884a992795b6f81106a3fd8978a1d67df010d7561b4c3675b03e4a797155d5cffb57baea61ab90d840918c6e532d95a34000f39a24b2ae20bb1abfb48650513e41011e3ae4e18f1a675812c956c5f418ee8102f46e1baf12ad0fb9cf8aee2993da790a68d0b2eb45144af496da522da761d36de487e79ec6b32473e63f3759e841fc4d5b2e", 0xb9}], 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 138.950858ms ago: executing program 0 (id=1405): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006"], 0x21c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 138.539628ms ago: executing program 2 (id=1406): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xffffffffffffffff}}, 0x40) 137.778208ms ago: executing program 3 (id=1407): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 94.563511ms ago: executing program 0 (id=1408): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000003a40)=[{{&(0x7f0000000040)=@sco, 0x80, 0x0}}], 0x1, 0x4) 46.436096ms ago: executing program 1 (id=1409): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r1}, 0x14) 44.777136ms ago: executing program 0 (id=1410): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x8001, 0x3, 0x0, 0x3}) 32.912697ms ago: executing program 2 (id=1411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=1412): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406f90005240000000d240f0100000000000000000006241a"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x8000, 0x58b2, 0x6, 0x8, 0x2, 0x8, 0x7, 0x7, 0x25f, 0x8000, 0x4, 0xf644}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.064687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 255.074373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.087121][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.099886][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.107841][ T3770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.118400][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.126990][ T3770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.223879][ T5484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.239921][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.251274][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.262832][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.374286][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.383643][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.396362][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.404530][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.413981][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.421881][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.431621][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.444637][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.454229][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.478220][ T5486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.486903][ T5662] netlink: 104 bytes leftover after parsing attributes in process `syz.1.532'. [ 255.499811][ T5489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.508529][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.515042][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.525085][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.537703][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.554392][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.563363][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.605588][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.621231][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.634527][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.644090][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.656481][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.667741][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.678799][ T5484] device veth0_vlan entered promiscuous mode [ 255.783485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.800461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.835018][ T5486] device veth0_vlan entered promiscuous mode [ 255.849039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.862038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.923764][ T5484] device veth1_vlan entered promiscuous mode [ 255.950105][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.966187][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.980944][ T5486] device veth1_vlan entered promiscuous mode [ 256.011739][ T5488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.092538][ T5484] device veth0_macvtap entered promiscuous mode [ 256.105522][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 256.117471][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 256.128293][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 256.138023][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.153756][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 256.164087][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 256.181423][ T5484] device veth1_macvtap entered promiscuous mode [ 256.197303][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 256.207075][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 256.274386][ T5489] device veth0_vlan entered promiscuous mode [ 256.298081][ T5675] loop1: detected capacity change from 0 to 1024 [ 256.309484][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 256.317285][ T5675] hfsplus: unable to parse mount options [ 256.326509][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 256.338010][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 256.347166][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.483956][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 256.492889][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.502932][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 256.529068][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.160169][ T5486] device veth0_macvtap entered promiscuous mode [ 257.539801][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.552933][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.562953][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.573715][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.591591][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.603831][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.620625][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.632375][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.647138][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.666188][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 257.676700][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 257.686801][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.699655][ T5486] device veth1_macvtap entered promiscuous mode [ 257.719721][ T5489] device veth1_vlan entered promiscuous mode [ 257.737695][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.757617][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.778429][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.790388][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.800364][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.811205][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.821919][ T5484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.833090][ T5484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.844381][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.868404][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 257.877806][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.888520][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.898807][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.912591][ T5488] device veth0_vlan entered promiscuous mode [ 257.948735][ T5484] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.961079][ T5484] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.969913][ T5484] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.978836][ T5484] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.993227][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.007645][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.028212][ T5488] device veth1_vlan entered promiscuous mode [ 258.050464][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.062604][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.074623][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.085419][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.095664][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.106331][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.118520][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.129025][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.138880][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.150770][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.162419][ T5486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.184242][ T5488] device veth0_macvtap entered promiscuous mode [ 258.208422][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 258.218169][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 258.228255][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.238004][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.248014][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.258290][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.268453][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.282904][ T5488] device veth1_macvtap entered promiscuous mode [ 258.302422][ T5489] device veth0_macvtap entered promiscuous mode [ 258.318801][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.334766][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.356420][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.391579][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.402012][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.412702][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.423256][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.433792][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.444333][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.469170][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.486272][ T5486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.497692][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 258.509495][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.522338][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.533410][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.542997][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.626363][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.635794][ T5489] device veth1_macvtap entered promiscuous mode [ 258.682115][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 258.700583][ T5486] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.722151][ T5486] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.732685][ T5486] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.740160][ T5687] loop1: detected capacity change from 0 to 512 [ 258.750972][ T5486] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.769589][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.781892][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.797192][ T5687] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 258.807308][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.823142][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.834456][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.852085][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.862496][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.885017][ T5687] EXT4-fs (loop1): failed to open journal device unknown-block(11,127) -6 [ 258.892912][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.911561][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.923270][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.940368][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.953097][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.971064][ T5488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.013253][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.023995][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.048687][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.081346][ T5687] loop1: detected capacity change from 0 to 512 [ 259.099324][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.110786][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.121586][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.133144][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.143914][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.154093][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.164804][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.175605][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.187226][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.197439][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.207962][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.220568][ T5488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.251647][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.261593][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.277261][ T3735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.286954][ T3735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.301182][ T5488] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.313791][ T5687] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 259.322864][ T5488] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.333936][ T5488] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.358906][ T5488] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.394164][ T5687] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.539: iget: bad i_size value: -67835469387268086 [ 259.410833][ T5687] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.539: couldn't read orphan inode 15 (err -117) [ 259.432279][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.447082][ T5687] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.458257][ T5687] ext2 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 259.461681][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.493786][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.512834][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.522911][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.535292][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.545656][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.557219][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.567204][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.578134][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.594590][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.605889][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.615773][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.627082][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.646748][ T5489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.658899][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 259.685010][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.694304][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.744698][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.777126][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.787173][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.813503][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.823773][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.835267][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.845373][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.883760][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.897623][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.914255][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.924988][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.943853][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.954227][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.974533][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.999509][ T5489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.032449][ T5489] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.042665][ T5489] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.060257][ T5489] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.073041][ T5489] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.122296][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.133367][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.210642][ T5699] "syz.1.541" (5699) uses obsolete ecb(arc4) skcipher [ 260.896887][ T3814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.927700][ T3794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.948111][ T3814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.004604][ T3794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.063598][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 261.079846][ T5702] loop1: detected capacity change from 0 to 512 [ 261.142071][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 261.189035][ T3614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.196217][ T5702] EXT4-fs (loop1): Ignoring removed oldalloc option [ 261.198206][ T3614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.292450][ T5702] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.542: Parent and EA inode have the same ino 15 [ 261.305029][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 261.331570][ T5705] loop0: detected capacity change from 0 to 256 [ 261.346210][ T5702] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.542: Parent and EA inode have the same ino 15 [ 261.382161][ T5120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.399150][ T5702] EXT4-fs (loop1): 1 orphan inode deleted [ 261.404920][ T5702] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 261.406058][ T5120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.440354][ T5705] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 261.659246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 263.112947][ T3794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.632020][ T3794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.762525][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 263.813856][ T5716] loop0: detected capacity change from 0 to 256 [ 264.131825][ T5716] exFAT-fs (loop0): invalid boot record signature [ 264.515531][ T5716] exFAT-fs (loop0): failed to read boot sector [ 264.521915][ T5716] exFAT-fs (loop0): failed to recognize exfat type [ 264.661211][ T3735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.667449][ T5723] loop1: detected capacity change from 0 to 512 [ 264.716040][ T3735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.753490][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 264.754476][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.836756][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.848980][ T5723] EXT4-fs (loop1): Ignoring removed oldalloc option [ 265.023909][ T5723] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.546: Parent and EA inode have the same ino 15 [ 265.061214][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 265.068350][ T5723] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.546: Parent and EA inode have the same ino 15 [ 265.108940][ T5728] 9pnet: Insufficient options for proto=fd [ 265.136987][ T4560] device bridge_slave_1 left promiscuous mode [ 265.155749][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 265.409223][ T5723] EXT4-fs (loop1): 1 orphan inode deleted [ 265.420301][ T5723] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 265.645907][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.702570][ T21] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 265.822620][ T4560] bridge1: port 1(bridge_slave_1) entered disabled state [ 265.846895][ T21] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 265.861695][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.894253][ T21] usb 1-1: config 0 descriptor?? [ 266.757852][ T5742] loop2: detected capacity change from 0 to 1024 [ 266.795250][ T4560] device hsr_slave_0 left promiscuous mode [ 266.804831][ T5745] loop4: detected capacity change from 0 to 512 [ 266.824322][ T4560] device hsr_slave_1 left promiscuous mode [ 266.836359][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.871570][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.903924][ T5745] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 266.918982][ T5745] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 266.931220][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.952385][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.983057][ T4560] device hsr_slave_0 left promiscuous mode [ 266.987229][ T5745] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.550: corrupted in-inode xattr [ 267.001190][ T4560] device hsr_slave_1 left promiscuous mode [ 267.010534][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.029802][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.047039][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.074041][ T5745] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.550: couldn't read orphan inode 15 (err -117) [ 267.087035][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.174244][ T4560] device bridge_slave_1 left promiscuous mode [ 267.207235][ T5745] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,mblk_io_submit,lazytime,bsddf,block_validity,user_xattr,mb_optimize_scan=0x0000000000000001,init_itable=0x00000000000003ed,,errors=continue. Quota mode: none. [ 267.262409][ T4560] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.103953][ T26] audit: type=1804 audit(1727413433.908:51): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.550" name="/newroot/1/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 268.642321][ T4560] device bridge_slave_0 left promiscuous mode [ 268.688352][ T26] audit: type=1804 audit(1727413433.918:52): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.550" name="/newroot/1/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 268.710648][ T26] audit: type=1804 audit(1727413433.918:53): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.550" name="/newroot/1/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 268.725225][ T4560] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.888961][ T4560] device hsr_slave_0 left promiscuous mode [ 268.927298][ T5711] usb 1-1: USB disconnect, device number 3 [ 268.992195][ T4560] device hsr_slave_1 left promiscuous mode [ 269.035477][ T3610] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 269.362124][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.608305][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.632207][ T3610] usb 5-1: Using ep0 maxpacket: 16 [ 269.695913][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.703483][ T4560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.876238][ T3610] usb 5-1: unable to read config index 0 descriptor/all [ 269.932111][ T3610] usb 5-1: can't read configurations, error -71 [ 270.327645][ T4560] device bridge_slave_1 left promiscuous mode [ 270.334074][ T4560] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.485083][ T4560] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.570061][ T4560] device hsr_slave_0 left promiscuous mode [ 270.660161][ T5775] loop4: detected capacity change from 0 to 1024 [ 270.675961][ T4560] device hsr_slave_1 left promiscuous mode [ 270.703253][ T4560] device bridge_slave_1 left promiscuous mode [ 270.720399][ T4560] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.737103][ T4560] device bridge_slave_0 left promiscuous mode [ 270.796708][ T5775] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 270.796708][ T5775] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 270.796708][ T5775] [ 270.805324][ T4560] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.814849][ T5775] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 271.073870][ T5775] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 271.568988][ T5784] loop2: detected capacity change from 0 to 1024 [ 271.790289][ T5787] 9pnet: Insufficient options for proto=fd [ 272.104069][ T4560] device veth1_macvtap left promiscuous mode [ 272.223018][ T4560] device veth0_macvtap left promiscuous mode [ 272.351335][ T4560] device veth1_vlan left promiscuous mode [ 272.417282][ T3614] hfsplus: b-tree write err: -5, ino 4 [ 272.418771][ T4560] device veth0_vlan left promiscuous mode [ 272.464477][ T4560] device veth1_macvtap left promiscuous mode [ 272.481082][ T4560] device veth0_macvtap left promiscuous mode [ 272.550786][ T4560] device veth1_vlan left promiscuous mode [ 272.872854][ T4560] device veth0_vlan left promiscuous mode [ 272.985818][ T4560] device veth1_macvtap left promiscuous mode [ 273.127756][ T4560] device veth0_macvtap left promiscuous mode [ 273.153897][ T4560] device veth1_vlan left promiscuous mode [ 273.163438][ T4560] device veth0_vlan left promiscuous mode [ 273.181497][ T5799] loop2: detected capacity change from 0 to 8 [ 273.191541][ T4560] device veth1_macvtap left promiscuous mode [ 273.202847][ T4560] device veth0_macvtap left promiscuous mode [ 273.212344][ T4560] device veth1_vlan left promiscuous mode [ 273.219133][ T4560] device veth0_vlan left promiscuous mode [ 273.259434][ T5799] SQUASHFS error: Failed to read block 0x71e: -5 [ 273.275529][ T5799] SQUASHFS error: Unable to read metadata cache entry [71c] [ 273.288258][ T5799] SQUASHFS error: Unable to read inode 0x11f [ 273.985964][ T5804] loop2: detected capacity change from 0 to 256 [ 274.633090][ T4560] team0 (unregistering): Port device team_slave_1 removed [ 274.653917][ T4560] team0 (unregistering): Port device team_slave_0 removed [ 274.675056][ T4560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.691413][ T4560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.783109][ T4560] bond0 (unregistering): Released all slaves [ 274.973772][ T4560] team0 (unregistering): Port device team_slave_1 removed [ 274.992786][ T4560] team0 (unregistering): Port device team_slave_0 removed [ 275.029154][ T4560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.052712][ T4560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.079499][ T4560] bond0 (unregistering): Released all slaves [ 277.258787][ T4560] team0 (unregistering): Port device team_slave_1 removed [ 277.280625][ T4560] team0 (unregistering): Port device team_slave_0 removed [ 277.293513][ T4560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.310697][ T4560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.402185][ T4560] bond0 (unregistering): Released all slaves [ 277.535664][ T4560] team0 (unregistering): Port device team_slave_1 removed [ 277.558238][ T4560] team0 (unregistering): Port device team_slave_0 removed [ 277.576163][ T4560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.594333][ T4560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.674985][ T4560] bond0 (unregistering): Released all slaves [ 278.094599][ T5828] loop0: detected capacity change from 0 to 128 [ 278.436903][ T5828] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.570961][ T5828] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038 (0x7fffffff) [ 278.766973][ T5835] loop2: detected capacity change from 0 to 256 [ 281.546910][ T5851] loop4: detected capacity change from 0 to 512 [ 285.967455][ T5859] loop2: detected capacity change from 0 to 1024 [ 287.071272][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.111084][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.165597][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.177814][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.216822][ T5892] loop3: detected capacity change from 0 to 8 [ 288.257655][ T5895] loop4: detected capacity change from 0 to 256 [ 288.375961][ T5895] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 288.377974][ T5892] SQUASHFS error: zlib decompression failed, data probably corrupt [ 288.423285][ T5892] SQUASHFS error: Failed to read block 0x4de: -5 [ 288.435657][ T5895] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 288.440449][ T5892] SQUASHFS error: Failed to read block 0x4e2: -5 [ 288.485279][ T3608] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 288.498688][ T5897] loop2: detected capacity change from 0 to 1024 [ 288.503311][ T5892] SQUASHFS error: Failed to read block 0x9ca: -5 [ 288.544588][ T5892] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 288.568963][ T5892] SQUASHFS error: Failed to read block 0x35f2: -5 [ 288.578397][ T5897] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 288.596371][ T26] audit: type=1800 audit(1727413710.558:54): pid=5892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.590" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 288.755580][ T3608] usb 2-1: Using ep0 maxpacket: 32 [ 288.946010][ T3608] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 288.973556][ T3608] usb 2-1: config 0 has no interface number 0 [ 289.245916][ T3608] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 289.256464][ T3608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.264557][ T3608] usb 2-1: Product: syz [ 289.275328][ T3608] usb 2-1: Manufacturer: syz [ 289.280369][ T3608] usb 2-1: SerialNumber: syz [ 289.336837][ T3608] usb 2-1: config 0 descriptor?? [ 289.377954][ T3608] smsc95xx v2.0.0 [ 289.816104][ T5912] loop4: detected capacity change from 0 to 2048 [ 289.840148][ T3608] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 289.852284][ T3608] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 289.961819][ T5912] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.970830][ T5914] loop3: detected capacity change from 0 to 512 [ 290.650082][ T5914] EXT4-fs (loop3): Unrecognized mount option "subj_type=" or missing value [ 291.934894][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.956486][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.028210][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.045685][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.145538][ T5711] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 292.355386][ T3608] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 292.369581][ T3608] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 292.380097][ T3608] usb 2-1: USB disconnect, device number 3 [ 292.545522][ T5711] usb 4-1: Using ep0 maxpacket: 8 [ 293.128864][ T5711] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 293.147710][ T5711] usb 4-1: can't read configurations, error -71 [ 293.222123][ T5941] loop2: detected capacity change from 0 to 128 [ 293.296401][ T5941] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 293.317694][ T5941] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 293.318519][ T5938] loop3: detected capacity change from 0 to 2048 [ 293.353432][ T5946] loop1: detected capacity change from 0 to 2048 [ 293.550678][ T5171] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 294.055999][ T5949] loop3: detected capacity change from 0 to 256 [ 294.490425][ T5946] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.610704][ T5949] FAT-fs (loop3): bogus logical sector size 0 [ 294.617454][ T5949] FAT-fs (loop3): Can't find a valid FAT filesystem [ 294.656070][ T5171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 294.711262][ T5171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 294.757850][ T5954] loop2: detected capacity change from 0 to 16 [ 294.771285][ T5171] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.801276][ T5171] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.820411][ T5171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.858112][ T5171] usb 1-1: config 0 descriptor?? [ 294.873312][ T5954] erofs: (device loop2): mounted with root inode @ nid 36. [ 294.905630][ T5940] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 296.077668][ T5962] 9pnet: Insufficient options for proto=fd [ 296.103931][ T3608] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 296.133848][ T5171] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 296.163147][ T5171] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 296.231260][ T5171] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 296.260855][ T5968] Process accounting resumed [ 296.274945][ T5171] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 296.281115][ T5968] kernel write not supported for file /asound/timers (pid: 5968 comm: syz.3.612) [ 296.316460][ T5171] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 296.348656][ T5171] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 296.380907][ T5171] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 296.407607][ T5171] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 296.413327][ T5973] netlink: 104 bytes leftover after parsing attributes in process `syz.1.615'. [ 296.428944][ T5171] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 296.452244][ T5171] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 296.483223][ T5171] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 296.514379][ T5171] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 296.525299][ T3608] usb 3-1: config 0 has an invalid descriptor of length 208, skipping remainder of the config [ 296.541310][ T5171] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 296.543059][ T3608] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 296.574370][ T5171] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 296.584709][ T3608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.601210][ T5171] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 296.612499][ T3608] usb 3-1: config 0 descriptor?? [ 296.633811][ T5171] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 296.728117][ T3608] usb 3-1: bad CDC descriptors [ 296.738650][ T5171] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 296.766875][ T3608] usb 3-1: bad CDC descriptors [ 296.959966][ T5171] usb 1-1: USB disconnect, device number 4 [ 297.910209][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.962751][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.132007][ T4553] usb 3-1: USB disconnect, device number 4 [ 298.167375][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.241203][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.543644][ T5995] loop1: detected capacity change from 0 to 2048 [ 299.836810][ T6000] loop4: detected capacity change from 0 to 512 [ 299.967821][ T6000] EXT4-fs (loop4): Ignoring removed oldalloc option [ 299.986709][ T6000] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.624: Parent and EA inode have the same ino 15 [ 300.122843][ T6000] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.624: Parent and EA inode have the same ino 15 [ 300.163192][ T5995] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 300.266811][ T6003] syz.2.625 uses obsolete (PF_INET,SOCK_PACKET) [ 300.298096][ T6010] loop3: detected capacity change from 0 to 512 [ 300.307863][ T6000] EXT4-fs (loop4): 1 orphan inode deleted [ 300.348834][ T6000] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 300.433142][ T6010] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 300.539728][ T6010] EXT4-fs (loop3): 1 truncate cleaned up [ 300.579097][ T6010] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 300.721167][ T5491] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 302.669938][ T6030] 9pnet: Insufficient options for proto=fd [ 302.799485][ T6035] loop2: detected capacity change from 0 to 1024 [ 302.974872][ T6035] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 303.045962][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 303.125752][ T6035] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 303.134119][ T6035] System zones: 0-1, 3-12 [ 303.189539][ T6035] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 303.219024][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.229563][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.782739][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.851086][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.037999][ T6060] loop2: detected capacity change from 0 to 2048 [ 305.153003][ T6060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.371574][ T6065] UDF-fs: error (device loop2): udf_read_inode: (ino 1329) failed !bh [ 305.795471][ T3610] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 306.235678][ T3610] usb 4-1: Using ep0 maxpacket: 8 [ 306.366260][ T3610] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.464772][ T3610] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 306.580702][ T3610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.004966][ T3610] usb 4-1: config 0 descriptor?? [ 307.258908][ T5171] usb 4-1: USB disconnect, device number 5 [ 307.415598][ T6075] loop0: detected capacity change from 0 to 512 [ 307.507178][ T6075] EXT4-fs (loop0): 1 truncate cleaned up [ 307.513024][ T6075] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 307.592737][ T6081] 9pnet: Insufficient options for proto=fd [ 307.638268][ T6075] EXT4-fs warning (device loop0): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 307.672708][ T6075] Invalid ELF header len 10 [ 307.837870][ T6088] loop4: detected capacity change from 0 to 128 [ 307.916799][ T6088] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 311.022580][ T6114] netlink: 104 bytes leftover after parsing attributes in process `syz.0.650'. [ 311.045726][ T6117] 9pnet: Insufficient options for proto=fd [ 311.203028][ T6127] loop4: detected capacity change from 0 to 256 [ 311.353824][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.372700][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.577246][ T6139] Process accounting resumed [ 311.586516][ T6139] kernel write not supported for file /asound/timers (pid: 6139 comm: syz.3.653) [ 311.983209][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.014831][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.049726][ T6127] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 312.069763][ T6127] exFAT-fs (loop4): failed to load upcase table [ 312.103848][ T6127] exFAT-fs (loop4): failed to recognize exfat type [ 313.100708][ T6149] loop1: detected capacity change from 0 to 512 [ 313.196302][ T6149] FAT-fs (loop1): Unrecognized mount option "ځ=" or missing value [ 315.793435][ T6162] 9pnet: Insufficient options for proto=fd [ 315.986427][ T6149] loop1: detected capacity change from 0 to 8192 [ 316.927260][ T6169] loop4: detected capacity change from 0 to 16 [ 316.947990][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.954346][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.992129][ T6169] erofs: (device loop4): mounted with root inode @ nid 36. [ 317.855291][ T4553] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 318.159245][ T6172] netlink: 104 bytes leftover after parsing attributes in process `syz.0.670'. [ 318.226710][ T4553] usb 5-1: config 0 has an invalid descriptor of length 208, skipping remainder of the config [ 318.240098][ T4553] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 318.250002][ T4553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.261180][ T4553] usb 5-1: config 0 descriptor?? [ 318.319832][ T4553] usb 5-1: bad CDC descriptors [ 318.326240][ T4553] usb 5-1: bad CDC descriptors [ 319.222071][ T6193] loop3: detected capacity change from 0 to 512 [ 319.706181][ T6193] EXT4-fs (loop3): Unrecognized mount option "fsuuid=feff14fa-857b-2e18-f249-7fc34877" or missing value [ 319.990828][ T4553] usb 5-1: USB disconnect, device number 5 [ 323.321317][ T6238] netlink: 104 bytes leftover after parsing attributes in process `syz.4.687'. [ 323.491191][ T6243] device syzkaller0 entered promiscuous mode [ 323.738647][ T6251] "syz.2.692" (6251) uses obsolete ecb(arc4) skcipher [ 324.288371][ T26] audit: type=1326 audit(1727415282.239:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.1.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8c11ff39 code=0x7fc00000 [ 324.305288][ T6261] Process accounting resumed [ 324.370380][ T6261] kernel write not supported for file /asound/timers (pid: 6261 comm: syz.0.684) [ 325.354027][ T5711] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 325.470972][ T6283] loop4: detected capacity change from 0 to 256 [ 325.583118][ T6283] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 325.605231][ T5711] usb 4-1: Using ep0 maxpacket: 16 [ 326.335924][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.355174][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.387575][ T5711] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 326.413709][ T5711] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 326.453671][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.487204][ T5711] usb 4-1: config 0 descriptor?? [ 327.292335][ T5711] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 327.299885][ T5711] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 327.311746][ T5711] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 327.320811][ T5711] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 327.713352][ T26] audit: type=1326 audit(1727415797.668:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3117ff39 code=0x7fc00000 [ 327.775617][ T5711] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 327.782888][ T5711] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 327.800845][ T5711] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 327.843882][ T5711] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 327.875279][ T5711] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 327.902948][ T5711] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 327.972798][ T5711] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input6 [ 328.044044][ T6315] loop3: detected capacity change from 0 to 256 [ 328.080471][ T5711] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 328.281898][ T5711] usb 4-1: USB disconnect, device number 6 [ 328.446030][ T6315] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 328.866596][ T26] audit: type=1800 audit(1727415798.818:57): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.713" name="file1" dev="loop3" ino=1048640 res=0 errno=0 [ 328.970980][ T6328] loop2: detected capacity change from 0 to 1024 [ 329.037129][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 329.292825][ T6342] Process accounting resumed [ 329.297553][ T6342] kernel write not supported for file /asound/timers (pid: 6342 comm: syz.0.719) [ 330.247663][ T6328] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 330.630664][ T6367] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #14: comm syz.2.717: attempt to clear invalid blocks 1886221359 len 1 [ 331.015249][ T4798] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 331.160378][ T26] audit: type=1326 audit(1727416057.117:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8c11ff39 code=0x7fc00000 [ 331.214177][ T6371] loop7: detected capacity change from 0 to 16384 [ 331.965520][ T4798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 332.014707][ T4798] usb 1-1: New USB device found, idVendor=06cd, idProduct=010b, bcdDevice=d1.60 [ 332.165351][ T6389] Process accounting resumed [ 332.170099][ T6389] kernel write not supported for file /asound/timers (pid: 6389 comm: syz.2.734) [ 332.205296][ T5176] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 332.733461][ T5176] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.796085][ T5176] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 332.839477][ T5176] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.878198][ T5176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.900985][ T4798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.928514][ T4798] usb 1-1: config 0 descriptor?? [ 332.942054][ T5176] usb 4-1: config 0 descriptor?? [ 332.967002][ T4798] keyspan 1-1:0.0: Keyspan - (without firmware) converter detected [ 333.123802][ T4798] usb 1-1: Direct firmware load for keyspan/usa19qi.fw failed with error -2 [ 333.164299][ T4798] usb 1-1: Falling back to sysfs fallback for: keyspan/usa19qi.fw [ 334.203711][ T6412] binder: BINDER_SET_CONTEXT_MGR already set [ 334.210489][ T5176] usb 4-1: string descriptor 0 read error: -71 [ 334.212047][ T5176] usb 4-1: USB disconnect, device number 7 [ 334.225181][ T6412] binder: 6406:6412 ioctl 4018620d 20004a80 returned -16 [ 334.589496][ T6418] loop2: detected capacity change from 0 to 2048 [ 335.220453][ T26] audit: type=1326 audit(1727416317.162:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.0.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d75d86f39 code=0x7fc00000 [ 335.293576][ T6418] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 335.303491][ T6418] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh [ 335.312035][ T6418] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 335.938260][ T6417] loop2: detected capacity change from 0 to 512 [ 335.952553][ T6428] Process accounting resumed [ 335.957376][ T6428] kernel write not supported for file /asound/timers (pid: 6428 comm: syz.4.747) [ 335.975070][ T6417] EXT4-fs (loop2): Unrecognized mount option """ or missing value [ 336.590687][ T6417] Cannot find set identified by id 0 to match [ 337.068345][ T6443] loop1: detected capacity change from 0 to 1024 [ 337.083218][ T6446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.752'. [ 338.056516][ T6443] hfsplus: unable to parse mount options [ 338.925406][ T3610] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 339.225198][ T3610] usb 4-1: Using ep0 maxpacket: 16 [ 339.427912][ T6484] loop2: detected capacity change from 0 to 128 [ 343.916716][ T3610] usb 4-1: unable to read config index 0 descriptor/all [ 343.923867][ T3610] usb 4-1: can't read configurations, error -71 [ 343.954972][ T6491] loop4: detected capacity change from 0 to 1024 [ 343.967806][ T6484] EXT4-fs: failed to create workqueue [ 344.005153][ T6484] EXT4-fs (loop2): mount failed [ 344.050896][ T6491] EXT4-fs (loop4): Ignoring removed orlov option [ 344.073556][ T6491] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 344.133421][ T6502] loop3: detected capacity change from 0 to 1024 [ 344.168741][ T6491] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 344.246206][ T6502] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 344.331682][ T6502] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 344.360091][ T6502] System zones: 0-1, 3-12 [ 344.392637][ T6502] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 345.440256][ T6526] Process accounting resumed [ 345.446769][ T6526] kernel write not supported for file /asound/timers (pid: 6526 comm: syz.3.774) [ 346.671428][ T6537] loop0: detected capacity change from 0 to 512 [ 346.716342][ T6537] EXT4-fs (loop0): Ignoring removed nobh option [ 346.740530][ T6537] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 346.785705][ T6547] loop4: detected capacity change from 0 to 1024 [ 346.795996][ T6544] loop1: detected capacity change from 0 to 2048 [ 346.823678][ T6537] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 346.855010][ T6547] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 346.868470][ T6544] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.928940][ T6537] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038 (0x7fffffff) [ 346.951911][ T6547] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 346.983823][ T6547] System zones: 0-1, 3-12 [ 347.018895][ T6547] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 347.204209][ T6560] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 347.225642][ T6552] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 224: padding at end of block bitmap is not set [ 347.297135][ T6552] EXT4-fs (loop0): Remounting filesystem read-only [ 347.654201][ T6565] Process accounting resumed [ 347.659074][ T6565] kernel write not supported for file /asound/timers (pid: 6565 comm: syz.4.788) [ 348.499479][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'. [ 350.107871][ T6592] loop0: detected capacity change from 0 to 16 [ 350.199357][ T6595] loop4: detected capacity change from 0 to 1024 [ 350.214869][ T6592] erofs: (device loop0): mounted with root inode @ nid 36. [ 350.603170][ T6599] attempt to access beyond end of device [ 350.603170][ T6599] loop0: rw=0, want=40, limit=16 [ 351.331739][ T6595] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 351.453379][ T6595] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 351.473921][ T6595] System zones: 0-1, 3-12 [ 351.747864][ T6595] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 352.427001][ T6616] loop2: detected capacity change from 0 to 512 [ 352.476295][ T6616] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 352.484778][ T6616] EXT4-fs error (device loop2): ext4_get_journal_inode:5159: comm syz.2.802: inode #100663296: comm syz.2.802: iget: illegal inode # [ 352.547432][ T6616] EXT4-fs (loop2): no journal found [ 352.552699][ T6616] EXT4-fs (loop2): can't get journal size [ 352.575416][ T6618] netlink: 104 bytes leftover after parsing attributes in process `syz.0.801'. [ 352.597059][ T6616] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 352.614614][ T6616] EXT4-fs (loop2): failed to initialize system zone (-22) [ 352.775639][ T6616] EXT4-fs (loop2): mount failed [ 355.811911][ T6644] Process accounting resumed [ 355.816607][ T6644] kernel write not supported for file /asound/timers (pid: 6644 comm: syz.2.813) [ 356.545244][ T6642] loop1: detected capacity change from 0 to 512 [ 356.606172][ T6642] UDF-fs: bad mount option "~" or missing value [ 356.631442][ T6650] loop4: detected capacity change from 0 to 1024 [ 356.660648][ T6657] loop0: detected capacity change from 0 to 1024 [ 356.664243][ T6656] loop3: detected capacity change from 0 to 512 [ 356.704520][ T6650] hfsplus: extend alloc file! (8192,65536,366) [ 356.733438][ T6657] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 356.744320][ T6656] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 356.756691][ T6658] netlink: 104 bytes leftover after parsing attributes in process `syz.2.815'. [ 356.809408][ T6657] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 356.822502][ T6656] EXT4-fs (loop3): 1 truncate cleaned up [ 356.830621][ T6656] EXT4-fs (loop3): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 356.854762][ T6657] System zones: 0-1, 3-12 [ 356.936116][ T6657] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 356.947549][ T6664] kvm: pic: non byte write [ 357.389673][ T6664] loop4: detected capacity change from 0 to 2048 [ 357.801514][ T6664] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 357.830575][ T6668] loop1: detected capacity change from 0 to 256 [ 358.453958][ T6668] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 358.885521][ T6686] loop4: detected capacity change from 0 to 2048 [ 359.260020][ T6691] Process accounting resumed [ 359.265486][ T6691] kernel write not supported for file /asound/timers (pid: 6691 comm: syz.2.825) [ 360.137490][ T6686] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 360.451074][ T6700] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 361.091638][ T6699] loop0: detected capacity change from 0 to 1024 [ 361.134212][ T6708] netlink: 104 bytes leftover after parsing attributes in process `syz.2.828'. [ 361.169712][ T6699] EXT4-fs (loop0): Ignoring removed orlov option [ 361.202870][ T6699] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 361.248450][ T6699] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 361.433166][ T6725] loop1: detected capacity change from 0 to 1024 [ 362.241347][ T6725] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 362.294718][ T6725] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 362.309361][ T6725] System zones: 0-1, 3-12 [ 362.315416][ T6725] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 362.488908][ T6736] usb usb8: usbfs: process 6736 (syz.4.836) did not claim interface 7 before use [ 362.732378][ T6749] loop0: detected capacity change from 0 to 1024 [ 362.765509][ T6751] loop4: detected capacity change from 0 to 1024 [ 362.781107][ T6749] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 362.781107][ T6749] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 362.781107][ T6749] [ 362.801588][ T6749] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 362.819223][ T6749] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 363.534396][ T6751] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 363.612524][ T6751] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,jqfmt=vfsv0,quota,nombcache,noinit_itable,nomblk_io_submit,init_itable=0x0000000000000009,nombcache,lazytime,,errors=continue. Quota mode: writeback. [ 364.370798][ T6769] loop2: detected capacity change from 0 to 1024 [ 364.436217][ T6769] hfsplus: unable to parse mount options [ 365.622934][ T6783] loop2: detected capacity change from 0 to 512 [ 365.752822][ T6789] loop3: detected capacity change from 0 to 16 [ 366.258973][ T6789] erofs: (device loop3): mounted with root inode @ nid 36. [ 366.259045][ T6783] EXT4-fs (loop2): Ignoring removed oldalloc option [ 366.472127][ T6783] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.851: Parent and EA inode have the same ino 15 [ 366.489269][ T6783] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.851: Parent and EA inode have the same ino 15 [ 366.509984][ T6783] EXT4-fs (loop2): 1 orphan inode deleted [ 366.519255][ T6783] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 367.689610][ T6806] loop4: detected capacity change from 0 to 1024 [ 367.748215][ T6806] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 367.809755][ T6806] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 367.834727][ T6806] System zones: 0-1, 3-12 [ 367.873812][ T6806] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 368.226243][ T26] audit: type=1326 audit(1727417118.141:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.1.860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd8c11ff39 code=0x0 [ 368.651049][ T6833] loop4: detected capacity change from 0 to 512 [ 368.749159][ T6833] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 368.785630][ T6833] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038 (0x7fffffff) [ 369.356729][ T6846] netlink: 1312 bytes leftover after parsing attributes in process `syz.4.863'. [ 369.478195][ T6850] "syz.2.868" (6850) uses obsolete ecb(arc4) skcipher [ 369.884663][ T6854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.671180][ T3609] Bluetooth: hci3: command 0x0406 tx timeout [ 371.499784][ T3609] Bluetooth: hci7: command 0x0406 tx timeout [ 371.528866][ T6863] loop1: detected capacity change from 0 to 128 [ 371.712982][ T3609] Bluetooth: hci4: command 0x0406 tx timeout [ 371.719216][ T3609] Bluetooth: hci6: command 0x0406 tx timeout [ 371.725651][ T3609] Bluetooth: hci8: command 0x0406 tx timeout [ 372.111019][ T6863] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 372.129345][ T6863] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 372.706455][ T6869] loop4: detected capacity change from 0 to 1024 [ 372.960773][ T6869] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 372.988120][ T6872] loop2: detected capacity change from 0 to 512 [ 373.042413][ T6869] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 373.091271][ T6872] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,noinit_itable,minixdf,,errors=continue. Quota mode: writeback. [ 373.096709][ T6869] System zones: 0-1, 3-12 [ 373.116429][ T6869] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 373.177205][ T6882] loop0: detected capacity change from 0 to 8 [ 373.215390][ T6872] ext4 filesystem being mounted at /76/bus supports timestamps until 2038 (0x7fffffff) [ 373.818956][ T6884] x_tables: duplicate underflow at hook 1 [ 374.505967][ T6882] unable to read inode lookup table [ 374.963683][ T6895] Process accounting resumed [ 374.968599][ T6895] kernel write not supported for file /asound/timers (pid: 6895 comm: syz.3.880) [ 378.714339][ T6929] loop3: detected capacity change from 0 to 512 [ 378.786414][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.792916][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.204562][ T6929] EXT4-fs (loop3): Unrecognized mount option "subj_type=" or missing value [ 379.251777][ T6941] loop2: detected capacity change from 0 to 1024 [ 379.404234][ T6941] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 379.496045][ T6941] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 379.511093][ T6947] loop4: detected capacity change from 0 to 512 [ 379.545270][ T6941] System zones: 0-1, 3-12 [ 379.572611][ T6941] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 379.601164][ T6955] Process accounting resumed [ 379.605901][ T6955] kernel write not supported for file /asound/timers (pid: 6955 comm: syz.0.892) [ 379.685351][ T1074] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 380.475246][ T1074] usb 4-1: device descriptor read/64, error -71 [ 380.614554][ T6947] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,user_xattr,,errors=continue. Quota mode: writeback. [ 380.660434][ T6947] ext4 filesystem being mounted at /77/bus supports timestamps until 2038 (0x7fffffff) [ 380.917282][ T1074] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 381.454594][ T6968] Process accounting resumed [ 381.459442][ T6968] kernel write not supported for file /asound/timers (pid: 6968 comm: syz.2.897) [ 382.125214][ T1074] usb 4-1: device descriptor read/64, error -71 [ 382.290722][ T1074] usb usb4-port1: attempt power cycle [ 382.331837][ T6977] loop3: detected capacity change from 0 to 512 [ 383.232122][ T6977] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 383.271958][ T6977] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038 (0x7fffffff) [ 384.044746][ T6996] loop2: detected capacity change from 0 to 1024 [ 384.096208][ T6988] dccp_close: ABORT with 32 bytes unread [ 384.157812][ T6996] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 384.327234][ T6996] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 384.411121][ T6996] System zones: 0-1, 3-12 [ 384.623469][ T7013] Process accounting resumed [ 384.628471][ T7013] kernel write not supported for file /asound/timers (pid: 7013 comm: syz.3.906) [ 385.865159][ T7015] Process accounting resumed [ 385.869901][ T7015] kernel write not supported for file /asound/timers (pid: 7015 comm: syz.4.909) [ 386.301040][ T6996] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 386.372589][ T7012] loop1: detected capacity change from 0 to 764 [ 386.753728][ T7012] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 388.785209][ T7050] Process accounting resumed [ 388.789942][ T7050] kernel write not supported for file /asound/timers (pid: 7050 comm: syz.2.921) [ 389.842191][ T7056] Process accounting resumed [ 389.847167][ T7056] kernel write not supported for file /asound/timers (pid: 7056 comm: syz.1.923) [ 391.019499][ T7063] loop1: detected capacity change from 0 to 2048 [ 391.106089][ T7063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.151194][ T7077] loop4: detected capacity change from 0 to 1024 [ 391.253635][ T7079] "syz.2.928" (7079) uses obsolete ecb(arc4) skcipher [ 392.868506][ T7063] UDF-fs: error (device loop1): udf_read_inode: (ino 1329) failed !bh [ 392.915268][ T7077] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 393.076247][ T7077] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 393.084441][ T7077] System zones: 0-1, 3-12 [ 393.266316][ T7090] Process accounting resumed [ 393.271604][ T7090] kernel write not supported for file /asound/timers (pid: 7090 comm: syz.0.933) [ 393.826467][ T4798] usb 1-1: ezusb_ihex_firmware_download - request "keyspan/usa19qi.fw" failed [ 393.866037][ T4798] usb 1-1: failed to load firmware "keyspan/usa19qi.fw" [ 393.929265][ T7077] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 393.957028][ T4798] keyspan: probe of 1-1:0.0 failed with error -2 [ 393.984436][ T4798] usb 1-1: USB disconnect, device number 5 [ 395.683678][ T7121] loop1: detected capacity change from 0 to 512 [ 395.848037][ T7121] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 395.960496][ T7131] Process accounting resumed [ 395.965394][ T7131] kernel write not supported for file /asound/timers (pid: 7131 comm: syz.2.945) [ 396.736450][ T7121] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.946: bg 0: block 64: padding at end of block bitmap is not set [ 396.920582][ T7121] Quota error (device loop1): write_blk: dquota write failed [ 396.924832][ T7139] loop2: detected capacity change from 0 to 512 [ 396.930005][ T7121] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 396.957760][ T7121] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.946: Failed to acquire dquot type 0 [ 396.980783][ T7121] EXT4-fs (loop1): 1 truncate cleaned up [ 396.987047][ T7121] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 397.009567][ T7139] EXT4-fs (loop2): Ignoring removed nobh option [ 397.025660][ T7139] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 397.052099][ T7121] syz.1.946 (7121) used greatest stack depth: 19072 bytes left [ 397.118161][ T7139] EXT4-fs (loop2): 1 truncate cleaned up [ 397.163299][ T7146] loop4: detected capacity change from 0 to 1024 [ 397.185226][ T7139] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 397.267417][ T7146] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 397.441388][ T7146] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 398.119945][ T7146] System zones: 0-1, 3-12 [ 398.139916][ T7146] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 399.081987][ T7172] Process accounting resumed [ 399.086747][ T7172] kernel write not supported for file /asound/timers (pid: 7172 comm: syz.2.960) [ 399.659625][ T7158] loop0: detected capacity change from 0 to 8192 [ 399.789925][ T7176] loop1: detected capacity change from 0 to 1024 [ 399.895246][ T7176] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 399.991072][ T7176] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,nomblk_io_submit,,errors=continue. Quota mode: none. [ 400.201358][ T3770] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 16777241 free clusters [ 400.277092][ T3770] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 400.310034][ T3770] EXT4-fs (loop1): This should not happen!! Data will be lost [ 400.310034][ T3770] [ 400.323709][ T3770] EXT4-fs (loop1): Total free blocks count 0 [ 400.332034][ T3770] EXT4-fs (loop1): Free/Dirty block details [ 400.339535][ T3770] EXT4-fs (loop1): free_blocks=268435456 [ 400.345886][ T3770] EXT4-fs (loop1): dirty_blocks=32 [ 400.365240][ T3770] EXT4-fs (loop1): Block reservation details [ 400.371301][ T3770] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 400.374145][ T7186] loop0: detected capacity change from 0 to 1024 [ 400.387836][ T3624] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 400.446721][ T3624] EXT4-fs (loop1): This should not happen!! Data will be lost [ 400.446721][ T3624] [ 400.459810][ T7186] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 400.577948][ T26] audit: type=1804 audit(1727417150.531:61): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.966" name="/newroot/78/bus/file1" dev="loop0" ino=15 res=1 errno=0 [ 400.615643][ T7186] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #15: comm syz.0.966: corrupted in-inode xattr [ 400.643680][ T7186] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.966: corrupted in-inode xattr [ 400.852782][ T7186] attempt to access beyond end of device [ 400.852782][ T7186] loop0: rw=2049, want=3606377192, limit=1024 [ 400.878073][ T7186] EXT4-fs warning (device loop0): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 1803188595) [ 400.958512][ T7186] Buffer I/O error on device loop0, logical block 1803188595 [ 400.979296][ T7186] attempt to access beyond end of device [ 400.979296][ T7186] loop0: rw=2049, want=3403208900, limit=1024 [ 400.999689][ T7186] EXT4-fs warning (device loop0): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 1701604449) [ 401.013226][ T7186] Buffer I/O error on device loop0, logical block 1701604449 [ 401.021260][ T7186] attempt to access beyond end of device [ 401.021260][ T7186] loop0: rw=2049, want=59110, limit=1024 [ 401.032590][ T7186] EXT4-fs warning (device loop0): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 29554) [ 401.073952][ T7186] Buffer I/O error on device loop0, logical block 29554 [ 401.136872][ T26] audit: type=1800 audit(1727417151.091:62): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.965" name="/" dev="fuse" ino=1 res=0 errno=0 [ 401.163554][ T5484] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /78/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 401.227203][ T5484] EXT4-fs (loop0): Inode 15 (ffff88806114d9b8): i_reserved_data_blocks (1) not cleared! [ 401.238097][ T7209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.094424][ T7213] loop2: detected capacity change from 0 to 1024 [ 402.799908][ T7213] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 402.871506][ T7213] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 402.925242][ T7213] System zones: 0-1, 3-12 [ 402.949265][ T7213] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 404.205910][ T5647] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 404.599280][ T5647] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.640284][ T5647] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.731017][ T5647] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 404.745276][ T5647] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 404.754577][ T5647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.775512][ T5647] usb 3-1: config 0 descriptor?? [ 405.102686][ T7251] loop4: detected capacity change from 0 to 2048 [ 405.149177][ T7238] chnl_net:caif_netlink_parms(): no params data found [ 405.162439][ T7256] netlink: 64 bytes leftover after parsing attributes in process `syz.1.990'. [ 405.226297][ T7251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.387446][ T5647] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x4 [ 405.405347][ T5647] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 405.412834][ T5647] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 405.442322][ T5647] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 405.450306][ T5647] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 405.461134][ T7238] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.485208][ T5647] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 405.509228][ T5647] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 405.513434][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.534144][ T5647] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 405.552182][ T5647] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 405.566443][ T7238] device bridge_slave_0 entered promiscuous mode [ 405.572114][ T7269] loop3: detected capacity change from 0 to 1024 [ 405.589890][ T5647] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 405.598525][ T7238] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.621565][ T5647] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 405.639794][ T7238] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.659888][ T7238] device bridge_slave_1 entered promiscuous mode [ 405.665568][ T5647] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 405.703747][ T5647] usb 3-1: USB disconnect, device number 5 [ 405.769026][ T7269] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 405.813740][ T7238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.854066][ T7269] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 405.861213][ T7238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.904572][ T7269] System zones: 0-1, 3-12 [ 405.967846][ T7269] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 406.069181][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 406.097364][ T7238] team0: Port device team_slave_0 added [ 406.201595][ T7238] team0: Port device team_slave_1 added [ 406.288968][ T7238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.306665][ T7238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.365461][ T7238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.366167][ T7282] loop2: detected capacity change from 0 to 1024 [ 406.399330][ T7238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.414964][ T7238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.520472][ T7238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.548674][ T7282] EXT4-fs (loop2): Ignoring removed bh option [ 406.554852][ T7282] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 406.667595][ T7282] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 406.738169][ T7238] device hsr_slave_0 entered promiscuous mode [ 406.808768][ T7238] device hsr_slave_1 entered promiscuous mode [ 406.858327][ T7287] netlink: 104 bytes leftover after parsing attributes in process `syz.3.998'. [ 407.202944][ T7293] loop2: detected capacity change from 0 to 8 [ 407.294830][ T7293] SQUASHFS error: zlib decompression failed, data probably corrupt [ 407.304670][ T7238] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.328203][ T7293] SQUASHFS error: Failed to read block 0x4de: -5 [ 407.343942][ T7293] SQUASHFS error: Failed to read block 0x4e2: -5 [ 407.359682][ T7293] SQUASHFS error: Failed to read block 0x9ca: -5 [ 407.380148][ T7293] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 407.401228][ T7238] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.418571][ T7293] SQUASHFS error: Failed to read block 0x35f2: -5 [ 407.439210][ T26] audit: type=1800 audit(1727417413.393:63): pid=7293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1000" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 407.537042][ T7296] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 407.550982][ T7238] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.577171][ T7298] loop3: detected capacity change from 0 to 256 [ 407.605043][ T7298] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 407.657998][ T7298] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 407.690410][ T7298] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 407.736513][ T7298] UDF-fs: Scanning with blocksize 512 failed [ 407.747558][ T7238] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.771080][ T7298] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 407.785834][ T7309] loop2: detected capacity change from 0 to 1024 [ 407.800471][ T7298] UDF-fs: warning (device loop3): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 407.913899][ T7309] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 407.988115][ T7309] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 408.005900][ T7309] System zones: 0-1, 3-12 [ 408.010193][ T7317] loop3: detected capacity change from 0 to 256 [ 408.011522][ T7309] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 408.028723][ T7315] loop1: detected capacity change from 0 to 1024 [ 408.060215][ T7317] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 408.074503][ T7238] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 408.076384][ T7315] hfsplus: unable to parse mount options [ 408.100563][ T7238] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 408.224780][ T5647] Bluetooth: hci0: command 0x041b tx timeout [ 408.250403][ T7238] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 409.109367][ T7238] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 410.045679][ T7238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.083451][ T7238] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.128437][ T7238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 410.146970][ T7238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.165246][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 410.174238][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 410.316888][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 410.375767][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 410.402652][ T5647] Bluetooth: hci0: command 0x040f tx timeout [ 410.410812][ T3814] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.418155][ T3814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.426183][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 410.445903][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 410.459203][ T7329] loop3: detected capacity change from 0 to 1024 [ 410.467938][ T3814] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.475037][ T3814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.495552][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 410.512694][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 410.530941][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 410.549109][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 410.558524][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 410.575734][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 410.596077][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 410.661672][ T7333] loop1: detected capacity change from 0 to 512 [ 410.718696][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 410.770724][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 410.819310][ T7333] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 410.837339][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 410.851667][ T7333] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038 (0x7fffffff) [ 410.868801][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 410.881222][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 410.904853][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 411.757724][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 411.781027][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 411.843019][ T7238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.844178][ T7357] loop2: detected capacity change from 0 to 256 [ 411.853354][ T7359] loop3: detected capacity change from 0 to 1024 [ 411.864397][ T7357] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 411.881894][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 412.023608][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 412.057436][ T7359] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 412.140974][ T7359] EXT4-fs (loop3): orphan cleanup on readonly fs [ 412.153616][ T7359] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (6144 > 32). [ 412.475318][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 412.518818][ T7359] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 412.567890][ T7359] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 412.737382][ T7359] EXT4-fs (loop3): 1 truncate cleaned up [ 412.743161][ T7359] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 412.933265][ T7374] loop4: detected capacity change from 0 to 1024 [ 413.027602][ T7374] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 413.041933][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 413.049902][ T7374] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 413.060998][ T7374] System zones: 0-1, 3-12 [ 413.061497][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 413.074784][ T7374] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 413.108626][ T7238] device veth0_vlan entered promiscuous mode [ 413.121144][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 413.163533][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 413.221052][ T7238] device veth1_vlan entered promiscuous mode [ 413.252825][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 413.268355][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 413.282684][ T7238] device veth0_macvtap entered promiscuous mode [ 413.327951][ T7238] device veth1_macvtap entered promiscuous mode [ 414.328648][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 414.340152][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 414.353408][ T7238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.380457][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 414.393321][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 414.430945][ T7238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.457677][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 414.483985][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 414.587362][ T7238] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.867272][ T7238] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.905117][ T7238] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.585163][ T7238] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.972379][ T7418] loop1: detected capacity change from 0 to 1024 [ 416.431036][ T7418] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 416.712437][ T7418] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 416.764472][ T7418] System zones: 0-1, 3-12 [ 416.823672][ T7418] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 416.915669][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.992545][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.249249][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 417.261596][ T4560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.284894][ T4560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.382282][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 417.463422][ T7425] loop0: detected capacity change from 0 to 16 [ 417.726201][ T7425] erofs: (device loop0): mounted with root inode @ nid 36. [ 418.220756][ T7425] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 418.230783][ T7425] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 418.576219][ T7434] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1039'. [ 418.662410][ T7438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.673829][ T7438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.695528][ T7438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.721464][ T7438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.904465][ T7447] loop2: detected capacity change from 0 to 8 [ 419.518962][ T7447] SQUASHFS error: zlib decompression failed, data probably corrupt [ 419.535178][ T7447] SQUASHFS error: Failed to read block 0x4de: -5 [ 419.555697][ T7447] SQUASHFS error: Failed to read block 0x4e2: -5 [ 419.570534][ T4581] device hsr_slave_0 left promiscuous mode [ 419.572547][ T7447] SQUASHFS error: Failed to read block 0x9ca: -5 [ 419.606166][ T7447] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 419.623031][ T7447] SQUASHFS error: Failed to read block 0x35f2: -5 [ 419.665620][ T7455] loop1: detected capacity change from 0 to 1024 [ 419.685888][ T26] audit: type=1800 audit(1727418449.614:64): pid=7447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1046" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 419.779052][ T4581] device hsr_slave_1 left promiscuous mode [ 419.788653][ T4581] device bridge_slave_1 left promiscuous mode [ 419.794910][ T4581] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.816977][ T7455] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 419.880629][ T7455] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 419.915347][ T7455] System zones: 0-1, 3-12 [ 419.978711][ T7455] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 420.319843][ T4581] device bridge_slave_0 left promiscuous mode [ 420.334072][ T4581] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.002452][ T4581] device veth1_macvtap left promiscuous mode [ 421.041696][ T4581] device veth0_macvtap left promiscuous mode [ 421.076998][ T4581] device veth1_vlan left promiscuous mode [ 421.083944][ T4581] device veth0_vlan left promiscuous mode [ 421.088498][ T7472] loop4: detected capacity change from 0 to 512 [ 421.098624][ T7469] loop2: detected capacity change from 0 to 2048 [ 421.153924][ T7472] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 421.203639][ T7469] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 421.204755][ T7472] EXT4-fs (loop4): 1 truncate cleaned up [ 421.248075][ T7472] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 422.180123][ T7483] loop1: detected capacity change from 0 to 512 [ 422.256309][ T7483] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 422.265133][ T7483] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 422.307479][ T7483] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 422.316651][ T7483] System zones: 1-12 [ 422.337279][ T7483] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1053: corrupted in-inode xattr [ 422.356263][ T7483] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1053: couldn't read orphan inode 15 (err -117) [ 422.375659][ T7483] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 422.962668][ T4581] team0 (unregistering): Port device team_slave_1 removed [ 422.988154][ T4581] team0 (unregistering): Port device team_slave_0 removed [ 423.016638][ T4581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.097227][ T4581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.129302][ T7499] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1059'. [ 423.269855][ T4581] bond0 (unregistering): Released all slaves [ 423.589103][ T7508] loop0: detected capacity change from 0 to 1024 [ 423.609209][ T7509] overlayfs: missing 'lowerdir' [ 423.661060][ T7508] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 423.773162][ T7508] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 423.787586][ T7508] System zones: 0-1, 3-12 [ 423.830130][ T7508] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 424.126198][ T7530] loop4: detected capacity change from 0 to 512 [ 424.278419][ T7530] EXT4-fs (loop4): Ignoring removed oldalloc option [ 424.335722][ T7530] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1070: Parent and EA inode have the same ino 15 [ 424.455582][ T7530] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1070: Parent and EA inode have the same ino 15 [ 424.484443][ T7530] EXT4-fs (loop4): 1 orphan inode deleted [ 424.492760][ T7530] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 425.255938][ T7553] fuse: Bad value for 'fd' [ 425.780336][ T7580] loop3: detected capacity change from 0 to 512 [ 425.861367][ T7580] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 425.861367][ T7580] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 425.861367][ T7580] [ 425.983331][ T7580] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 426.076712][ T7580] EXT4-fs (loop3): 1 truncate cleaned up [ 426.120288][ T7599] loop1: detected capacity change from 0 to 1024 [ 426.147641][ T7580] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 426.439709][ T7599] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 426.974380][ T7617] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 427.012910][ T7599] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 427.077237][ T7599] System zones: 0-1, 3-12 [ 427.145564][ T7599] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 427.866224][ T7651] loop2: detected capacity change from 0 to 256 [ 427.884127][ T7650] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 427.920889][ T7651] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 430.622901][ T7689] loop4: detected capacity change from 0 to 256 [ 430.963971][ T7689] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 431.144691][ T7703] loop1: detected capacity change from 0 to 16 [ 431.763492][ T7712] loop2: detected capacity change from 0 to 1024 [ 431.889242][ T7703] erofs: (device loop1): mounted with root inode @ nid 36. [ 432.045870][ T7712] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 432.328872][ T7712] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 432.993053][ T7724] "syz.3.1139" (7724) uses obsolete ecb(arc4) skcipher [ 433.187237][ T7712] System zones: 0-1, 3-12 [ 433.420028][ T7712] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 434.992403][ T7749] dccp_v4_rcv: dropped packet with invalid checksum [ 434.999697][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 435.169005][ T7753] loop1: detected capacity change from 0 to 256 [ 435.221337][ T7753] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 436.346602][ T7] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 436.356901][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.367141][ T7] usb 5-1: config 0 descriptor?? [ 436.426564][ T7] cp210x 5-1:0.0: cp210x converter detected [ 436.509274][ T7755] Process accounting resumed [ 436.516568][ T7755] kernel write not supported for file /asound/timers (pid: 7755 comm: syz.3.1151) [ 436.845450][ T7] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 437.100941][ T7] usb 5-1: cp210x converter now attached to ttyUSB0 [ 437.297003][ T7] usb 5-1: USB disconnect, device number 6 [ 437.408752][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 437.553591][ T7] cp210x 5-1:0.0: device disconnected [ 438.223926][ T7788] loop3: detected capacity change from 0 to 1024 [ 438.302142][ T7788] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 438.451989][ T7765] "syz.2.1152" (7765) uses obsolete ecb(arc4) skcipher [ 438.600351][ T7788] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 438.659827][ T7788] System zones: 0-1, 3-12 [ 438.697290][ T7788] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 439.828375][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.834819][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.912309][ T7814] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1169'. [ 440.748337][ T7831] "syz.4.1174" (7831) uses obsolete ecb(arc4) skcipher [ 441.480702][ T7830] overlayfs: failed to resolve './file0': -2 [ 441.722879][ T7850] loop1: detected capacity change from 0 to 512 [ 441.758207][ T7851] loop4: detected capacity change from 0 to 512 [ 441.820855][ T7850] EXT4-fs (loop1): Ignoring removed oldalloc option [ 441.841545][ T7851] EXT4-fs (loop4): Ignoring removed oldalloc option [ 441.928711][ T7850] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.1182: Parent and EA inode have the same ino 15 [ 441.954480][ T7851] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1183: Parent and EA inode have the same ino 15 [ 442.011301][ T7850] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.1182: Parent and EA inode have the same ino 15 [ 442.047134][ T7851] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1183: Parent and EA inode have the same ino 15 [ 442.061627][ T7850] EXT4-fs (loop1): 1 orphan inode deleted [ 442.072224][ T7850] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 442.331015][ T7851] EXT4-fs (loop4): 1 orphan inode deleted [ 442.386550][ T7851] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 442.870193][ T7882] "syz.1.1190" (7882) uses obsolete ecb(arc4) skcipher [ 442.874723][ T7886] tmpfs: Unknown parameter 'quota' [ 443.076528][ T7889] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 443.425273][ T7903] loop4: detected capacity change from 0 to 16 [ 443.558893][ T7903] erofs: (device loop4): mounted with root inode @ nid 36. [ 443.597422][ T7905] loop1: detected capacity change from 0 to 16 [ 443.809827][ T7905] erofs: (device loop1): mounted with root inode @ nid 36. [ 445.015648][ T7916] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 445.491442][ T7942] netlink: 'syz.0.1213': attribute type 15 has an invalid length. [ 445.520973][ T7939] "syz.1.1209" (7939) uses obsolete ecb(arc4) skcipher [ 445.579399][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.626085][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 445.644742][ T7948] loop0: detected capacity change from 0 to 1024 [ 445.656740][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.690617][ T7948] EXT4-fs (loop0): Ignoring removed orlov option [ 445.709077][ T7948] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 445.780485][ T7940] device bridge_slave_0 left promiscuous mode [ 445.813895][ T7948] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 445.837833][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.797329][ T7986] "syz.4.1227" (7986) uses obsolete ecb(arc4) skcipher [ 448.198775][ T7983] loop3: detected capacity change from 0 to 1024 [ 448.455981][ T7983] EXT4-fs (loop3): Ignoring removed orlov option [ 448.474070][ T7983] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 448.527089][ T7983] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 448.573043][ T7996] loop1: detected capacity change from 0 to 512 [ 448.664958][ T7996] EXT4-fs (loop1): Ignoring removed oldalloc option [ 448.709527][ T7996] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.1231: Parent and EA inode have the same ino 15 [ 448.784668][ T7996] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.1231: Parent and EA inode have the same ino 15 [ 448.866271][ T7996] EXT4-fs (loop1): 1 orphan inode deleted [ 448.885184][ T7996] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 448.919495][ T8007] loop3: detected capacity change from 0 to 16 [ 448.959657][ T8007] erofs: (device loop3): mounted with root inode @ nid 36. [ 450.007047][ T8023] loop1: detected capacity change from 0 to 16 [ 450.104635][ T8018] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1240'. [ 450.129264][ T8023] erofs: (device loop1): mounted with root inode @ nid 36. [ 451.379694][ T8044] loop4: detected capacity change from 0 to 2048 [ 451.443203][ T8046] loop0: detected capacity change from 0 to 512 [ 451.485854][ T8044] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.542446][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1249'. [ 451.689128][ T8046] EXT4-fs (loop0): Ignoring removed oldalloc option [ 451.764122][ T8046] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.1248: Parent and EA inode have the same ino 15 [ 451.778724][ T8046] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.1248: Parent and EA inode have the same ino 15 [ 452.123898][ T8046] EXT4-fs (loop0): 1 orphan inode deleted [ 452.180313][ T8046] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 452.491899][ T8057] could not allocate digest TFM handle rmd256 [ 452.521144][ T8070] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1255'. [ 452.718087][ T8082] loop4: detected capacity change from 0 to 1024 [ 452.803462][ T8082] EXT4-fs (loop4): Ignoring removed orlov option [ 452.811397][ T8082] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 452.852735][ T8082] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 452.904479][ T8091] loop2: detected capacity change from 0 to 512 [ 452.971229][ T8091] EXT4-fs (loop2): Ignoring removed oldalloc option [ 453.020180][ T8091] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1264: Parent and EA inode have the same ino 15 [ 453.067609][ T8091] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1264: Parent and EA inode have the same ino 15 [ 453.131676][ T8091] EXT4-fs (loop2): 1 orphan inode deleted [ 453.139302][ T8091] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 453.460045][ T8121] loop1: detected capacity change from 0 to 16 [ 453.481418][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1279'. [ 453.545129][ T5171] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 453.557107][ T8121] erofs: (device loop1): mounted with root inode @ nid 36. [ 453.720141][ T8136] loop4: detected capacity change from 0 to 512 [ 453.805418][ T8136] EXT4-fs (loop4): Ignoring removed oldalloc option [ 454.518035][ T8144] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1283'. [ 454.543544][ T8136] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1284: Parent and EA inode have the same ino 15 [ 454.577798][ T8136] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1284: Parent and EA inode have the same ino 15 [ 454.595506][ T5171] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 454.604617][ T5171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.646236][ T8148] loop2: detected capacity change from 0 to 1024 [ 454.663030][ T8136] EXT4-fs (loop4): 1 orphan inode deleted [ 454.705500][ T5171] usb 1-1: config 0 descriptor?? [ 454.713257][ T8136] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 454.751521][ T8148] EXT4-fs (loop2): Ignoring removed orlov option [ 454.765127][ T8148] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 454.807018][ T5171] cp210x 1-1:0.0: cp210x converter detected [ 454.852049][ T8148] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 454.905394][ T3614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.927112][ T3614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.952653][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 455.246552][ T5171] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 455.254114][ T8178] loop2: detected capacity change from 0 to 256 [ 455.275352][ T5171] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 455.293959][ T8178] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 455.305675][ T5171] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 455.436053][ T8179] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1299'. [ 455.451284][ T5171] usb 1-1: cp210x converter now attached to ttyUSB0 [ 455.462390][ T5171] usb 1-1: USB disconnect, device number 6 [ 455.475964][ T5171] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 456.361412][ T5171] cp210x 1-1:0.0: device disconnected [ 456.477132][ T8191] loop1: detected capacity change from 0 to 512 [ 456.504339][ T8191] EXT4-fs (loop1): Ignoring removed oldalloc option [ 456.549483][ T8191] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.1304: Parent and EA inode have the same ino 15 [ 456.571141][ T8191] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.1304: Parent and EA inode have the same ino 15 [ 456.587957][ T8191] EXT4-fs (loop1): 1 orphan inode deleted [ 456.605190][ T8191] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 456.637467][ T8198] tmpfs: Unknown parameter 'usrquota' [ 456.683526][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 456.735753][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 456.770100][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 456.778878][ T8206] loop3: detected capacity change from 0 to 1024 [ 456.789116][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 456.818787][ T8208] loop0: detected capacity change from 0 to 256 [ 456.836354][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 456.846486][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 456.856022][ T8208] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 456.868255][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 456.875892][ T8206] EXT4-fs (loop3): Ignoring removed orlov option [ 456.882539][ T8206] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 456.889975][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 456.897808][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 456.939074][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 456.956603][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 456.958747][ T8206] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 456.974328][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.004090][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.011695][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.019212][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.027152][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.034683][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.042195][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.049913][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.057426][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.065077][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.072507][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.080078][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.087653][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.095171][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.102769][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.110734][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.118231][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.129490][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.137376][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.155254][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.162735][ T5171] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 457.187274][ T5171] hid-generic 0000:04AD:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 457.345213][ T5171] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 457.359345][ T5171] Bluetooth: hci4: Injecting HCI hardware error event [ 457.376947][ T3570] Bluetooth: hci4: hardware error 0x00 [ 457.465394][ T5176] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 457.606656][ T8227] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1313'. [ 458.375438][ T5176] usb 3-1: config 0 has no interfaces? [ 458.395436][ T5176] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 458.426874][ T5176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.462261][ T5176] usb 3-1: config 0 descriptor?? [ 458.733508][ T5171] usb 3-1: USB disconnect, device number 6 [ 458.925354][ T5176] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 459.153452][ T8260] Process accounting resumed [ 459.158199][ T8260] kernel write not supported for file /asound/timers (pid: 8260 comm: syz.3.1327) [ 459.235130][ T5176] usb 5-1: Using ep0 maxpacket: 8 [ 459.386209][ T5176] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 459.395636][ T5176] usb 5-1: config 1 has no interface number 1 [ 459.996753][ T5176] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 460.266649][ T5176] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 460.295943][ T5176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.314866][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 460.317967][ T8285] tmpfs: Unknown parameter 'usrquota' [ 460.335805][ T5176] usb 5-1: Product: syz [ 460.340307][ T5176] usb 5-1: Manufacturer: syz [ 460.359838][ T5176] usb 5-1: SerialNumber: syz [ 460.673754][ T8294] Process accounting resumed [ 460.678428][ T8294] kernel write not supported for file /asound/timers (pid: 8294 comm: syz.1.1340) [ 461.155592][ T5176] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 461.225244][ T5176] usb 5-1: 2:1: cannot set freq 5590914 to ep 0x82 [ 461.262676][ T3614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.288368][ T3614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.313815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 461.372549][ T5176] usb 5-1: USB disconnect, device number 7 [ 461.514214][ T3559] udevd[3559]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.575197][ T5171] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 462.516681][ T5171] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 462.524626][ T5171] usb 4-1: can't read configurations, error -61 [ 462.672673][ T8358] Process accounting resumed [ 462.677552][ T8358] kernel write not supported for file /asound/timers (pid: 8358 comm: syz.4.1358) [ 462.695224][ T5171] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 463.028257][ T8367] Process accounting resumed [ 463.032946][ T8367] kernel write not supported for file /asound/timers (pid: 8367 comm: syz.0.1365) [ 463.175670][ T5171] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 463.190965][ T5171] usb 4-1: can't read configurations, error -61 [ 463.198362][ T5171] usb usb4-port1: attempt power cycle [ 463.325142][ T5176] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 463.565161][ T5176] usb 2-1: device descriptor read/64, error -71 [ 463.605271][ T5171] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 463.914245][ T8400] Process accounting resumed [ 463.919029][ T8400] kernel write not supported for file /asound/timers (pid: 8400 comm: syz.2.1378) [ 463.931514][ T5176] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 463.975258][ T5171] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 464.020725][ T5171] usb 4-1: can't read configurations, error -61 [ 464.299547][ T8409] Process accounting resumed [ 464.304199][ T8409] kernel write not supported for file /asound/timers (pid: 8409 comm: syz.2.1381) [ 464.325262][ T5176] usb 2-1: device descriptor read/64, error -71 [ 464.331874][ T5171] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 464.455358][ T5176] usb usb2-port1: attempt power cycle [ 464.585290][ T5171] usb 4-1: device not accepting address 16, error -71 [ 464.589079][ T8425] loop0: detected capacity change from 0 to 1024 [ 464.593503][ T5171] usb usb4-port1: unable to enumerate USB device [ 464.662958][ T8425] EXT4-fs (loop0): Ignoring removed orlov option [ 464.670329][ T8425] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 464.846909][ T8428] Process accounting resumed [ 464.846967][ T8425] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 464.851581][ T8428] kernel write not supported for file /asound/timers (pid: 8428 comm: syz.3.1389) [ 464.976749][ T5176] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 465.128234][ T5176] usb 2-1: device descriptor read/8, error -71 [ 465.415282][ T5176] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 465.545347][ T5176] usb 2-1: device descriptor read/8, error -71 [ 465.609698][ T8456] loop4: detected capacity change from 0 to 1024 [ 465.652346][ T8456] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 465.665451][ T5176] usb usb2-port1: unable to enumerate USB device [ 465.684974][ T8456] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 465.694840][ T8456] System zones: 0-1, 3-12 [ 465.701068][ T8456] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,bsddf,nodioread_nolock,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,debug,nodelalloc,auto_da_alloc,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: none. [ 465.958824][ T8464] device syzkaller0 entered promiscuous mode [ 466.285711][ T8471] Process accounting resumed [ 466.290493][ T8471] kernel write not supported for file /asound/timers (pid: 8471 comm: syz.3.1401) [ 467.033088][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'. [ 467.176198][ T8489] INFO: trying to register non-static key. [ 467.182074][ T8489] The code is fine but needs lockdep annotation, or maybe [ 467.189180][ T8489] you didn't initialize this object before use? [ 467.195549][ T8489] turning off the locking correctness validator. [ 467.201879][ T8489] CPU: 0 PID: 8489 Comm: syz.4.1404 Not tainted 5.15.167-syzkaller #0 [ 467.210318][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 467.220409][ T8489] Call Trace: [ 467.223708][ T8489] [ 467.226736][ T8489] dump_stack_lvl+0x1e3/0x2d0 [ 467.231449][ T8489] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 467.237085][ T8489] ? panic+0x860/0x860 [ 467.241159][ T8489] ? __is_module_percpu_address+0x287/0x3c0 [ 467.247155][ T8489] ? is_kernel_percpu_address+0x132/0x150 [ 467.252897][ T8489] assign_lock_key+0x21e/0x230 [ 467.257664][ T8489] ? SOFTIRQ_verbose+0x10/0x10 [ 467.262430][ T8489] ? reacquire_held_locks+0x660/0x660 [ 467.267802][ T8489] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 467.273799][ T8489] register_lock_class+0x28a/0x9a0 [ 467.279000][ T8489] ? __lock_acquire+0x1295/0x1ff0 [ 467.284027][ T8489] ? is_dynamic_key+0x1f0/0x1f0 [ 467.288972][ T8489] __lock_acquire+0xd7/0x1ff0 [ 467.293829][ T8489] lock_acquire+0x1db/0x4f0 [ 467.298338][ T8489] ? gsmld_write+0x5b/0x120 [ 467.302839][ T8489] ? __lock_acquire+0x1ff0/0x1ff0 [ 467.307891][ T8489] ? read_lock_is_recursive+0x10/0x10 [ 467.313261][ T8489] ? __might_fault+0xb4/0x110 [ 467.318024][ T8489] ? _copy_from_iter+0x404/0xe90 [ 467.322963][ T8489] ? _raw_spin_lock_irqsave+0xac/0x120 [ 467.328430][ T8489] ? lockdep_hardirqs_off+0x70/0x100 [ 467.333727][ T8489] _raw_spin_lock_irqsave+0xd1/0x120 [ 467.339038][ T8489] ? gsmld_write+0x5b/0x120 [ 467.343641][ T8489] ? _raw_spin_lock+0x40/0x40 [ 467.348343][ T8489] gsmld_write+0x5b/0x120 [ 467.352681][ T8489] file_tty_write+0x561/0x920 [ 467.357375][ T8489] ? gsmld_read+0x10/0x10 [ 467.361725][ T8489] do_iter_readv_writev+0x594/0x7a0 [ 467.366942][ T8489] ? generic_file_rw_checks+0x260/0x260 [ 467.372499][ T8489] ? common_file_perm+0x17d/0x1d0 [ 467.377546][ T8489] ? fsnotify_perm+0x64/0x590 [ 467.382225][ T8489] ? security_file_permission+0x75/0xa0 [ 467.387769][ T8489] do_iter_write+0x1e6/0x760 [ 467.392358][ T8489] ? import_iovec+0xe6/0x120 [ 467.396944][ T8489] do_writev+0x281/0x470 [ 467.401183][ T8489] ? do_readv+0x460/0x460 [ 467.405511][ T8489] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 467.411486][ T8489] ? vtime_user_exit+0x2d1/0x400 [ 467.416422][ T8489] ? syscall_enter_from_user_mode+0x2e/0x240 [ 467.422417][ T8489] ? lockdep_hardirqs_on+0x94/0x130 [ 467.427732][ T8489] ? syscall_enter_from_user_mode+0x2e/0x240 [ 467.433733][ T8489] do_syscall_64+0x3b/0xb0 [ 467.438160][ T8489] ? clear_bhb_loop+0x15/0x70 [ 467.442934][ T8489] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 467.448846][ T8489] RIP: 0033:0x7faa3117ff39 [ 467.453380][ T8489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.472993][ T8489] RSP: 002b:00007faa2f5f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 467.481408][ T8489] RAX: ffffffffffffffda RBX: 00007faa31337f80 RCX: 00007faa3117ff39 [ 467.489380][ T8489] RDX: 0000000000000002 RSI: 00000000200005c0 RDI: 0000000000000005 [ 467.497443][ T8489] RBP: 00007faa311f2216 R08: 0000000000000000 R09: 0000000000000000 [ 467.505502][ T8489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.513479][ T8489] R13: 0000000000000000 R14: 00007faa31337f80 R15: 00007ffeae2344f8 [ 467.521458][ T8489] [ 467.524477][ T8489] [U] Nm8W$[Oc [ 467.528185][ T8489] [U] m3lTuh1̍ |+$7üo|/ [ 467.534758][ T8489] [U] bwkk)9n$.ȶb.క_e7Q\9^Qdn8ZuTHAM"u}cn;&<, [ 467.545074][ T8489] [U] ~[!gnV[If [ 467.549307][ T8489] [U] g.r.OJ۳f+gL0jn,JVF+QqmX B_z)ʊtJuֶ@*X[YOJ'x}VL6u>JyqUWa@nS-@ [ 467.621779][ T8486] [U] hвEJR-amƳ$s?7YAM[. [ 467.865167][ T5711] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 468.225387][ T5711] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.235678][ T5711] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 468.244609][ T5711] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 468.425777][ T5711] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 468.434939][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.443427][ T5711] usb 2-1: Product: syz [ 468.447937][ T5711] usb 2-1: Manufacturer: syz [ 468.452601][ T5711] usb 2-1: SerialNumber: syz [ 468.496492][ T5711] usb 2-1: selecting invalid altsetting 1 [ 469.165168][ T5711] usb 2-1: selecting invalid altsetting 1 [ 469.170976][ T5711] cdc_ncm 2-1:1.0: bind() failure [ 469.348313][ T5176] usb 2-1: USB disconnect, device number 8