last executing test programs: 2m59.085878173s ago: executing program 32 (id=273): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x111) rmdir(&(0x7f0000000100)='./control\x00') 2m58.639739998s ago: executing program 2 (id=281): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1) readv(r1, &(0x7f0000001880)=[{&(0x7f0000000340)=""/145, 0x91}], 0x1) 2m58.227377197s ago: executing program 2 (id=286): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e26, 0x1000, @empty}, 0x1c) pread64(r1, &(0x7f0000000580)=""/245, 0xf5, 0x3) 2m58.043050067s ago: executing program 2 (id=289): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904ac00018fe7e20009058f"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m55.119587606s ago: executing program 2 (id=303): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x4}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 2m54.584666755s ago: executing program 2 (id=304): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = io_uring_setup(0x4a86, &(0x7f0000000a00)={0x0, 0xac00, 0x40, 0x8001002, 0x112}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m53.768123652s ago: executing program 2 (id=308): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 2m53.525109873s ago: executing program 33 (id=308): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 2m29.042546197s ago: executing program 3 (id=429): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x2f) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x20004}, 0x8) close(r0) 2m28.787338319s ago: executing program 3 (id=431): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000700)="ebe3a0e9796cfd0600e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730c5af785f0b6acb07f73e6b493e177d0f41ea9f444c9b1c759e26c0a0fcb0fc7811b38c9f", 0x70}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20040890}], 0x1, 0x20000090) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m28.069578189s ago: executing program 3 (id=434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r2, 0x1ffd1684a4a9b69d, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) 2m27.881174331s ago: executing program 3 (id=435): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x62) 2m27.627089103s ago: executing program 3 (id=436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r0, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000440)={&(0x7f000047b000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/186, 0xba, 0x1, 0x0}, &(0x7f0000000340)=0x40) 2m26.347994857s ago: executing program 3 (id=443): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000043c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x20b, 0x5, 0xad7}}], 0x20, 0x807}], 0x1, 0x40000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) preadv(r3, &(0x7f0000001480)=[{&(0x7f0000000080)=""/238, 0xee}], 0x51, 0xab3, 0x13f) 2m25.988884388s ago: executing program 34 (id=443): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000043c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x20b, 0x5, 0xad7}}], 0x20, 0x807}], 0x1, 0x40000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) preadv(r3, &(0x7f0000001480)=[{&(0x7f0000000080)=""/238, 0xee}], 0x51, 0xab3, 0x13f) 55.661118632s ago: executing program 1 (id=1122): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200080, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000080), &(0x7f0000000000)="15", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 55.236796523s ago: executing program 1 (id=1125): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000640)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008080}], 0x1, 0x200000c0) sendmmsg$inet(r0, &(0x7f0000004080)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000340)=[{&(0x7f00000001c0)="08d6", 0x2}], 0x1}}], 0x1, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r2, 0x7}, 0x8) 55.175503743s ago: executing program 1 (id=1126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="00c89baaef78d2e2bc058900591687ca00008100", 0x14}, {&(0x7f0000000100)="83", 0x1}], 0x2) 55.000806363s ago: executing program 1 (id=1129): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2200006, &(0x7f0000000280)={[{@volume={'volume', 0x3d, 0x3e}}, {@fileset={'fileset', 0x3d, 0x6}}, {@anchor={'anchor', 0x3d, 0xffff}}, {@gid_forget}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {}, {}, {@lastblock}, {@iocharset={'iocharset', 0x3d, 'cp864'}}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) stat(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000005c0), 0x8040, &(0x7f0000000600)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 54.140636397s ago: executing program 1 (id=1142): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x182) close(r0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f00000010c0)) r2 = socket$pptp(0x18, 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 53.673905614s ago: executing program 1 (id=1146): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 53.51851844s ago: executing program 35 (id=1146): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 51.073926359s ago: executing program 5 (id=1159): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010000000000fbdbdf250a8080000000000000000000080019000000000305001a"], 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x24000040) 50.013374517s ago: executing program 5 (id=1169): close(0xffffffffffffffff) unshare(0x6020400) openat$vcsa(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000280)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 49.845788005s ago: executing program 5 (id=1173): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', &(0x7f0000002940)=""/4117, 0x1015) 49.63624402s ago: executing program 5 (id=1175): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000001c0)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x20, 0x8e7b0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x99bcb88de02507f2, 0x0, 0x0) 48.762565616s ago: executing program 5 (id=1180): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 48.633126118s ago: executing program 5 (id=1181): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$poke(0x1b, r0, &(0x7f0000000240), 0x5) 46.660720207s ago: executing program 7 (id=1188): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x40028}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_LIMIT={0x5}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 46.547704066s ago: executing program 7 (id=1190): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/encrypted_dir\x00', 0x68) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) chdir(&(0x7f0000000540)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000005b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d95ce7, 0x0, 0x82, 0x0, &(0x7f0000000080)) 46.204316614s ago: executing program 7 (id=1193): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8979) sendfile(r1, r2, 0x0, 0xf0) 45.884043447s ago: executing program 7 (id=1194): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='.\x00', 0x2820e8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x40000000008d, 0x20001) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000200)) 45.622352741s ago: executing program 7 (id=1196): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x20000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 44.764699475s ago: executing program 7 (id=1198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0xc, 0x4, 0x81, 0x0, 0x0, 0x7}, {0x10000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x9, 0xfc}, {0x3000, 0x8080000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xa, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x50000, 0x1000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x3000, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {0x0, 0x2}, 0x9df9ffdf, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x30000, 0xdddd0000, 0x2, 0x1c, 0x50}) 44.49369021s ago: executing program 36 (id=1198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0xc, 0x4, 0x81, 0x0, 0x0, 0x7}, {0x10000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x9, 0xfc}, {0x3000, 0x8080000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xa, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x50000, 0x1000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x3000, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {0x0, 0x2}, 0x9df9ffdf, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x30000, 0xdddd0000, 0x2, 0x1c, 0x50}) 33.446949317s ago: executing program 37 (id=1181): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$poke(0x1b, r0, &(0x7f0000000240), 0x5) 8.227800764s ago: executing program 6 (id=1401): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x5) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 8.096614216s ago: executing program 6 (id=1402): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x40, 0x11, 0x6, "515754d837ca"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="003501"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.899502011s ago: executing program 6 (id=1430): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x3fd, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x3, 0x3, "56facf"}, 0xb) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x3}, 0x8) 4.168672473s ago: executing program 0 (id=1432): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000aaaeaaaaaa0088e5"], 0x0) 3.897818268s ago: executing program 6 (id=1434): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0x1002, 0x12) 3.656658219s ago: executing program 6 (id=1435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 2.006888125s ago: executing program 4 (id=1440): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x989680}, 0x0, 0x0) 1.97467393s ago: executing program 9 (id=1441): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x80) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000700)=0x10) 1.864633208s ago: executing program 0 (id=1442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x80000000000000, 0x8, 0x2, 0x8001000, 0x3, 0x1002, 0x7fffffff, 0xe2, 0x20000000081, 0x2, 0x2372, 0x8bda, 0x7fffffff, 0x3f7, 0x8], 0x25000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.864400598s ago: executing program 9 (id=1443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x522, 0x4) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x40) 1.864159529s ago: executing program 4 (id=1444): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000f80)={&(0x7f00000003c0)={0x50, 0x0, 0x5, {0x7, 0x2d, 0x3, 0x4804182, 0xfbfb, 0x0, 0x0, 0x1008000, 0x0, 0x0, 0x2, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000100000000000400050000000000100007000000000020"], 0x24, 0x2) 1.699867336s ago: executing program 6 (id=1445): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, "de3342e8", {0x3, 0x103, 0x0, 0x83, 0xc, 0x2, 0x6}}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) 1.652305324s ago: executing program 4 (id=1446): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x240400d4) 1.476551193s ago: executing program 0 (id=1448): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) 1.476314653s ago: executing program 9 (id=1449): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2a450ca, 0x0) chdir(&(0x7f0000000140)='./file0\x00') pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 1.371858011s ago: executing program 9 (id=1451): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0x4e, 0xffffff85, 0xa9}, 0x9c) 1.288741835s ago: executing program 0 (id=1452): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 1.192793621s ago: executing program 0 (id=1454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 984.644326ms ago: executing program 0 (id=1455): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x32}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 977.207747ms ago: executing program 9 (id=1457): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000200)={{@local, 0x10000}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@hyper, 0xfffffffc}, 0x1, 0x1, 0x4}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000240)={{@local, 0x1}, 0x1, 0x2, 0x8}) 885.414942ms ago: executing program 8 (id=1458): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 816.775594ms ago: executing program 9 (id=1459): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) 749.468755ms ago: executing program 8 (id=1460): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180a00"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0}, 0x94) r1 = syz_io_uring_setup(0x5229, &(0x7f0000000080)={0x0, 0x6bb8, 0x8, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) io_uring_enter(r1, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 645.311202ms ago: executing program 8 (id=1461): sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x240408d1}, 0x4044090) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000180)={0x0}) 596.60198ms ago: executing program 4 (id=1462): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800880, &(0x7f0000000240)=ANY=[], 0xfd, 0x272, &(0x7f0000001f00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) chdir(&(0x7f0000000140)='./bus\x00') mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsync(r0) 470.119511ms ago: executing program 8 (id=1463): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendmsg$sock(r0, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x0) preadv2(r1, &(0x7f0000000500)=[{&(0x7f0000000240)=""/250, 0xfa}], 0x1, 0xffffff81, 0xe0, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 417.91559ms ago: executing program 4 (id=1464): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 201.438126ms ago: executing program 4 (id=1465): socket$unix(0x1, 0x2, 0x0) r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@data_err_ignore}, {@dioread_nolock}, {@errors_remount}, {@prjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000001c0)="$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") 122.83142ms ago: executing program 8 (id=1466): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 0s ago: executing program 8 (id=1467): setreuid(0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): an inode 131083 [ 214.388131][ T7838] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 214.627515][ T7852] loop6: detected capacity change from 0 to 2048 [ 214.725438][ T7857] device tunl0 entered promiscuous mode [ 214.823097][ T7857] netlink: 'syz.7.895': attribute type 4 has an invalid length. [ 214.850516][ T7857] netlink: 9 bytes leftover after parsing attributes in process `syz.7.895'. [ 214.904556][ T7852] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.978663][ T7852] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.047524][ T7865] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 215.205124][ T7852] overlayfs: Failed to create volatile/dirty file. [ 215.343826][ T7876] loop5: detected capacity change from 0 to 2048 [ 215.437471][ T7876] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.502459][ T7883] af_packet: tpacket_rcv: packet too big, clamped from 110 to 4294967272. macoff=96 [ 215.586583][ T7885] device veth0 entered promiscuous mode [ 215.630454][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.905'. [ 215.737246][ T7889] loop6: detected capacity change from 0 to 512 [ 215.915498][ T7889] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 215.957085][ T7896] loop5: detected capacity change from 0 to 128 [ 215.979746][ T7889] ext4 filesystem being mounted at /100/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.155584][ T7889] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz.6.907: invalid size [ 216.175725][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.7.911'. [ 216.483835][ T154] attempt to access beyond end of device [ 216.483835][ T154] loop5: rw=1, want=1041, limit=128 [ 216.962676][ T7926] loop1: detected capacity change from 0 to 128 [ 217.043384][ T7907] loop7: detected capacity change from 0 to 32768 [ 217.073997][ T7926] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 217.110972][ T7926] hpfs: filesystem error: improperly stopped [ 217.127915][ T7926] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 217.141242][ T7926] hpfs: You really don't want any checks? You are crazy... [ 217.164388][ T7926] hpfs: hpfs_map_sector(): read error [ 217.224019][ T7926] hpfs: code page support is disabled [ 217.229897][ T7926] hpfs: hpfs_map_4sectors(): unaligned read [ 217.236211][ T7926] hpfs: hpfs_map_4sectors(): unaligned read [ 217.241645][ T7907] XFS (loop7): Mounting V5 Filesystem [ 217.242518][ T7926] hpfs: filesystem error: unable to find root dir [ 217.412617][ T7907] XFS (loop7): Ending clean mount [ 217.502876][ T7955] IPv6: sit1: Disabled Multicast RS [ 217.565598][ T5886] XFS (loop7): Unmounting Filesystem [ 218.453968][ T7999] loop5: detected capacity change from 0 to 512 [ 218.591436][ T7999] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.944: bg 0: block 255: padding at end of block bitmap is not set [ 218.694261][ T7999] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 218.755038][ T7999] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.944: invalid indirect mapped block 1 (level 1) [ 218.817975][ T7999] EXT4-fs (loop5): 1 truncate cleaned up [ 218.838059][ T7999] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.915889][ T8020] loop6: detected capacity change from 0 to 4096 [ 219.086489][ T8020] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 219.155476][ T8020] ntfs3: loop6: Failed to load $Extend. [ 219.303213][ T26] audit: type=1800 audit(1776305749.133:42): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.952" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=33 res=0 errno=0 [ 219.345820][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.530264][ T26] audit: type=1326 audit(1776305749.233:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.5.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c635819 code=0x7ffc0000 [ 219.530313][ T26] audit: type=1326 audit(1776305749.243:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.5.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c635819 code=0x7ffc0000 [ 219.530353][ T26] audit: type=1326 audit(1776305749.243:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.5.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c635819 code=0x7ffc0000 [ 219.530393][ T26] audit: type=1326 audit(1776305749.243:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.5.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f4f4c635819 code=0x7ffc0000 [ 219.530430][ T26] audit: type=1326 audit(1776305749.243:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.5.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c635819 code=0x7ffc0000 [ 219.530465][ T26] audit: type=1326 audit(1776305749.243:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.5.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c635819 code=0x7ffc0000 [ 219.530501][ T26] audit: type=1326 audit(1776305749.243:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.5.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c635819 code=0x7ffc0000 [ 219.530540][ T26] audit: type=1326 audit(1776305749.243:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.5.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f4f4c635819 code=0x7ffc0000 [ 219.530578][ T26] audit: type=1326 audit(1776305749.253:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.5.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4c635819 code=0x7ffc0000 [ 219.915231][ T8044] loop5: detected capacity change from 0 to 256 [ 219.969998][ T8044] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.229001][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.280675][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.609566][ T4264] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 220.867876][ T8046] loop1: detected capacity change from 0 to 32768 [ 220.907814][ T8064] loop5: detected capacity change from 0 to 32768 [ 220.939848][ T1108] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 220.991611][ T8046] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 221.002663][ T4264] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 221.022676][ T8064] JBD2: Ignoring recovery information on journal [ 221.025645][ T4264] usb 8-1: config 0 has no interface number 0 [ 221.041796][ T8061] loop0: detected capacity change from 0 to 32768 [ 221.078866][ T4264] usb 8-1: config 0 interface 41 has no altsetting 0 [ 221.089818][ T8064] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 221.113939][ T8061] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.968 (8061) [ 221.169713][ T8061] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 221.195157][ T8064] (syz.5.971,8064,0):ocfs2_rename:1687 ERROR: status = -39 [ 221.210920][ T8061] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 221.245080][ T5054] ocfs2: Unmounting device (7,5) on (node local) [ 221.264564][ T4186] XFS (loop1): Unmounting Filesystem [ 221.321965][ T8061] BTRFS info (device loop0): use zstd compression, level 3 [ 221.339926][ T8061] BTRFS info (device loop0): using free space tree [ 221.346668][ T8061] BTRFS info (device loop0): has skinny extents [ 221.353864][ T4264] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 221.369430][ T4264] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.377985][ T4264] usb 8-1: Product: syz [ 221.405482][ T1108] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 221.425488][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.447671][ T4264] usb 8-1: Manufacturer: syz [ 221.476755][ T4264] usb 8-1: SerialNumber: syz [ 221.483963][ T1108] usb 7-1: config 0 descriptor?? [ 221.517891][ T4264] usb 8-1: config 0 descriptor?? [ 221.528035][ T1108] cp210x 7-1:0.0: cp210x converter detected [ 221.675870][ T8061] BTRFS info (device loop0): enabling ssd optimizations [ 221.949802][ T1108] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 221.962699][ T8067] loop6: detected capacity change from 0 to 1024 [ 222.054108][ T1108] usb 7-1: cp210x converter now attached to ttyUSB0 [ 222.256305][ T1108] usb 7-1: USB disconnect, device number 8 [ 222.301220][ T1108] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 222.337469][ T1108] cp210x 7-1:0.0: device disconnected [ 222.449978][ T4264] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 222.785328][ T4264] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 222.830264][ T4264] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 222.864142][ T4264] CoreChips: probe of 8-1:0.41 failed with error -71 [ 222.899722][ T4264] usb 8-1: USB disconnect, device number 6 [ 222.945678][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 223.015972][ T8114] device bond_slave_0 entered promiscuous mode [ 223.023064][ T8114] device bond_slave_1 entered promiscuous mode [ 223.100276][ T8114] device macvlan8 entered promiscuous mode [ 223.106253][ T8114] device bond0 entered promiscuous mode [ 223.133207][ T8114] device macvlan7 entered promiscuous mode [ 223.139174][ T8114] device team0 entered promiscuous mode [ 223.172115][ T8114] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 223.216542][ T8108] loop1: detected capacity change from 0 to 40427 [ 223.279948][ T8108] F2FS-fs (loop1): invalid crc value [ 223.329526][ T6952] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 223.348031][ T8108] F2FS-fs (loop1): Found nat_bits in checkpoint [ 223.502443][ T8108] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 223.579707][ T6952] usb 6-1: Using ep0 maxpacket: 32 [ 223.655124][ T8108] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 223.677464][ T8131] overlayfs: workdir and upperdir must reside under the same mount [ 223.699675][ T6952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.725980][ T6952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.746368][ T6952] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 223.795529][ T6952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.811003][ T8134] device geneve2 entered promiscuous mode [ 223.812062][ T8136] loop0: detected capacity change from 0 to 128 [ 223.839694][ T6952] usb 6-1: config 0 descriptor?? [ 223.889352][ T8116] loop6: detected capacity change from 0 to 32768 [ 223.949305][ T8116] XFS: attr2 mount option is deprecated. [ 223.955052][ T8136] attempt to access beyond end of device [ 223.955052][ T8136] loop0: rw=1, want=140, limit=128 [ 223.967137][ T8136] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 224.065829][ T8116] XFS (loop6): Mounting V5 Filesystem [ 224.130762][ T8116] XFS (loop6): Ending clean mount [ 224.310824][ T5175] XFS (loop6): Unmounting Filesystem [ 224.313841][ T6952] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 224.608869][ T6952] usb 6-1: USB disconnect, device number 6 [ 225.205370][ T8181] loop6: detected capacity change from 0 to 1024 [ 225.243541][ T8181] EXT4-fs (loop6): inline encryption not supported [ 225.293185][ T8181] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,inlinecrypt,,errors=continue. Quota mode: none. [ 225.310639][ T8181] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.403982][ T4226] EXT4-fs error (device loop6): ext4_map_blocks:739: inode #15: block 3: comm kworker/u4:4: lblock 3 mapped to illegal pblock 3 (length 3) [ 225.428600][ T4226] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 225.442047][ T4226] EXT4-fs (loop6): This should not happen!! Data will be lost [ 225.442047][ T4226] [ 225.452954][ T4715] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 225.462813][ T4226] EXT4-fs error (device loop6): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 225.478312][ T4226] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 225.497059][ T4226] EXT4-fs (loop6): This should not happen!! Data will be lost [ 225.497059][ T4226] [ 225.569354][ T8194] loop7: detected capacity change from 0 to 512 [ 225.607696][ T8194] EXT4-fs (loop7): Ignoring removed bh option [ 225.646657][ T8194] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 225.669657][ T4264] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 225.692629][ T8194] EXT4-fs (loop7): 1 truncate cleaned up [ 225.698729][ T8194] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 225.735208][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 225.735223][ T26] audit: type=1800 audit(1776305755.563:55): pid=8194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1006" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 225.847476][ T8200] loop6: detected capacity change from 0 to 8 [ 225.869697][ T4715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.888723][ T4715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.900623][ T4715] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 225.910972][ T4715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.929010][ T4715] usb 2-1: config 0 descriptor?? [ 225.971509][ T8202] input: syz1 as /devices/virtual/input/input10 [ 226.099851][ T4264] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.116529][ T4264] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.225954][ T4264] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 226.269524][ T4264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 226.277594][ T4264] usb 1-1: SerialNumber: syz [ 226.293008][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1012'. [ 226.331769][ T8210] loop6: detected capacity change from 0 to 1024 [ 226.451386][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027da9000: rx timeout, send abort [ 226.468455][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027da9000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 226.493165][ T4715] hid-led 0003:27B8:01ED.0010: unknown main item tag 0x0 [ 226.533343][ T4226] hfsplus: b-tree write err: -5, ino 3 [ 226.602799][ T4264] usb 1-1: 0:2 : does not exist [ 226.629339][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1015'. [ 226.669873][ T4264] usb 1-1: unit 253 not found! [ 226.689916][ T4264] usb 1-1: USB disconnect, device number 10 [ 226.728914][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1016'. [ 226.755184][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1016'. [ 226.767199][ T8219] netlink: 'syz.6.1016': attribute type 7 has an invalid length. [ 226.784870][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1016'. [ 226.804222][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1016'. [ 226.816064][ T8219] netlink: 'syz.6.1016': attribute type 7 has an invalid length. [ 226.947980][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.966177][ T4715] hid-led 0003:27B8:01ED.0010: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 226.994302][ T4715] hid-led 0003:27B8:01ED.0010: ThingM blink(1) initialized [ 227.143959][ T8111] usb 2-1: USB disconnect, device number 13 [ 227.213281][ T8226] fido_id[8226]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 227.225701][ T8232] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 227.225701][ T8232] The task syz.5.1019 (8232) triggered the difference, watch for misbehavior. [ 227.315006][ T8236] loop6: detected capacity change from 0 to 128 [ 227.358021][ T8236] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.394264][ T8236] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.470292][ T4226] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.572007][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1023'. [ 227.589972][ T1108] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 227.923539][ T8243] loop7: detected capacity change from 0 to 32768 [ 227.969750][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.999068][ T4264] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 228.019673][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.037637][ T26] audit: type=1326 audit(1776305757.863:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.5.1028" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f4c635819 code=0x0 [ 228.058114][ T8243] [ 228.058114][ T8243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.058114][ T8243] [ 228.079280][ T1108] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.111809][ T26] audit: type=1800 audit(1776305757.933:57): pid=8243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1026" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 228.157185][ T5391] [ 228.157185][ T5391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.157185][ T5391] [ 228.169477][ T1108] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.178705][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.195334][ T5391] [ 228.195334][ T5391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.195334][ T5391] [ 228.218643][ T1108] usb 1-1: config 0 descriptor?? [ 228.229691][ T5391] [ 228.229691][ T5391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.229691][ T5391] [ 228.259954][ T277] [ 228.259954][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.259954][ T277] [ 228.260086][ T4264] usb 7-1: Using ep0 maxpacket: 32 [ 228.284629][ T8251] [ 228.284629][ T8251] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.284629][ T8251] [ 228.316099][ T5408] [ 228.316099][ T5408] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.316099][ T5408] [ 228.333505][ T5408] [ 228.333505][ T5408] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.333505][ T5408] [ 228.345274][ T5408] [ 228.345274][ T5408] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.345274][ T5408] [ 228.361824][ T5408] [ 228.361824][ T5408] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.361824][ T5408] [ 228.382861][ T8251] [ 228.382861][ T8251] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.382861][ T8251] [ 228.401836][ T8243] [ 228.401836][ T8243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.401836][ T8243] [ 228.414763][ T8243] [ 228.414763][ T8243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.414763][ T8243] [ 228.420749][ T4264] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 228.426245][ T8243] [ 228.426245][ T8243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.426245][ T8243] [ 228.445421][ T4264] usb 7-1: config 0 has no interface number 0 [ 228.460350][ T8243] [ 228.460350][ T8243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.460350][ T8243] [ 228.477681][ T8243] [ 228.477681][ T8243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.477681][ T8243] [ 228.493707][ T8243] [ 228.493707][ T8243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.493707][ T8243] [ 228.504808][ T8243] [ 228.504808][ T8243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.504808][ T8243] [ 228.519117][ T8243] [ 228.519117][ T8243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.519117][ T8243] [ 228.537097][ T8243] [ 228.537097][ T8243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.537097][ T8243] [ 228.557046][ T8243] [ 228.557046][ T8243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.557046][ T8243] [ 228.568474][ T8243] [ 228.568474][ T8243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.568474][ T8243] [ 228.597939][ T8243] [ 228.597939][ T8243] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.597939][ T8243] [ 228.610483][ T4264] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 228.630287][ T4264] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.638354][ T4264] usb 7-1: Product: syz [ 228.654933][ T4264] usb 7-1: Manufacturer: syz [ 228.665777][ T4264] usb 7-1: SerialNumber: syz [ 228.672508][ T4264] usb 7-1: config 0 descriptor?? [ 228.688326][ T5886] [ 228.688326][ T5886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.688326][ T5886] [ 228.701646][ T5886] [ 228.701646][ T5886] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.701646][ T5886] [ 228.712656][ T4264] smsc95xx v2.0.0 [ 228.722883][ T1108] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 228.757925][ T1108] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 228.817046][ T8255] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1031'. [ 228.907431][ T8258] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 228.949031][ T8258] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 229.005375][ T4227] usb 1-1: USB disconnect, device number 11 [ 229.154817][ T4264] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 229.186671][ T4264] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 229.216948][ T8266] device batadv_slave_1 entered promiscuous mode [ 229.249632][ T1108] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 229.267736][ T8265] device batadv_slave_1 left promiscuous mode [ 229.274859][ T8268] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 229.624296][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.640006][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.809751][ T1108] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 229.829549][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.837593][ T1108] usb 2-1: Product: syz [ 229.841859][ T1108] usb 2-1: Manufacturer: syz [ 229.846563][ T1108] usb 2-1: SerialNumber: syz [ 229.861021][ T1108] usb 2-1: config 0 descriptor?? [ 229.869598][ T4264] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 229.882105][ T4264] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 229.891979][ T4264] usb 7-1: USB disconnect, device number 9 [ 229.902057][ T1108] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 229.923638][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 229.950212][ T1108] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 229.961794][ T1108] usb 2-1: media controller created [ 229.999327][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.011281][ T4707] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 230.125022][ T1108] DVB: Unable to find symbol tda10046_attach() [ 230.131800][ T1108] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 230.141150][ T1108] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 230.363266][ T8299] loop5: detected capacity change from 0 to 8192 [ 230.481182][ T8297] loop7: detected capacity change from 0 to 32768 [ 230.496160][ T8299] loop5: p1 p2 p3 p4[EZD] [ 230.504747][ T8299] loop5: partition table partially beyond EOD, truncated [ 230.527981][ T8299] loop5: p1 start 16384 is beyond EOD, truncated [ 230.552661][ T8299] loop5: p2 size 150994944 extends beyond EOD, truncated [ 230.570147][ T8299] loop5: p3 start 67108864 is beyond EOD, truncated [ 230.582556][ T8299] loop5: p4 size 33555584 extends beyond EOD, truncated [ 230.609724][ T4707] usb 1-1: config 0 interface 0 has no altsetting 0 [ 230.616619][ T4707] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 230.670708][ T8297] XFS (loop7): Mounting V5 Filesystem [ 230.714102][ T4707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.807041][ T4707] usb 1-1: config 0 descriptor?? [ 230.843068][ T8297] XFS (loop7): Ending clean mount [ 230.860365][ T8297] XFS (loop7): Quotacheck needed: Please wait. [ 230.976219][ T8297] XFS (loop7): Quotacheck: Done. [ 230.992766][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 231.016968][ T5034] udevd[5034]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 231.033747][ T8318] loop5: detected capacity change from 0 to 16 [ 231.047897][ T8320] loop6: detected capacity change from 0 to 512 [ 231.084162][ T5886] XFS (loop7): Unmounting Filesystem [ 231.222180][ T8320] EXT4-fs (loop6): Test dummy encryption mode enabled [ 231.240558][ T8318] erofs: (device loop5): mounted with root inode @ nid 36. [ 231.277017][ T8320] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 231.322104][ T1108] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71 [ 231.350317][ T1108] usb 2-1: USB disconnect, device number 14 [ 231.372599][ T8320] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.1052: bad orphan inode 131083 [ 231.416050][ T8320] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 231.471949][ T8320] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 231.497296][ T8326] loop5: detected capacity change from 0 to 4096 [ 231.563325][ T8326] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 231.765364][ T8326] ntfs3: loop5: ntfs3_write_inode r=1e failed, -22. [ 231.943353][ T8335] loop1: detected capacity change from 0 to 164 [ 231.959829][ T5054] ntfs3: loop5: ntfs_evict_inode r=1e failed, -22. [ 231.989942][ T5054] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 231.991679][ T4707] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 232.021088][ T8335] Unable to read rock-ridge attributes [ 232.235661][ T4264] usb 1-1: USB disconnect, device number 12 [ 232.302910][ T8341] loop1: detected capacity change from 0 to 2048 [ 232.426334][ T8341] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.494732][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1064'. [ 232.511725][ T8341] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.582294][ T8341] fs-verity: sha512 using implementation "sha512-avx2" [ 233.201514][ T8384] loop7: detected capacity change from 0 to 512 [ 233.273287][ T8384] EXT4-fs (loop7): Mount option "journal_async_commit" incompatible with ext2 [ 233.312955][ T8388] loop1: detected capacity change from 0 to 512 [ 233.477511][ T8388] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 233.559039][ T8397] loop7: detected capacity change from 0 to 1024 [ 233.568267][ T8388] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.697940][ T8397] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000010001,grpid,,errors=continue. Quota mode: none. [ 233.743054][ T26] audit: type=1800 audit(1776305763.573:58): pid=8403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1077" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 234.552588][ T8424] device team0 left promiscuous mode [ 234.596601][ T8424] device team_slave_0 left promiscuous mode [ 234.605053][ T8424] device team_slave_1 left promiscuous mode [ 234.689803][ T8424] bond0: (slave macvlan7): Releasing backup interface [ 234.697839][ T8424] device macvlan7 left promiscuous mode [ 234.725236][ T8428] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 234.782467][ T8424] team0 (unregistering): Port device team_slave_0 removed [ 234.807219][ T8428] REISERFS (device loop6): using ordered data mode [ 234.826834][ T8424] team0 (unregistering): Port device team_slave_1 removed [ 234.859592][ T8428] reiserfs: using flush barriers [ 234.910801][ T8438] 9pnet: Insufficient options for proto=fd [ 234.917021][ T8428] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 234.989990][ T8428] REISERFS (device loop6): checking transaction log (loop6) [ 235.075305][ T8428] REISERFS (device loop6): Using r5 hash to sort names [ 235.107093][ T8428] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 235.194033][ T8449] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.271531][ T8449] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,journal_dev=0x0000000000000007,journal_ioprio=0x0000000000000006,noinit_itable,nogrpid,nodiscard,noload,noinit_itable,mb_optimize_scan=0x0000000000000000,usrquota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 235.313452][ T8449] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.331955][ T8449] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm syz.0.1098: lblock 0 mapped to illegal pblock 0 (length 5) [ 235.348559][ T8449] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 235.363644][ T8449] EXT4-fs (loop0): This should not happen!! Data will be lost [ 235.363644][ T8449] [ 235.376059][ T8449] EXT4-fs error (device loop0): ext4_free_blocks:6232: comm syz.0.1098: Freeing blocks not in datazone - block = 1, count = 4 [ 235.396112][ T8453] EXT4-fs (loop5): Ignoring removed oldalloc option [ 235.413328][ T8460] set_capacity_and_notify: 4 callbacks suppressed [ 235.413344][ T8460] loop1: detected capacity change from 0 to 128 [ 235.432887][ T8453] EXT4-fs (loop5): Ignoring removed bh option [ 235.478758][ T8453] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.637163][ T8453] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,bsddf,usrquota,data_err=ignore,init_itable,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 236.416355][ T8492] loop0: detected capacity change from 0 to 512 [ 236.455448][ T8493] loop1: detected capacity change from 0 to 1024 [ 236.475911][ T8499] loop5: detected capacity change from 0 to 128 [ 236.522927][ T8493] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 236.539318][ T8492] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 236.559981][ T8499] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.611081][ T8493] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 236.620750][ T8499] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.702060][ T8492] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 236.751234][ T8492] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3885: comm syz.0.1113: Allocating blocks 41-42 which overlap fs metadata [ 236.841764][ T8492] Quota error (device loop0): write_blk: dquota write failed [ 236.856130][ T8492] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 236.873593][ T8492] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 236.888424][ T8492] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.1113: Failed to acquire dquot type 1 [ 236.905273][ T8492] EXT4-fs error (device loop0): mb_free_blocks:1874: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 236.930681][ T8492] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #12: comm syz.0.1113: corrupted inode contents [ 236.952571][ T8492] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #12: comm syz.0.1113: mark_inode_dirty error [ 237.031535][ T8492] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #12: comm syz.0.1113: corrupted inode contents [ 237.087996][ T8492] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #12: comm syz.0.1113: mark_inode_dirty error [ 237.104292][ T8492] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #12: comm syz.0.1113: corrupted inode contents [ 237.126285][ T8492] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 237.188757][ T8492] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #12: comm syz.0.1113: corrupted inode contents [ 237.227730][ T8492] EXT4-fs error (device loop0): ext4_truncate:4279: inode #12: comm syz.0.1113: mark_inode_dirty error [ 237.294187][ T8492] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 237.317605][ T8492] EXT4-fs (loop0): 1 truncate cleaned up [ 237.324109][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 237.339698][ T8492] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,grpjquota=,noinit_itable,quota,debug,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 237.581423][ T8530] binder: 8529:8530 ioctl c018620c 200000000300 returned -1 [ 237.688132][ T8532] loop1: detected capacity change from 0 to 2048 [ 237.761747][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1132'. [ 237.795156][ T8538] device netdevsim0 entered promiscuous mode [ 237.808258][ T8532] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27485, location=27485 [ 237.819524][ T4707] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 237.838132][ T8538] device macvtap1 entered promiscuous mode [ 237.865339][ T8532] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.938208][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1132'. [ 237.981543][ T8532] overlayfs: upper fs needs to support d_type. [ 238.022709][ T8542] device macvtap2 entered promiscuous mode [ 238.046816][ T8532] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 238.069780][ T4707] usb 8-1: Using ep0 maxpacket: 16 [ 238.078771][ T8532] overlayfs: failed to set xattr on upper [ 238.120866][ T8532] overlayfs: ...falling back to index=off,metacopy=off. [ 238.128051][ T8532] overlayfs: ...falling back to xino=off. [ 238.189640][ T4707] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.220128][ T4707] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.385874][ T4186] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 238.395306][ T4707] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.409812][ T4707] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.441174][ T4186] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 238.450221][ T4707] usb 8-1: Product: syz [ 238.454500][ T4707] usb 8-1: Manufacturer: syz [ 238.459141][ T4707] usb 8-1: SerialNumber: syz [ 238.750056][ T6952] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 238.829157][ T8564] device syzkaller1 entered promiscuous mode [ 238.831131][ T4707] usb 8-1: 0:2 : does not exist [ 238.907448][ T4707] usb 8-1: USB disconnect, device number 7 [ 239.019535][ T6952] usb 1-1: Using ep0 maxpacket: 8 [ 239.057604][ T8570] loop5: detected capacity change from 0 to 512 [ 239.098266][ T8570] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 239.109874][ T8570] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 239.140508][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.150329][ T8111] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 239.164583][ T6952] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 239.181572][ T6952] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.212140][ T6952] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.239601][ T6952] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.269466][ T6952] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.319481][ T6952] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.364621][ T6952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.459708][ T8111] usb 7-1: Using ep0 maxpacket: 16 [ 239.580967][ T8111] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 239.596389][ T8111] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.607819][ T8111] usb 7-1: config 0 descriptor?? [ 239.640032][ T6952] usb 1-1: usb_control_msg returned -32 [ 239.645686][ T6952] usbtmc 1-1:16.0: can't read capabilities [ 239.671790][ T8111] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 239.727743][ T8574] chnl_net:caif_netlink_parms(): no params data found [ 239.838729][ T6952] usb 1-1: USB disconnect, device number 13 [ 239.860389][ T8574] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.867602][ T8574] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.876907][ T8574] device bridge_slave_0 entered promiscuous mode [ 239.886345][ T8574] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.893671][ T8574] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.906258][ T8574] device bridge_slave_1 entered promiscuous mode [ 239.999971][ T8574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.020724][ T8574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.087141][ T8574] team0: Port device team_slave_0 added [ 240.104956][ T8574] team0: Port device team_slave_1 added [ 240.145268][ T8574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.161180][ T8574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.197238][ T8574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.211618][ T8574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.218649][ T8574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.256038][ T8574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.319054][ T8574] device hsr_slave_0 entered promiscuous mode [ 240.333842][ T8574] device hsr_slave_1 entered promiscuous mode [ 240.349705][ T8574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.359353][ T8574] Cannot create hsr debugfs directory [ 240.405563][ T8591] loop5: detected capacity change from 0 to 32768 [ 240.424552][ T8581] loop7: detected capacity change from 0 to 32768 [ 240.497327][ T8581] XFS (loop7): Mounting V5 Filesystem [ 240.658061][ T8581] XFS (loop7): Ending clean mount [ 240.672153][ T8581] XFS (loop7): Quotacheck needed: Please wait. [ 240.685367][ T8591] XFS (loop5): Mounting V5 Filesystem [ 240.751334][ T8574] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 240.854370][ T8574] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 240.873860][ T8612] loop0: detected capacity change from 0 to 4096 [ 240.887422][ T8574] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 240.916110][ T8581] XFS (loop7): Quotacheck: Done. [ 240.930788][ T8591] XFS (loop5): Ending clean mount [ 240.951175][ T8591] XFS (loop5): Quotacheck needed: Please wait. [ 240.955320][ T8574] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 240.969887][ T8111] gspca_sonixj: reg_w1 err -71 [ 240.999941][ T8111] sonixj: probe of 7-1:0.0 failed with error -71 [ 241.050365][ T8111] usb 7-1: USB disconnect, device number 10 [ 241.125546][ T5886] XFS (loop7): Unmounting Filesystem [ 241.147075][ T8591] XFS (loop5): Quotacheck: Done. [ 241.200772][ T26] audit: type=1800 audit(1776305771.033:59): pid=8591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1154" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 241.390369][ T4184] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 241.403905][ T8574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.413849][ T4184] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 241.450392][ T5054] XFS (loop5): Unmounting Filesystem [ 241.458645][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.467249][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.481783][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 241.540699][ T8574] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.567529][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.586084][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.606769][ T5408] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.614070][ T5408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.660800][ T8615] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 241.768884][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.782652][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.808333][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.830141][ T5408] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.837821][ T5408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.861823][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.897490][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.957169][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.985090][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.017091][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.027304][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.057669][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.085442][ T8627] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1157'. [ 242.151534][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1157'. [ 242.216026][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.241143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.284226][ T8574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.321572][ T8574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.342098][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.360600][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.440312][ T4264] Bluetooth: hci4: command 0x0406 tx timeout [ 242.778640][ T8652] loop0: detected capacity change from 0 to 512 [ 243.186257][ T8641] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.439585][ T6804] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 243.559808][ T4711] Bluetooth: hci2: command 0x041b tx timeout [ 243.699791][ T6804] usb 1-1: Using ep0 maxpacket: 16 [ 243.786353][ T8641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.863348][ T8641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.007146][ T6804] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 244.019488][ T6804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.027544][ T6804] usb 1-1: Product: syz [ 244.040920][ T6804] usb 1-1: Manufacturer: syz [ 244.045683][ T6804] usb 1-1: SerialNumber: syz [ 244.078905][ T6804] usb 1-1: config 0 descriptor?? [ 244.122582][ T6804] gspca_main: spca508-2.14.0 probing 041e:4018 [ 244.329735][ T6804] gspca_spca508: reg_read err -32 [ 244.370230][ T6804] gspca_spca508: reg_read err -32 [ 244.419655][ T6804] gspca_spca508: reg_read err -32 [ 244.485328][ T6804] gspca_spca508: reg_read err -32 [ 244.729763][ T6804] gspca_spca508: reg write: error -71 [ 244.735369][ T6804] spca508: probe of 1-1:0.0 failed with error -71 [ 244.752624][ T6804] usb 1-1: USB disconnect, device number 14 [ 244.793188][ T8641] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.803020][ T8641] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.813501][ T8641] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.825538][ T8641] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.018383][ T8641] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.027452][ T8641] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.036569][ T8641] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.046128][ T8641] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.238618][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.271829][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.305087][ T8574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.471009][ T8684] tipc: Started in network mode [ 245.513168][ T8684] tipc: Node identity 4, cluster identity 4711 [ 245.553437][ T8684] tipc: Node number set to 4 [ 245.639664][ T4712] Bluetooth: hci2: command 0x040f tx timeout [ 245.987823][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.029214][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.070472][ T8703] loop7: detected capacity change from 0 to 128 [ 246.097731][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.129016][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.158087][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.173612][ T8707] loop0: detected capacity change from 0 to 64 [ 246.215279][ T8703] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.236851][ T8703] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 246.246180][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.311770][ T8574] device veth0_vlan entered promiscuous mode [ 246.336090][ T8574] device veth1_vlan entered promiscuous mode [ 246.369696][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.378390][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.421311][ T8710] attempt to access beyond end of device [ 246.421311][ T8710] loop0: rw=0, want=1026, limit=64 [ 246.432380][ T8710] Buffer I/O error on dev loop0, logical block 512, async page read [ 246.465322][ T8574] device veth0_macvtap entered promiscuous mode [ 246.487008][ T8710] attempt to access beyond end of device [ 246.487008][ T8710] loop0: rw=0, want=113154, limit=64 [ 246.503458][ T8574] device veth1_macvtap entered promiscuous mode [ 246.518298][ T8710] Buffer I/O error on dev loop0, logical block 56576, async page read [ 246.578144][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.621118][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.652488][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.696281][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.723090][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.728120][ T8714] loop7: detected capacity change from 0 to 256 [ 246.735052][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.756742][ T8574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.767443][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.825981][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.848905][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.881724][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.942196][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.952542][ T5886] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 246.976985][ T8716] loop0: detected capacity change from 0 to 512 [ 246.999515][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.028852][ T5886] FAT-fs (loop7): Filesystem has been set read-only [ 247.037796][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.055289][ T5886] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 247.060841][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.079533][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.096959][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.107248][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.126409][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.152101][ T8574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.174298][ T8574] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.189023][ T8716] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 247.202815][ T8574] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.231248][ T8716] EXT4-fs (loop0): orphan cleanup on readonly fs [ 247.237692][ T8716] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 247.263894][ T8574] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.309988][ T8716] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1195: attempt to clear invalid blocks 2 len 1 [ 247.323647][ T8574] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.341786][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.356051][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.377050][ T8716] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 247.422837][ T8716] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1195: invalid indirect mapped block 1819239214 (level 0) [ 247.450461][ T8716] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1195: invalid indirect mapped block 1819239214 (level 1) [ 247.489202][ T8716] EXT4-fs (loop0): 1 truncate cleaned up [ 247.504237][ T8716] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 247.642052][ T8716] EXT4-fs (loop0): re-mounted. Opts: usrjquota=,commit=0x0000000000000003,stripe=0x0000000000000000,minixdf,grpjquota=,noinit_itable,. Quota mode: writeback. [ 247.695111][ T4226] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.719540][ T4226] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.759343][ T5391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.767714][ T5391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.832970][ T4712] Bluetooth: hci2: command 0x0419 tx timeout [ 247.982050][ T4226] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.036614][ T4226] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.095978][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 248.114436][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.140110][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.180191][ T26] audit: type=1326 audit(1776305778.013:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8724 comm="syz.0.1200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bec8f5819 code=0x0 [ 248.202284][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.210223][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 248.236552][ T4226] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.259789][ T4226] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.359687][ T4709] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 248.373374][ T4226] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.404484][ T4226] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.719594][ T4709] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 248.730785][ T4709] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 0 [ 248.741229][ T4709] usb 7-1: config 0 interface 0 has no altsetting 0 [ 248.788964][ T8734] loop8: detected capacity change from 0 to 4096 [ 248.906509][ T4709] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 248.935939][ T4709] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 249.002652][ T4709] usb 7-1: Product: syz [ 249.006889][ T4709] usb 7-1: Manufacturer: syz [ 249.008793][ T8737] loop0: detected capacity change from 0 to 16 [ 249.040201][ T4709] usb 7-1: SerialNumber: syz [ 249.047786][ T8737] erofs: (device loop0): mounted with root inode @ nid 36. [ 249.064012][ T8737] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 249.072819][ T4709] usb 7-1: config 0 descriptor?? [ 249.086425][ T8574] ntfs3: loop8: ntfs_evict_inode r=5 failed, -22. [ 249.112034][ T8574] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 249.135462][ T4709] usb 7-1: selecting invalid altsetting 0 [ 249.168371][ T8729] chnl_net:caif_netlink_parms(): no params data found [ 249.318498][ T8726] usb 7-1: selecting invalid altsetting 0 [ 249.329726][ T8740] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000) [ 249.390214][ T8726] usb 7-1: 0:0: usb_set_interface failed (-22) [ 249.402976][ T6811] usb 7-1: USB disconnect, device number 11 [ 249.529825][ T8749] loop0: detected capacity change from 0 to 256 [ 249.686450][ T8752] loop8: detected capacity change from 0 to 512 [ 249.703608][ T8729] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.741625][ T8729] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.776828][ T8729] device bridge_slave_0 entered promiscuous mode [ 249.805946][ T8729] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.823361][ T8729] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.831836][ T8752] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 249.996739][ T8729] device bridge_slave_1 entered promiscuous mode [ 250.158415][ T8729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.192286][ T8729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.237651][ T8729] team0: Port device team_slave_0 added [ 250.267677][ T8729] team0: Port device team_slave_1 added [ 250.394679][ T8729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.439323][ T8729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.466322][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.481397][ T8729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.525169][ T8729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.547368][ T8729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.573440][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.598429][ T8729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.609223][ T4709] Bluetooth: hci1: command 0x0409 tx timeout [ 250.803398][ T8729] device hsr_slave_0 entered promiscuous mode [ 250.820905][ T8729] device hsr_slave_1 entered promiscuous mode [ 250.839648][ T8729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.847289][ T8729] Cannot create hsr debugfs directory [ 251.389052][ T8781] device syzkaller1 entered promiscuous mode [ 251.543173][ T8729] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 251.573974][ T8729] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 251.648208][ T8729] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 251.692808][ T8729] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 252.016310][ T8803] loop8: detected capacity change from 0 to 64 [ 252.047128][ T8729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.078406][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.099293][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.122108][ T8729] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.166127][ T26] audit: type=1800 audit(1776305781.993:61): pid=8803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1222" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 252.273559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.340093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.372154][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.379442][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.467279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.502588][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.526102][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.558499][ T5391] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.566016][ T5391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.620060][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.638762][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.657421][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.679396][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.679942][ T4712] Bluetooth: hci1: command 0x041b tx timeout [ 252.710100][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.776994][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.791993][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.836971][ T8729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.882886][ T8729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.919847][ T4708] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 252.931573][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.962137][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.987947][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.005358][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.181637][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.343607][ T8813] loop8: detected capacity change from 0 to 32768 [ 253.441176][ T4708] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 253.458742][ T4708] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.467580][ T4708] usb 7-1: Product: syz [ 253.471953][ T4708] usb 7-1: Manufacturer: syz [ 253.486679][ T4708] usb 7-1: SerialNumber: syz [ 253.507139][ T8813] XFS (loop8): Mounting V5 Filesystem [ 253.624138][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.632509][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.642252][ T8813] XFS (loop8): Ending clean mount [ 253.649354][ T8729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.916006][ T8574] XFS (loop8): Unmounting Filesystem [ 253.954106][ T8848] loop0: detected capacity change from 0 to 256 [ 253.990043][ T4708] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 254.340559][ T4226] device hsr_slave_0 left promiscuous mode [ 254.350062][ T4226] device hsr_slave_1 left promiscuous mode [ 254.416314][ T4226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.429673][ T4226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.470239][ T4226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.477944][ T4226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.537573][ T4226] device bridge_slave_1 left promiscuous mode [ 254.549737][ T4226] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.562979][ T4226] device bridge_slave_0 left promiscuous mode [ 254.591013][ T4226] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.693493][ T4226] device veth1_macvtap left promiscuous mode [ 254.712612][ T4226] device veth0_macvtap left promiscuous mode [ 254.718770][ T4226] device veth1_vlan left promiscuous mode [ 254.729755][ T4708] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 254.757414][ T4708] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 254.769650][ T4226] device veth0_vlan left promiscuous mode [ 254.792671][ T4708] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 254.822935][ T4708] lan78xx: probe of 7-1:1.0 failed with error -71 [ 254.834468][ T4709] Bluetooth: hci1: command 0x040f tx timeout [ 254.849275][ T4708] usb 7-1: USB disconnect, device number 12 [ 255.122373][ T8868] loop8: detected capacity change from 0 to 512 [ 255.244340][ T8868] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 255.324157][ T8868] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.643016][ T4226] team0 (unregistering): Port device team_slave_1 removed [ 255.723397][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.759630][ T4226] team0 (unregistering): Port device team_slave_0 removed [ 255.790513][ T4226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.840647][ T8887] loop8: detected capacity change from 0 to 256 [ 255.857631][ T4226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.877390][ T8888] loop6: detected capacity change from 0 to 256 [ 255.978879][ T8888] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 256.120497][ T8890] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 256.241565][ T8893] loop6: detected capacity change from 0 to 64 [ 256.324997][ T4226] bond0 (unregistering): Released all slaves [ 256.619871][ T8895] vxcan1 speed is unknown, defaulting to 1000 [ 256.663003][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 256.686532][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 256.727386][ T8895] vxcan1 speed is unknown, defaulting to 1000 [ 256.788312][ T8895] vxcan1 speed is unknown, defaulting to 1000 [ 256.801929][ T8729] device veth0_vlan entered promiscuous mode [ 256.809149][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 256.861424][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.897267][ T8729] device veth1_vlan entered promiscuous mode [ 256.915367][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 256.923372][ T4710] Bluetooth: hci1: command 0x0419 tx timeout [ 256.960002][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 256.978464][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 257.088314][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 257.111614][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.131134][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.164828][ T8729] device veth0_macvtap entered promiscuous mode [ 257.213228][ T8729] device veth1_macvtap entered promiscuous mode [ 257.305731][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.329301][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.347643][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.367667][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.405672][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.442682][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.465600][ T8895] infiniband syz2: set active [ 257.483143][ T8729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.519441][ T8895] infiniband syz2: added vxcan1 [ 257.532390][ T6811] vxcan1 speed is unknown, defaulting to 1000 [ 257.532550][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 257.578022][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 257.596359][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 257.608603][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.651324][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.709597][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.722380][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.751996][ T8895] RDS/IB: syz2: added [ 257.763270][ T8895] smc: adding ib device syz2 with port count 1 [ 257.777922][ T8895] smc: ib device syz2 port 1 has pnetid [ 257.789470][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.830354][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.879800][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.901293][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.926539][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.963967][ T8729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.011096][ T8729] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.038788][ T8729] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.059619][ T8729] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.083249][ T8729] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.139955][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.156504][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.168698][ T8111] vxcan1 speed is unknown, defaulting to 1000 [ 258.247594][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.320629][ T8895] vxcan1 speed is unknown, defaulting to 1000 [ 258.498759][ T5401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.524353][ T5401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.552289][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 258.601596][ T5391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.622739][ T5391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.656613][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 258.944680][ T8895] vxcan1 speed is unknown, defaulting to 1000 [ 259.318053][ T5594] ODEBUG: Out of memory. ODEBUG disabled [ 259.552999][ T8895] vxcan1 speed is unknown, defaulting to 1000 [ 259.682046][ T6811] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 260.040535][ T4708] Bluetooth: hci0: command 0x0409 tx timeout [ 260.079607][ T6811] usb 10-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 260.109523][ T6811] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 26232, setting to 64 [ 260.153025][ T6811] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.173218][ T8895] vxcan1 speed is unknown, defaulting to 1000 [ 260.187859][ T8926] chnl_net:caif_netlink_parms(): no params data found [ 260.195171][ T6811] usb 10-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 260.238743][ T6811] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.283657][ T8976] loop6: detected capacity change from 0 to 4096 [ 260.299742][ T6811] usb 10-1: config 0 descriptor?? [ 260.410243][ T8976] ntfs: volume version 3.1. [ 260.554673][ T4708] usb 10-1: USB disconnect, device number 2 [ 260.615588][ T8926] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.663850][ T8926] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.692387][ T8926] device bridge_slave_0 entered promiscuous mode [ 260.725778][ T8926] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.757417][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.788922][ T8926] device bridge_slave_1 entered promiscuous mode [ 260.910797][ T8968] vxcan1 speed is unknown, defaulting to 1000 [ 260.948704][ T8926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.997978][ T8926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.150390][ T8926] team0: Port device team_slave_0 added [ 261.186977][ T8926] team0: Port device team_slave_1 added [ 261.301513][ T8926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.324309][ T8926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.441812][ T8926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.492587][ T8895] vxcan1 speed is unknown, defaulting to 1000 [ 261.526198][ T8926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.553726][ T8926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.617520][ T8926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.812481][ T4710] Bluetooth: hci5: command 0x0409 tx timeout [ 261.999236][ T8926] device hsr_slave_0 entered promiscuous mode [ 262.030446][ T8926] device hsr_slave_1 entered promiscuous mode [ 262.120640][ T4708] Bluetooth: hci0: command 0x041b tx timeout [ 262.135764][ T8895] vxcan1 speed is unknown, defaulting to 1000 [ 262.438005][ T8968] chnl_net:caif_netlink_parms(): no params data found [ 262.449689][ T4710] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 262.689602][ T4708] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 262.697378][ T8926] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.732542][ T8895] vxcan1 speed is unknown, defaulting to 1000 [ 262.784865][ T8968] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.849527][ T4710] usb 10-1: unable to get BOS descriptor or descriptor too short [ 262.857871][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.898427][ T8968] device bridge_slave_0 entered promiscuous mode [ 262.905942][ T4710] usb 10-1: not running at top speed; connect to a high speed hub [ 262.941991][ T8895] vxcan1 speed is unknown, defaulting to 1000 [ 262.959538][ T4708] usb 7-1: Using ep0 maxpacket: 16 [ 262.977365][ T8926] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.989718][ T4710] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.040268][ T8968] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.047485][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.084244][ T8968] device bridge_slave_1 entered promiscuous mode [ 263.160747][ T8926] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.225004][ T8968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.240434][ T4708] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 263.259612][ T4710] usb 10-1: string descriptor 0 read error: -22 [ 263.266100][ T4708] usb 7-1: New USB device strings: Mfr=1, Product=21, SerialNumber=3 [ 263.275206][ T4710] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.44 [ 263.301368][ T4708] usb 7-1: Product: syz [ 263.309746][ T4710] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.328309][ T4708] usb 7-1: Manufacturer: syz [ 263.333284][ T4708] usb 7-1: SerialNumber: syz [ 263.384444][ T8926] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.481848][ T8968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.521855][ T4226] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.571740][ T9044] Bluetooth: hci0: service_discovery: too big uuid_count value 65532 [ 263.585518][ T8968] team0: Port device team_slave_0 added [ 263.600452][ T4226] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.632049][ T8968] team0: Port device team_slave_1 added [ 263.666570][ T8968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.676478][ T8968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.703912][ T8968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.736756][ T4226] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.763801][ T8968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.773352][ T8968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.807079][ T8968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.862609][ T4226] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.879693][ T4709] Bluetooth: hci5: command 0x041b tx timeout [ 263.930141][ T8968] device hsr_slave_0 entered promiscuous mode [ 263.936927][ T8968] device hsr_slave_1 entered promiscuous mode [ 263.943708][ T8968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.953360][ T8968] Cannot create hsr debugfs directory [ 264.144082][ T4710] usb 10-1: USB disconnect, device number 3 [ 264.199668][ T4709] Bluetooth: hci0: command 0x040f tx timeout [ 264.296408][ T8926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 264.329996][ T8926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 264.588580][ T4226] tipc: Left network mode [ 264.594011][ T8926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 264.626816][ T8926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 264.735598][ T8926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.740617][ T4708] snd-usb-audio: probe of 7-1:1.0 failed with error -71 [ 264.755955][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.766514][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.774581][ T4708] usb 7-1: USB disconnect, device number 13 [ 264.850470][ T8926] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.862601][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.871578][ T6804] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 264.880541][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.889320][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.896478][ T5401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.907478][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.921205][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.939110][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.948049][ T5383] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.955160][ T5383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.003627][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.024525][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.054958][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.070135][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.135918][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.147285][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.149689][ T6804] usb 9-1: Using ep0 maxpacket: 32 [ 265.158088][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.170913][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.179800][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.188358][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.198106][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.210510][ T8926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.289861][ T6804] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.313838][ T6804] usb 9-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 265.375049][ T6804] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.414878][ T6804] usb 9-1: config 0 descriptor?? [ 265.449269][ T9080] vivid-003: disconnect [ 265.467739][ T9080] vivid-003: reconnect [ 265.487518][ T6804] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 265.598607][ T9087] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 265.648891][ T9087] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 265.679798][ T6806] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 265.697386][ T6807] usb 9-1: USB disconnect, device number 2 [ 265.768610][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.787017][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.814384][ T8926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.960499][ T4267] Bluetooth: hci5: command 0x040f tx timeout [ 265.971244][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.991671][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.024957][ T8926] device veth0_vlan entered promiscuous mode [ 266.040341][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.048905][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.084287][ T8926] device veth1_vlan entered promiscuous mode [ 266.091461][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.100276][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.108573][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 266.116674][ T6806] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.184452][ T6808] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 266.220099][ T6808] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 266.242360][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 266.279028][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.297498][ T4708] Bluetooth: hci0: command 0x0419 tx timeout [ 266.309845][ T6806] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 266.312180][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.338322][ T6806] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 266.358001][ T6806] usb 10-1: Product: syz [ 266.364420][ T8926] device veth0_macvtap entered promiscuous mode [ 266.387017][ T6806] usb 10-1: Manufacturer: syz [ 266.402339][ T6806] usb 10-1: SerialNumber: syz [ 266.428161][ T8926] device veth1_macvtap entered promiscuous mode [ 266.494815][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.515780][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.535367][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.548369][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.562154][ T6808] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 266.573052][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.592290][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.609720][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.631170][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.650900][ T8926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.676373][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.694515][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 266.712352][ T6806] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 266.713576][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.743171][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.790881][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.821553][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.843003][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.875025][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.891463][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.903109][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.913293][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.924757][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.935425][ T8926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.946447][ T6808] usb 7-1: config 0 has no interfaces? [ 266.966772][ T8926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.989142][ T8926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.005615][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.015664][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.029952][ T6808] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.040682][ T6808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 267.048859][ T6808] usb 7-1: SerialNumber: syz [ 267.071143][ T6808] usb 7-1: config 0 descriptor?? [ 267.166232][ T8926] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.183674][ T8926] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.197801][ T8926] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.207077][ T8926] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.398462][ T4267] usb 7-1: USB disconnect, device number 14 [ 267.612845][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.626552][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.649143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 267.718231][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.750981][ T8968] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.764398][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.786552][ T8968] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.811809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 267.835878][ T8968] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.861815][ T8968] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.009756][ T9134] loop0: detected capacity change from 0 to 128 [ 268.039857][ T4708] Bluetooth: hci5: command 0x0419 tx timeout [ 268.078156][ T9134] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 268.138075][ T9134] hpfs: filesystem error: improperly stopped [ 268.199667][ T9134] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 268.219889][ T8968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.249573][ T9134] hpfs: You really don't want any checks? You are crazy... [ 268.267208][ T9143] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 268.296783][ T9134] hpfs: hpfs_map_sector(): read error [ 268.304793][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.318747][ T9134] hpfs: code page support is disabled [ 268.326278][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.334736][ T9134] hpfs: hpfs_map_4sectors(): unaligned read [ 268.351829][ T8968] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.370215][ T9134] hpfs: hpfs_map_4sectors(): unaligned read [ 268.372639][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.383350][ T9134] hpfs: filesystem error: unable to find root dir [ 268.421613][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.431472][ T4709] usb 10-1: USB disconnect, device number 4 [ 268.453565][ T4709] usblp0: removed [ 268.463987][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.471330][ T5401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.498405][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.512048][ T4267] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 268.548759][ T9148] loop9: detected capacity change from 0 to 256 [ 268.580000][ T4226] device hsr_slave_0 left promiscuous mode [ 268.630524][ T4226] device hsr_slave_1 left promiscuous mode [ 268.653378][ T9152] loop6: detected capacity change from 0 to 2048 [ 268.660652][ T9148] exfat: Deprecated parameter 'utf8' [ 268.669130][ T4226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.691372][ T4226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.711598][ T9148] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 268.749192][ T4226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.773973][ T4267] usb 9-1: Using ep0 maxpacket: 8 [ 268.793285][ T4226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.830274][ T9158] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 268.860019][ T26] audit: type=1800 audit(1776305798.683:62): pid=9152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1292" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 268.885340][ T4226] device bridge_slave_1 left promiscuous mode [ 268.900529][ T4267] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 268.911135][ T4226] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.920014][ T4267] usb 9-1: config 179 has no interface number 0 [ 268.950459][ T4226] device bridge_slave_0 left promiscuous mode [ 268.966657][ T4267] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 268.973337][ T4226] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.025408][ T4267] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 269.066360][ T4267] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 269.098605][ T4226] device hsr_slave_0 left promiscuous mode [ 269.123092][ T4226] device hsr_slave_1 left promiscuous mode [ 269.144166][ T4267] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 269.161056][ T4226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.179650][ T4267] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 269.194212][ T4226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.209477][ T4226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.219826][ T4267] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 269.249275][ T4267] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.265368][ T4226] device bridge_slave_1 left promiscuous mode [ 269.298396][ T4226] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.306671][ T9142] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 269.338043][ T4226] device bridge_slave_0 left promiscuous mode [ 269.388866][ T4226] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.463605][ T4226] device veth1_macvtap left promiscuous mode [ 269.478942][ T4226] device veth0_macvtap left promiscuous mode [ 269.516106][ T4226] device veth1_vlan left promiscuous mode [ 269.523656][ T4226] device veth0_vlan left promiscuous mode [ 269.535264][ T4226] device bond0 left promiscuous mode [ 269.542575][ T4226] device bond_slave_0 left promiscuous mode [ 269.548974][ T4226] device bond_slave_1 left promiscuous mode [ 269.576071][ T4226] device veth1_macvtap left promiscuous mode [ 269.584748][ T4226] device veth0_macvtap left promiscuous mode [ 269.593706][ T4226] device veth1_vlan left promiscuous mode [ 269.621647][ T4226] device veth0_vlan left promiscuous mode [ 269.667971][ T4713] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input11 [ 269.794707][ T9181] loop6: detected capacity change from 0 to 512 [ 269.824696][ T6811] usb 9-1: USB disconnect, device number 3 [ 269.839419][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 269.847854][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 269.870879][ T6811] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 269.880855][ T9181] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 270.012412][ T9181] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1299: bg 0: block 104: invalid block bitmap [ 270.034203][ T9181] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 270.044791][ T9181] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1299: invalid indirect mapped block 1 (level 1) [ 270.063613][ T9181] EXT4-fs (loop6): 1 truncate cleaned up [ 270.070125][ T9181] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 270.126210][ T9181] EXT4-fs (loop6): shut down requested (2) [ 270.497825][ T9193] loop8: detected capacity change from 0 to 2048 [ 270.840668][ T4226] team0 (unregistering): Port device team_slave_1 removed [ 270.944148][ T4226] team0 (unregistering): Port device team_slave_0 removed [ 271.066329][ T4226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.176382][ T4226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.284661][ T9190] loop0: detected capacity change from 0 to 40427 [ 271.344225][ T9190] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x1ffff [ 271.412970][ T9190] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 271.462277][ T9190] F2FS-fs (loop0): invalid crc value [ 271.495091][ T9190] F2FS-fs (loop0): Found nat_bits in checkpoint [ 271.519885][ T9196] loop6: detected capacity change from 0 to 131072 [ 271.631203][ T9196] F2FS-fs (loop6): Found nat_bits in checkpoint [ 271.683651][ T9190] F2FS-fs (loop0): Start checkpoint disabled! [ 271.690932][ T9196] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 271.710550][ T4226] bond0 (unregistering): Released all slaves [ 271.726888][ T9190] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 271.759863][ T9196] F2FS-fs (loop6): inode (7) has corrupted xattr [ 271.775473][ T9196] F2FS-fs (loop6): inode (7) has corrupted xattr [ 271.782949][ T9196] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=fff70000, run fsck to fix. [ 272.012623][ T5395] attempt to access beyond end of device [ 272.012623][ T5395] loop0: rw=2049, want=40976, limit=40427 [ 272.380769][ T4226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.460046][ T4226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.663843][ T4226] bond0 (unregistering): Released all slaves [ 272.770100][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.791449][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.809933][ T5385] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.817076][ T5385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.844360][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.954022][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.999147][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.103111][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.128192][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.158849][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.208778][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.249224][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.269833][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.292314][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.301337][ T9216] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 273.301337][ T9216] Q&|xùX [ 273.312795][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.334785][ T8968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.345089][ T9211] loop0: detected capacity change from 0 to 32768 [ 273.528905][ T9211] XFS (loop0): Mounting V5 Filesystem [ 273.650923][ T9211] XFS (loop0): Ending clean mount [ 273.701225][ T9233] netlink: 'syz.8.1312': attribute type 3 has an invalid length. [ 273.740930][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1312'. [ 273.869989][ T8926] XFS (loop0): Unmounting Filesystem [ 273.918163][ T9218] loop6: detected capacity change from 0 to 32768 [ 273.984082][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.002901][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.030879][ T9218] XFS: attr2 mount option is deprecated. [ 274.052103][ T8968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.199488][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.313699][ T9218] XFS (loop6): Mounting V5 Filesystem [ 274.324598][ T9257] 9p: Unknown uid 00000000004294967295 [ 274.515834][ T9218] XFS (loop6): Ending clean mount [ 274.530077][ T9218] XFS (loop6): Quotacheck needed: Please wait. [ 274.719322][ T9218] XFS (loop6): Quotacheck: Done. [ 274.942582][ T5175] XFS (loop6): Unmounting Filesystem [ 275.022022][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.040768][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.205375][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.219079][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.253115][ T8968] device veth0_vlan entered promiscuous mode [ 275.285747][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.300396][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.310331][ T4708] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 275.343818][ T9245] loop9: detected capacity change from 0 to 32768 [ 275.368567][ T8968] device veth1_vlan entered promiscuous mode [ 275.422645][ T9245] XFS: noikeep mount option is deprecated. [ 275.483671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 275.513414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 275.560226][ T4708] usb 9-1: Using ep0 maxpacket: 8 [ 275.580293][ T9245] XFS (loop9): Mounting V5 Filesystem [ 275.581121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.669530][ T26] audit: type=1326 audit(1776305805.503:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9295 comm="syz.6.1320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad35525819 code=0x0 [ 275.693520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.706097][ T8968] device veth0_macvtap entered promiscuous mode [ 275.718791][ T8968] device veth1_macvtap entered promiscuous mode [ 275.737012][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.748770][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.758758][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.772799][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.796186][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.818046][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.839574][ T4708] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 275.846512][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.869521][ T4708] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.898002][ T4708] usb 9-1: Product: syz [ 275.908424][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.909672][ T4708] usb 9-1: Manufacturer: syz [ 275.946912][ T8968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.965566][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.977644][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.984089][ T4708] usb 9-1: SerialNumber: syz [ 275.997745][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.017389][ T4708] usb 9-1: config 0 descriptor?? [ 276.034388][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.050332][ T9245] XFS (loop9): Ending clean mount [ 276.065802][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.077045][ T9245] XFS (loop9): Quotacheck needed: Please wait. [ 276.105794][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.160655][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.207744][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.229268][ T9245] XFS (loop9): Quotacheck: Done. [ 276.262513][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.300324][ T4708] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 276.309696][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.344965][ T8968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.392833][ T8968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.433650][ T8729] XFS (loop9): Unmounting Filesystem [ 276.441541][ T8968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.487361][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.520177][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.592551][ T8968] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.637567][ T8968] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.679762][ T8968] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.688634][ T8968] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.002985][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.026370][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.077740][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.201745][ T5385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.215744][ T5385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.240042][ T4708] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 277.257413][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 277.288112][ T4708] usb 9-1: USB disconnect, device number 4 [ 277.552704][ T9341] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 277.703657][ T26] audit: type=1326 audit(1776305807.533:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.4.1333" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f433229c819 code=0x0 [ 277.852476][ T9351] loop9: detected capacity change from 0 to 2048 [ 277.937896][ T9357] fuse: root generation should be zero [ 277.986254][ T9351] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.006315][ T9355] loop6: detected capacity change from 0 to 4096 [ 278.050510][ T9355] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 278.148447][ T9355] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 278.157135][ T8729] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 278.193626][ T26] audit: type=1800 audit(1776305808.023:65): pid=9355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1337" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 278.315225][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880602d9c00: rx timeout, send abort [ 278.351046][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880602d9c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 279.088118][ T9395] input: syz0 as /devices/virtual/input/input12 [ 279.585588][ T9406] loop9: detected capacity change from 0 to 4096 [ 279.679482][ T6809] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 279.682302][ T9413] loop4: detected capacity change from 0 to 128 [ 279.716026][ T9406] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512) [ 279.799120][ T9406] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 279.883476][ T9413] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.944238][ T26] audit: type=1800 audit(1776305809.773:66): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1350" name="file1" dev="loop9" ino=24 res=0 errno=0 [ 279.987369][ T9413] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 280.120950][ T6809] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.191782][ T6809] usb 7-1: config 0 has no interface number 0 [ 280.197959][ T6809] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 280.280969][ T6809] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 280.336656][ T9429] loop8: detected capacity change from 0 to 1024 [ 280.350214][ T6809] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 280.389426][ T6809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.440204][ T6809] usb 7-1: config 0 descriptor?? [ 280.462836][ T9429] EXT4-fs (loop8): Ignoring removed bh option [ 280.469979][ T9408] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 280.516524][ T6809] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 280.552428][ T9437] loop4: detected capacity change from 0 to 16 [ 280.587211][ T9429] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 280.667121][ T9437] erofs: (device loop4): mounted with root inode @ nid 36. [ 280.807247][ T6807] usb 7-1: USB disconnect, device number 15 [ 280.837834][ T9429] EXT4-fs error (device loop8): ext4_read_inline_dir:1618: inode #12: block 7: comm syz.8.1356: path /43/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 280.941980][ T9429] EXT4-fs (loop8): Remounting filesystem read-only [ 281.608108][ T9476] loop9: detected capacity change from 0 to 256 [ 281.692407][ T9478] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 281.861041][ T9476] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0xf17e4aaa, utbl_chksum : 0xe619d30d) [ 282.219541][ T4708] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 282.342577][ T9503] loop5: detected capacity change from 0 to 7 [ 282.363939][ T4174] Dev loop5: unable to read RDB block 7 [ 282.375333][ T4174] loop5: unable to read partition table [ 282.383735][ T4174] loop5: partition table beyond EOD, truncated [ 282.402645][ T9503] Dev loop5: unable to read RDB block 7 [ 282.408470][ T9503] loop5: unable to read partition table [ 282.438719][ T9503] loop5: partition table beyond EOD, truncated [ 282.463395][ T9503] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 282.473375][ T4708] usb 9-1: Using ep0 maxpacket: 8 [ 282.600342][ T4708] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 282.631856][ T4708] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.677578][ T4708] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.711427][ T9480] loop6: detected capacity change from 0 to 32768 [ 282.734671][ T4708] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.759193][ T4708] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.863284][ T4708] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 282.879136][ T9480] XFS (loop6): Mounting V5 Filesystem [ 282.887791][ T4708] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.099985][ T9480] XFS (loop6): Ending clean mount [ 283.150874][ T9480] XFS (loop6): Quotacheck needed: Please wait. [ 283.208952][ T9535] loop9: detected capacity change from 0 to 128 [ 283.316425][ T9480] XFS (loop6): Quotacheck: Done. [ 283.554495][ T5175] XFS (loop6): Unmounting Filesystem [ 283.597930][ T9554] binder: 9553:9554 ioctl c0306201 2000000003c0 returned -14 [ 283.789950][ T9568] usbtmc 9-1:16.0: simple control status returned 3d [ 283.977438][ T9575] "syz.4.1398" (9575) uses obsolete ecb(arc4) skcipher [ 284.000471][ T4708] usb 9-1: USB disconnect, device number 5 [ 284.183967][ T1108] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 284.355603][ T9590] loop0: detected capacity change from 0 to 256 [ 284.409604][ T9590] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 284.429552][ T1108] usb 10-1: Using ep0 maxpacket: 16 [ 284.449924][ T9590] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 284.492915][ T9590] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 284.549653][ T1108] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.584489][ T1108] usb 10-1: config 0 has no interfaces? [ 284.613664][ T1108] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 284.643973][ T1108] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.671849][ T1108] usb 10-1: config 0 descriptor?? [ 284.738285][ T9602] loop8: detected capacity change from 0 to 512 [ 284.769911][ T6807] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 284.832329][ T9602] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 284.844079][ T9602] ext4 filesystem being mounted at /49/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.880341][ T9602] EXT4-fs (loop8): Ignoring removed orlov option [ 284.897767][ T9602] EXT4-fs (loop8): can't enable nombcache during remount [ 284.937961][ T4713] usb 10-1: USB disconnect, device number 5 [ 285.065798][ T6807] usb 7-1: Using ep0 maxpacket: 16 [ 285.185063][ T9622] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 285.192741][ T6807] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 285.215637][ T6807] usb 7-1: config 0 has no interface number 0 [ 285.239519][ T6804] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 285.247134][ T6807] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 285.260120][ T9622] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 285.277708][ T6807] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 285.423260][ T9634] device batadv_slave_0 entered promiscuous mode [ 285.438268][ T9632] device batadv_slave_0 left promiscuous mode [ 285.469661][ T6807] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 285.478766][ T6807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.509517][ T6804] usb 5-1: Using ep0 maxpacket: 32 [ 285.520254][ T6807] usb 7-1: Product: syz [ 285.524630][ T6807] usb 7-1: Manufacturer: syz [ 285.566817][ T6807] usb 7-1: SerialNumber: syz [ 285.605910][ T9639] loop9: detected capacity change from 0 to 128 [ 285.614711][ T6807] usb 7-1: config 0 descriptor?? [ 285.643718][ T6804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.655209][ T6804] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.666820][ T6804] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.677511][ T9595] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 285.682291][ T6804] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 285.703285][ T9595] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 285.753207][ T9639] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 285.759664][ T6804] usb 5-1: config 0 interface 0 has no altsetting 0 [ 285.775303][ T9646] loop8: detected capacity change from 0 to 512 [ 285.812261][ T6804] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 285.844660][ T26] audit: type=1800 audit(1776305815.673:67): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1414" name="bus" dev="loop9" ino=115 res=0 errno=0 [ 285.849758][ T6804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.937293][ T9595] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 285.956150][ T9646] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1416: invalid indirect mapped block 256 (level 2) [ 285.970181][ T6804] usb 5-1: config 0 descriptor?? [ 285.987077][ T9595] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 285.990329][ T9649] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 286.051946][ T9646] EXT4-fs (loop8): 2 truncates cleaned up [ 286.068442][ T9646] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 286.183924][ T9646] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.1416: bg 0: block 5: invalid block bitmap [ 286.231630][ T9646] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 286.245349][ T6807] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 286.286540][ T9646] EXT4-fs (loop8): This should not happen!! Data will be lost [ 286.286540][ T9646] [ 286.307030][ T9646] EXT4-fs (loop8): Total free blocks count 0 [ 286.322204][ T9646] EXT4-fs (loop8): Free/Dirty block details [ 286.338771][ T9646] EXT4-fs (loop8): free_blocks=0 [ 286.351166][ T9646] EXT4-fs (loop8): dirty_blocks=2 [ 286.364354][ T9646] EXT4-fs (loop8): Block reservation details [ 286.378691][ T9646] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 286.433999][ T5408] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 286.455007][ T6804] hid-thrustmaster 0003:044F:B65D.0013: item fetching failed at offset 3/5 [ 286.468678][ T5408] EXT4-fs (loop8): This should not happen!! Data will be lost [ 286.468678][ T5408] [ 286.486570][ T6804] hid-thrustmaster 0003:044F:B65D.0013: parse failed with error -22 [ 286.502518][ T26] audit: type=1800 audit(1776305816.333:68): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1414" name="file1" dev="loop9" ino=94 res=0 errno=0 [ 286.519593][ T6804] hid-thrustmaster: probe of 0003:044F:B65D.0013 failed with error -22 [ 286.670306][ T9612] udc-core: couldn't find an available UDC or it's busy [ 286.687651][ T9612] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 286.706748][ T1108] usb 5-1: USB disconnect, device number 6 [ 286.919655][ T4713] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 287.080059][ T6807] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 287.097929][ T6807] asix: probe of 7-1:0.34 failed with error -71 [ 287.159775][ T4713] usb 9-1: Using ep0 maxpacket: 32 [ 287.173440][ T6807] usb 7-1: USB disconnect, device number 16 [ 287.289720][ T4713] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 287.308167][ T4713] usb 9-1: config 0 has no interface number 0 [ 287.329463][ T4713] usb 9-1: config 0 interface 184 has no altsetting 0 [ 287.493545][ T4713] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 287.530190][ T4713] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.557465][ T4713] usb 9-1: Product: syz [ 287.566443][ T9698] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input13 [ 287.578215][ T4713] usb 9-1: Manufacturer: syz [ 287.583562][ T4713] usb 9-1: SerialNumber: syz [ 287.600121][ T4713] usb 9-1: config 0 descriptor?? [ 287.640685][ T4713] smsc75xx v1.0.0 [ 288.046322][ T9683] loop9: detected capacity change from 0 to 32768 [ 288.508466][ T9720] loop0: detected capacity change from 0 to 256 [ 288.690529][ T9706] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.698515][ T9706] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.739683][ T4713] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 288.964013][ T4713] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 288.992387][ T4713] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 289.026447][ T4713] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 289.047342][ T4713] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 289.067697][ T4713] smsc75xx: probe of 9-1:0.184 failed with error -71 [ 289.095687][ T4713] usb 9-1: USB disconnect, device number 6 [ 289.754907][ T9706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.842735][ T9706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.365029][ T9706] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.374581][ T9706] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.383570][ T9706] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.392721][ T9706] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.582827][ T9759] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 290.609953][ T9759] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 290.628065][ T9759] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 290.648380][ T9759] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 290.692712][ T9759] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 290.711412][ T9759] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 290.724585][ T9759] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 290.737010][ T9759] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 290.765770][ T9759] device geneve2 entered promiscuous mode [ 290.822560][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1443'. [ 291.159858][ T8111] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 291.712627][ T8111] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 291.731954][ T8111] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.756264][ T8111] usb 7-1: Product: syz [ 291.765676][ T8111] usb 7-1: Manufacturer: syz [ 291.770757][ T8111] usb 7-1: SerialNumber: syz [ 291.841667][ T8111] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 291.859563][ T4709] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 291.970280][ T9827] loop4: detected capacity change from 0 to 256 [ 292.099523][ T6807] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 292.119872][ T4709] usb 1-1: Using ep0 maxpacket: 8 [ 292.241403][ T4709] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 292.256131][ T4709] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 292.287754][ T4709] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 292.308509][ T4709] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.329418][ T4709] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.343020][ T4709] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.353015][ T4709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.359664][ T6807] usb 10-1: Using ep0 maxpacket: 8 [ 292.479780][ T6807] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.491226][ T9845] loop4: detected capacity change from 0 to 512 [ 292.509603][ T6807] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.519810][ T6807] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.545162][ T6807] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.574138][ T9845] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 292.600986][ T6807] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.623048][ T6807] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.649746][ T4709] usb 1-1: GET_CAPABILITIES returned 0 [ 292.655738][ T4709] usbtmc 1-1:16.0: can't read capabilities [ 292.669623][ T8111] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 292.758471][ T9845] [ 292.760934][ T9845] ====================================================== [ 292.767955][ T9845] WARNING: possible circular locking dependency detected [ 292.774996][ T9845] syzkaller #0 Not tainted [ 292.779457][ T9845] ------------------------------------------------------ [ 292.786604][ T9845] syz.4.1465/9845 is trying to acquire lock: [ 292.792881][ T9845] ffff888079464bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 292.803151][ T9845] [ 292.803151][ T9845] but task is already holding lock: [ 292.810539][ T9845] ffff8880608b6e70 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 292.820504][ T9845] [ 292.820504][ T9845] which lock already depends on the new lock. [ 292.820504][ T9845] [ 292.830933][ T9845] [ 292.830933][ T9845] the existing dependency chain (in reverse order) is: [ 292.839974][ T9845] [ 292.839974][ T9845] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 292.847666][ T9845] down_write+0x38/0x60 [ 292.852384][ T9845] ext4_destroy_inline_data+0x24/0xe0 [ 292.858348][ T9845] ext4_writepages+0x670/0x2df0 [ 292.863757][ T9845] do_writepages+0x476/0x6e0 [ 292.868913][ T9845] filemap_fdatawrite_wbc+0x1eb/0x240 [ 292.874846][ T9845] file_write_and_wait_range+0x14d/0x220 [ 292.881042][ T9845] ext4_sync_file+0x1ff/0xae0 [ 292.886403][ T9845] ext4_buffered_write_iter+0x338/0x3b0 [ 292.892600][ T9845] ext4_file_write_iter+0x74d/0x1700 [ 292.898458][ T9845] vfs_write+0x745/0xd60 [ 292.903259][ T9845] __x64_sys_pwrite64+0x19a/0x220 [ 292.905130][ T6807] usb 10-1: GET_CAPABILITIES returned 0 [ 292.908834][ T9845] do_syscall_64+0x4c/0xa0 [ 292.908858][ T9845] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 292.908880][ T9845] [ 292.908880][ T9845] -> #0 [ 292.922155][ T6807] usbtmc 10-1:16.0: can't read capabilities [ 292.925827][ T9845] (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 292.925858][ T9845] __lock_acquire+0x2c42/0x7d10 [ 292.948002][ T9845] lock_acquire+0x19e/0x400 [ 292.953072][ T9845] percpu_down_read+0x46/0x1b0 [ 292.958518][ T9845] ext4_writepages+0x20f/0x2df0 [ 292.964100][ T9845] do_writepages+0x476/0x6e0 [ 292.969422][ T9845] __writeback_single_inode+0x153/0xda0 [ 292.975696][ T9845] writeback_single_inode+0x3cb/0x8e0 [ 292.981622][ T9845] write_inode_now+0x23b/0x2c0 [ 292.986937][ T9845] iput+0x5ab/0x8a0 [ 292.991463][ T9845] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 292.997395][ T9845] ext4_xattr_block_set+0x979/0x2d20 [ 293.003264][ T9845] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 293.009631][ T9845] __ext4_expand_extra_isize+0x301/0x3e0 [ 293.015902][ T9845] __ext4_mark_inode_dirty+0x469/0x700 [ 293.022110][ T9845] ext4_evict_inode+0xa8d/0x1090 [ 293.027644][ T9845] evict+0x4c9/0x8d0 [ 293.032101][ T9845] ext4_orphan_cleanup+0xad2/0x1320 [ 293.037852][ T9845] ext4_fill_super+0x8e25/0x95a0 [ 293.043343][ T9845] mount_bdev+0x287/0x3c0 [ 293.048313][ T9845] legacy_get_tree+0xe6/0x180 [ 293.053547][ T9845] vfs_get_tree+0x88/0x270 [ 293.058523][ T9845] do_new_mount+0x24a/0xa40 [ 293.063589][ T9845] __se_sys_mount+0x2e3/0x3d0 [ 293.068828][ T9845] do_syscall_64+0x4c/0xa0 [ 293.074052][ T9845] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.080623][ T9845] [ 293.080623][ T9845] other info that might help us debug this: [ 293.080623][ T9845] [ 293.090911][ T9845] Possible unsafe locking scenario: [ 293.090911][ T9845] [ 293.098406][ T9845] CPU0 CPU1 [ 293.103921][ T9845] ---- ---- [ 293.109646][ T9845] lock(&ei->xattr_sem); [ 293.114038][ T9845] lock(&sbi->s_writepages_rwsem); [ 293.121790][ T9845] lock(&ei->xattr_sem); [ 293.128672][ T9845] lock(&sbi->s_writepages_rwsem); [ 293.129682][ T6807] usb 10-1: USB disconnect, device number 6 [ 293.133919][ T9845] [ 293.133919][ T9845] *** DEADLOCK *** [ 293.133919][ T9845] [ 293.133926][ T9845] 3 locks held by syz.4.1465/9845: [ 293.133939][ T9845] #0: ffff8880794660e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 293.163528][ T9845] #1: ffff888079466650 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 293.173062][ T9845] #2: ffff8880608b6e70 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 293.183474][ T9845] [ 293.183474][ T9845] stack backtrace: [ 293.189398][ T9845] CPU: 1 PID: 9845 Comm: syz.4.1465 Not tainted syzkaller #0 [ 293.196912][ T9845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 293.207007][ T9845] Call Trace: [ 293.210322][ T9845] [ 293.213303][ T9845] dump_stack_lvl+0x188/0x250 [ 293.215730][ T6809] usb 7-1: USB disconnect, device number 17 [ 293.218188][ T9845] ? load_image+0x400/0x400 [ 293.228620][ T9845] ? show_regs_print_info+0x20/0x20 [ 293.233875][ T9845] ? print_circular_bug+0x12b/0x1a0 [ 293.239122][ T9845] check_noncircular+0x296/0x330 [ 293.244094][ T9845] ? look_up_lock_class+0x71/0x110 [ 293.249241][ T9845] ? add_chain_block+0x940/0x940 [ 293.254214][ T9845] ? lockdep_lock+0xf1/0x1f0 [ 293.258840][ T9845] ? mark_lock+0x94/0x320 [ 293.263198][ T9845] __lock_acquire+0x2c42/0x7d10 [ 293.268092][ T9845] ? __lock_acquire+0x12e8/0x7d10 [ 293.273154][ T9845] ? verify_lock_unused+0x140/0x140 [ 293.278393][ T9845] ? mark_lock+0x94/0x320 [ 293.282749][ T9845] ? __lock_acquire+0x13bc/0x7d10 [ 293.287801][ T9845] lock_acquire+0x19e/0x400 [ 293.292329][ T9845] ? ext4_writepages+0x20f/0x2df0 [ 293.297379][ T9845] ? mark_lock+0x94/0x320 [ 293.301726][ T9845] ? __might_sleep+0xf0/0xf0 [ 293.306336][ T9845] ? read_lock_is_recursive+0x10/0x10 [ 293.311732][ T9845] ? mark_lock+0x94/0x320 [ 293.316076][ T9845] percpu_down_read+0x46/0x1b0 [ 293.320861][ T9845] ? ext4_writepages+0x20f/0x2df0 [ 293.325906][ T9845] ext4_writepages+0x20f/0x2df0 [ 293.330778][ T9845] ? rcu_lock_release+0x5/0x20 [ 293.335651][ T9845] ? __lock_acquire+0x7d10/0x7d10 [ 293.340702][ T9845] ? unwind_next_frame+0x1296/0x1d90 [ 293.346015][ T9845] ? deref_stack_reg+0xd0/0x120 [ 293.350890][ T9845] ? 0xffffffffa002a000 [ 293.355147][ T9845] ? is_bpf_text_address+0x254/0x270 [ 293.360451][ T9845] ? mark_lock+0x94/0x320 [ 293.364820][ T9845] ? ext4_readpage+0x2e0/0x2e0 [ 293.369602][ T9845] ? __lock_acquire+0x13bc/0x7d10 [ 293.374671][ T9845] ? arch_stack_walk+0xf2/0x140 [ 293.379553][ T9845] ? add_chain_block+0x940/0x940 [ 293.384513][ T9845] ? lockdep_unlock+0x143/0x2e0 [ 293.389509][ T9845] ? lockdep_lock+0x1f0/0x1f0 [ 293.394241][ T9845] ? ext4_readpage+0x2e0/0x2e0 [ 293.399032][ T9845] do_writepages+0x476/0x6e0 [ 293.403668][ T9845] ? __writepage+0x130/0x130 [ 293.408287][ T9845] ? writeback_single_inode+0x3c0/0x8e0 [ 293.413946][ T9845] ? __lock_acquire+0x7d10/0x7d10 [ 293.419000][ T9845] ? do_raw_spin_lock+0x128/0x2f0 [ 293.424069][ T9845] __writeback_single_inode+0x153/0xda0 [ 293.429870][ T9845] writeback_single_inode+0x3cb/0x8e0 [ 293.435358][ T9845] ? write_inode_now+0x2c0/0x2c0 [ 293.440358][ T9845] write_inode_now+0x23b/0x2c0 [ 293.445160][ T9845] ? bdi_split_work_to_wbs+0x8a0/0x8a0 [ 293.450648][ T9845] ? do_raw_spin_unlock+0x11d/0x230 [ 293.455916][ T9845] iput+0x5ab/0x8a0 [ 293.459754][ T9845] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 293.465164][ T9845] ? ext4_xattr_ibody_set+0x330/0x330 [ 293.470590][ T9845] ext4_xattr_block_set+0x979/0x2d20 [ 293.475904][ T9845] ? ext4_get_inode_loc+0x120/0x120 [ 293.481127][ T9845] ? ext4_xattr_block_find+0x500/0x500 [ 293.486608][ T9845] ? ext4_xattr_block_find+0xe6/0x500 [ 293.491999][ T9845] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 293.497836][ T9845] __ext4_expand_extra_isize+0x301/0x3e0 [ 293.503488][ T9845] __ext4_mark_inode_dirty+0x469/0x700 [ 293.508968][ T9845] ext4_evict_inode+0xa8d/0x1090 [ 293.513929][ T9845] ? _raw_spin_unlock+0x24/0x40 [ 293.518801][ T9845] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 293.524738][ T9845] ? do_raw_spin_unlock+0x11d/0x230 [ 293.529950][ T9845] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 293.535859][ T9845] evict+0x4c9/0x8d0 [ 293.539779][ T9845] ? proc_nr_inodes+0x320/0x320 [ 293.544649][ T9845] ? do_raw_spin_unlock+0x11d/0x230 [ 293.549868][ T9845] ? _raw_spin_unlock+0x24/0x40 [ 293.554733][ T9845] ? iput+0x706/0x8a0 [ 293.558738][ T9845] ext4_orphan_cleanup+0xad2/0x1320 [ 293.563956][ T9845] ? ext4_orphan_del+0xbf0/0xbf0 [ 293.568908][ T9845] ? errseq_check_and_advance+0x62/0x120 [ 293.574563][ T9845] ext4_fill_super+0x8e25/0x95a0 [ 293.579528][ T9845] ? ext4_mount+0x40/0x40 [ 293.583875][ T9845] ? set_blocksize+0x1f3/0x370 [ 293.588652][ T9845] ? sb_set_blocksize+0xa5/0xe0 [ 293.593516][ T9845] mount_bdev+0x287/0x3c0 [ 293.597870][ T9845] ? ext4_mount+0x40/0x40 [ 293.602217][ T9845] legacy_get_tree+0xe6/0x180 [ 293.606911][ T9845] ? ext4_errno_to_code+0x160/0x160 [ 293.612132][ T9845] vfs_get_tree+0x88/0x270 [ 293.616566][ T9845] do_new_mount+0x24a/0xa40 [ 293.621094][ T9845] __se_sys_mount+0x2e3/0x3d0 [ 293.625788][ T9845] ? __x64_sys_mount+0xc0/0xc0 [ 293.630585][ T9845] ? lockdep_hardirqs_on+0x94/0x140 [ 293.635810][ T9845] ? __x64_sys_mount+0x1c/0xc0 [ 293.640676][ T9845] do_syscall_64+0x4c/0xa0 [ 293.645114][ T9845] ? clear_bhb_loop+0x30/0x80 [ 293.649812][ T9845] ? clear_bhb_loop+0x30/0x80 [ 293.654508][ T9845] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.660433][ T9845] RIP: 0033:0x7f433229da8a [ 293.665044][ T9845] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.684691][ T9845] RSP: 002b:00007f43304f5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 293.693119][ T9845] RAX: ffffffffffffffda RBX: 00007f43304f5ee0 RCX: 00007f433229da8a [ 293.701106][ T9845] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f43304f5ea0 [ 293.709098][ T9845] RBP: 0000200000000180 R08: 00007f43304f5ee0 R09: 0000000000000000 [ 293.717088][ T9845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 293.725089][ T9845] R13: 00007f43304f5ea0 R14: 000000000000047a R15: 000000000000002c [ 293.733097][ T9845] [ 293.749500][ T8111] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 293.761849][ T8111] ath9k_htc: Failed to initialize the device [ 293.768321][ T6809] usb 7-1: ath9k_htc: USB layer deinitialized [ 293.789677][ T9845] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.1465: iget: bad extra_isize 58 (inode size 256) [ 293.807284][ T4709] usb 1-1: USB disconnect, device number 15 [ 293.845387][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 293.852378][ T9845] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1465: error while reading EA inode 18 err=-117 [ 293.874976][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 293.884835][ T9845] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.1465: iget: bad extra_isize 58 (inode size 256) [ 293.898708][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 293.908935][ T9845] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1465: error while reading EA inode 11 err=-117 [ 293.931610][ T9845] EXT4-fs (loop4): Remounting filesystem read-only [ 293.938355][ T9845] EXT4-fs (loop4): 1 orphan inode deleted [ 293.944924][ T9845] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,errors=remount-ro,prjquota,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000003a,min_batch_time=0x0000000000000003,. Quota mode: writeback. [ 293.969412][ C0] vkms_vblank_simulate: vblank timer overrun