last executing test programs: 3m23.9878047s ago: executing program 32 (id=137): msgget(0x1, 0x291) prlimit64(0x0, 0xd, &(0x7f0000000580)={0x3, 0xfffffffffffffffb}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)}) 2m59.489947429s ago: executing program 5 (id=252): unshare(0xe060400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 2m59.269666428s ago: executing program 5 (id=255): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000006c0)={0x4, 0x1000000, 0x8, 0x1d, 0x18c, &(0x7f0000000040)="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"}) 2m58.238318884s ago: executing program 5 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) 2m58.08695448s ago: executing program 5 (id=259): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 2m57.779716324s ago: executing program 5 (id=263): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0001000200"], 0x8) 2m57.318077853s ago: executing program 5 (id=271): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r0, 0xffffffffffffffff, 0x14, 0x0, 0x0, @void, @value=0x0}, 0x20) 2m57.060286585s ago: executing program 33 (id=271): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r0, 0xffffffffffffffff, 0x14, 0x0, 0x0, @void, @value=0x0}, 0x20) 2m54.586914743s ago: executing program 1 (id=300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c100000000200ffffffff", 0x58}], 0x1) 2m54.304673485s ago: executing program 1 (id=304): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fanotify_init(0x4, 0x109802) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fanotify_mark(r3, 0x1, 0x2a, r1, 0x0) write(r2, &(0x7f0000000240)="e6", 0x1) tee(r1, r0, 0x800000003, 0x0) 2m54.224784808s ago: executing program 1 (id=306): syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f50a0102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x88680) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0xffffffff) 2m51.711979068s ago: executing program 1 (id=322): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6ee, &(0x7f0000000d80)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x1f) 2m51.411920722s ago: executing program 1 (id=324): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x56}, 0x20) 2m49.576744701s ago: executing program 1 (id=329): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x2) 2m49.286890454s ago: executing program 34 (id=329): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x2) 2m29.121078924s ago: executing program 7 (id=438): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x35, 0x0, 0x0, 0xe12b}, {0x15, 0x0, 0x0, 0x8}, {0x6, 0x81, 0x9, 0x9}]}) 2m28.938544782s ago: executing program 7 (id=441): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40014) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210413, &(0x7f0000000000)=ANY=[], 0x2, 0x22d, &(0x7f00000001c0)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 2m28.575340618s ago: executing program 7 (id=445): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/53, 0x0, 0xeeef0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 2m27.520673844s ago: executing program 7 (id=448): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) 2m26.93400285s ago: executing program 7 (id=452): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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") listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 2m25.804559139s ago: executing program 7 (id=461): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) 2m25.528452711s ago: executing program 35 (id=461): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) 2m11.052006282s ago: executing program 8 (id=462): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7ffffff7ffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0xfffffffffffffff9, 0x7fff, 0x9b}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpgrp(0x0) r6 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r3, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x5}) syslog(0x4, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 2m8.58460601s ago: executing program 8 (id=557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) 2m6.898309693s ago: executing program 8 (id=570): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @loopback, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0xe20}, 0x1c) 2m5.559888862s ago: executing program 36 (id=570): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @loopback, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0xe20}, 0x1c) 1m36.712526871s ago: executing program 0 (id=780): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0x9}}}}, 0xf) 1m36.636638253s ago: executing program 0 (id=781): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 1m36.600950846s ago: executing program 0 (id=782): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) 1m36.380669485s ago: executing program 0 (id=784): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) 1m35.482133714s ago: executing program 0 (id=788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10a480, &(0x7f0000000180), 0x4, 0x795, &(0x7f0000001740)="$eJzs3c1rHOUfAPDvbPP2S/uzEQStp4CggdKNqbFV8FDxIIKFgp5tw2YbajbZkt2UJgS0iOBF8BUEvfRstd68+nLVP8C7B2mpmhYjghKZzWyybXbz0mazlnw+MMnzzEu+891nZp4nO8NuAHvWYPojF3EoIt5LIg5m85OI6K6VuiJOrKy3tLhQSKcklpdf+S2prXNrcaEQDduk9meVRyLiu7cjDufWx63MzU+OlUrFmaw+XJ06P1yZmz9ybmpsojhRnD42Mjp69PjTx4/tXK5//Dh/4Pr7Lz7x5Ym/3nr46rvfJ3EiDmTLGvPYKYMxmL0m3elLeJsX4o2dDtdRSad3gLuSnpr7Vs7yOJSk5a5O7xIA0GbpKHQZANhjEv0/AOwx9fcBbi0uFOpTZ9+R2F03no+IvpX86/c3V5Z0Zffs+mr3QftvJbfdGUkiYmAH4g9GxGdfv3YlnaJN9yEBmnnzUkScGRhcf/1P1j2zsF1PbmGdwTvqq/F/6r7H6MBmvknHP880G//lVsc/0WT809vk3L0bLc//VblrOxCmpXT891zDs21LDflnBvZltf/XxnzdydlzpWJ6bXsgIoaiuzetj2wQY+jmPzdbLWsc//3+weufp/HT32tr5K519d6+zfhYdexecm5041LEo13N8k9W2z9pMf49lRb+Ht40xkvPvvNpq2Vp/mm+9Wl9/u21fDni8abtv/ZEW7Lh84nDtcNhuH5QNPHVz5/0t4rf2P7ptLS4sJxEXNn5TJtL279/4/wHksbnNSvbj/HD5YPftlq2lv+HkeVfqP8vtKL58d+TvFor92TzLo5VqzMjET3Jy+vnH13btl6vr5/mP/RY8/N/o+M/HZ2c2WL+Xdd//WLz/Ffb/4782yvNf3xb7b/9wtWlyX2t4m+ef9r+o7XSUDZnK9e/re7gvbx2AAAAAAAAAAAAAAAAAAAAAAAAALBVuYg4EEkuv1rO5fL5le/wfij6c6VypXr4bHl2ejxq35U9EN25+kddHmz4PNSR7PPw6/Wjd9SfiogHI+Kj3v/V6vlCuTTe6eQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILO/xff/p37p7fTeAQBt09fpHQAAdp3+HwD2Hv0/AOw9+n8A2Hv0/wCw9+j/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLNTJ0+m0/KfiwuFtD5+YW52snzhyHixMpmfmi3kC+WZ8/mJcnmiVMwXylOb/b1SuXx+NKZnLw5Xi5XqcGVu/vRUeXa6evrc1NhE8XSxe1eyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDtqczNT46VSsUZhfug0JW12rY376sXPj7c8Sxy9SR2K2hPu7L4LxwSbSt08KIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcB/5NwAA//8o0yFu") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") open(0x0, 0x64842, 0x49) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m33.011719122s ago: executing program 0 (id=796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r3, 0x101, 0x1) getdents64(r3, 0xfffffffffffffffe, 0x29) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100f58965f1"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='-1\x00', 0x2) close(0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r5, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 1m32.699072845s ago: executing program 37 (id=796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r3, 0x101, 0x1) getdents64(r3, 0xfffffffffffffffe, 0x29) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100f58965f1"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='-1\x00', 0x2) close(0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r5, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 7.608707988s ago: executing program 4 (id=1523): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000007c0)) 7.396410287s ago: executing program 4 (id=1529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000b40)) 7.072745091s ago: executing program 4 (id=1532): syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902940003010000000904000000010100000a2401000000020102132406000006000000000000020000010200000924030000000000000924050000f8431cfd09240302000000040007240804000000090401000001020000090401010101020000090501092000ff000a0725018309080009040101"], 0x0) 4.642541027s ago: executing program 4 (id=1554): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff57}, 0x54) 3.88862591s ago: executing program 4 (id=1556): syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) 3.647644291s ago: executing program 9 (id=1561): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents(r2, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x6, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x60, 0x0, 0x1, 0x1}}) pread64(r0, &(0x7f00000014c0)=""/4104, 0x1008, 0x10000) 3.536555066s ago: executing program 9 (id=1563): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000e80)={[{@debug}, {@lazytime}, {@barrier}, {@delalloc}, {@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x1, 0x7b5, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000480)={0x47, 0xffffffffffffffff, 0x4, 0x9}) 3.412134781s ago: executing program 2 (id=1565): r0 = socket(0x1a, 0x3, 0x9) sendmsg$nl_route(r0, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f0000000100)=@sha1={0x1, "135e05ce8ce63c18f826a69c16e06c678ba7da37"}, 0x15, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x7}}, 0xe8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000080)=0x8) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000600)={r7, r7, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x0, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f00000000c0)={0xb, &(0x7f0000001dc0)}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000040), 0x1, 0x500, &(0x7f0000000500)="$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") 3.340511664s ago: executing program 9 (id=1566): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x1, 0x40}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90) fallocate(r0, 0x10, 0x7fffffffffffffff, 0x5) syz_io_uring_setup(0x497, &(0x7f0000000240)={0x0, 0x330b, 0x1000, 0x3, 0xae}, &(0x7f00000004c0), 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd, 0xb4a}}, 0x28) 2.554525208s ago: executing program 2 (id=1569): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd37, 0x25dfdc03, {0x2, 0x20, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DPORT={0x6, 0x1d, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x4040010) 2.453322003s ago: executing program 9 (id=1570): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2.372371226s ago: executing program 2 (id=1572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x18, 0x1, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 2.332741908s ago: executing program 9 (id=1573): syz_usb_disconnect(0xffffffffffffffff) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close(0x3) 2.319612319s ago: executing program 6 (id=1574): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) 2.216741263s ago: executing program 2 (id=1576): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3008014, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000040)='./bus\x00') 2.169812425s ago: executing program 6 (id=1577): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0xa000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) 2.06781719s ago: executing program 6 (id=1578): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.892539407s ago: executing program 3 (id=1579): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 1.855580399s ago: executing program 6 (id=1580): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x1, 0x40}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90) fallocate(r0, 0x10, 0x7fffffffffffffff, 0x5) syz_io_uring_setup(0x497, &(0x7f0000000240)={0x0, 0x330b, 0x1000, 0x3, 0xae}, &(0x7f00000004c0), 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd, 0xb4a}}, 0x28) 1.852448519s ago: executing program 2 (id=1581): syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000300)={[{@showassoc}]}, 0x1, 0x566, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0xb) getdents64(r0, &(0x7f0000000040)=""/225, 0xe1) 1.776676043s ago: executing program 3 (id=1582): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) 1.668133437s ago: executing program 3 (id=1583): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, r2, 0x16, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000005c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41000000000000000290000003e000000", 0x30) 1.489830285s ago: executing program 3 (id=1584): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x1062200) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xfcfe}, @HCI_OP_WRITE_AUTH_ENABLE={{0x5}, 0xe}}}, 0x7) 804.599085ms ago: executing program 9 (id=1585): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) 804.452305ms ago: executing program 4 (id=1586): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x50}, 0x4000004) sendmsg$inet6(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="b1", 0x1}], 0x1}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000140)=0x2, 0x4) 745.405127ms ago: executing program 6 (id=1587): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c800) openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00', 0x800, 0x0, 0xff, 0x1}, 0x20) socket$inet6(0xa, 0x3, 0xff) close_range(r1, 0xffffffffffffffff, 0x0) 721.814578ms ago: executing program 3 (id=1588): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000004200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x2, 0x0, 0x2, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x100, @void}}}}}}}, 0x0) 668.656491ms ago: executing program 2 (id=1589): syz_mount_image$erofs(&(0x7f0000000440), &(0x7f0000000180)='./file0\x00', 0x10410, &(0x7f0000000480)=ANY=[], 0x1, 0x1ed, &(0x7f0000000cc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 31.209578ms ago: executing program 6 (id=1590): iopl(0x3) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000300)=@base={0xf, 0x4, 0xfffffffe, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 0s ago: executing program 3 (id=1591): iopl(0x3) sync_file_range(0xffffffffffffffff, 0x1c6, 0x1, 0x6) kernel console output (not intermixed with test programs): : link becomes ready [ 144.129199][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.145942][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.154816][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.164339][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.189420][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.230302][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.260555][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.273236][ T5579] loop0: detected capacity change from 0 to 256 [ 144.311625][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.343979][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.371188][ T5579] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 144.389748][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.428212][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.458195][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.484510][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.527150][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.563806][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.586811][ T5315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.720729][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.774662][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.796684][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.843412][ T5315] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.867787][ T5315] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.900019][ T5315] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.929257][ T5315] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.126481][ T5607] loop3: detected capacity change from 0 to 256 [ 145.269261][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.285799][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.404781][ T5607] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 145.470418][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.317481][ T5626] loop0: detected capacity change from 0 to 256 [ 146.351283][ T5624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 146.408941][ T5626] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.718858][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.762117][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.870995][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.126638][ T5663] loop3: detected capacity change from 0 to 1024 [ 149.227112][ T5663] EXT4-fs (loop3): Ignoring removed orlov option [ 149.866486][ T5663] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 150.158941][ T5663] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.416: bg 0: block 66: padding at end of block bitmap is not set [ 150.234625][ T4300] device hsr_slave_0 left promiscuous mode [ 150.269509][ T4300] device hsr_slave_1 left promiscuous mode [ 150.374856][ T5694] loop6: detected capacity change from 0 to 1024 [ 150.395748][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.413502][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.556447][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.595855][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.672628][ T4300] device bridge_slave_1 left promiscuous mode [ 150.682752][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.701308][ T9] hfsplus: b-tree write err: -5, ino 4 [ 150.721796][ T9] hfsplus: b-tree write err: -5, ino 2 [ 150.793935][ T4300] device bridge_slave_0 left promiscuous mode [ 150.807645][ T5712] loop0: detected capacity change from 0 to 256 [ 150.822331][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.936363][ T5712] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 150.984838][ T4300] device veth1_macvtap left promiscuous mode [ 150.994978][ T4300] device veth0_macvtap left promiscuous mode [ 151.025295][ T4300] device veth1_vlan left promiscuous mode [ 151.044505][ T4300] device veth0_vlan left promiscuous mode [ 151.190024][ T5726] kvm: emulating exchange as write [ 151.413419][ T5731] loop4: detected capacity change from 0 to 512 [ 151.475124][ T5731] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.436: inode has both inline data and extents flags [ 151.518718][ T5731] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.436: couldn't read orphan inode 15 (err -117) [ 151.552398][ T5731] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.664764][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 151.664780][ T26] audit: type=1326 audit(1777914431.949:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.7.438" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd829327dd9 code=0x0 [ 151.837947][ T5741] loop0: detected capacity change from 0 to 2048 [ 151.852893][ T5745] loop7: detected capacity change from 0 to 16 [ 151.902210][ T5741] UDF-fs: iocharset maccenteur37ØŸ»)¬â~\ª¹éði®Ô}­”îvU§~ÝÑ#ê@IË«š9€Ìx‚ÅÔHÓ¦ŸI"¡“½Áæ3:Ö not found [ 151.916086][ T5745] erofs: (device loop7): mounted with root inode @ nid 36. [ 151.956570][ T5745] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 151.996966][ T5745] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 152.006797][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 152.052578][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 152.565648][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.910948][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.074344][ T4280] Bluetooth: hci5: Frame reassembly failed (-84) [ 153.216205][ T5763] loop7: detected capacity change from 0 to 512 [ 153.266982][ T4300] bond0 (unregistering): Released all slaves [ 153.312610][ T5763] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 153.327658][ T5763] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.358577][ T5706] netlink: 'syz.3.427': attribute type 3 has an invalid length. [ 153.375018][ T5706] netlink: 'syz.3.427': attribute type 3 has an invalid length. [ 153.645993][ T5770] loop6: detected capacity change from 0 to 2048 [ 153.729043][ T5770] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 153.764819][ T5770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.910835][ T5315] Quota error (device loop7): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 153.978429][ T5315] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 154.083459][ T5315] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz-executor: Failed to acquire dquot type 0 [ 154.171733][ T5785] loop3: detected capacity change from 0 to 764 [ 154.215245][ T5789] loop4: detected capacity change from 0 to 512 [ 154.255018][ T5785] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 154.305196][ T5785] Symlink component flag not implemented [ 154.386446][ T5785] Symlink component flag not implemented [ 154.422273][ T5785] Symlink component flag not implemented (128) [ 154.437185][ T5789] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.443876][ T5785] Symlink component flag not implemented (122) [ 154.524656][ T5789] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.732951][ T5804] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 154.812669][ T5804] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 22 with max blocks 266 with error 28 [ 154.839074][ T4234] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 154.887289][ T5804] EXT4-fs (loop4): This should not happen!! Data will be lost [ 154.887289][ T5804] [ 154.928889][ T5804] EXT4-fs (loop4): Total free blocks count 0 [ 154.951094][ T5804] EXT4-fs (loop4): Free/Dirty block details [ 154.957135][ T5804] EXT4-fs (loop4): free_blocks=65280 [ 154.988292][ T5804] EXT4-fs (loop4): dirty_blocks=511 [ 154.993689][ T5804] EXT4-fs (loop4): Block reservation details [ 155.022573][ T5804] EXT4-fs (loop4): i_reserved_data_blocks=592 [ 155.128360][ T4289] Bluetooth: hci5: command 0x1003 tx timeout [ 155.134576][ T146] Bluetooth: hci5: sending frame failed (-49) [ 155.198561][ T4234] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.247158][ T4234] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.276712][ T4256] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 21 with error 28 [ 155.310216][ T4234] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 155.348207][ T4256] EXT4-fs (loop4): This should not happen!! Data will be lost [ 155.348207][ T4256] [ 155.518427][ T4234] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.537951][ T4234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.582320][ T4234] usb 7-1: Product: syz [ 155.586547][ T4234] usb 7-1: Manufacturer: syz [ 155.615866][ T4234] usb 7-1: SerialNumber: syz [ 155.621937][ T26] audit: type=1326 audit(1777914435.909:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.4.463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7688dd9 code=0x7ffc0000 [ 155.808871][ T26] audit: type=1326 audit(1777914435.909:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5820 comm="syz.4.463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7688dd9 code=0x7ffc0000 [ 156.009164][ T4234] usb 7-1: 0:2 : does not exist [ 156.019336][ T4234] usb 7-1: unit 6 not found! [ 156.123400][ T4234] usb 7-1: USB disconnect, device number 2 [ 156.201711][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 156.442072][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.499540][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.553217][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.616464][ T5826] device bridge_slave_0 entered promiscuous mode [ 156.644371][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.685501][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.712783][ T5826] device bridge_slave_1 entered promiscuous mode [ 156.897452][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.177993][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.666881][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 157.676038][ T146] Bluetooth: hci5: sending frame failed (-49) [ 157.760873][ T26] audit: type=1326 audit(1777914438.049:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5871 comm="syz.3.474" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb47ef6add9 code=0x0 [ 157.841158][ T5826] team0: Port device team_slave_0 added [ 157.848944][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 157.880398][ T5826] team0: Port device team_slave_1 added [ 158.012895][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.079159][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.149479][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.202231][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.321233][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.356335][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.463509][ T5826] device hsr_slave_0 entered promiscuous mode [ 158.474778][ T5826] device hsr_slave_1 entered promiscuous mode [ 158.486666][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.512507][ T5826] Cannot create hsr debugfs directory [ 158.570052][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 158.838454][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 158.936681][ T5826] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 158.967179][ T5826] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 158.988486][ T23] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 159.005201][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.043814][ T23] usb 4-1: config 0 has no interface number 0 [ 159.050359][ T23] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 116, changing to 10 [ 159.073551][ T5909] loop4: detected capacity change from 0 to 2364 [ 159.105802][ T23] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24947, setting to 1024 [ 159.124890][ T23] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.141380][ T23] usb 4-1: config 0 interface 52 has no altsetting 0 [ 159.318269][ T5826] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 159.338790][ T5826] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 160.112146][ T4300] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.154726][ T4281] Bluetooth: hci5: command 0x1009 tx timeout [ 160.161263][ T23] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 160.172036][ T23] usb 4-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 160.180453][ T23] usb 4-1: Product: syz [ 160.184919][ T23] usb 4-1: SerialNumber: syz [ 160.191791][ T23] usb 4-1: config 0 descriptor?? [ 160.197173][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 160.294264][ T4300] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.362057][ T5928] loop4: detected capacity change from 0 to 1024 [ 160.400180][ T4300] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.442481][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.470168][ T4300] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.484713][ T5928] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 160.500525][ T23] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input6 [ 160.516324][ T5928] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 160.557092][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.565756][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.650437][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.734204][ T4229] usb 4-1: USB disconnect, device number 4 [ 160.748231][ C1] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 160.761987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.779039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.794024][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.801193][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.836871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.868089][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.878867][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.896272][ T5934] loop4: detected capacity change from 0 to 2048 [ 160.913967][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.921162][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.972352][ T5934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.991455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.009441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.062728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.095816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.117393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.127454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.198095][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.496'. [ 161.297514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.353590][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.379102][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.471943][ T5955] loop6: detected capacity change from 0 to 512 [ 161.714918][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.879044][ T5955] EXT4-fs (loop6): Ignoring removed bh option [ 161.989509][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.006762][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.020355][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.057207][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.133235][ T5955] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 162.147232][ T5955] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.249628][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 162.361398][ T5970] loop3: detected capacity change from 0 to 512 [ 162.426945][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.455523][ T5972] loop4: detected capacity change from 0 to 2048 [ 162.488816][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.512401][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.522738][ T4180] loop4: p2 < > p3 < p5 > p4 [ 162.527493][ T4180] loop4: partition table partially beyond EOD, truncated [ 162.554664][ T4180] loop4: p2 start 4278190080 is beyond EOD, truncated [ 162.554677][ T5970] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.601626][ T5970] ext4 filesystem being mounted at /98/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.606482][ T4180] loop4: p4 size 8192 extends beyond EOD, truncated [ 162.656390][ T4180] loop4: p5 size 8192 extends beyond EOD, truncated [ 162.677351][ T5972] loop4: p2 < > p3 < p5 > p4 [ 162.704641][ T5972] loop4: partition table partially beyond EOD, truncated [ 162.740206][ T5972] loop4: p2 start 4278190080 is beyond EOD, truncated [ 162.796526][ T5972] loop4: p4 size 8192 extends beyond EOD, truncated [ 162.820583][ T5972] loop4: p5 size 8192 extends beyond EOD, truncated [ 162.871594][ T5985] loop6: detected capacity change from 0 to 16 [ 163.018897][ T5985] erofs: (device loop6): mounted with root inode @ nid 36. [ 163.039960][ T4480] udevd[4480]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 163.065057][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 163.077249][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 163.151850][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 163.154525][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 163.225515][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 163.239236][ T6000] loop4: detected capacity change from 0 to 128 [ 163.288173][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.297282][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.404494][ C0] print_req_error: 50 callbacks suppressed [ 163.404513][ C0] blk_update_request: operation not supported error, dev loop4, sector 32 op 0x9:(WRITE_ZEROES) flags 0x800800 phys_seg 0 prio class 0 [ 163.439520][ T6007] netlink: 'syz.3.510': attribute type 1 has an invalid length. [ 163.470818][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.500623][ T6007] netlink: 'syz.3.510': attribute type 2 has an invalid length. [ 163.510664][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.609116][ T6007] netlink: 'syz.3.510': attribute type 1 has an invalid length. [ 164.326676][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.335092][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 164.366396][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.410182][ T5826] device veth0_vlan entered promiscuous mode [ 165.294629][ T5826] device veth1_vlan entered promiscuous mode [ 165.414422][ T4300] device hsr_slave_0 left promiscuous mode [ 165.518621][ T4300] device hsr_slave_1 left promiscuous mode [ 165.531143][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.553649][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.557572][ T6039] loop6: detected capacity change from 0 to 2048 [ 165.590426][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.597906][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.630003][ T6039] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 165.661466][ T4300] device bridge_slave_1 left promiscuous mode [ 165.667797][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.687644][ T6039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.699811][ T4300] device bridge_slave_0 left promiscuous mode [ 165.706201][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.737952][ T4300] device veth1_macvtap left promiscuous mode [ 165.761870][ T4300] device veth0_macvtap left promiscuous mode [ 165.775272][ T4300] device veth1_vlan left promiscuous mode [ 165.787711][ T4300] device veth0_vlan left promiscuous mode [ 166.266676][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 166.286088][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 166.309201][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.336287][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.348548][ T6059] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 166.454354][ T4300] bond0 (unregistering): Released all slaves [ 166.525531][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'. [ 166.544944][ T6044] netlink: 48 bytes leftover after parsing attributes in process `syz.4.520'. [ 166.565307][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 166.635916][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.666400][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.763276][ T5826] device veth0_macvtap entered promiscuous mode [ 166.813013][ T5826] device veth1_macvtap entered promiscuous mode [ 166.882264][ T6070] netlink: 182 bytes leftover after parsing attributes in process `syz.0.532'. [ 166.936349][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.966052][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.997683][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.033276][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.230022][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.242239][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.252527][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.268367][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.321971][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.439527][ T6088] loop4: detected capacity change from 0 to 1024 [ 167.556293][ T6088] hfsplus: found bad thread record in catalog [ 167.563342][ T6088] hfsplus: b-tree write err: -5, ino 19 [ 167.978319][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.052896][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.063173][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.074019][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.085765][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.098369][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.127253][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.140938][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.163939][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.180420][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.218855][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.242331][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.252417][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.264120][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.307310][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.308433][ T4229] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 168.437916][ T5826] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.638769][ T5826] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.648234][ T5826] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.658001][ T5826] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.088452][ T4229] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 169.103181][ T4229] usb 1-1: config 0 has no interface number 0 [ 169.134110][ T4229] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 169.175509][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.207846][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.216335][ T4229] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 169.241795][ T4229] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 169.265755][ T4229] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 169.317067][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.426327][ T4661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.451496][ T4661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.468523][ T4229] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 169.486172][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.494867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.543713][ T4229] usb 1-1: Product: syz [ 169.558080][ T4229] usb 1-1: Manufacturer: syz [ 169.573768][ T4229] usb 1-1: SerialNumber: syz [ 169.579129][ T6128] loop4: detected capacity change from 0 to 128 [ 169.602986][ T4229] usb 1-1: config 0 descriptor?? [ 169.684843][ T6128] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.698478][ T6128] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.712397][ T4229] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 169.726272][ T4229] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.237/input/input7 [ 169.734775][ T6131] netlink: 68 bytes leftover after parsing attributes in process `syz.6.551'. [ 169.854259][ T6135] loop8: detected capacity change from 0 to 512 [ 169.961654][ T4229] usb 1-1: USB disconnect, device number 2 [ 169.994586][ T4229] xpad 1-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 170.265043][ T6135] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 170.338542][ T6135] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.074272][ T5826] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 172.253688][ T5826] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 176.662619][ T6253] loop4: detected capacity change from 0 to 1024 [ 176.947787][ T6253] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 177.255452][ T6253] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,abort,discard,max_batch_time=0x0000000000000ac9,data=ordered,mblk_io_submit,usrquota,init_itable,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback. [ 177.287365][ T6253] EXT4-fs error (device loop4): __ext4_iget:4919: inode #12: block 13: comm syz.4.588: invalid block [ 177.300179][ T6253] EXT4-fs (loop4): Remounting filesystem read-only [ 177.645187][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 177.674697][ T6236] chnl_net:caif_netlink_parms(): no params data found [ 179.231546][ T4233] Bluetooth: hci1: command 0x0409 tx timeout [ 179.443617][ T6236] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.485769][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.531732][ T6297] loop0: detected capacity change from 0 to 1024 [ 179.568472][ T6236] device bridge_slave_0 entered promiscuous mode [ 179.623681][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.637733][ T6297] EXT4-fs (loop0): Ignoring removed orlov option [ 179.668845][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.680039][ T6236] device bridge_slave_1 entered promiscuous mode [ 179.732874][ T6297] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 181.334232][ T4229] Bluetooth: hci1: command 0x041b tx timeout [ 181.356410][ T6236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.420771][ T6236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.547747][ T6236] team0: Port device team_slave_0 added [ 181.609394][ T6236] team0: Port device team_slave_1 added [ 181.685529][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.738342][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.858193][ T6236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.899676][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.906778][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.018666][ T6236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.192785][ T6236] device hsr_slave_0 entered promiscuous mode [ 182.233050][ T6236] device hsr_slave_1 entered promiscuous mode [ 182.266178][ T6236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.278188][ T6236] Cannot create hsr debugfs directory [ 183.456834][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 183.647888][ T6353] syz.6.612 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 183.676518][ T6355] loop4: detected capacity change from 0 to 512 [ 183.710013][ T6236] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 183.766339][ T6236] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 183.800072][ T6355] EXT4-fs (loop4): Ignoring removed oldalloc option [ 183.828611][ T6355] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 183.851135][ T6236] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 183.924763][ T6236] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 183.937434][ T6355] EXT4-fs (loop4): 1 truncate cleaned up [ 183.962601][ T6355] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,data=journal,noload,oldalloc,,errors=continue. Quota mode: none. [ 184.029106][ T6363] netlink: 'syz.3.614': attribute type 12 has an invalid length. [ 184.036909][ T6363] netlink: 'syz.3.614': attribute type 29 has an invalid length. [ 184.061630][ T6355] syz.4.613 (pid 6355) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 184.092854][ T6363] netlink: 148 bytes leftover after parsing attributes in process `syz.3.614'. [ 184.162960][ T6363] netlink: 'syz.3.614': attribute type 1 has an invalid length. [ 184.248407][ T6363] netlink: 'syz.3.614': attribute type 2 has an invalid length. [ 184.265704][ T6363] netlink: 11 bytes leftover after parsing attributes in process `syz.3.614'. [ 184.364220][ T4300] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.496603][ T4300] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.964734][ T4300] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.542834][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 185.557440][ T6392] loop4: detected capacity change from 0 to 128 [ 185.604951][ T4300] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.639608][ T6392] EXT4-fs (loop4): Test dummy encryption mode enabled [ 185.660800][ T6236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.730459][ T6392] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 185.817750][ T6392] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.854812][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.883901][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.926025][ T6236] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.018247][ T4231] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 186.026854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.045708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.065028][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.072303][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.087144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.096258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.145448][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.145495][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.164384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.165310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.166315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.191447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.209521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.210346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.211147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.212925][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.220831][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.221441][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.244590][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.245347][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.253754][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.268437][ T4231] usb 4-1: Using ep0 maxpacket: 8 [ 186.488736][ T4231] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.528565][ T4231] usb 4-1: string descriptor 0 read error: -22 [ 186.528793][ T4231] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.636985][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.738105][ T4231] usb 4-1: bad CDC descriptors [ 187.032139][ T6432] 9pnet: Insufficient options for proto=fd [ 187.331224][ T4233] usb 4-1: USB disconnect, device number 5 [ 187.427412][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.448570][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.475265][ T6236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.476342][ T6451] loop4: detected capacity change from 0 to 512 [ 188.610600][ T6451] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.638: inode #1: comm syz.4.638: iget: illegal inode # [ 188.748232][ T6451] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.638: error while reading EA inode 1 err=-117 [ 188.782208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.791128][ T6451] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.638: inode #1: comm syz.4.638: iget: illegal inode # [ 188.830236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.864811][ T6451] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.638: error while reading EA inode 1 err=-117 [ 188.892810][ T6474] loop0: detected capacity change from 0 to 512 [ 188.900817][ T6451] EXT4-fs (loop4): 1 orphan inode deleted [ 188.936946][ T6451] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000003,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 189.003509][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.022488][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.046363][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.066943][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.116647][ T6236] device veth0_vlan entered promiscuous mode [ 189.155801][ T6474] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.646: invalid indirect mapped block 28777 (level 2) [ 189.278563][ T6474] EXT4-fs (loop0): 1 truncate cleaned up [ 189.288981][ T6474] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 189.319888][ T4300] device hsr_slave_0 left promiscuous mode [ 189.368466][ T4231] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 189.377317][ T4300] device hsr_slave_1 left promiscuous mode [ 189.388867][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.408082][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.435617][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.480711][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.552077][ T6474] EXT4-fs (loop0): Ignoring removed bh option [ 189.560772][ T4300] device bridge_slave_1 left promiscuous mode [ 189.567056][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.574727][ T6474] System zones: 1-12 [ 189.585483][ T6474] EXT4-fs (loop0): re-mounted. Opts: usrjquota=,noquota,debug,bh,block_validity,quota,. Quota mode: writeback. [ 189.609985][ T4300] device bridge_slave_0 left promiscuous mode [ 189.618566][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.649381][ T4300] device veth1_macvtap left promiscuous mode [ 189.655473][ T4300] device veth0_macvtap left promiscuous mode [ 189.678399][ T4300] device veth1_vlan left promiscuous mode [ 189.684254][ T4300] device veth0_vlan left promiscuous mode [ 189.734195][ T4231] usb 4-1: config 0 has an invalid interface number: 182 but max is 1 [ 189.750668][ T4231] usb 4-1: config 0 has no interface number 1 [ 189.777573][ T4231] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 189.817776][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.847875][ T4231] usb 4-1: config 0 descriptor?? [ 189.946699][ T6503] loop5: detected capacity change from 0 to 7 [ 189.973785][ T6503] Dev loop5: unable to read RDB block 7 [ 189.981052][ T6503] loop5: AHDI p1 p2 p3 [ 189.985389][ T6503] loop5: partition table partially beyond EOD, truncated [ 190.028644][ T6503] loop5: p1 start 1601398130 is beyond EOD, truncated [ 190.035483][ T6503] loop5: p2 start 1702059890 is beyond EOD, truncated [ 190.152703][ T4231] usb 4-1: USB disconnect, device number 6 [ 190.198513][ T6507] loop0: detected capacity change from 0 to 256 [ 190.390340][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 190.437902][ T6511] loop0: detected capacity change from 0 to 512 [ 190.460917][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 190.482224][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.518742][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.718664][ T4300] bond0 (unregistering): Released all slaves [ 190.803588][ T6519] loop4: detected capacity change from 0 to 512 [ 190.848471][ T6236] device veth1_vlan entered promiscuous mode [ 190.869864][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 190.877833][ T6519] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.917837][ T6521] loop3: detected capacity change from 0 to 512 [ 191.014619][ T6523] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 191.049790][ T6521] EXT4-fs (loop3): Ignoring removed bh option [ 191.061358][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.094401][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.146789][ T6236] device veth0_macvtap entered promiscuous mode [ 191.156287][ T6521] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 191.200905][ T6521] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.216027][ T6236] device veth1_macvtap entered promiscuous mode [ 191.281616][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.298266][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 191.299140][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 191.350799][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.401369][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.468298][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.500248][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.548181][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.571202][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.594767][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.596840][ T6551] fuse: Bad value for 'fd' [ 191.630582][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.722128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.741055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.773037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.804586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.822253][ T6559] tmpfs: Bad value for 'uid' [ 191.835984][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.865882][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.885078][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.907095][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.930338][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.960942][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.988339][ T4268] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 191.998921][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.024544][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.058470][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.085007][ T6236] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.093899][ T6236] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.103064][ T6236] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.111996][ T6236] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.122690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.132128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.258306][ T4268] usb 5-1: Using ep0 maxpacket: 16 [ 192.414433][ T6573] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 192.421966][ T4268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.448686][ T4268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.478201][ T4268] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 192.482926][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.517614][ T4268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.539856][ T4228] Bluetooth: hci2: command 0x0406 tx timeout [ 192.549566][ T4268] usb 5-1: config 0 descriptor?? [ 192.556840][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.572799][ T6575] loop0: detected capacity change from 0 to 256 [ 192.593798][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.625347][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.643983][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.672118][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.680521][ T6575] exfat: Deprecated parameter 'utf8' [ 192.685930][ T6575] exfat: Deprecated parameter 'utf8' [ 192.765090][ T6575] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 192.893473][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 193.068745][ T4268] wacom 0003:056A:0084.0002: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.4-1/input0 [ 193.096129][ T6589] loop9: detected capacity change from 0 to 256 [ 193.204035][ T6589] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 193.252533][ T4231] usb 5-1: USB disconnect, device number 4 [ 193.309848][ T6589] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 193.328431][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 193.339054][ T6595] loop0: detected capacity change from 0 to 128 [ 193.372904][ T6589] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 193.401540][ T23] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 193.418617][ T6595] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.432535][ T23] usb 4-1: can't read configurations, error -71 [ 193.439660][ T6589] UDF-fs: Scanning with blocksize 512 failed [ 193.473402][ T6589] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 193.492520][ T6595] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.545910][ T6589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.583355][ T6594] fido_id[6594]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 194.017433][ T26] audit: type=1326 audit(1777914474.299:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.9.691" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc84518dd9 code=0x7ffc0000 [ 194.139791][ T26] audit: type=1326 audit(1777914474.339:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.9.691" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc84518dd9 code=0x7ffc0000 [ 194.253814][ T6618] loop0: detected capacity change from 0 to 512 [ 194.276678][ T26] audit: type=1326 audit(1777914474.339:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.9.691" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc84518dd9 code=0x7ffc0000 [ 194.316740][ T6621] loop3: detected capacity change from 0 to 256 [ 194.333088][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.343269][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.400676][ T6618] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 194.452487][ T26] audit: type=1326 audit(1777914474.339:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.9.691" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7efc84518dd9 code=0x7ffc0000 [ 194.493239][ T26] audit: type=1326 audit(1777914474.339:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.9.691" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc84518dd9 code=0x7ffc0000 [ 194.540472][ T6618] EXT4-fs (loop0): 1 truncate cleaned up [ 194.546187][ T6618] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.566229][ T6621] loop3: detected capacity change from 0 to 8 [ 194.627412][ T26] audit: type=1326 audit(1777914474.339:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.9.691" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc84518dd9 code=0x7ffc0000 [ 194.811058][ T26] audit: type=1326 audit(1777914474.339:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.9.691" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efc84518dd9 code=0x7ffc0000 [ 195.019173][ T6635] fuse: Bad value for 'fd' [ 195.026943][ T26] audit: type=1326 audit(1777914474.339:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.9.691" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efc84518dd9 code=0x7ffc0000 [ 195.054415][ T6637] loop9: detected capacity change from 0 to 512 [ 195.144795][ T6637] EXT4-fs (loop9): Ignoring removed oldalloc option [ 195.219605][ T26] audit: type=1800 audit(1777914474.859:43): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.696" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 195.229286][ T6637] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 195.391020][ T6637] EXT4-fs (loop9): 1 truncate cleaned up [ 195.396734][ T6637] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,data=journal,noload,oldalloc,,errors=continue. Quota mode: none. [ 195.505435][ T26] audit: type=1800 audit(1777914474.859:44): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.696" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 196.700896][ T4228] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 196.977270][ T4228] usb 10-1: Using ep0 maxpacket: 32 [ 197.108701][ T4228] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.137858][ T4228] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.158392][ T4228] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 197.167819][ T4228] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.229934][ T4228] usb 10-1: config 0 descriptor?? [ 197.268531][ T4231] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 197.289920][ T4228] hub 10-1:0.0: USB hub found [ 197.508377][ T4228] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 197.530028][ T4231] usb 1-1: Using ep0 maxpacket: 16 [ 197.606147][ T6717] loop4: detected capacity change from 0 to 128 [ 197.648547][ T4231] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.670104][ T4231] usb 1-1: config 0 interface 0 has no altsetting 0 [ 197.676888][ T4231] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 197.691712][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.715343][ T4231] usb 1-1: config 0 descriptor?? [ 197.730002][ T6717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 198.635168][ T6717] System zones: 1-3, 19-19, 35-36 [ 198.645006][ T4228] hid-generic 0003:046D:C31C.0003: item fetching failed at offset 0/1 [ 198.684236][ T4228] hid-generic: probe of 0003:046D:C31C.0003 failed with error -22 [ 198.694019][ T6717] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 198.736691][ T6717] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.794272][ T6717] EXT4-fs warning (device loop4): ext4_group_extend:1823: can't shrink FS - resize aborted [ 198.958644][ T4176] usb 10-1: USB disconnect, device number 2 [ 199.095384][ T4231] hid-generic 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 199.570571][ T4228] usb 1-1: USB disconnect, device number 3 [ 199.603716][ T6756] loop9: detected capacity change from 0 to 512 [ 199.713307][ T6756] EXT4-fs (loop9): inodes count not valid: 32 vs 704 [ 199.837475][ T6767] netlink: 24 bytes leftover after parsing attributes in process `syz.9.740'. [ 202.662216][ T6846] netlink: 'syz.9.768': attribute type 12 has an invalid length. [ 202.714213][ T6846] netlink: 'syz.9.768': attribute type 29 has an invalid length. [ 202.747038][ T6846] netlink: 148 bytes leftover after parsing attributes in process `syz.9.768'. [ 202.783571][ T6853] loop0: detected capacity change from 0 to 8 [ 202.806014][ T6846] netlink: 'syz.9.768': attribute type 1 has an invalid length. [ 202.854469][ T6846] netlink: 'syz.9.768': attribute type 3 has an invalid length. [ 202.899457][ T6859] loop3: detected capacity change from 0 to 512 [ 203.027063][ T6853] SQUASHFS error: zlib decompression failed, data probably corrupt [ 203.351397][ T6853] SQUASHFS error: Failed to read block 0x9b: -5 [ 203.379888][ T6859] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #15: comm syz.3.775: inline data xattr refers to an external xattr inode [ 203.557494][ T6853] SQUASHFS error: Unable to read metadata cache entry [99] [ 203.740595][ T6853] SQUASHFS error: Unable to read inode 0x127 [ 203.747478][ T6859] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.775: couldn't read orphan inode 15 (err -117) [ 203.792216][ T6859] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,lazytime,norecovery,,errors=continue. Quota mode: none. [ 203.810289][ T6867] loop9: detected capacity change from 0 to 512 [ 203.923082][ T6867] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 203.948569][ T6867] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.001453][ T6879] netlink: 36 bytes leftover after parsing attributes in process `syz.4.778'. [ 204.146714][ T6867] EXT4-fs error (device loop9): __ext4_get_inode_loc:4334: comm syz.9.776: Invalid inode table block 1991734912 in block_group 0 [ 204.240706][ T6867] EXT4-fs (loop9): Remounting filesystem read-only [ 204.258846][ T6867] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 204.386614][ T6867] EXT4-fs (loop9): Remounting filesystem read-only [ 204.566147][ T6867] EXT4-fs error (device loop9): ext4_ext_truncate:4472: inode #15: comm syz.9.776: mark_inode_dirty error [ 205.097269][ T6867] EXT4-fs (loop9): Remounting filesystem read-only [ 205.103954][ T6867] EXT4-fs error (device loop9): __ext4_get_inode_loc:4334: comm syz.9.776: Invalid inode table block 1991734912 in block_group 0 [ 205.186799][ T6867] EXT4-fs (loop9): Remounting filesystem read-only [ 206.180451][ T6867] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 207.040605][ T6867] EXT4-fs (loop9): Remounting filesystem read-only [ 207.068281][ T6867] EXT4-fs error (device loop9): ext4_truncate:4286: inode #15: comm syz.9.776: mark_inode_dirty error [ 207.089756][ T6867] EXT4-fs (loop9): Remounting filesystem read-only [ 207.096326][ T6867] EXT4-fs error (device loop9) in ext4_setattr:5645: Corrupt filesystem [ 207.205109][ T26] audit: type=1326 audit(1777914743.489:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.790" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7688dd9 code=0x7ffc0000 [ 207.278430][ T6867] EXT4-fs (loop9): Remounting filesystem read-only [ 207.358458][ T26] audit: type=1326 audit(1777914743.529:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.790" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f0de7688dd9 code=0x7ffc0000 [ 207.464730][ T26] audit: type=1326 audit(1777914743.529:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.4.790" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7688dd9 code=0x7ffc0000 [ 207.523889][ T4300] EXT4-fs error (device loop9): __ext4_get_inode_loc:4334: comm kworker/u4:9: Invalid inode table block 1991734912 in block_group 0 [ 207.578307][ T4300] EXT4-fs (loop9): Remounting filesystem read-only [ 208.951288][ T6953] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 209.560377][ T6982] fuse: Bad value for 'fd' [ 209.566550][ T6983] loop3: detected capacity change from 0 to 512 [ 209.697769][ T6983] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.722911][ T6983] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.865028][ T6967] chnl_net:caif_netlink_parms(): no params data found [ 209.989531][ T6996] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 210.119182][ T6996] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 22 with max blocks 138 with error 28 [ 210.218292][ T6996] EXT4-fs (loop3): This should not happen!! Data will be lost [ 210.218292][ T6996] [ 210.309299][ T6996] EXT4-fs (loop3): Total free blocks count 0 [ 210.315358][ T6996] EXT4-fs (loop3): Free/Dirty block details [ 210.401484][ T6967] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.414412][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.438225][ T6996] EXT4-fs (loop3): free_blocks=65280 [ 210.455363][ T6967] device bridge_slave_0 entered promiscuous mode [ 210.516858][ T6996] EXT4-fs (loop3): dirty_blocks=713 [ 210.525101][ T6967] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.555274][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.575128][ T7010] loop9: detected capacity change from 0 to 764 [ 210.588276][ T6996] EXT4-fs (loop3): Block reservation details [ 210.599022][ T6967] device bridge_slave_1 entered promiscuous mode [ 210.663887][ T7010] Symlink component flag not implemented [ 210.678280][ T6996] EXT4-fs (loop3): i_reserved_data_blocks=831 [ 210.718318][ T7010] Symlink component flag not implemented [ 210.763895][ T7010] Symlink component flag not implemented (128) [ 210.790641][ T6967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.808427][ T7010] Symlink component flag not implemented (122) [ 210.824694][ T6967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.944899][ T6967] team0: Port device team_slave_0 added [ 210.975555][ T6967] team0: Port device team_slave_1 added [ 211.022998][ T1168] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 21 with error 28 [ 211.128215][ T1168] EXT4-fs (loop3): This should not happen!! Data will be lost [ 211.128215][ T1168] [ 211.796230][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.852291][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 211.899315][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.031520][ T6967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.115349][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.151167][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.546863][ T6967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.996690][ T6967] device hsr_slave_0 entered promiscuous mode [ 213.024694][ T6967] device hsr_slave_1 entered promiscuous mode [ 213.039730][ T6967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.062455][ T6967] Cannot create hsr debugfs directory [ 213.150840][ T7051] loop3: detected capacity change from 0 to 512 [ 213.260930][ T7051] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 213.363390][ T7051] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.394961][ T7051] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 213.418829][ T7051] EXT4-fs (loop3): Remounting filesystem read-only [ 213.718208][ T4231] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 213.928397][ T4176] Bluetooth: hci0: command 0x041b tx timeout [ 213.970563][ T4231] usb 5-1: Using ep0 maxpacket: 16 [ 214.128500][ T4231] usb 5-1: unable to get BOS descriptor or descriptor too short [ 214.229433][ T4231] usb 5-1: config 7 has an invalid interface number: 165 but max is 0 [ 214.242486][ T4231] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 214.254758][ T7093] loop3: detected capacity change from 0 to 16 [ 214.268214][ T4231] usb 5-1: config 7 has no interface number 0 [ 214.278568][ T4231] usb 5-1: config 7 interface 165 altsetting 16 bulk endpoint 0xD has invalid maxpacket 265 [ 214.298296][ T4231] usb 5-1: config 7 interface 165 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.334541][ T7093] erofs: (device loop3): mounted with root inode @ nid 36. [ 214.368797][ T4231] usb 5-1: config 7 interface 165 has no altsetting 0 [ 214.548480][ T4231] usb 5-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=1f.39 [ 214.565509][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.594027][ T4231] usb 5-1: Product: syz [ 214.602913][ T4231] usb 5-1: Manufacturer: syz [ 214.622753][ T4231] usb 5-1: SerialNumber: syz [ 214.668612][ T7060] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 214.698860][ T6967] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.714668][ T6967] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.772434][ T6967] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.791089][ T7105] loop9: detected capacity change from 0 to 512 [ 214.796226][ T6967] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.810599][ T4281] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 214.953718][ T7115] fuse: Bad value for 'fd' [ 214.967344][ T7105] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 214.985585][ T4231] rtl8150 5-1:7.165: couldn't find required endpoints [ 215.001916][ T4231] rtl8150: probe of 5-1:7.165 failed with error -5 [ 215.013098][ T6967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.034946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.050888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.079837][ T4231] usb 5-1: USB disconnect, device number 5 [ 215.085999][ T7105] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.105814][ T6967] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.123497][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.153051][ T7105] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 215.185553][ T7105] EXT4-fs (loop9): Remounting filesystem read-only [ 215.189673][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.219407][ T4281] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 215.238855][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.246021][ T4256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.253594][ T4281] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 215.272568][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.279414][ T4281] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 215.298743][ T4281] usb 4-1: config 0 has no interface number 0 [ 215.305499][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.309239][ T4281] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 215.334807][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.342006][ T4256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.347037][ T4281] usb 4-1: config 0 interface 104 has no altsetting 1 [ 215.391876][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.412578][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.465263][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.507245][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.536310][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.546067][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.553645][ T4281] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 215.578742][ T4281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.597204][ T4281] usb 4-1: Product: syz [ 215.607391][ T4281] usb 4-1: Manufacturer: syz [ 215.617559][ T4281] usb 4-1: SerialNumber: syz [ 215.626346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.647992][ T4281] usb 4-1: config 0 descriptor?? [ 215.654141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.697552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.721239][ T4281] asix: probe of 4-1:0.104 failed with error -22 [ 215.815479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.929324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.010929][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 216.058327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.266364][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.581446][ T4281] usb 4-1: USB disconnect, device number 9 [ 216.792895][ T7144] loop4: detected capacity change from 0 to 4096 [ 216.879767][ T7144] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 217.089702][ T7144] fs-verity: sha512 using implementation "sha512-avx2" [ 217.175563][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.212122][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.451541][ T6967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.013195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.057235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.098293][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 218.142681][ T6967] device veth0_vlan entered promiscuous mode [ 218.178018][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.199325][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.214333][ T7182] loop4: detected capacity change from 0 to 1024 [ 218.239005][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.255197][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.265909][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 218.275964][ T7185] netlink: 48 bytes leftover after parsing attributes in process `syz.3.866'. [ 218.292722][ T7182] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 218.310114][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.866'. [ 218.354302][ T6967] device veth1_vlan entered promiscuous mode [ 218.469652][ T6967] device veth0_macvtap entered promiscuous mode [ 218.489325][ T7182] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 218.545018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.591401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.643335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.689658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.726255][ T6967] device veth1_macvtap entered promiscuous mode [ 218.754574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.770946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.794507][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.810930][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.823302][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.834528][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.864240][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.885913][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.906956][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.907870][ T7207] loop9: detected capacity change from 0 to 2048 [ 218.933792][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.963368][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.977934][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.006825][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.043994][ T7207] loop9: p2 < > p3 < p5 > p4 [ 219.071501][ T7207] loop9: partition table partially beyond EOD, truncated [ 219.082331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.090861][ T7207] loop9: p2 start 4278190080 is beyond EOD, truncated [ 219.097412][ T7207] loop9: p4 size 8192 extends beyond EOD, truncated [ 219.106114][ T7207] loop9: p5 size 8192 extends beyond EOD, truncated [ 219.208408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.235872][ T7214] loop3: detected capacity change from 0 to 256 [ 219.246302][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.272761][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.285259][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.325990][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.342863][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.353604][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.363802][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.374585][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.384786][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.396997][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.412089][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.422752][ T7219] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.880'. [ 219.440221][ T7214] exfat: Deprecated parameter 'namecase' [ 219.507423][ T7214] exfat: Unknown parameter 'keep_last_dots' [ 219.513736][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.536148][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.600917][ T6967] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.640410][ T6967] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.670093][ T6967] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.687346][ T7228] loop9: detected capacity change from 0 to 2048 [ 219.695603][ T6967] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.783521][ T7228] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 219.827409][ T7228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.861200][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 219.882665][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 219.903107][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 220.081067][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.105916][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.161821][ T26] audit: type=1326 audit(1777914756.419:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.6.888" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c965ddd9 code=0x7ffc0000 [ 220.317466][ T26] audit: type=1326 audit(1777914756.419:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.6.888" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f89c965ddd9 code=0x7ffc0000 [ 220.358202][ T26] audit: type=1326 audit(1777914756.419:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.6.888" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c965ddd9 code=0x7ffc0000 [ 220.424462][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.426117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.444780][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.462066][ T7249] loop4: detected capacity change from 0 to 1024 [ 221.075193][ T26] audit: type=1326 audit(1777914756.419:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.6.888" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c965ddd9 code=0x7ffc0000 [ 221.176004][ T7249] EXT4-fs (loop4): Test dummy encryption mode enabled [ 221.208646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.244783][ T7249] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 221.612103][ T7249] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 221.738723][ T7296] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 222.202263][ T26] audit: type=1326 audit(1777914758.489:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.9.911" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc84518dd9 code=0x7ffc0000 [ 222.255324][ T7322] loop2: detected capacity change from 0 to 128 [ 222.275420][ T7320] loop4: detected capacity change from 0 to 512 [ 222.292566][ T7326] loop3: detected capacity change from 0 to 164 [ 222.318195][ T26] audit: type=1326 audit(1777914758.539:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.9.911" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7efc84518dd9 code=0x7ffc0000 [ 222.419014][ T7320] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 222.432751][ T26] audit: type=1326 audit(1777914758.539:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.9.911" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc84518dd9 code=0x7ffc0000 [ 222.441118][ T7326] Symlink component flag not implemented [ 222.481023][ T7322] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.521830][ T7320] EXT4-fs (loop4): 1 truncate cleaned up [ 222.527851][ T7320] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 222.554530][ T7322] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 222.599008][ T7326] Symlink component flag not implemented (7) [ 222.624128][ T26] audit: type=1326 audit(1777914758.539:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.9.911" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc84518dd9 code=0x7ffc0000 [ 222.649285][ T13] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 222.660484][ T13] Bluetooth: hci2: Injecting HCI hardware error event [ 222.674456][ T26] audit: type=1326 audit(1777914758.589:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.6.913" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89c965ddd9 code=0x7ffc0000 [ 222.720996][ T7320] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.914: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 222.748823][ T7320] EXT4-fs (loop4): Remounting filesystem read-only [ 222.766181][ T4196] Bluetooth: hci2: hardware error 0x00 [ 222.770371][ T26] audit: type=1326 audit(1777914758.599:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7323 comm="syz.6.913" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f89c965ddd9 code=0x7ffc0000 [ 222.829932][ T7320] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 222.963366][ T7320] EXT4-fs (loop4): Remounting filesystem read-only [ 222.983635][ T7320] EXT4-fs warning (device loop4): ext4_rename_delete:3792: inode #2: comm syz.4.914: Deleting old file: nlink 5, error=-117 [ 223.762724][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.923'. [ 223.788917][ T7357] loop4: detected capacity change from 0 to 128 [ 224.043361][ T7357] FAT-fs (loop4): invalid media value (0x00) [ 224.262395][ T7357] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 224.528224][ T7357] FAT-fs (loop4): Can't find a valid FAT filesystem [ 224.762000][ T7357] loop4: detected capacity change from 0 to 512 [ 225.031476][ T7357] EXT4-fs (loop4): 1 truncate cleaned up [ 225.074422][ T7357] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 226.135534][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 226.135550][ T26] audit: type=1800 audit(1777914762.419:60): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.921" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 226.474892][ T7388] loop2: detected capacity change from 0 to 1024 [ 226.576413][ T7388] hfsplus: found bad thread record in catalog [ 226.583093][ T7388] hfsplus: b-tree write err: -5, ino 19 [ 227.340354][ T7395] loop4: detected capacity change from 0 to 2048 [ 227.391701][ T7403] netlink: 16 bytes leftover after parsing attributes in process `syz.6.936'. [ 227.410674][ T7395] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 227.433976][ T7395] UDF-fs: Scanning with blocksize 512 failed [ 227.495778][ T7395] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 227.550930][ T7395] UDF-fs: Scanning with blocksize 1024 failed [ 227.585015][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'. [ 227.598906][ T7395] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 227.629111][ T7395] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 227.636912][ T7395] UDF-fs: Scanning with blocksize 2048 failed [ 227.648343][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 227.660290][ T7409] loop2: detected capacity change from 0 to 1024 [ 227.668794][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 227.680241][ T7395] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 227.714151][ T7409] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 227.743272][ T7395] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 227.758308][ T7409] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 227.768090][ T7409] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 227.805245][ T7395] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 227.861933][ T7395] UDF-fs: Scanning with blocksize 4096 failed [ 227.884841][ T7395] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 227.967285][ T7423] loop3: detected capacity change from 0 to 128 [ 228.037797][ T7423] FAT-fs (loop3): invalid media value (0x00) [ 228.062826][ T7423] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 228.128380][ T7423] FAT-fs (loop3): Can't find a valid FAT filesystem [ 228.218903][ T146] Bluetooth: hci4: hardware error 0x0c [ 228.314908][ T7423] loop3: detected capacity change from 0 to 512 [ 228.331192][ T7434] loop2: detected capacity change from 0 to 764 [ 228.469459][ T7423] EXT4-fs (loop3): 1 truncate cleaned up [ 228.475254][ T7423] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 228.623417][ T26] audit: type=1800 audit(1777914764.909:61): pid=7423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.943" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 228.696194][ T7434] Symlink component flag not implemented [ 228.702697][ T7434] Symlink component flag not implemented (15) [ 232.779194][ T7512] netlink: 156 bytes leftover after parsing attributes in process `syz.4.966'. [ 233.581471][ T7529] loop4: detected capacity change from 0 to 128 [ 233.749271][ T7529] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.768349][ T7529] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 234.026302][ T7529] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 234.184738][ T7542] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 235.032479][ T7576] loop2: detected capacity change from 0 to 2048 [ 235.088133][ C0] sched: RT throttling activated [ 235.309410][ T7576] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 235.414355][ T7576] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 235.616040][ T7603] loop4: detected capacity change from 0 to 1024 [ 235.623533][ T7576] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 235.688214][ T7576] EXT4-fs (loop2): This should not happen!! Data will be lost [ 235.688214][ T7576] [ 235.732886][ T7576] EXT4-fs (loop2): Total free blocks count 0 [ 235.841660][ T7576] EXT4-fs (loop2): Free/Dirty block details [ 235.847718][ T7576] EXT4-fs (loop2): free_blocks=2415919504 [ 235.854589][ T7615] syz.3.988 sent an empty control message without MSG_MORE. [ 235.879084][ T7603] hfsplus: unable to parse mount options [ 235.941682][ T7576] EXT4-fs (loop2): dirty_blocks=48 [ 235.958569][ T7576] EXT4-fs (loop2): Block reservation details [ 235.996469][ T7576] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 236.109740][ T1168] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 236.148921][ T1168] EXT4-fs (loop2): This should not happen!! Data will be lost [ 236.148921][ T1168] [ 236.775737][ T7632] loop3: detected capacity change from 0 to 16 [ 236.824357][ T7632] erofs: (device loop3): mounted with root inode @ nid 36. [ 237.162294][ T7645] loop2: detected capacity change from 0 to 512 [ 237.287026][ T7645] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 237.319612][ T7645] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.659728][ T26] audit: type=1326 audit(1777914773.949:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.2.1003" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd1063dd9 code=0x7ffc0000 [ 237.770862][ T26] audit: type=1326 audit(1777914773.949:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.2.1003" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd1063dd9 code=0x7ffc0000 [ 237.900838][ T26] audit: type=1326 audit(1777914773.949:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.2.1003" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd1063dd9 code=0x7ffc0000 [ 238.044637][ T26] audit: type=1326 audit(1777914773.999:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.2.1003" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7febd1063dd9 code=0x7ffc0000 [ 238.144589][ T7685] loop2: detected capacity change from 0 to 1024 [ 238.207128][ T7685] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 238.220776][ T26] audit: type=1326 audit(1777914773.999:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.2.1003" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd1063dd9 code=0x7ffc0000 [ 238.365506][ T26] audit: type=1326 audit(1777914773.999:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.2.1003" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd1063dd9 code=0x7ffc0000 [ 238.650540][ T26] audit: type=1326 audit(1777914773.999:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.2.1003" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd1063dd9 code=0x7ffc0000 [ 238.678302][ T4268] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 238.780357][ T26] audit: type=1326 audit(1777914773.999:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.2.1003" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7febd1063dd9 code=0x7ffc0000 [ 238.868331][ T26] audit: type=1326 audit(1777914773.999:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.2.1003" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd1063dd9 code=0x7ffc0000 [ 239.874787][ T26] audit: type=1326 audit(1777914773.999:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.2.1003" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd1063dd9 code=0x7ffc0000 [ 239.943368][ T7716] loop2: detected capacity change from 0 to 512 [ 239.951119][ T4268] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 239.971227][ T4268] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 240.002639][ T4268] usb 4-1: config 220 has no interface number 2 [ 240.038008][ T4268] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 240.072004][ T4268] usb 4-1: config 220 interface 0 has no altsetting 0 [ 240.123925][ T4268] usb 4-1: config 220 interface 76 has no altsetting 0 [ 240.132814][ T7716] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.188065][ T4268] usb 4-1: config 220 interface 1 has no altsetting 0 [ 240.195611][ T7716] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.418911][ T4268] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 240.438338][ T4268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.446391][ T4268] usb 4-1: Product: syz [ 240.516251][ T4268] usb 4-1: Manufacturer: syz [ 240.541541][ T4268] usb 4-1: SerialNumber: syz [ 240.618840][ T7734] loop5: detected capacity change from 0 to 7 [ 240.634432][ T7734] Dev loop5: unable to read RDB block 7 [ 240.652613][ T7734] loop5: AHDI p1 p2 p3 [ 240.675875][ T7734] loop5: partition table partially beyond EOD, truncated [ 240.708314][ T7734] loop5: p1 start 1601398130 is beyond EOD, truncated [ 240.740171][ T7734] loop5: p2 start 1702059890 is beyond EOD, truncated [ 241.019666][ T4268] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 241.034541][ T4268] usb 4-1: No valid video chain found. [ 241.078915][ T4268] usb 4-1: selecting invalid altsetting 0 [ 241.207211][ T4268] usb 4-1: selecting invalid altsetting 0 [ 241.232328][ T4268] usbtest: probe of 4-1:220.1 failed with error -22 [ 241.280831][ T4268] usb 4-1: USB disconnect, device number 10 [ 241.576544][ T7763] loop2: detected capacity change from 0 to 1024 [ 241.680173][ T7772] fuse: Bad value for 'fd' [ 241.704264][ T7766] hub 9-0:1.0: USB hub found [ 241.722856][ T7763] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 241.761509][ T7768] loop4: detected capacity change from 0 to 2048 [ 241.798895][ T7766] hub 9-0:1.0: 1 port detected [ 241.835585][ T7763] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000008,grpjquota=,,errors=continue. Quota mode: none. [ 241.854131][ T7768] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 241.898614][ T7768] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 241.906727][ T7763] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.972797][ T7768] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 242.029967][ T7783] fuse: Bad value for 'fd' [ 242.041060][ T7768] EXT4-fs (loop4): This should not happen!! Data will be lost [ 242.041060][ T7768] [ 242.123944][ T7768] EXT4-fs (loop4): Total free blocks count 0 [ 242.205445][ T7795] loop2: detected capacity change from 0 to 16 [ 242.217181][ T7768] EXT4-fs (loop4): Free/Dirty block details [ 242.250766][ T7795] erofs: (device loop2): erofs_read_superblock: blkszbits 10 isn't supported on this platform [ 242.278755][ T7768] EXT4-fs (loop4): free_blocks=2415919504 [ 242.284544][ T7768] EXT4-fs (loop4): dirty_blocks=48 [ 242.338250][ T7768] EXT4-fs (loop4): Block reservation details [ 242.344296][ T7768] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 242.605153][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 242.639517][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 242.639517][ T9] [ 242.797168][ T7818] loop2: detected capacity change from 0 to 512 [ 242.883973][ T7818] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 242.920388][ T7818] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1056: bg 0: block 5: invalid block bitmap [ 242.954979][ T7818] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 242.972701][ T7818] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1056: invalid indirect mapped block 3 (level 2) [ 243.041266][ T7818] EXT4-fs (loop2): 2 truncates cleaned up [ 243.049829][ T7824] loop4: detected capacity change from 0 to 1024 [ 243.106214][ T7818] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,grpquota,,errors=continue. Quota mode: writeback. [ 243.315402][ T4256] hfsplus: b-tree write err: -5, ino 25 [ 243.321455][ T4256] hfsplus: b-tree write err: -5, ino 4 [ 243.355143][ T4256] hfsplus: b-tree write err: -5, ino 2 [ 243.467977][ T7841] raw_sendmsg: syz.6.1063 forgot to set AF_INET. Fix it! [ 243.633390][ T7848] loop3: detected capacity change from 0 to 2048 [ 243.706220][ T7858] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1068'. [ 243.819677][ T7864] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 243.859811][ T7848] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.990537][ T7848] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 244.073238][ T7848] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 244.088350][ T4268] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 244.116296][ T7848] EXT4-fs (loop3): This should not happen!! Data will be lost [ 244.116296][ T7848] [ 244.155647][ T7848] EXT4-fs (loop3): Total free blocks count 0 [ 244.165559][ T7848] EXT4-fs (loop3): Free/Dirty block details [ 244.189635][ T7848] EXT4-fs (loop3): free_blocks=2415919504 [ 244.195432][ T7848] EXT4-fs (loop3): dirty_blocks=48 [ 244.216992][ T7848] EXT4-fs (loop3): Block reservation details [ 244.224868][ T7848] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 244.290073][ T1168] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 244.324507][ T1168] EXT4-fs (loop3): This should not happen!! Data will be lost [ 244.324507][ T1168] [ 244.378431][ T4268] usb 3-1: Using ep0 maxpacket: 8 [ 244.402588][ T26] kauditd_printk_skb: 114 callbacks suppressed [ 244.402604][ T26] audit: type=1326 audit(1777914780.689:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7688dd9 code=0x7fc00000 [ 244.490812][ T26] audit: type=1326 audit(1777914780.709:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0de7688dd9 code=0x7fc00000 [ 244.525278][ T7898] loop3: detected capacity change from 0 to 512 [ 244.560064][ T7898] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 244.569523][ T4268] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.593996][ T4268] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.599997][ T26] audit: type=1326 audit(1777914780.709:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7688dd9 code=0x7fc00000 [ 244.647323][ T26] audit: type=1326 audit(1777914780.709:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7688dd9 code=0x7fc00000 [ 244.663760][ T7898] EXT4-fs (loop3): 1 truncate cleaned up [ 244.677254][ T26] audit: type=1326 audit(1777914780.709:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7688dd9 code=0x7fc00000 [ 244.703768][ T26] audit: type=1326 audit(1777914780.709:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7688dd9 code=0x7fc00000 [ 244.728325][ T26] audit: type=1326 audit(1777914780.709:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7688dd9 code=0x7fc00000 [ 244.741325][ T7898] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.790353][ T26] audit: type=1326 audit(1777914780.709:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7688dd9 code=0x7fc00000 [ 244.875085][ T4268] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.885745][ T26] audit: type=1326 audit(1777914780.709:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7688dd9 code=0x7fc00000 [ 244.894372][ T4268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.925323][ T26] audit: type=1326 audit(1777914780.709:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.4.1060" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de7688dd9 code=0x7fc00000 [ 245.001337][ T4268] usb 3-1: Product: syz [ 245.005573][ T4268] usb 3-1: Manufacturer: syz [ 245.036879][ T4268] usb 3-1: SerialNumber: syz [ 245.109740][ T4268] usb 3-1: bad CDC descriptors [ 245.215675][ T7923] loop4: detected capacity change from 0 to 256 [ 245.286243][ T7923] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 245.356574][ T4268] usb 3-1: USB disconnect, device number 3 [ 245.552583][ T7939] usb usb1: usbfs: process 7939 (syz.4.1090) did not claim interface 0 before use [ 245.642818][ T7945] loop3: detected capacity change from 0 to 8 [ 245.714667][ T7945] SQUASHFS error: lzo decompression failed, data probably corrupt [ 245.744482][ T7945] SQUASHFS error: Failed to read block 0x91: -5 [ 245.782015][ T7945] SQUASHFS error: Unable to read metadata cache entry [8f] [ 245.806786][ T7945] SQUASHFS error: Unable to read inode 0x11f [ 245.918280][ T7945] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 245.918896][ T7957] loop4: detected capacity change from 0 to 512 [ 246.047655][ T7957] EXT4-fs (loop4): Ignoring removed bh option [ 246.161130][ T7957] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 246.185958][ T7957] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 246.241116][ T7973] loop2: detected capacity change from 0 to 512 [ 246.298629][ T7973] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 246.383496][ T7973] EXT4-fs (loop2): 1 truncate cleaned up [ 246.471149][ T7973] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 247.775294][ T8011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.079528][ T8065] loop4: detected capacity change from 0 to 8192 [ 250.738206][ T4268] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 251.018425][ T4268] usb 4-1: Using ep0 maxpacket: 32 [ 251.178741][ T4268] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 251.221912][ T4268] usb 4-1: config 0 has no interface number 0 [ 251.325204][ T4268] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 251.509811][ T4268] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 251.868615][ T4268] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 251.898160][ T4268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.948165][ T4268] usb 4-1: Product: syz [ 251.952506][ T4268] usb 4-1: Manufacturer: syz [ 251.957649][ T4268] usb 4-1: SerialNumber: syz [ 251.993523][ T8122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.000837][ T8122] IPv6: NLM_F_CREATE should be set when creating new route [ 252.008186][ T8122] IPv6: NLM_F_CREATE should be set when creating new route [ 252.027263][ T4268] usb 4-1: config 0 descriptor?? [ 252.250897][ T8135] loop4: detected capacity change from 0 to 512 [ 252.308533][ T8135] EXT4-fs (loop4): Test dummy encryption mode enabled [ 252.331851][ T8135] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 252.362427][ T8135] EXT4-fs (loop4): SIPHASH is not a valid default hash value [ 252.410001][ T8140] loop2: detected capacity change from 0 to 1024 [ 252.430408][ T4268] usb 4-1: USB disconnect, device number 11 [ 252.735758][ T4256] hfsplus: b-tree write err: -5, ino 25 [ 252.811501][ T4256] hfsplus: b-tree write err: -5, ino 4 [ 253.407926][ T4306] hfsplus: b-tree write err: -5, ino 2 [ 253.460080][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.542004][ T8162] loop2: detected capacity change from 0 to 128 [ 253.633181][ T8162] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 253.703475][ T8162] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 253.756054][ T8172] loop3: detected capacity change from 0 to 1024 [ 253.952125][ T8172] hfsplus: xattr searching failed [ 255.772193][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.779292][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.987322][ T8264] loop3: detected capacity change from 0 to 512 [ 257.127587][ T8264] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 257.151769][ T8264] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.184458][ T8275] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 257.264005][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 257.264020][ T26] audit: type=1800 audit(1777914793.549:258): pid=8264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1197" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 257.299427][ T8264] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1197: bg 0: block 320: padding at end of block bitmap is not set [ 257.388283][ T8264] EXT4-fs (loop3): Remounting filesystem read-only [ 258.348705][ T8301] loop3: detected capacity change from 0 to 256 [ 258.419011][ T8304] loop2: detected capacity change from 0 to 1024 [ 258.461139][ T8301] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.574442][ T8304] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 258.990644][ T8330] loop2: detected capacity change from 0 to 164 [ 259.021095][ T8332] loop3: detected capacity change from 0 to 8 [ 259.103117][ T8332] SQUASHFS error: lzo decompression failed, data probably corrupt [ 259.114649][ T8330] isofs_fill_super: root inode is not a directory. Corrupted media? [ 259.148629][ T8332] SQUASHFS error: Failed to read block 0x91: -5 [ 259.155204][ T8332] SQUASHFS error: Unable to read metadata cache entry [8f] [ 259.197382][ T8332] SQUASHFS error: Unable to read inode 0x11f [ 261.434350][ T8423] loop3: detected capacity change from 0 to 512 [ 261.478534][ T8423] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 261.544305][ T8423] EXT4-fs (loop3): 1 truncate cleaned up [ 261.560533][ T8423] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 261.601244][ T8423] EXT4-fs warning (device loop3): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 261.622799][ T8424] loop4: detected capacity change from 0 to 4096 [ 261.746550][ T8424] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.122441][ T8451] loop3: detected capacity change from 0 to 128 [ 262.133165][ T8450] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 262.436169][ T8466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1259'. [ 262.499469][ T8466] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.507181][ T8466] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.039769][ T8491] loop4: detected capacity change from 0 to 8 [ 263.362594][ T8491] SQUASHFS error: Failed to read block 0x6e6: -5 [ 263.369922][ T8491] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 263.377761][ T8491] SQUASHFS error: Unable to read directory block [631:26] [ 264.234939][ T8508] loop2: detected capacity change from 0 to 512 [ 264.266904][ T8511] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 264.460554][ T8508] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 264.533651][ T8508] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.565873][ T8521] loop3: detected capacity change from 0 to 4096 [ 264.654253][ T8508] EXT4-fs (loop2): shut down requested (1) [ 264.675468][ T8521] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 265.036193][ T8547] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1280'. [ 265.127881][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1280'. [ 265.481042][ T8570] loop3: detected capacity change from 0 to 256 [ 265.633834][ T8570] FAT-fs (loop3): Directory bread(block 64) failed [ 265.687308][ T8570] FAT-fs (loop3): Directory bread(block 65) failed [ 265.740513][ T8570] FAT-fs (loop3): Directory bread(block 66) failed [ 265.919399][ T8570] FAT-fs (loop3): Directory bread(block 67) failed [ 265.955769][ T8570] FAT-fs (loop3): Directory bread(block 68) failed [ 266.172682][ T8570] FAT-fs (loop3): Directory bread(block 69) failed [ 266.434396][ T8570] FAT-fs (loop3): Directory bread(block 70) failed [ 266.518001][ T8570] FAT-fs (loop3): Directory bread(block 71) failed [ 266.568294][ T8570] FAT-fs (loop3): Directory bread(block 72) failed [ 266.574898][ T8570] FAT-fs (loop3): Directory bread(block 73) failed [ 266.601829][ T8347] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 266.645826][ T8570] attempt to access beyond end of device [ 266.645826][ T8570] loop3: rw=0, want=1196, limit=256 [ 266.662550][ T8583] loop4: detected capacity change from 0 to 512 [ 266.791335][ T8583] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 266.831008][ T8590] loop3: detected capacity change from 0 to 512 [ 266.883172][ T8583] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.954612][ T8590] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 266.972175][ T8590] UDF-fs: Scanning with blocksize 512 failed [ 266.978755][ T8347] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.993216][ T8583] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 53 (only 1 groups) [ 267.012886][ T8590] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 267.021695][ T8347] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 267.047941][ T8590] UDF-fs: Scanning with blocksize 1024 failed [ 267.058205][ T8347] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.078877][ T8590] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 267.086321][ T8590] UDF-fs: Scanning with blocksize 2048 failed [ 267.139570][ T8590] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 267.164319][ T8590] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.268548][ T8347] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.277742][ T8347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.322491][ T8347] usb 3-1: Product: syz [ 267.326814][ T8347] usb 3-1: Manufacturer: syz [ 267.346218][ T8347] usb 3-1: SerialNumber: syz [ 267.399827][ T8347] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 268.299960][ T8347] cdc_ncm 3-1:1.0: bind() failure [ 269.842512][ T1110] usb 3-1: USB disconnect, device number 4 [ 270.293358][ T8631] loop4: detected capacity change from 0 to 4096 [ 270.381982][ T8631] EXT4-fs (loop4): Test dummy encryption mode enabled [ 270.445777][ T8631] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 270.609900][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1312'. [ 270.619651][ T8631] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 271.074910][ T8659] netlink: 798 bytes leftover after parsing attributes in process `syz.6.1318'. [ 271.263923][ T8664] loop4: detected capacity change from 0 to 512 [ 271.325011][ T8664] EXT4-fs (loop4): Ignoring removed oldalloc option [ 271.411177][ T8664] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 272.048338][ T4230] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 272.418451][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.449009][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.482086][ T8731] loop2: detected capacity change from 0 to 256 [ 272.487258][ T4230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.527293][ T4230] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.561124][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.596389][ T4230] usb 4-1: config 0 descriptor?? [ 272.615813][ T8731] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xf17e4aaa, utbl_chksum : 0xe619d30d) [ 272.938555][ T4230] usbhid 4-1:0.0: can't add hid device: -71 [ 272.950050][ T4230] usbhid: probe of 4-1:0.0 failed with error -71 [ 272.979695][ T8748] loop2: detected capacity change from 0 to 256 [ 273.006828][ T4230] usb 4-1: USB disconnect, device number 12 [ 273.719187][ T8787] binder: 8782:8787 ioctl c0306201 200000000280 returned -14 [ 274.065252][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1356'. [ 274.767737][ T8826] loop3: detected capacity change from 0 to 8 [ 275.592974][ T8849] loop4: detected capacity change from 0 to 128 [ 275.690904][ T8849] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 275.784629][ T4300] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 276.110700][ T8866] loop3: detected capacity change from 0 to 128 [ 276.240316][ T8871] loop4: detected capacity change from 0 to 128 [ 276.382629][ T8866] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 276.950251][ T8866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.316881][ T8917] device wlan0 entered promiscuous mode [ 278.348908][ T8917] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 278.436430][ T8926] loop2: detected capacity change from 0 to 128 [ 278.881823][ T8939] loop3: detected capacity change from 0 to 16 [ 279.224645][ T8939] erofs: (device loop3): mounted with root inode @ nid 36. [ 281.584370][ T8975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.641231][ T8975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.251671][ T8975] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.260952][ T8975] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.270861][ T8975] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.280192][ T8975] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.720395][ T9048] binder: 9045:9048 ioctl c0306201 0 returned -14 [ 283.181542][ T9060] loop4: detected capacity change from 0 to 1024 [ 283.221318][ T9063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1446'. [ 283.248877][ T9060] EXT4-fs (loop4): inline encryption not supported [ 283.255462][ T9060] EXT4-fs (loop4): inline encryption not supported [ 283.328419][ T9060] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 283.328419][ T9060] [ 283.557040][ T9068] loop3: detected capacity change from 0 to 4096 [ 283.671694][ T9068] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 283.685226][ T9068] EXT4-fs (loop3): Test dummy encryption mode enabled [ 283.766441][ T9068] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,discard,noblock_validity,discard,,errors=continue. Quota mode: writeback. [ 283.794808][ T9068] EXT4-fs (loop3): shut down requested (1) [ 284.021444][ T9084] loop3: detected capacity change from 0 to 1024 [ 284.462944][ T9100] fuse: Bad value for 'fd' [ 285.243435][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1463'. [ 286.144828][ T9140] 9pnet: Insufficient options for proto=fd [ 286.227875][ T9141] fuse: Bad value for 'fd' [ 288.751950][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 289.038285][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 289.178372][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.216148][ T23] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 289.265009][ T23] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 289.327692][ T23] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 289.541820][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.593127][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.640601][ T23] usb 5-1: Product: syz [ 289.644848][ T23] usb 5-1: Manufacturer: syz [ 289.683969][ T23] usb 5-1: SerialNumber: syz [ 289.951602][ T9219] loop2: detected capacity change from 0 to 1024 [ 290.057637][ T9222] loop3: detected capacity change from 0 to 1024 [ 290.117742][ T9219] EXT4-fs (loop2): Ignoring removed orlov option [ 290.216989][ T9219] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 290.399833][ T23] usb 5-1: 0:2 : does not exist [ 291.141879][ T9246] 9pnet: Insufficient options for proto=fd [ 291.714716][ T9258] netlink: 'syz.9.1509': attribute type 9 has an invalid length. [ 291.722124][ T4231] usb 5-1: USB disconnect, device number 6 [ 291.779840][ T9258] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1509'. [ 292.008817][ T9270] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1515'. [ 294.108209][ T8347] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 294.609470][ T8347] usb 5-1: Using ep0 maxpacket: 16 [ 294.728541][ T8347] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.739541][ T21] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 294.759765][ T8347] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 294.784680][ T8347] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 294.856309][ T8347] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 295.008227][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 295.058541][ T8347] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.079741][ T8347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.087885][ T8347] usb 5-1: Product: syz [ 295.112607][ T8347] usb 5-1: Manufacturer: syz [ 295.117269][ T8347] usb 5-1: SerialNumber: syz [ 295.148484][ T21] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 295.156721][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.197503][ T21] usb 4-1: config 0 has no interface number 0 [ 295.413776][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 295.433335][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.468484][ T21] usb 4-1: Product: syz [ 295.468623][ T8347] usb 5-1: 0:2 : does not exist [ 295.478455][ T21] usb 4-1: Manufacturer: syz [ 295.483309][ T21] usb 4-1: SerialNumber: syz [ 295.504965][ T21] usb 4-1: config 0 descriptor?? [ 295.559334][ T8347] usb 5-1: USB disconnect, device number 7 [ 295.562320][ T21] uvcvideo 4-1:0.31: Found Unit with invalid ID 0 [ 295.598173][ T21] usb 4-1: Found UVC 0.00 device syz (046d:08c3) [ 295.624986][ T21] usb 4-1: No valid video chain found. [ 295.770582][ T21] usb 4-1: USB disconnect, device number 13 [ 295.844551][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.088367][ T8347] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 298.078464][ T8347] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 298.144396][ T8347] usb 5-1: config 0 has no interface number 0 [ 298.221677][ T8347] usb 5-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 298.368709][ T8347] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 298.408339][ T8347] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 298.433316][ T8347] usb 5-1: Product: syz [ 298.437554][ T8347] usb 5-1: SerialNumber: syz [ 298.469775][ T8347] usb 5-1: config 0 descriptor?? [ 298.488018][ T9475] loop2: detected capacity change from 0 to 256 [ 298.510945][ T8347] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 298.576936][ T9475] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 298.625808][ T9475] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 298.671650][ T9475] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 298.808681][ T8347] Bluetooth: hci1: command 0x0406 tx timeout [ 298.857124][ T8347] usb 5-1: USB disconnect, device number 8 [ 299.079083][ T9496] loop2: detected capacity change from 0 to 736 [ 300.627804][ T9527] loop2: detected capacity change from 0 to 16 [ 300.705698][ T9527] erofs: (device loop2): mounted with root inode @ nid 36. [ 300.754379][ T9527] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95] [ 300.763224][ T9527] BUG: sleeping function called from invalid context at fs/dcache.c:877 [ 300.771657][ T9527] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 9527, name: syz.2.1589 [ 300.780772][ T9527] 1 lock held by syz.2.1589/9527: [ 300.785821][ T9527] #0: ffff88805f18e100 (&type->i_mutex_dir_key#11/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 300.796614][ T9527] Preemption disabled at: [ 300.796625][ T9527] [] z_erofs_reload_indexes+0x347/0x590 [ 300.808233][ T9527] CPU: 0 PID: 9527 Comm: syz.2.1589 Not tainted syzkaller #0 [ 300.815632][ T9527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 300.825728][ T9527] Call Trace: [ 300.829019][ T9527] [ 300.831981][ T9527] dump_stack_lvl+0x188/0x250 [ 300.836672][ T9527] ? show_regs_print_info+0x20/0x20 [ 300.841878][ T9527] ? load_image+0x400/0x400 [ 300.846405][ T9527] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 300.851903][ T9527] ___might_sleep+0x493/0x610 [ 300.856596][ T9527] ? z_erofs_reload_indexes+0x347/0x590 [ 300.862288][ T9527] ? __might_sleep+0xf0/0xf0 [ 300.866912][ T9527] ? __rwlock_init+0x140/0x140 [ 300.871704][ T9527] ? erofs_lookup+0x1af/0x330 [ 300.876458][ T9527] dput+0x26/0x1a0 [ 300.880242][ T9527] lookup_one_qstr_excl+0x1d6/0x240 [ 300.885545][ T9527] filename_create+0x23a/0x470 [ 300.890471][ T9527] ? kern_path_create+0x190/0x190 [ 300.895514][ T9527] ? __virt_addr_valid+0x3c6/0x470 [ 300.900639][ T9527] do_mkdirat+0xa5/0x5b0 [ 300.905096][ T9527] ? vfs_mkdir+0x570/0x570 [ 300.909625][ T9527] ? getname_flags+0x1fe/0x500 [ 300.914512][ T9527] __x64_sys_mkdirat+0x85/0x90 [ 300.919287][ T9527] do_syscall_64+0x4c/0xa0 [ 300.923799][ T9527] ? clear_bhb_loop+0x30/0x80 [ 300.928517][ T9527] ? clear_bhb_loop+0x30/0x80 [ 300.933384][ T9527] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 300.939316][ T9527] RIP: 0033:0x7febd1063dd9 [ 300.943829][ T9527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.963471][ T9527] RSP: 002b:00007febcf2bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 300.971920][ T9527] RAX: ffffffffffffffda RBX: 00007febd12dcfa0 RCX: 00007febd1063dd9 [ 300.979974][ T9527] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 300.988072][ T9527] RBP: 00007febd10f9d69 R08: 0000000000000000 R09: 0000000000000000 [ 300.996164][ T9527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.004174][ T9527] R13: 00007febd12dd038 R14: 00007febd12dcfa0 R15: 00007ffe1b797d58 [ 301.012175][ T9527] [ 301.015745][ T9527] BUG: scheduling while atomic: syz.2.1589/9527/0x00000002 [ 301.022976][ T9527] no locks held by syz.2.1589/9527. [ 301.028230][ T9527] Modules linked in: [ 301.032146][ T9527] Preemption disabled at: [ 301.032153][ T9527] [] z_erofs_reload_indexes+0x347/0x590 [ 301.044116][ T9527] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 301.052898][ T9527] CPU: 0 PID: 9527 Comm: syz.2.1589 Tainted: G W syzkaller #0 [ 301.061990][ T9527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 301.072163][ T9527] Call Trace: [ 301.075454][ T9527] [ 301.078414][ T9527] dump_stack_lvl+0x188/0x250 [ 301.083104][ T9527] ? show_regs_print_info+0x20/0x20 [ 301.088311][ T9527] ? load_image+0x400/0x400 [ 301.092927][ T9527] panic+0x2e5/0x810 [ 301.096839][ T9527] ? bpf_jit_dump+0xd0/0xd0 [ 301.101566][ T9527] ? z_erofs_reload_indexes+0x347/0x590 [ 301.107136][ T9527] ? z_erofs_reload_indexes+0x347/0x590 [ 301.112700][ T9527] check_panic_on_warn+0x80/0xa0 [ 301.117658][ T9527] ? z_erofs_reload_indexes+0x347/0x590 [ 301.123236][ T9527] __schedule_bug+0x193/0x1f0 [ 301.127928][ T9527] ? raw_spin_rq_unlock_irq+0x90/0x90 [ 301.133324][ T9527] __schedule+0x1324/0x43c0 [ 301.137851][ T9527] ? kasan_quarantine_put+0x39/0x220 [ 301.143380][ T9527] ? kasan_quarantine_put+0xd4/0x220 [ 301.148699][ T9527] ? slab_free_freelist_hook+0xea/0x170 [ 301.154459][ T9527] ? rcu_is_watching+0x11/0xa0 [ 301.159257][ T9527] ? release_firmware_map_entry+0x190/0x190 [ 301.165179][ T9527] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 301.171264][ T9527] ? lock_chain_count+0x20/0x20 [ 301.176124][ T9527] ? do_mkdirat+0x51e/0x5b0 [ 301.180689][ T9527] schedule+0x11b/0x1e0 [ 301.184945][ T9527] exit_to_user_mode_loop+0x47/0x130 [ 301.190244][ T9527] exit_to_user_mode_prepare+0xee/0x180 [ 301.195829][ T9527] syscall_exit_to_user_mode+0x16/0x40 [ 301.201328][ T9527] do_syscall_64+0x58/0xa0 [ 301.205788][ T9527] ? clear_bhb_loop+0x30/0x80 [ 301.210525][ T9527] ? clear_bhb_loop+0x30/0x80 [ 301.215243][ T9527] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.221267][ T9527] RIP: 0033:0x7febd1063dd9 [ 301.225879][ T9527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.245788][ T9527] RSP: 002b:00007febcf2bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 301.254223][ T9527] RAX: ffffffffffffffa1 RBX: 00007febd12dcfa0 RCX: 00007febd1063dd9 [ 301.262207][ T9527] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 301.270387][ T9527] RBP: 00007febd10f9d69 R08: 0000000000000000 R09: 0000000000000000 [ 301.278481][ T9527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.286564][ T9527] R13: 00007febd12dd038 R14: 00007febd12dcfa0 R15: 00007ffe1b797d58 [ 301.294586][ T9527] [ 301.297903][ T9527] Kernel Offset: disabled [ 301.302246][ T9527] Rebooting in 86400 seconds..