last executing test programs: 3m44.390511051s ago: executing program 3 (id=7): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x81, &(0x7f0000000000)={[{@errors_remount}]}, 0x4, 0x4dd, &(0x7f0000000240)="$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") 3m41.638313292s ago: executing program 3 (id=8): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80, 0x0) open(0x0, 0x8000, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffff0}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m40.189403155s ago: executing program 3 (id=9): sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m39.339780058s ago: executing program 3 (id=11): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700000000000000"], 0x6, 0x2ca, &(0x7f0000001440)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1c10, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0xa5) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) 3m38.91047166s ago: executing program 3 (id=14): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x800000, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8=1,iocharset=cp1255,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,utf8=0,codepage=850,check=relaxed,shortname=winnt\x00\x00hortname=lower,shortname=win95,shortname=win95,nonumtail=0,shortname=mixed,uni_xlate=1,allow_utime=00000000000000000000777,\x00'], 0xff, 0x371, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c842, 0x24) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0xd) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x180}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) write$binfmt_format(r1, &(0x7f0000000000)='1\x00', 0x2400) 3m38.259279653s ago: executing program 3 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000004440)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000", 0x25}, {&(0x7f0000000200)="24f5bbd11cb3", 0x6}, {&(0x7f00000002c0)="a43b2eaab400000000008000", 0xc}, {&(0x7f0000000100)="1ea6", 0x2}], 0x4) 3m37.768103228s ago: executing program 32 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000004440)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000", 0x25}, {&(0x7f0000000200)="24f5bbd11cb3", 0x6}, {&(0x7f00000002c0)="a43b2eaab400000000008000", 0xc}, {&(0x7f0000000100)="1ea6", 0x2}], 0x4) 1m23.643647823s ago: executing program 4 (id=491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7f, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080d1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m22.058153574s ago: executing program 4 (id=496): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) shutdown(r1, 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r5 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 1m19.946733711s ago: executing program 4 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000400000000020000000000001202000000020000000000000e030000000000000000005f00db519448fb81bc5b679ee056627a2db04ff8cbb222978edd412f1f50417f6f06deda57e25215b8663a5d6be143c7ad027d0754dcf6ad7b19a8cef08a790e33"], 0x0, 0x54}, 0x28) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x2000000, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) r9 = add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000000180)='ceph\x00', 0x0, &(0x7f0000000400)='clsact\x00', r9) 1m17.205053121s ago: executing program 4 (id=510): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="18020000002000000000000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[], 0x0) 1m16.963377313s ago: executing program 4 (id=513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x98}}, 0x0) 1m16.138730874s ago: executing program 4 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f00)={{r3}, &(0x7f0000000e80), &(0x7f0000000ec0)='%pi6 \x00'}, 0x20) 1m0.674651141s ago: executing program 33 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f00)={{r3}, &(0x7f0000000e80), &(0x7f0000000ec0)='%pi6 \x00'}, 0x20) 13.647147787s ago: executing program 6 (id=767): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x109080) ioctl$BLKSECTGET(r0, 0x1267, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0x20f}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 11.44609025s ago: executing program 6 (id=769): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) r1 = syz_io_uring_setup(0x33ef, &(0x7f0000000300)={0x0, 0x7c87, 0x10, 0xfffffffe, 0x252}, &(0x7f0000000380), &(0x7f00000002c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") 10.567242655s ago: executing program 6 (id=774): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1515) 10.355438106s ago: executing program 0 (id=776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 10.016465454s ago: executing program 1 (id=778): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003a0000/0x4000)=nil) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) syz_io_uring_setup(0x33ef, &(0x7f0000000300)={0x0, 0x7c87, 0x10, 0xfffffffe, 0x252}, &(0x7f0000000380), &(0x7f00000002c0), &(0x7f0000000200)) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 8.652761144s ago: executing program 0 (id=779): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x200f, {"20e30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d44401010000000000004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff0342f655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9ef0000000000002f752c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c04075465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd93ab062605a3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) 8.276165934s ago: executing program 1 (id=780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x40) open(0x0, 0x4c27e, 0x154) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 8.115198202s ago: executing program 2 (id=781): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x109080) ioctl$BLKSECTGET(r0, 0x1267, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0x20f}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 6.086630306s ago: executing program 0 (id=782): openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8000000000000) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@shortname_win95}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@numtail}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@fat=@check_strict}, {@shortname_win95}, {@fat=@tz_utc}]}, 0x1, 0x370, &(0x7f0000002980)="$eJzs3U9oHFUYAPBvO/lbaJODUBSE0ZugoX/woHhIKSkU96KyVD2Ii01VsrGQxcX00G28iEfBo4LgRTzowUPPIijizYNXK2hVPGhvBYtPdnd2d7a7SSMlldDf77B8+d77Zt6bvGQnm+zLy8uxdm46zl+/fi3m5ioxtXxqOW5UYjGy6Lsc42Ym5ACA/eFGSvFX6tllSWWPhwQA7LHu8/+rh0qZt7/eqX/y7A8A+17x8//8Tn3mxlO/PNV5vLB34wIA9s7Y6/8PjzTPjP6qf6r0VwEAwH713AsvPn2yGvFsns9FrL/TqrVq8eSw/eT5eD0asRpHYyFuRvRuFDoPle7j6TPVlaN5nrfj18WoRcRHrVrEertV690pnMy69bNxLBZisagv7jZSStnpL6orx/KuiLjc7p4/1iut2nQcLM7/48FYjeORx31j9RFnqivH8+IAtfV+fTtiK+biQG8SnfEvxUJ8/0pciEacmz8bKfVva6orl47l+alUHalv1Wbj3OAqTHgFBAAAAAAAAAAAAAAAAAAAAAAA7sBSPrA42P8mDffvWVqa0N7dH6dXX+wPtNXbHyjNpkjpz7ceq72bxcj+QLfuz9OqTfV35wEAAAAAAAAAAAAAAAAAAIB7XnNzJuqNxupGc/PiWjlobzQ3D0REJ/PGt599NR/jfW4TTBXnKDXlReriWj1l/c4pG+lTBFnn5P3Mp1cGIy73mR3MYuIwZrdvajQOPfTzB8PMg1n/yP8M+2QxeYLZLcMoB+uHe0MaZKaHU972ip0oguO3uapXU0rbHefSS+NVUYmY+u+fuJ2D1Am+ufba/SeaRx7vZr5MPY88unD26vsf/75Wb3TO3NH4ZGajeTOt1YuPJy+27YOstH4qxTWslFfC1E7lW6OZevbDH88/8N53uzt7KmfenNAn603n843mZqX4Suk2zfSCTu6WqvnGmWxsJUxPWPx3FkxcbEc+XK5fufTTb7s9TumbhI06AAAAAAAAAAAAAAAAAADgrii9V7xQvNl3eqeqJ54pgrm9HR0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3B3D//9fCrbGMrsJ/m7HeNPs6kYz4vD/PU0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO5x/wYAAP//Q7dpOg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) 6.083136847s ago: executing program 6 (id=783): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x10, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x87}, {0x6, 0x24, 0x1a, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.977491185s ago: executing program 1 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.794671045s ago: executing program 2 (id=785): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) r1 = syz_io_uring_setup(0x33ef, &(0x7f0000000300)={0x0, 0x7c87, 0x10, 0xfffffffe, 0x252}, &(0x7f0000000380), &(0x7f00000002c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") 3.035276854s ago: executing program 5 (id=786): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0) 2.814432994s ago: executing program 1 (id=787): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) lseek(r0, 0xfff7ffffffffffff, 0x4) 2.813560615s ago: executing program 2 (id=788): socket$kcm(0x10, 0x3, 0x10) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x0, {0x2, 0xff, 0x4}, {0x1, 0x0, 0x4}, 0xff, 0xff}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x0, 0xf0}, 0xfc}], 0x40) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800240600fc010000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002080090780000080a0000000900007add020400000000"], 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(r0, 0x0, 0x20000050) 2.631484934s ago: executing program 5 (id=789): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0xffff, 0x0, 0x0, 0x5, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x43}}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffd}}}}}}, 0x0) 2.535158679s ago: executing program 1 (id=790): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_raw(r1, 0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x1, 0x10080) openat(0xffffffffffffff9c, 0x0, 0x200, 0x119) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x9f, &(0x7f0000000340)=ANY=[@ANYBLOB="1201500200000040d118042d40000102030109028d00030107600b080b010101ff20050904000000010120000924010600031500070c24030501035d020001002009040100000102200009040101010102200008240201fc01510410240105c408000000000609000000cd090501090800"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 2.372496568s ago: executing program 5 (id=791): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.13844411s ago: executing program 5 (id=792): syz_io_uring_setup(0x86f, &(0x7f0000000400)={0x0, 0x79ab, 0x400, 0xfffffffe, 0x214}, 0x0, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0) 1.575187029s ago: executing program 2 (id=793): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaf9) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) 1.413274497s ago: executing program 2 (id=794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0x0, 0xb}, {0xf, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c800}, 0xc894) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1.284118624s ago: executing program 6 (id=795): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x161242, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="010130a7cd08f1cac7c721e886dd", 0xe}, {&(0x7f0000001040)="389bfcf4076404f2d8802ba6f96ec57f50d3fb13a7d754ea2f77e19fb0c5f795a9b0eba24f0b73c048b74e3fc0a04e2d90e6079a5dcfff613070560df6", 0x3d}], 0x2, 0xa74a, 0xfff7, 0x0) 1.194098168s ago: executing program 0 (id=796): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x2, @void}, 0xa) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[], 0x0) 1.150794151s ago: executing program 5 (id=797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x1, 0x8, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x80, 0xa, 0x1, 0x0, 0x2, 0x8, 0xff, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x9000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0xad, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x2, 0x2, 0xf5, '\x00', 0x10}, {0x9, 0x0, 0xc, '\x00', 0xfb}, {0x80, 0x80, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xed, '\x00', 0x7c}, {0x3, 0x4, 0x1}, {0x81, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0xc}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0x2, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x0, 0x2, 0x6, '\x00', 0x8}, {0x9, 0xa, 0x2, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x6c, '\x00', 0xfd}, {0x0, 0x80, 0xfe, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x8}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 996.325518ms ago: executing program 0 (id=798): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) r3 = syz_io_uring_setup(0x33ef, &(0x7f0000000300)={0x0, 0x7c87, 0x10, 0xfffffffe, 0x252}, &(0x7f0000000380), &(0x7f00000002c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$eJzs3d1rW+cZAPBHku3YibN8bIwkgyWQQfZBLH8wYm+DsattF4GxwG42yDxb8TLLkbHkLDa5cLa7XOxibLRQetH7/gW9aa4aAqXXLb3tVUloUxfakoKKjiTHH5KjtraU+Px+cKJzzqvoeV/Zz+uj97xHJ4DUOlf7JxMxHBHvRMSx+ubWJ5yrP6w/vj1TWzJRrV75KJM8r7bdfGrz/x2JiLWIGIyIP/424m+ZnXHLK6vz08ViYamxna8sLObLK6sXry9MzxXmCjfGJi9NTU2OToxP7Vlb7/7nH3cvv/H7gdc/+/fD+/99681atYYbZZvbsZfqTe+PE5v29UXEr/YjWA/kGu0Z6nVF+EZqP7/vRsT5JP+PRS75aXbmyb7WDNhv1Wq1+mX1ULvitSpwYGWTY+BMdiQi6uvZ7MhI/Rj+e3E4WyyVKz+7Vlq+MVs/Vj4e/dlr14uF0cZnhePRn6ltjyXrT7fHt21PRCTHwP/LDSXbIzOl4mx3uzpgmyPb8v/TXD3/gZTo/CM/cNDIf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5DerXK/6M9qAfQfbv9/R/oYj2ArvrD5cu1pdq8/n325sryfOnmxdlCeX5kYXlmZKa0tDgyVyrNJdfsLDzr9Yql0uLYz2P5Vr5SKFfy5ZXVqwul5RuVq8l1/VcL/V1pFdCJE2fvvZeJiLVfDCVLbPqTL1fhYKtWM9Hra5CB3sj1ugMCesapP0ivr/EZv+2XhAEvthZf0bth8Ejbol/H4r5UB+iC7G6FTx50ryJA11047fwfpJXxf0gv4/+QXo7xgd3G/6NxL7+WjP/DC2vX8X/gQBtuc/+vo5vu3TUaEd+JiHdz/Yea9/oCDoLsh5nG8f+FYz8a3l46kPk8OUUwEBH/fOXKS7emK5Wlsdr+jzf2V15u7B/vRf2B9raO8DXztJnHAEB6rT++PdNcuhn30W/qkxB2xu9rjE0OJkcwh9czW+YqZPZo7sLanYg41Sp+pnG/8/qZj8PruR3xTzYeM/WXSOrbl9w3vTvxT2+K/8NN8c9863cF0uFerf8ZbZV/2SSnYyP/tvY/w3s0d6LZ/zXnXG+O3+z/cm36v7Mdxvj7q/9qdXo3mez96E7EmZb9bzPeYBJre/xa3S50GP/hX/70/XZl1dfqr9MqflNtLV9ZWMyXV1YvXm/WYvLS1NTk6MT4VD4Zo843R6p3+uWpt++3i19rf0Ob9r+/o/1DjTr9pMP2f/GDB38+t0v8H59v/ft3Mnnc9v5Xqxt1+GmH8T8Z/+Cv7cpq8WfbvP/ZVvGjWRox0WH88v9/59phAHiOlFdW56eLxcKSFStWnu+Vvuhi0Gf1HGvd6aCAffM06XtdEwAAAAAAAAAAAKBT7Wb/3tvD6cS9biMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEHwVQAAAP//QUvQlg==") 786.930199ms ago: executing program 2 (id=799): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) select(0x40, &(0x7f0000000080), 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) 466.022556ms ago: executing program 6 (id=800): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000840)=ANY=[@ANYBLOB="120100005938d7401097307733960000000109021200", @ANYBLOB="f1fa6e32f20e31"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0) 210.697149ms ago: executing program 1 (id=801): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4401000010000100000000000000000064010101000000000000000000000000e00000020000000000000000000000000000f6b9fffe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000001740)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='ext4\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 210.282769ms ago: executing program 0 (id=802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 5 (id=803): socket(0x200000000000011, 0x4000000000080002, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/49, 0x31}], 0x1, 0x1a, 0x5) kernel console output (not intermixed with test programs): eback. [ 111.326828][ T4632] bond0: (slave bond_slave_1): Releasing backup interface [ 111.379224][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 111.470424][ T4654] syz.4.66 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 112.103749][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.281286][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.364488][ T4433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.733248][ T4666] loop0: detected capacity change from 0 to 512 [ 112.792455][ T4666] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.843755][ T4668] netlink: 'syz.4.70': attribute type 1 has an invalid length. [ 112.866648][ T4666] EXT4-fs (loop0): 1 truncate cleaned up [ 112.902708][ T4666] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 113.253779][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 113.493525][ T4682] device syzkaller0 entered promiscuous mode [ 113.517254][ T4684] capability: warning: `syz.4.73' uses deprecated v2 capabilities in a way that may be insecure [ 113.620213][ T4684] loop4: detected capacity change from 0 to 512 [ 113.812816][ T4684] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 113.853865][ T4684] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.029773][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.048428][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.104535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.131262][ T37] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 114.144134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.155079][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 114.170995][ T37] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.187331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.217141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.227516][ T4433] device veth0_vlan entered promiscuous mode [ 114.293940][ T4433] device veth1_vlan entered promiscuous mode [ 114.390830][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.427955][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.448194][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.464480][ T4705] loop4: detected capacity change from 0 to 1024 [ 114.521410][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.544688][ T4705] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 114.568306][ T4433] device veth0_macvtap entered promiscuous mode [ 114.616677][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.667483][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 114.696366][ T4433] device veth1_macvtap entered promiscuous mode [ 114.784426][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.836185][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.890547][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.014383][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.041735][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.073906][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.105554][ T4433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.124642][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.156285][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.278763][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.297735][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.318044][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.334270][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.347931][ T4720] loop1: detected capacity change from 0 to 128 [ 115.372106][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.441986][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.454843][ T4720] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.543737][ T4723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 115.734850][ T4720] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.916277][ T37] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.084406][ T4433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.163693][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.248503][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.286341][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.301840][ T37] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 116.317014][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.336649][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 116.362978][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.385362][ T4433] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.423595][ T4433] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.452012][ T37] usb 3-1: config 0 descriptor?? [ 116.477214][ T4433] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.485996][ T4433] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.541925][ T4732] device syzkaller0 entered promiscuous mode [ 116.902230][ T37] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 116.948999][ T37] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 116.957561][ T4725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.969951][ T4725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.992842][ T37] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 117.012006][ T4739] device syzkaller0 entered promiscuous mode [ 117.016284][ T37] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 117.030536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.043170][ T37] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 117.092328][ T37] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 117.144721][ T4742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.84'. [ 117.195308][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.206182][ T37] playstation 0003:054C:0DF2.0003: Invalid byte count transferred, expected 20 got 0 [ 117.215744][ T37] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense pairing info: -22 [ 117.229964][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.259570][ T37] playstation 0003:054C:0DF2.0003: Failed to get MAC address from DualSense [ 117.276162][ T37] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 117.327700][ T37] playstation: probe of 0003:054C:0DF2.0003 failed with error -22 [ 117.337248][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.348097][ T4740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 118.018307][ T4764] device syzkaller0 entered promiscuous mode [ 118.160301][ T4767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.92'. [ 118.514523][ T4767] bond0: (slave bond_slave_0): Releasing backup interface [ 118.557494][ T37] usb 3-1: USB disconnect, device number 2 [ 118.622041][ T4780] tipc: Started in network mode [ 118.633243][ T4780] tipc: Node identity d60fd9e690a5, cluster identity 4711 [ 118.646482][ T4780] tipc: Enabled bearer , priority 0 [ 118.706693][ T4774] device syzkaller0 entered promiscuous mode [ 118.777189][ T4774] tipc: Resetting bearer [ 118.825450][ T4772] tipc: Resetting bearer [ 118.924393][ T4772] tipc: Disabling bearer [ 119.199394][ T4789] loop5: detected capacity change from 0 to 4096 [ 119.253072][ T4789] EXT4-fs: inline encryption not supported [ 119.403578][ T4789] EXT4-fs (loop5): Test dummy encryption mode enabled [ 119.455088][ T4790] loop1: detected capacity change from 0 to 512 [ 119.554840][ T4789] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 119.643882][ T4802] netlink: 104 bytes leftover after parsing attributes in process `syz.2.100'. [ 119.690176][ T4802] loop2: detected capacity change from 0 to 512 [ 119.740757][ T4802] EXT4-fs (loop2): Test dummy encryption mode enabled [ 119.747749][ T4802] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.954168][ T4802] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.100: bad orphan inode 131083 [ 119.969727][ T4802] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.053602][ T4790] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 120.062872][ T4790] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.270469][ T4789] System zones: 0-5 [ 120.321292][ T4789] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 120.442762][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 120.723732][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 120.904918][ T4789] fscrypt (loop5): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 120.927237][ T4817] loop0: detected capacity change from 0 to 1024 [ 121.001679][ T4807] overlayfs: failed to resolve './bus': -2 [ 121.286227][ T4817] EXT4-fs: Ignoring removed orlov option [ 121.710215][ T4812] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 121.773850][ T4817] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 121.795600][ T4836] loop1: detected capacity change from 0 to 2048 [ 121.815577][ T4839] loop4: detected capacity change from 0 to 256 [ 121.840896][ T4839] exfat: Deprecated parameter 'utf8' [ 121.856397][ T4839] exfat: Deprecated parameter 'utf8' [ 121.914198][ T4839] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 122.002456][ T4836] loop1: p1 < > p4 [ 122.002456][ T4836] p4: [ 122.052048][ T4433] EXT4-fs (loop5): unmounting filesystem. [ 122.070924][ T4836] loop1: p4 size 722688 extends beyond EOD, truncated [ 122.107534][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 122.772872][ T4854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.106'. [ 123.136254][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 123.391965][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.479660][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 123.496152][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.537297][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 123.548742][ T7] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 123.584094][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.640526][ T7] usb 6-1: config 0 descriptor?? [ 124.353283][ T4877] loop4: detected capacity change from 0 to 512 [ 124.849343][ T7] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 124.869980][ T7] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 124.877632][ T7] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 124.885094][ T7] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 124.893172][ T7] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 124.916547][ T7] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 124.997437][ T4877] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.006759][ T4877] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.338501][ T4888] netlink: 'syz.0.116': attribute type 10 has an invalid length. [ 125.346404][ T4888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.116'. [ 125.356440][ T4888] device batadv0 entered promiscuous mode [ 125.365487][ T4888] bridge0: port 3(batadv0) entered blocking state [ 125.372351][ T4888] bridge0: port 3(batadv0) entered disabled state [ 125.386820][ T4888] bridge0: port 3(batadv0) entered blocking state [ 125.393410][ T4888] bridge0: port 3(batadv0) entered forwarding state [ 125.481124][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 125.957734][ T4805] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 125.967589][ T4805] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 126.032508][ T4892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.115'. [ 126.165038][ T7] playstation 0003:054C:0DF2.0004: Failed to retrieve feature with reportID 9: -71 [ 126.177978][ T7] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense pairing info: -71 [ 126.187431][ T7] playstation 0003:054C:0DF2.0004: Failed to get MAC address from DualSense [ 126.196304][ T7] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 126.205254][ T7] playstation: probe of 0003:054C:0DF2.0004 failed with error -71 [ 126.258010][ T7] usb 6-1: USB disconnect, device number 2 [ 126.476691][ T4903] loop5: detected capacity change from 0 to 1024 [ 126.601723][ T4903] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 126.601723][ T4903] [ 126.718887][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 126.729506][ T4912] loop0: detected capacity change from 0 to 512 [ 126.951591][ T4918] loop4: detected capacity change from 0 to 512 [ 126.977816][ T4909] fido_id[4909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 127.031122][ T4918] EXT4-fs (loop4): 1 truncate cleaned up [ 127.067692][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.124'. [ 127.164088][ T4918] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 127.354110][ T4918] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.123: Invalid block bitmap block 1768304430 in block_group 0 [ 127.493261][ T4931] loop2: detected capacity change from 0 to 512 [ 127.556516][ T4931] EXT4-fs: inline encryption not supported [ 127.607129][ T4931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.647847][ T4931] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.663578][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 127.793335][ T4931] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 1 [ 127.896548][ T4931] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 127.916239][ T4931] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.126: Failed to acquire dquot type 1 [ 127.962143][ T4931] EXT4-fs (loop2): Remounting filesystem read-only [ 127.991185][ T4931] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 128.112365][ T4931] EXT4-fs (loop2): Remounting filesystem read-only [ 128.121466][ T4931] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.126: corrupted inode contents [ 128.133951][ T4931] EXT4-fs (loop2): Remounting filesystem read-only [ 128.146611][ T4931] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #12: comm syz.2.126: mark_inode_dirty error [ 128.286379][ T4931] EXT4-fs (loop2): Remounting filesystem read-only [ 128.399681][ T4944] loop4: detected capacity change from 0 to 512 [ 128.616516][ T4944] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.626101][ T4944] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.914861][ T4931] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.126: corrupted inode contents [ 128.973386][ T4931] EXT4-fs (loop2): Remounting filesystem read-only [ 128.991274][ T4931] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.126: mark_inode_dirty error [ 129.079901][ T4931] EXT4-fs (loop2): Remounting filesystem read-only [ 129.121067][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 129.136435][ T4931] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.126: corrupted inode contents [ 129.180246][ T4931] EXT4-fs (loop2): Remounting filesystem read-only [ 129.203285][ T4931] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 129.273140][ T4931] EXT4-fs (loop2): Remounting filesystem read-only [ 129.315526][ T4931] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.126: corrupted inode contents [ 129.359346][ T4931] EXT4-fs (loop2): Remounting filesystem read-only [ 129.365963][ T4931] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.126: mark_inode_dirty error [ 129.477953][ T4931] EXT4-fs (loop2): Remounting filesystem read-only [ 129.484570][ T4931] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 129.561248][ T4931] EXT4-fs (loop2): Remounting filesystem read-only [ 129.630295][ T4931] EXT4-fs (loop2): 1 truncate cleaned up [ 129.722798][ T4963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 130.176334][ T4309] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.393634][ T4309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.461421][ T4309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.476405][ T4931] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.535279][ T4309] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 130.573679][ T4309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.601187][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 130.611712][ T4309] usb 5-1: config 0 descriptor?? [ 130.842960][ T4972] device syzkaller0 entered promiscuous mode [ 130.916225][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 131.004593][ T4975] loop5: detected capacity change from 0 to 256 [ 131.059329][ T4975] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 131.075530][ T4309] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 131.096392][ T4309] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 131.114439][ T4309] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 131.117011][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 131.148045][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.155756][ T4309] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 131.187241][ T4309] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 131.203822][ T7] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 7 [ 131.231384][ T4309] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 131.246164][ T7] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.278792][ T7] usb 1-1: config 1 interface 2 has no altsetting 0 [ 131.308130][ T7] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 131.335911][ T4981] loop2: detected capacity change from 0 to 512 [ 131.344598][ T4309] playstation 0003:054C:0DF2.0005: Invalid byte count transferred, expected 20 got 0 [ 131.356117][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.385108][ T7] usb 1-1: Product: syz [ 131.389025][ T4309] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense pairing info: -22 [ 131.393073][ T7] usb 1-1: Manufacturer: syz [ 131.441778][ T4309] playstation 0003:054C:0DF2.0005: Failed to get MAC address from DualSense [ 131.448463][ T7] usb 1-1: SerialNumber: syz [ 131.473074][ T4309] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 131.498899][ T4309] playstation: probe of 0003:054C:0DF2.0005 failed with error -22 [ 131.731706][ T7] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 131.784542][ T7] usb 1-1: selecting invalid altsetting 0 [ 131.804805][ T7] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 131.838081][ T7] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 131.857207][ T7] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 131.863416][ T7] usb 1-1: selecting invalid altsetting 0 [ 131.952717][ T7] usb 1-1: USB disconnect, device number 2 [ 132.374023][ T5001] loop2: detected capacity change from 0 to 512 [ 132.857988][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.864833][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.884766][ T5001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 132.893881][ T5001] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.936181][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 132.944908][ T37] usb 5-1: USB disconnect, device number 3 [ 133.138338][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.218732][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.239836][ T4925] udevd[4925]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.291609][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.346186][ T14] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.363477][ T5010] tipc: Started in network mode [ 133.401931][ T5010] tipc: Node identity 3623963a9a64, cluster identity 4711 [ 133.416207][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.445772][ T5010] tipc: Enabled bearer , priority 0 [ 133.454141][ T14] usb 2-1: config 0 descriptor?? [ 133.491664][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 133.500574][ T5013] device syzkaller0 entered promiscuous mode [ 133.543948][ T5011] loop4: detected capacity change from 0 to 4096 [ 133.589849][ T5011] EXT4-fs: inline encryption not supported [ 133.595937][ T5011] EXT4-fs: Ignoring removed bh option [ 133.609127][ T5010] tipc: Resetting bearer [ 133.643535][ T5008] tipc: Resetting bearer [ 133.771353][ T5011] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.798941][ T5008] tipc: Disabling bearer [ 133.815186][ T5011] EXT4-fs (loop4): Test dummy encryption mode enabled [ 133.884718][ T14] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 133.900849][ T14] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 133.910821][ T5018] ptrace attach of "./syz-executor exec"[5020] was attempted by "./syz-executor exec"[5018] [ 133.911405][ T5011] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 133.937117][ T5011] System zones: 0-5 [ 133.983331][ T5011] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.000383][ T14] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 135.398963][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 135.954030][ T5039] process 'syz.2.152' launched './file0' with NULL argv: empty string added [ 135.980992][ T14] usb 2-1: USB disconnect, device number 2 [ 136.403914][ T5048] loop4: detected capacity change from 0 to 4096 [ 136.464755][ T5042] fido_id[5042]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 136.498446][ T26] audit: type=1326 audit(1776932201.994:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb539c819 code=0x7ffc0000 [ 136.558737][ T5048] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.666577][ T26] audit: type=1326 audit(1776932202.024:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb539c819 code=0x7ffc0000 [ 136.785402][ T26] audit: type=1326 audit(1776932202.024:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb539c819 code=0x7ffc0000 [ 136.940190][ T26] audit: type=1326 audit(1776932202.034:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6eb539c819 code=0x7ffc0000 [ 137.031289][ T26] audit: type=1326 audit(1776932202.034:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb539c819 code=0x7ffc0000 [ 137.172567][ T26] audit: type=1326 audit(1776932202.034:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb539c819 code=0x7ffc0000 [ 137.325981][ T26] audit: type=1326 audit(1776932202.034:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6eb539c819 code=0x7ffc0000 [ 137.431516][ T26] audit: type=1326 audit(1776932202.034:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5054 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6eb539c819 code=0x7ffc0000 [ 137.555155][ T26] audit: type=1800 audit(1776932202.094:14): pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.149" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 138.070045][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 138.129474][ T5052] loop5: detected capacity change from 0 to 40427 [ 138.205882][ T5052] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 138.227841][ T5052] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 138.291241][ T5052] F2FS-fs (loop5): invalid crc value [ 138.772976][ T5052] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 141.626167][ T5116] loop0: detected capacity change from 0 to 512 [ 141.713924][ T5116] FAT-fs (loop0): Unrecognized mount option "ch" or missing value [ 141.867257][ T5116] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 143.212438][ T5138] loop0: detected capacity change from 0 to 128 [ 143.294435][ T5141] netlink: 260 bytes leftover after parsing attributes in process `syz.1.179'. [ 143.329213][ T5138] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 143.373711][ T5141] netlink: 104 bytes leftover after parsing attributes in process `syz.1.179'. [ 143.389808][ T5138] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.390789][ T5141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 143.521307][ T5138] syz.0.177 (pid 5138) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 143.826253][ T26] audit: type=1326 audit(1776932209.314:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.5.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c399c819 code=0x7ffc0000 [ 143.897656][ T26] audit: type=1326 audit(1776932209.314:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.5.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c399c819 code=0x7ffc0000 [ 143.962915][ T26] audit: type=1326 audit(1776932209.344:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.5.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c399c819 code=0x7ffc0000 [ 144.082188][ T26] audit: type=1326 audit(1776932209.354:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.5.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c399c819 code=0x7ffc0000 [ 144.209284][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 144.240168][ T26] audit: type=1326 audit(1776932209.354:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.5.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c399c819 code=0x7ffc0000 [ 144.332084][ T5175] loop1: detected capacity change from 0 to 512 [ 144.364019][ T26] audit: type=1326 audit(1776932209.354:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.5.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c399c819 code=0x7ffc0000 [ 144.397600][ T5175] EXT4-fs: Ignoring removed mblk_io_submit option [ 144.582593][ T5175] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.185: inode #1: comm syz.1.185: iget: illegal inode # [ 144.650729][ T26] audit: type=1326 audit(1776932209.354:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.5.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f61c399c819 code=0x7ffc0000 [ 144.678708][ T5175] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.185: error while reading EA inode 1 err=-117 [ 144.698434][ T26] audit: type=1326 audit(1776932209.354:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.5.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c399c819 code=0x7ffc0000 [ 144.970021][ T26] audit: type=1326 audit(1776932209.354:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.5.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c399c819 code=0x7ffc0000 [ 145.039844][ T5175] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 145.386487][ T5175] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.185: inode #1: comm syz.1.185: iget: illegal inode # [ 145.496839][ T5175] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.185: error while reading EA inode 1 err=-117 [ 145.516135][ T26] audit: type=1326 audit(1776932209.354:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.5.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61c399c819 code=0x7ffc0000 [ 145.637137][ T5175] EXT4-fs (loop1): 1 orphan inode deleted [ 145.642970][ T5175] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.720484][ T5144] loop2: detected capacity change from 0 to 40427 [ 145.727444][ T5175] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.185: invalid indirect mapped block 234881024 (level 0) [ 145.777466][ T5144] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 145.785286][ T5144] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 145.855795][ T5144] F2FS-fs (loop2): invalid crc value [ 145.918128][ T5144] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.999204][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 146.109844][ T5200] loop4: detected capacity change from 0 to 512 [ 146.128734][ T5144] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 146.166577][ T5144] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 146.252908][ T5200] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.650145][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 146.675652][ T5212] loop5: detected capacity change from 0 to 1024 [ 146.770646][ T5212] EXT4-fs: Ignoring removed bh option [ 146.784916][ T5216] loop1: detected capacity change from 0 to 16 [ 146.849629][ T5212] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 146.871124][ T5212] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.933417][ T5216] erofs: (device loop1): mounted with root inode @ nid 36. [ 147.007185][ T5224] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 1: comm syz.5.194: lblock 1 mapped to illegal pblock 1 (length 1) [ 147.114280][ T5224] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 147.202535][ T5224] EXT4-fs (loop5): This should not happen!! Data will be lost [ 147.202535][ T5224] [ 147.267806][ T5212] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.194: lblock 0 mapped to illegal pblock 0 (length 1) [ 147.426813][ T5212] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 147.465851][ T5230] loop4: detected capacity change from 0 to 4096 [ 147.472792][ T5212] EXT4-fs (loop5): This should not happen!! Data will be lost [ 147.472792][ T5212] [ 147.521220][ T5230] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 147.911517][ T5142] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 149.636840][ T33] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:2: lblock 4 mapped to illegal pblock 4 (length 2) [ 149.746315][ T33] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 149.825437][ T33] EXT4-fs (loop5): This should not happen!! Data will be lost [ 149.825437][ T33] [ 149.905866][ T33] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 150.020798][ T33] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 150.106627][ T33] EXT4-fs (loop5): This should not happen!! Data will be lost [ 150.106627][ T33] [ 150.171848][ T4433] EXT4-fs (loop5): unmounting filesystem. [ 150.483724][ T5241] binder: 5238:5241 ioctl c0306201 200000000080 returned -14 [ 150.688158][ T5245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'. [ 150.903058][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 151.403138][ T5241] binder: 5238:5241 ioctl c0306201 2000000003c0 returned -14 [ 152.153085][ T5269] loop1: detected capacity change from 0 to 512 [ 152.187569][ T5269] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 152.277297][ T5269] EXT4-fs (loop1): 1 truncate cleaned up [ 152.284423][ T5272] loop0: detected capacity change from 0 to 512 [ 152.293334][ T5269] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 152.338783][ T5272] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.481845][ T5272] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.210: iget: bad extra_isize 90 (inode size 256) [ 152.582983][ T5272] EXT4-fs (loop0): Remounting filesystem read-only [ 152.619203][ T5272] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.210: error while reading EA inode 11 err=-117 [ 152.655848][ T5250] loop2: detected capacity change from 0 to 40427 [ 152.679215][ T5272] EXT4-fs (loop0): Remounting filesystem read-only [ 152.687029][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 152.706330][ T5272] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.210: iget: bad extra_isize 90 (inode size 256) [ 152.706493][ T5250] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(1) root(3) [ 152.730271][ T5272] EXT4-fs (loop0): Remounting filesystem read-only [ 152.767477][ T5272] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.210: error while reading EA inode 11 err=-117 [ 152.790130][ T5250] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 152.813061][ T5272] EXT4-fs (loop0): Remounting filesystem read-only [ 152.830649][ T5272] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #18: comm syz.0.210: iget: bad extra_isize 90 (inode size 256) [ 152.877577][ T5283] device syzkaller0 entered promiscuous mode [ 152.884359][ T5272] EXT4-fs (loop0): Remounting filesystem read-only [ 152.914911][ T5272] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.210: error while reading EA inode 18 err=-117 [ 152.954020][ T5272] EXT4-fs (loop0): Remounting filesystem read-only [ 153.002084][ T5272] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #18: comm syz.0.210: iget: bad extra_isize 90 (inode size 256) [ 153.056502][ T5272] EXT4-fs (loop0): Remounting filesystem read-only [ 153.078206][ T5272] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.210: error while reading EA inode 18 err=-117 [ 153.118172][ T5272] EXT4-fs (loop0): Remounting filesystem read-only [ 153.135200][ T5272] EXT4-fs (loop0): 1 orphan inode deleted [ 153.141447][ T5272] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 153.212041][ T5272] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.210: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 153.335373][ T5272] EXT4-fs (loop0): Remounting filesystem read-only [ 153.503145][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 153.669925][ T5297] loop4: detected capacity change from 0 to 4096 [ 153.731713][ T5297] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.754770][ T5302] loop2: detected capacity change from 0 to 256 [ 153.784069][ T5304] loop1: detected capacity change from 0 to 512 [ 153.939562][ T5297] EXT4-fs (loop4): Test dummy encryption mode enabled [ 153.981920][ T5304] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 154.012938][ T5302] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x6fed4391, utbl_chksum : 0xe619d30d) [ 154.238407][ T5304] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.287288][ T5297] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 154.804163][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 154.804180][ T26] audit: type=1800 audit(1776932220.294:33): pid=5302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.222" name="file1" dev="loop2" ino=1048616 res=0 errno=0 [ 155.093985][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 155.104996][ T5297] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 155.165637][ T5318] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 155.471622][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 155.943609][ T5344] device syzkaller0 entered promiscuous mode [ 156.144077][ T5354] loop0: detected capacity change from 0 to 256 [ 156.857860][ T5367] loop4: detected capacity change from 0 to 1024 [ 156.889908][ T5367] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 156.944875][ T5367] EXT4-fs (loop4): write access will be enabled during recovery [ 157.185870][ T5367] JBD2: no valid journal superblock found [ 157.272510][ T5367] EXT4-fs (loop4): error loading journal [ 157.562898][ T5336] loop2: detected capacity change from 0 to 40427 [ 157.585571][ T5336] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 157.634361][ T5336] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 157.818403][ T5336] F2FS-fs (loop2): Found nat_bits in checkpoint [ 157.903473][ T5359] loop5: detected capacity change from 0 to 512 [ 158.014755][ T5359] EXT4-fs (loop5): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 158.066300][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 158.068920][ T5359] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 158.127502][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.238'. [ 158.142570][ T5359] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.157207][ T5336] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 158.169199][ T5359] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 158.195220][ T5336] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 158.266265][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 158.279788][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.349730][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.394932][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.431438][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.471728][ T7] usb 5-1: Product: syz [ 158.475992][ T7] usb 5-1: Manufacturer: syz [ 158.494087][ T7] usb 5-1: SerialNumber: syz [ 158.736880][ T7] usb 5-1: 0:2 : does not exist [ 158.762293][ T7] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 158.779814][ T5397] loop5: detected capacity change from 0 to 512 [ 158.796373][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 158.852546][ T5397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.866208][ T7] usb 5-1: USB disconnect, device number 4 [ 158.952082][ T5397] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.241: iget: bad i_size value: 38620345925642 [ 158.966163][ T14] usb 2-1: device descriptor read/64, error -71 [ 158.988012][ T5397] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.241: couldn't read orphan inode 15 (err -117) [ 159.017476][ T5397] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 159.158481][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.203843][ T4433] EXT4-fs (loop5): unmounting filesystem. [ 159.247048][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.416154][ T14] usb 2-1: device descriptor read/64, error -71 [ 159.536551][ T14] usb usb2-port1: attempt power cycle [ 160.176388][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'. [ 163.103861][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 163.127200][ T26] audit: type=1326 audit(1776932228.624:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb539c819 code=0x7ffc0000 [ 163.175166][ T26] audit: type=1326 audit(1776932228.624:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb539c819 code=0x7ffc0000 [ 163.257556][ T26] audit: type=1326 audit(1776932228.694:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6eb539c819 code=0x7ffc0000 [ 163.297798][ T5442] loop5: detected capacity change from 0 to 512 [ 163.331145][ T5442] EXT4-fs (loop5): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 163.335477][ T14] usb 2-1: device not accepting address 5, error -71 [ 163.367032][ T26] audit: type=1326 audit(1776932228.694:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb539c819 code=0x7ffc0000 [ 163.395498][ T5445] loop1: detected capacity change from 0 to 512 [ 163.409292][ T5445] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 163.420531][ T26] audit: type=1326 audit(1776932228.704:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb539c819 code=0x7ffc0000 [ 163.457849][ T5442] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 163.470460][ T26] audit: type=1326 audit(1776932228.744:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6eb535d04e code=0x7ffc0000 [ 163.506994][ T5445] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.251: bad orphan inode 131083 [ 163.518672][ T4312] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 163.527644][ T5442] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.538104][ T5442] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 163.547924][ T26] audit: type=1326 audit(1776932228.744:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6eb539c4ab code=0x7ffc0000 [ 163.570368][ T26] audit: type=1326 audit(1776932228.744:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6eb539c4ab code=0x7ffc0000 [ 163.593145][ T26] audit: type=1326 audit(1776932228.744:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6eb539c4ab code=0x7ffc0000 [ 163.619055][ T26] audit: type=1326 audit(1776932228.744:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6eb539c4ab code=0x7ffc0000 [ 163.733063][ T5445] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 163.750584][ T4312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 163.782490][ T4312] usb 1-1: not running at top speed; connect to a high speed hub [ 163.861982][ T4312] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 163.902886][ T4312] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 163.956596][ T4312] usb 1-1: config 4 has no interface number 0 [ 164.011361][ T4312] usb 1-1: string descriptor 0 read error: -22 [ 164.050031][ T4312] usb 1-1: Dual-Role OTG device on HNP port [ 164.088554][ T4312] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 164.142446][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 164.225312][ T4312] usb 1-1: Found UVC 0.02 device (04f2:b746) [ 164.260151][ T4312] usb 1-1: No valid video chain found. [ 164.353605][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 164.431760][ T4312] usb 1-1: USB disconnect, device number 3 [ 164.601696][ T5463] loop5: detected capacity change from 0 to 256 [ 164.703813][ T5463] FAT-fs (loop5): Directory bread(block 64) failed [ 164.726881][ T5463] FAT-fs (loop5): Directory bread(block 65) failed [ 164.762213][ T5463] FAT-fs (loop5): Directory bread(block 66) failed [ 164.786158][ T5463] FAT-fs (loop5): Directory bread(block 67) failed [ 164.813490][ T5463] FAT-fs (loop5): Directory bread(block 68) failed [ 164.850438][ T5463] FAT-fs (loop5): Directory bread(block 69) failed [ 164.880700][ T5463] FAT-fs (loop5): Directory bread(block 70) failed [ 164.914034][ T5463] FAT-fs (loop5): Directory bread(block 71) failed [ 164.941301][ T5463] FAT-fs (loop5): Directory bread(block 72) failed [ 164.975562][ T5463] FAT-fs (loop5): Directory bread(block 73) failed [ 165.652807][ T5479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 166.336159][ T4314] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 166.549575][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.576087][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.625908][ T4314] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 166.680678][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.722122][ T4314] usb 3-1: config 0 descriptor?? [ 167.144481][ T5466] loop1: detected capacity change from 0 to 40427 [ 167.225636][ T5466] F2FS-fs (loop1): invalid crc value [ 167.276243][ T4317] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 167.311026][ T5466] F2FS-fs (loop1): Found nat_bits in checkpoint [ 167.478091][ T4317] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 167.502038][ T4317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.524873][ T5466] F2FS-fs (loop1): Start checkpoint disabled! [ 167.555097][ T4317] usb 6-1: config 0 descriptor?? [ 167.622145][ T5466] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 167.730210][ T5476] loop0: detected capacity change from 0 to 40427 [ 167.794643][ T5476] F2FS-fs (loop0): invalid crc value [ 167.839555][ T5476] F2FS-fs (loop0): Found nat_bits in checkpoint [ 168.138208][ T5476] F2FS-fs (loop0): Start checkpoint disabled! [ 168.195761][ T5476] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 168.662375][ T4947] kworker/u4:14: attempt to access beyond end of device [ 168.662375][ T4947] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 168.807132][ T4317] usb 6-1: Cannot set autoneg [ 168.812857][ T4317] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 168.828474][ T5511] device syzkaller0 entered promiscuous mode [ 168.904136][ T4317] usb 6-1: USB disconnect, device number 3 [ 169.280791][ T4314] usbhid 3-1:0.0: can't add hid device: -71 [ 169.308751][ T4314] usbhid: probe of 3-1:0.0 failed with error -71 [ 169.324332][ T4314] usb 3-1: USB disconnect, device number 3 [ 169.564409][ T5520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 172.196719][ T5542] syz.1.275 uses obsolete (PF_INET,SOCK_PACKET) [ 172.613671][ T5546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.279'. [ 172.646841][ T5550] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 172.733298][ T5552] device macvlan2 entered promiscuous mode [ 172.791295][ T5554] device syzkaller0 entered promiscuous mode [ 173.002757][ T5564] loop4: detected capacity change from 0 to 1024 [ 173.127205][ T5564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 173.135854][ T5564] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.318116][ T5564] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.283: lblock 3 mapped to illegal pblock 3 (length 3) [ 173.429816][ T5564] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 173.478426][ T5579] loop5: detected capacity change from 0 to 512 [ 173.599155][ T5579] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.721144][ T5564] EXT4-fs (loop4): This should not happen!! Data will be lost [ 173.721144][ T5564] [ 173.747948][ T5584] loop0: detected capacity change from 0 to 128 [ 173.829692][ T5584] EXT4-fs (loop0): Test dummy encryption mode enabled [ 173.840236][ T5580] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 8: comm syz.4.283: lblock 8 mapped to illegal pblock 8 (length 8) [ 173.894030][ T5580] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 173.916910][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 173.916927][ T26] audit: type=1800 audit(2000000010.600:70): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.285" name="file1" dev="loop5" ino=1048618 res=0 errno=0 [ 173.937444][ T5580] EXT4-fs (loop4): This should not happen!! Data will be lost [ 173.937444][ T5580] [ 173.958446][ T5584] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 173.980334][ T5579] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 173.986563][ T4315] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 174.038599][ T5579] FAT-fs (loop5): Filesystem has been set read-only [ 174.117090][ T5579] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 174.148235][ T5584] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.218190][ T4315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.275421][ T4315] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.596807][ T5568] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 175.262690][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 175.418467][ T5605] loop1: detected capacity change from 0 to 256 [ 175.632742][ T5605] FAT-fs (loop1): Directory bread(block 64) failed [ 175.664098][ T5605] FAT-fs (loop1): Directory bread(block 65) failed [ 175.747384][ T4315] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 176.021098][ T5615] tmpfs: Bad value for 'nr_inodes' [ 176.727560][ T4315] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 176.735629][ T4315] usb 5-1: Manufacturer: syz [ 176.752211][ T4315] usb 5-1: config 0 descriptor?? [ 177.014609][ T5605] FAT-fs (loop1): Directory bread(block 66) failed [ 177.032678][ T5605] FAT-fs (loop1): Directory bread(block 67) failed [ 177.040889][ T5605] FAT-fs (loop1): Directory bread(block 68) failed [ 177.049214][ T5605] FAT-fs (loop1): Directory bread(block 69) failed [ 177.055923][ T5605] FAT-fs (loop1): Directory bread(block 70) failed [ 177.062583][ T5605] FAT-fs (loop1): Directory bread(block 71) failed [ 177.069297][ T5605] FAT-fs (loop1): Directory bread(block 72) failed [ 177.075872][ T5605] FAT-fs (loop1): Directory bread(block 73) failed [ 177.109949][ T4315] usb 5-1: can't set config #0, error -71 [ 177.133330][ T4315] usb 5-1: USB disconnect, device number 5 [ 177.147185][ T5618] device syzkaller0 entered promiscuous mode [ 177.195994][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 177.469937][ T26] audit: type=1800 audit(2000000014.160:71): pid=5605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.291" name="bus" dev="loop1" ino=1048619 res=0 errno=0 [ 178.153517][ T5636] loop4: detected capacity change from 0 to 512 [ 178.188834][ T5636] EXT4-fs (loop4): Test dummy encryption mode enabled [ 178.195779][ T5636] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 178.487102][ T5636] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.297: bad orphan inode 131083 [ 178.500765][ T5636] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 178.930478][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 181.384615][ T5685] loop0: detected capacity change from 0 to 512 [ 181.393391][ T5683] device syzkaller0 entered promiscuous mode [ 181.425357][ T5685] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 181.477804][ T5685] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.311: corrupted in-inode xattr [ 181.542096][ T5685] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.311: couldn't read orphan inode 15 (err -117) [ 181.555293][ T5685] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.746575][ T5694] loop5: detected capacity change from 0 to 1024 [ 181.766646][ T5694] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.786251][ T5694] EXT4-fs: Ignoring removed oldalloc option [ 181.819309][ T5694] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 181.828207][ T5694] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.841355][ T5694] EXT4-fs (loop5): unmounting filesystem. [ 182.436205][ T4283] Bluetooth: hci5: command 0x1003 tx timeout [ 182.443614][ T49] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 182.599839][ T5708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 182.790331][ T5712] loop4: detected capacity change from 0 to 512 [ 182.914125][ T5712] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.317: missing EA_INODE flag [ 183.022080][ T5712] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.317: error while reading EA inode 12 err=-117 [ 183.081912][ T5712] EXT4-fs (loop4): 1 orphan inode deleted [ 183.110169][ T5712] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 183.128702][ T5719] loop1: detected capacity change from 0 to 512 [ 183.184390][ T5719] EXT4-fs (loop1): 1 truncate cleaned up [ 183.256309][ T5719] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 184.339652][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 184.398772][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 186.846640][ T5750] loop5: detected capacity change from 0 to 4096 [ 186.854051][ T5750] EXT4-fs: Ignoring removed bh option [ 186.933201][ T5750] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0083] [ 186.977541][ T5750] System zones: 0-5 [ 187.014547][ T5750] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 187.202593][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 187.214449][ T5743] loop1: detected capacity change from 0 to 40427 [ 187.298063][ T5743] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 187.314851][ T5743] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 187.351637][ T4433] EXT4-fs (loop5): unmounting filesystem. [ 187.387357][ T5743] F2FS-fs (loop1): invalid crc value [ 187.428816][ T5760] device ip6tnl1 entered promiscuous mode [ 187.453781][ T5743] F2FS-fs (loop1): Found nat_bits in checkpoint [ 188.158566][ T5743] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 188.212409][ T5743] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.901573][ T4268] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 188.901648][ T4268] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 188.938698][ T4268] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 188.949022][ T5782] loop5: detected capacity change from 0 to 512 [ 188.973094][ T4268] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 188.973124][ T4268] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 188.981243][ T4268] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 189.018360][ T5782] EXT4-fs: inline encryption not supported [ 189.032234][ T4268] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 189.033763][ T5782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.156076][ T5782] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.388474][ T5782] Quota error (device loop5): do_insert_tree: Free block already used in tree: block 1 [ 189.476959][ T5782] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 189.515630][ T5782] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.337: Failed to acquire dquot type 1 [ 189.546967][ T5782] EXT4-fs (loop5): Remounting filesystem read-only [ 189.577887][ T5791] loop4: detected capacity change from 0 to 256 [ 189.593707][ T5782] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 189.625408][ T5791] exfat: Deprecated parameter 'utf8' [ 189.655140][ T5782] EXT4-fs (loop5): Remounting filesystem read-only [ 189.666182][ T5782] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.337: corrupted inode contents [ 189.680661][ T5791] exfat: Deprecated parameter 'namecase' [ 189.704097][ T5791] exfat: Deprecated parameter 'namecase' [ 189.724130][ T5782] EXT4-fs (loop5): Remounting filesystem read-only [ 189.736121][ T5782] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #12: comm syz.5.337: mark_inode_dirty error [ 189.776084][ T5782] EXT4-fs (loop5): Remounting filesystem read-only [ 189.784102][ T5791] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 189.803495][ T5782] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.337: corrupted inode contents [ 189.850083][ T5782] EXT4-fs (loop5): Remounting filesystem read-only [ 189.859087][ T5782] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #12: comm syz.5.337: mark_inode_dirty error [ 189.875172][ T5782] EXT4-fs (loop5): Remounting filesystem read-only [ 189.886177][ T5782] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.337: corrupted inode contents [ 189.931323][ T5782] EXT4-fs (loop5): Remounting filesystem read-only [ 189.954439][ T5782] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 189.964142][ T5782] EXT4-fs (loop5): Remounting filesystem read-only [ 189.990887][ T5782] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.337: corrupted inode contents [ 190.017723][ T5782] EXT4-fs (loop5): Remounting filesystem read-only [ 190.024711][ T5782] EXT4-fs error (device loop5): ext4_truncate:4325: inode #12: comm syz.5.337: mark_inode_dirty error [ 190.060966][ T5782] EXT4-fs (loop5): Remounting filesystem read-only [ 190.075541][ T5782] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 190.100609][ T5782] EXT4-fs (loop5): Remounting filesystem read-only [ 190.119831][ T5782] EXT4-fs (loop5): 1 truncate cleaned up [ 190.138505][ T5782] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 190.223750][ T5782] Quota error (device loop5): do_check_range: Getting dqdh_entries 16 out of range 0-14 [ 190.262237][ T5782] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 190.300873][ T5782] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.337: Failed to acquire dquot type 1 [ 190.378931][ T5800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 190.469056][ T5782] EXT4-fs (loop5): Remounting filesystem read-only [ 190.811293][ T5802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'. [ 190.828976][ T4433] EXT4-fs (loop5): unmounting filesystem. [ 191.186118][ T4312] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.275078][ T5815] netlink: 'syz.1.349': attribute type 1 has an invalid length. [ 191.378041][ T4312] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.402532][ T4312] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.414435][ T4312] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 191.437413][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 191.445724][ T4312] usb 5-1: SerialNumber: syz [ 192.391216][ T4312] usb 5-1: 0:2 : does not exist [ 192.475149][ T4312] usb 5-1: USB disconnect, device number 6 [ 192.785126][ T5832] Illegal XDP return value 4294967274 on prog (id 9) dev syz_tun, expect packet loss! [ 192.878087][ T5836] loop0: detected capacity change from 0 to 1024 [ 192.897856][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.974233][ T5836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 192.983732][ T5836] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.041832][ T5836] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.353: lblock 3 mapped to illegal pblock 3 (length 1) [ 193.056752][ T5836] EXT4-fs (loop0): Remounting filesystem read-only [ 193.144587][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 194.351476][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.372765][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 194.384185][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.597635][ T5853] loop2: detected capacity change from 0 to 512 [ 195.132585][ T5853] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 195.141674][ T5853] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.188353][ T5861] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 195.216306][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 195.237426][ T27] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.312990][ T27] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 195.365271][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.536066][ T27] usb 5-1: Product: syz [ 195.553866][ T27] usb 5-1: Manufacturer: syz [ 195.581057][ T27] usb 5-1: SerialNumber: syz [ 195.632890][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 196.126769][ T5865] loop5: detected capacity change from 0 to 8192 [ 196.231737][ T5865] loop5: p3 p4 < > [ 196.241738][ T5865] loop5: p3 size 218103808 extends beyond EOD, truncated [ 196.273145][ T27] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 196.367824][ T27] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 196.488133][ T27] usb 5-1: USB disconnect, device number 7 [ 196.541432][ T4350] udevd[4350]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.893100][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 196.917605][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 197.340190][ T5887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.362'. [ 197.422869][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 197.568521][ T5894] loop0: detected capacity change from 0 to 256 [ 197.675655][ T5894] FAT-fs (loop0): Directory bread(block 64) failed [ 197.706380][ T5894] FAT-fs (loop0): Directory bread(block 65) failed [ 197.713130][ T5894] FAT-fs (loop0): Directory bread(block 66) failed [ 197.728949][ T5898] device syzkaller0 entered promiscuous mode [ 197.755425][ T5894] FAT-fs (loop0): Directory bread(block 67) failed [ 197.775082][ T5894] FAT-fs (loop0): Directory bread(block 68) failed [ 197.796296][ T5894] FAT-fs (loop0): Directory bread(block 69) failed [ 197.811510][ T5894] FAT-fs (loop0): Directory bread(block 70) failed [ 197.852171][ T5894] FAT-fs (loop0): Directory bread(block 71) failed [ 197.866439][ T5894] FAT-fs (loop0): Directory bread(block 72) failed [ 197.873074][ T5894] FAT-fs (loop0): Directory bread(block 73) failed [ 197.947371][ T5902] netlink: 'syz.4.373': attribute type 1 has an invalid length. [ 198.074014][ T5902] device macvlan3 entered promiscuous mode [ 198.108005][ T5902] bond2: (slave macvlan3): Opening slave failed [ 198.620164][ T5909] netlink: 'syz.5.375': attribute type 10 has an invalid length. [ 198.628207][ T5909] netlink: 40 bytes leftover after parsing attributes in process `syz.5.375'. [ 198.637294][ T5909] device batadv0 entered promiscuous mode [ 198.646182][ T5909] bridge0: port 3(batadv0) entered blocking state [ 198.653019][ T5909] bridge0: port 3(batadv0) entered disabled state [ 198.667682][ T5909] bridge0: port 3(batadv0) entered blocking state [ 198.674234][ T5909] bridge0: port 3(batadv0) entered forwarding state [ 198.803203][ T5855] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 198.812893][ T5855] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 200.588711][ T5935] ptrace attach of "./syz-executor exec"[5936] was attempted by "./syz-executor exec"[5935] [ 201.476221][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 201.482365][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 201.488538][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 201.494596][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 201.563960][ T5946] device syzkaller0 entered promiscuous mode [ 202.026346][ T5956] netlink: 24 bytes leftover after parsing attributes in process `syz.5.386'. [ 202.362105][ T5954] netlink: 'syz.1.390': attribute type 1 has an invalid length. [ 202.926953][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.386'. [ 202.996222][ T5962] netlink: 'syz.4.391': attribute type 10 has an invalid length. [ 203.004051][ T5962] netlink: 40 bytes leftover after parsing attributes in process `syz.4.391'. [ 203.013033][ T5962] device batadv0 entered promiscuous mode [ 203.019996][ T5962] bridge0: port 3(batadv0) entered blocking state [ 203.026592][ T5962] bridge0: port 3(batadv0) entered disabled state [ 203.034850][ T5962] bridge0: port 3(batadv0) entered blocking state [ 203.041460][ T5962] bridge0: port 3(batadv0) entered forwarding state [ 203.103693][ T5965] device macvlan2 entered promiscuous mode [ 203.110686][ T5965] bond3: (slave macvlan2): Opening slave failed [ 203.211198][ T4831] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 203.220958][ T4831] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 203.528962][ T5949] loop2: detected capacity change from 0 to 40427 [ 203.553121][ T5949] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12 [ 203.588359][ T5949] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 203.660543][ T5949] F2FS-fs (loop2): invalid crc value [ 203.731537][ T5949] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 205.240251][ T27] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 205.486154][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 205.493383][ T27] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 205.510366][ T27] usb 5-1: config 0 has no interface number 0 [ 205.528820][ T27] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 205.570907][ T5949] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 205.667954][ T5949] F2FS-fs (loop2): Start checkpoint disabled! [ 205.733135][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.741807][ T27] usb 5-1: Product: syz [ 205.746101][ T27] usb 5-1: Manufacturer: syz [ 205.750753][ T27] usb 5-1: SerialNumber: syz [ 205.759133][ T27] usb 5-1: config 0 descriptor?? [ 206.034668][ T27] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 206.057688][ T27] usb 5-1: No valid video chain found. [ 206.501606][ T27] usb 5-1: USB disconnect, device number 8 [ 207.825024][ T6010] netlink: 'syz.5.403': attribute type 10 has an invalid length. [ 207.832923][ T6010] netlink: 40 bytes leftover after parsing attributes in process `syz.5.403'. [ 209.650387][ T6026] loop1: detected capacity change from 0 to 2048 [ 209.700410][ T6026] EXT4-fs: Ignoring removed bh option [ 209.802509][ T6026] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.919547][ T6026] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 209.954597][ T6026] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.167897][ T6042] loop2: detected capacity change from 0 to 128 [ 210.253848][ T4350] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 210.278550][ T6046] device syzkaller0 entered promiscuous mode [ 210.283718][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 210.921457][ T6056] loop1: detected capacity change from 0 to 256 [ 210.977639][ T6056] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 211.355422][ T6052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.404'. [ 211.992841][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 213.058976][ T6064] tipc: Started in network mode [ 213.091806][ T6064] tipc: Node identity 0a3f15608a44, cluster identity 4711 [ 213.120024][ T6064] tipc: Enabled bearer , priority 0 [ 213.178430][ T6064] tipc: Resetting bearer [ 213.226084][ T6063] tipc: Disabling bearer [ 213.266485][ T6071] loop0: detected capacity change from 0 to 512 [ 213.373906][ T6071] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 213.426942][ T6071] System zones: 1-20 [ 213.488853][ T6071] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 213.619864][ T6078] loop1: detected capacity change from 0 to 512 [ 213.670875][ T6078] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 213.773537][ T6078] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.144887][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 215.219942][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 215.251270][ T6092] ptrace attach of "./syz-executor exec"[6102] was attempted by "./syz-executor exec"[6092] [ 215.543032][ T6109] device syzkaller0 entered promiscuous mode [ 215.729519][ T6112] tipc: Started in network mode [ 215.744762][ T6112] tipc: Node identity e2d089b01328, cluster identity 4711 [ 215.753091][ T6112] tipc: Enabled bearer , priority 0 [ 215.791603][ T6113] tipc: Resetting bearer [ 215.899905][ T6110] tipc: Disabling bearer [ 216.653813][ T6137] loop2: detected capacity change from 0 to 256 [ 216.696361][ T22] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 216.918060][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.065227][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.346142][ T22] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 217.414941][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.498211][ T22] usb 6-1: config 0 descriptor?? [ 217.554301][ T6143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.433'. [ 217.839622][ T6150] device syzkaller0 entered promiscuous mode [ 217.877670][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.433'. [ 219.234765][ T6166] tipc: Enabled bearer , priority 0 [ 219.279093][ T6166] tipc: Resetting bearer [ 219.356786][ T6165] tipc: Disabling bearer [ 219.398867][ T22] usbhid 6-1:0.0: can't add hid device: -71 [ 219.415585][ T22] usbhid: probe of 6-1:0.0 failed with error -71 [ 219.453097][ T22] usb 6-1: USB disconnect, device number 4 [ 219.662524][ T6174] loop4: detected capacity change from 0 to 256 [ 220.184045][ T6174] FAT-fs (loop4): Directory bread(block 64) failed [ 220.259547][ T6174] FAT-fs (loop4): Directory bread(block 65) failed [ 220.411988][ T6174] FAT-fs (loop4): Directory bread(block 66) failed [ 220.656216][ T6174] FAT-fs (loop4): Directory bread(block 67) failed [ 220.695978][ T6174] FAT-fs (loop4): Directory bread(block 68) failed [ 220.703415][ T6174] FAT-fs (loop4): Directory bread(block 69) failed [ 220.801633][ T6174] FAT-fs (loop4): Directory bread(block 70) failed [ 220.826222][ T6174] FAT-fs (loop4): Directory bread(block 71) failed [ 220.832934][ T6174] FAT-fs (loop4): Directory bread(block 72) failed [ 220.847855][ T6174] FAT-fs (loop4): Directory bread(block 73) failed [ 221.277509][ T26] audit: type=1800 audit(2000000057.940:72): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.451" name="bus" dev="loop4" ino=1048627 res=0 errno=0 [ 221.871862][ T6197] device syzkaller0 entered promiscuous mode [ 221.957424][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 222.269712][ T6206] tipc: Enabled bearer , priority 0 [ 222.299367][ T6206] device syzkaller0 entered promiscuous mode [ 222.347230][ T6205] tipc: Resetting bearer [ 222.450545][ T6205] tipc: Disabling bearer [ 222.997609][ T4315] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 223.231449][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.365934][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.420916][ T4315] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 223.454140][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.499580][ T4315] usb 5-1: config 0 descriptor?? [ 223.824940][ T6229] overlayfs: missing 'workdir' [ 223.918227][ T4315] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 223.937290][ T4315] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 223.957569][ T4315] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 223.973743][ T4315] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 223.989235][ T4315] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 224.018474][ T4315] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 224.117241][ T4315] playstation 0003:054C:0DF2.0007: Invalid byte count transferred, expected 20 got 0 [ 224.142852][ T4315] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -22 [ 224.183528][ T4315] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 224.217364][ T4315] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 224.253021][ T4315] playstation: probe of 0003:054C:0DF2.0007 failed with error -22 [ 224.782559][ T6246] loop2: detected capacity change from 0 to 2048 [ 224.887118][ T6246] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 224.939385][ T6246] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 225.047909][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 225.212465][ T6256] tipc: Started in network mode [ 225.233722][ T6256] tipc: Node identity ca243a72884d, cluster identity 4711 [ 225.268245][ T6256] tipc: Enabled bearer , priority 0 [ 225.291312][ T6259] loop1: detected capacity change from 0 to 512 [ 225.308976][ T6257] device syzkaller0 entered promiscuous mode [ 225.337608][ T6259] EXT4-fs (loop1): Test dummy encryption mode enabled [ 225.345090][ T6259] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 225.444473][ T6255] tipc: Resetting bearer [ 225.493248][ T4314] usb 5-1: USB disconnect, device number 9 [ 225.532546][ T6259] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.478: bad orphan inode 131083 [ 225.560155][ T6259] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 225.756779][ T6255] tipc: Disabling bearer [ 225.773045][ T6264] netlink: 24 bytes leftover after parsing attributes in process `syz.5.471'. [ 225.926174][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.471'. [ 226.037140][ T6259] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 226.117635][ T6269] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 226.299385][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 227.080620][ T6277] loop2: detected capacity change from 0 to 40427 [ 227.107808][ T6277] F2FS-fs (loop2): invalid crc value [ 227.141852][ T6277] F2FS-fs (loop2): Found nat_bits in checkpoint [ 227.303140][ T6277] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 227.322572][ T6277] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 227.571607][ T6311] loop1: detected capacity change from 0 to 512 [ 228.212847][ T6311] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 228.221981][ T6311] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.504072][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 228.519803][ T6316] tipc: Enabled bearer , priority 0 [ 228.529193][ T6316] device syzkaller0 entered promiscuous mode [ 229.006253][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 229.276244][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.358903][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.397125][ T14] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 229.422801][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.453624][ T14] usb 1-1: config 0 descriptor?? [ 229.453763][ T4266] syz-executor: attempt to access beyond end of device [ 229.453763][ T4266] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 229.490357][ T6315] tipc: Resetting bearer [ 229.548378][ T6315] tipc: Disabling bearer [ 229.770974][ T6330] loop1: detected capacity change from 0 to 256 [ 229.794550][ T6330] exfat: Deprecated parameter 'utf8' [ 229.818890][ T6330] exfat: Deprecated parameter 'utf8' [ 229.841842][ T6330] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d) [ 229.874965][ T14] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 229.905779][ T14] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 229.922999][ T14] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 229.948666][ T14] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 229.970819][ T14] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 230.006211][ T14] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 230.118975][ T14] playstation 0003:054C:0DF2.0008: Invalid byte count transferred, expected 20 got 0 [ 230.140414][ T14] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense pairing info: -22 [ 230.171563][ T14] playstation 0003:054C:0DF2.0008: Failed to get MAC address from DualSense [ 230.204633][ T14] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 230.232089][ T14] playstation: probe of 0003:054C:0DF2.0008 failed with error -22 [ 230.524234][ T6341] ptrace attach of "./syz-executor exec"[6344] was attempted by "./syz-executor exec"[6341] [ 231.480250][ T4354] usb 1-1: USB disconnect, device number 4 [ 233.017193][ T6356] netlink: 'syz.5.502': attribute type 10 has an invalid length. [ 233.025067][ T6356] netlink: 40 bytes leftover after parsing attributes in process `syz.5.502'. [ 233.427548][ T6363] tipc: Enabled bearer , priority 0 [ 233.435335][ T6363] device syzkaller0 entered promiscuous mode [ 233.471905][ T6363] tipc: Resetting bearer [ 233.517648][ T6359] device syzkaller0 entered promiscuous mode [ 233.584999][ T6362] tipc: Resetting bearer [ 234.383656][ T6362] tipc: Disabling bearer [ 234.407074][ T6369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.504'. [ 234.426788][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.504'. [ 236.109040][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.517'. [ 236.432180][ T6405] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 236.453439][ T6406] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 238.006771][ T6416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.521'. [ 238.549776][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 240.630351][ T6461] loop5: detected capacity change from 0 to 512 [ 240.805660][ T6461] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.535: corrupted inode contents [ 240.908779][ T6461] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #16: comm syz.5.535: mark_inode_dirty error [ 240.950916][ T6461] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.535: corrupted inode contents [ 240.973897][ T6461] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.535: mark_inode_dirty error [ 241.059138][ T6461] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.535: corrupted inode contents [ 241.118657][ T6461] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 241.160276][ T6461] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.535: corrupted inode contents [ 241.232049][ T6461] EXT4-fs error (device loop5): ext4_truncate:4325: inode #16: comm syz.5.535: mark_inode_dirty error [ 241.324320][ T6461] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 241.369750][ T6470] loop1: detected capacity change from 0 to 512 [ 241.429071][ T6470] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 241.438747][ T6470] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.455885][ T6461] EXT4-fs (loop5): 1 truncate cleaned up [ 241.468558][ T4805] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 241.491604][ T6461] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 241.528451][ T4805] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:10: Failed to release dquot type 1 [ 241.569194][ T6461] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.709598][ T26] audit: type=1800 audit(2000000078.390:73): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.535" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 241.880727][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 242.295454][ T6479] device syzkaller0 entered promiscuous mode [ 245.028041][ T4433] EXT4-fs (loop5): unmounting filesystem. [ 245.222645][ T6499] loop2: detected capacity change from 0 to 512 [ 245.384741][ T6499] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.546: missing EA_INODE flag [ 245.437383][ T6499] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.546: error while reading EA inode 12 err=-117 [ 245.526308][ T6499] EXT4-fs (loop2): 1 orphan inode deleted [ 245.532323][ T6499] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 245.569763][ T6505] loop1: detected capacity change from 0 to 4096 [ 245.604734][ T6505] EXT4-fs: inline encryption not supported [ 245.912868][ T6505] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 246.466647][ T6505] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8856c019, mo2=0003] [ 246.684726][ T6515] binfmt_misc: register: failed to install interpreter file ./file2 [ 247.737091][ T6505] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 247.828647][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 247.927026][ T6520] loop0: detected capacity change from 0 to 128 [ 248.298882][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 251.839314][ T6563] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.151832][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.171493][ T6589] loop2: detected capacity change from 0 to 256 [ 253.179172][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.191415][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.203108][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.221327][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 253.228688][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.337365][ T6589] FAT-fs (loop2): Directory bread(block 64) failed [ 253.343996][ T6589] FAT-fs (loop2): Directory bread(block 65) failed [ 253.351341][ T6589] FAT-fs (loop2): Directory bread(block 66) failed [ 253.358355][ T6589] FAT-fs (loop2): Directory bread(block 67) failed [ 253.365047][ T6589] FAT-fs (loop2): Directory bread(block 68) failed [ 253.372029][ T6589] FAT-fs (loop2): Directory bread(block 69) failed [ 253.378966][ T6589] FAT-fs (loop2): Directory bread(block 70) failed [ 253.385593][ T6589] FAT-fs (loop2): Directory bread(block 71) failed [ 253.392970][ T6589] FAT-fs (loop2): Directory bread(block 72) failed [ 253.400000][ T6589] FAT-fs (loop2): Directory bread(block 73) failed [ 253.728216][ T26] audit: type=1800 audit(2000000090.420:74): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.572" name="bus" dev="loop2" ino=1048630 res=0 errno=0 [ 253.845279][ T6603] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.576'. [ 254.169839][ T6588] chnl_net:caif_netlink_parms(): no params data found [ 255.068708][ T4805] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.316293][ T4272] Bluetooth: hci5: command 0x0409 tx timeout [ 255.424714][ T4805] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.497605][ T6588] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.504800][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.516498][ T6632] loop0: detected capacity change from 0 to 512 [ 255.554588][ T6588] device bridge_slave_0 entered promiscuous mode [ 255.607978][ T6588] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.615340][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.637436][ T6588] device bridge_slave_1 entered promiscuous mode [ 255.697313][ T6632] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 255.725102][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.726682][ T4312] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 255.731665][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.807138][ T6632] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.937770][ T4805] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.965854][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.140717][ T6641] loop5: detected capacity change from 0 to 512 [ 256.622414][ T6588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.799782][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.826055][ T4312] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 256.835180][ T4312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.835956][ T6641] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 256.851616][ T4312] usb 2-1: config 0 descriptor?? [ 256.853036][ T6641] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.880239][ T4312] usb 2-1: can't set config #0, error -71 [ 256.904731][ T6588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.934245][ T4312] usb 2-1: USB disconnect, device number 7 [ 256.943416][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 257.113363][ T4433] EXT4-fs (loop5): unmounting filesystem. [ 257.141375][ T4805] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.390317][ T6588] team0: Port device team_slave_0 added [ 257.404767][ T4272] Bluetooth: hci5: command 0x041b tx timeout [ 257.427269][ T6647] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.587'. [ 257.471766][ T6588] team0: Port device team_slave_1 added [ 257.503734][ T6651] loop0: detected capacity change from 0 to 256 [ 257.585118][ T6651] FAT-fs (loop0): Directory bread(block 64) failed [ 257.612331][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.626033][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.664973][ T6651] FAT-fs (loop0): Directory bread(block 65) failed [ 257.675220][ T6651] FAT-fs (loop0): Directory bread(block 66) failed [ 257.706158][ T6651] FAT-fs (loop0): Directory bread(block 67) failed [ 257.712860][ T6651] FAT-fs (loop0): Directory bread(block 68) failed [ 257.746619][ T6651] FAT-fs (loop0): Directory bread(block 69) failed [ 257.761079][ T6651] FAT-fs (loop0): Directory bread(block 70) failed [ 257.771573][ T6588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.777954][ T6651] FAT-fs (loop0): Directory bread(block 71) failed [ 257.814944][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.842597][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.899712][ T6651] FAT-fs (loop0): Directory bread(block 72) failed [ 257.940605][ T6588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.951883][ T6651] FAT-fs (loop0): Directory bread(block 73) failed [ 258.372883][ T26] audit: type=1800 audit(2000000095.030:75): pid=6650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.588" name="bus" dev="loop0" ino=1048631 res=0 errno=0 [ 258.950395][ T6588] device hsr_slave_0 entered promiscuous mode [ 258.992956][ T6588] device hsr_slave_1 entered promiscuous mode [ 259.003132][ T6588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.067226][ T6588] Cannot create hsr debugfs directory [ 259.073003][ T4805] tipc: Left network mode [ 259.487257][ T4272] Bluetooth: hci5: command 0x040f tx timeout [ 260.751696][ T6674] loop0: detected capacity change from 0 to 256 [ 260.845550][ T6674] FAT-fs (loop0): Directory bread(block 64) failed [ 261.026180][ T6674] FAT-fs (loop0): Directory bread(block 65) failed [ 261.106226][ T6674] FAT-fs (loop0): Directory bread(block 66) failed [ 261.143789][ T6674] FAT-fs (loop0): Directory bread(block 67) failed [ 261.195035][ T6674] FAT-fs (loop0): Directory bread(block 68) failed [ 261.238040][ T6674] FAT-fs (loop0): Directory bread(block 69) failed [ 261.244796][ T6674] FAT-fs (loop0): Directory bread(block 70) failed [ 261.374935][ T6674] FAT-fs (loop0): Directory bread(block 71) failed [ 261.381866][ T6674] FAT-fs (loop0): Directory bread(block 72) failed [ 261.388759][ T6674] FAT-fs (loop0): Directory bread(block 73) failed [ 261.494359][ T6674] syz.0.593: attempt to access beyond end of device [ 261.494359][ T6674] loop0: rw=2049, sector=1160, nr_sectors = 8 limit=256 [ 261.556380][ T4272] Bluetooth: hci5: command 0x0419 tx timeout [ 261.773686][ T6588] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 261.927425][ T6588] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 261.985273][ T6588] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 262.747133][ T6695] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.598'. [ 262.781925][ T6588] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 264.473874][ T6588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.647366][ T6588] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.831842][ T6588] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.906140][ T6588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.373065][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.386904][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.400192][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.412038][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.422700][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.429924][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.438763][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.487933][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.511726][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.518970][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.592385][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.633489][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.645570][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.703280][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.730660][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.753548][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.772624][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.787717][ T6730] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.609'. [ 265.809317][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.825602][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.842898][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.870598][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.893960][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.921749][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.499377][ T4805] device hsr_slave_0 left promiscuous mode [ 266.550702][ T4805] device hsr_slave_1 left promiscuous mode [ 266.573191][ T4805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.626213][ T4805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.657925][ T4805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.665436][ T4805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.690398][ T6748] loop2: detected capacity change from 0 to 512 [ 266.738238][ T4805] bridge0: port 3(batadv0) entered disabled state [ 266.776727][ T4805] device bridge_slave_1 left promiscuous mode [ 266.783072][ T4805] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.792260][ T6748] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 266.801458][ T6748] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.826952][ T4805] device bridge_slave_0 left promiscuous mode [ 266.881731][ T4805] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.074946][ T6753] ipt_CLUSTERIP: Please specify destination IP [ 267.096563][ T4805] device veth1_macvtap left promiscuous mode [ 267.102774][ T4805] device veth0_macvtap left promiscuous mode [ 267.123944][ T4805] device veth1_vlan left promiscuous mode [ 267.146361][ T4805] device veth0_vlan left promiscuous mode [ 267.395797][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 267.660303][ T4805] bond2 (unregistering): Released all slaves [ 267.768264][ T4805] bond1 (unregistering): Released all slaves [ 268.900437][ T4805] team0 (unregistering): Port device team_slave_1 removed [ 268.958020][ T4805] team0 (unregistering): Port device team_slave_0 removed [ 269.008523][ T4805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.082510][ T4805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.534862][ T4805] bond0 (unregistering): Released all slaves [ 269.886581][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 269.947974][ T6785] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.622'. [ 270.292753][ T6798] UHID_CREATE from different security context by process 411 (syz.1.624), this is not allowed. [ 270.573052][ T6803] loop5: detected capacity change from 0 to 512 [ 270.790626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.814389][ T6811] loop1: detected capacity change from 0 to 1024 [ 270.821991][ T6803] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 270.831076][ T6803] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.844150][ T6811] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 270.864690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.888289][ T6811] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 270.954079][ T6588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.173530][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 271.464788][ T4433] EXT4-fs (loop5): unmounting filesystem. [ 271.711565][ T6824] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.634'. [ 271.862425][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.633'. [ 272.330413][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.637'. [ 273.564422][ T6860] netlink: 'syz.2.641': attribute type 10 has an invalid length. [ 273.572263][ T6860] netlink: 40 bytes leftover after parsing attributes in process `syz.2.641'. [ 273.582390][ T6860] device batadv0 entered promiscuous mode [ 273.590682][ T6860] bridge0: port 3(batadv0) entered blocking state [ 273.597465][ T6860] bridge0: port 3(batadv0) entered disabled state [ 273.610436][ T6860] bridge0: port 3(batadv0) entered blocking state [ 273.617062][ T6860] bridge0: port 3(batadv0) entered forwarding state [ 273.650924][ T6861] loop1: detected capacity change from 0 to 512 [ 273.931799][ T4889] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 273.941295][ T4889] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 274.267871][ T6861] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 274.277197][ T6861] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.463129][ T6867] device syzkaller0 entered promiscuous mode [ 274.498908][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 275.045217][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.061662][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.130906][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.160480][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.223863][ T6588] device veth0_vlan entered promiscuous mode [ 275.256252][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.300609][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.339463][ T6588] device veth1_vlan entered promiscuous mode [ 275.446383][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 275.468104][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 275.481857][ T6890] loop0: detected capacity change from 0 to 16 [ 275.492807][ T6890] erofs: (device loop0): mounted with root inode @ nid 36. [ 275.525680][ T4272] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 275.538012][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.575702][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.596709][ T6588] device veth0_macvtap entered promiscuous mode [ 275.624510][ T6588] device veth1_macvtap entered promiscuous mode [ 275.705318][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.735056][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.768282][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.801815][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.823373][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.845520][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.863218][ T6890] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 275.886088][ T26] audit: type=1800 audit(2000000112.570:76): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.649" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 275.916333][ T6588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.924177][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.937691][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.967257][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.987799][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.024956][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.077747][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.106357][ T6890] syz.0.649 (6890) used greatest stack depth: 19024 bytes left [ 276.111046][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.125146][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.135586][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.156831][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.212318][ T6588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.276909][ T6588] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.330292][ T6588] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.368320][ T6588] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.383860][ T6588] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.398096][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.420611][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.562874][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.582767][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.601331][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 276.656190][ T4354] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 276.670556][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.687781][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.702900][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 276.856290][ T4354] usb 6-1: Using ep0 maxpacket: 32 [ 276.876269][ T4354] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.923612][ T4354] usb 6-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 277.001674][ T6920] loop0: detected capacity change from 0 to 256 [ 277.044914][ T4354] usb 6-1: config 1 interface 0 has no altsetting 0 [ 277.056970][ T6920] exfat: Deprecated parameter 'utf8' [ 277.088446][ T4354] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.111635][ T6920] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 277.136125][ T4354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.167304][ T4354] usb 6-1: Product: syz [ 277.185798][ T4354] usb 6-1: Manufacturer: syz [ 277.214792][ T4354] usb 6-1: SerialNumber: syz [ 277.399714][ T6924] loop2: detected capacity change from 0 to 8192 [ 277.446976][ T4354] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 277.468240][ T6924] syz.2.660: attempt to access beyond end of device [ 277.468240][ T6924] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 277.493956][ T4354] usb 6-1: USB disconnect, device number 5 [ 277.542574][ T6924] Buffer I/O error on dev loop2, logical block 57847, async page read [ 277.623008][ T6924] syz.2.660: attempt to access beyond end of device [ 277.623008][ T6924] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 277.669448][ T6939] loop6: detected capacity change from 0 to 256 [ 277.708213][ T6924] Buffer I/O error on dev loop2, logical block 57847, async page read [ 277.746451][ T26] audit: type=1800 audit(2000000114.430:77): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.660" name="file2" dev="loop2" ino=1048636 res=0 errno=0 [ 278.871874][ T6965] input: syz0 as /devices/virtual/input/input6 [ 278.999902][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.673'. [ 279.155529][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.674'. [ 279.985862][ T6986] tipc: Enabled bearer , priority 0 [ 280.030313][ T6986] device syzkaller0 entered promiscuous mode [ 280.111043][ T6986] tipc: Resetting bearer [ 280.193952][ T6984] tipc: Resetting bearer [ 280.287162][ T6984] tipc: Disabling bearer [ 280.971559][ T7000] ipt_CLUSTERIP: Please specify destination IP [ 281.692835][ T7024] loop1: detected capacity change from 0 to 256 [ 281.782227][ T7024] FAT-fs (loop1): Directory bread(block 64) failed [ 281.816402][ T7024] FAT-fs (loop1): Directory bread(block 65) failed [ 281.823109][ T7024] FAT-fs (loop1): Directory bread(block 66) failed [ 281.887687][ T7024] FAT-fs (loop1): Directory bread(block 67) failed [ 281.912494][ T7024] FAT-fs (loop1): Directory bread(block 68) failed [ 281.935178][ T7024] FAT-fs (loop1): Directory bread(block 69) failed [ 281.971718][ T7024] FAT-fs (loop1): Directory bread(block 70) failed [ 281.991194][ T7024] FAT-fs (loop1): Directory bread(block 71) failed [ 282.026306][ T7024] FAT-fs (loop1): Directory bread(block 72) failed [ 282.032924][ T7024] FAT-fs (loop1): Directory bread(block 73) failed [ 282.395938][ T26] audit: type=1800 audit(2000000119.080:78): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.687" name="bus" dev="loop1" ino=1048637 res=0 errno=0 [ 282.601789][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.688'. [ 283.357564][ T7041] device syzkaller0 entered promiscuous mode [ 284.967963][ T7066] loop1: detected capacity change from 0 to 16 [ 285.006502][ T7066] erofs: (device loop1): mounted with root inode @ nid 36. [ 285.016105][ T7066] syz.1.697: attempt to access beyond end of device [ 285.016105][ T7066] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 285.051078][ T7066] syz.1.697: attempt to access beyond end of device [ 285.051078][ T7066] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 285.068503][ T7066] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 285.081962][ T7066] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 285.093755][ T7066] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 285.105445][ T26] audit: type=1800 audit(2000000121.770:79): pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.697" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 286.817037][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.704'. [ 286.917108][ T7094] device syzkaller0 entered promiscuous mode [ 287.016137][ T37] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 287.377918][ T37] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 287.389559][ T37] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 287.400106][ T37] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 287.409550][ T37] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.294845][ T7112] overlayfs: failed to resolve './bus': -2 [ 288.778048][ T37] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 288.796760][ T37] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input7 [ 288.821186][ T37] input: failed to attach handler kbd to device input7, error: -5 [ 289.049421][ T37] usb 7-1: USB disconnect, device number 2 [ 289.097577][ T7135] device syzkaller0 entered promiscuous mode [ 289.502825][ T7144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.720'. [ 289.811730][ T7155] loop6: detected capacity change from 0 to 256 [ 289.861056][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 290.102553][ T7155] FAT-fs (loop6): Directory bread(block 64) failed [ 290.110616][ T7155] FAT-fs (loop6): Directory bread(block 65) failed [ 290.145771][ T7165] overlayfs: failed to resolve './bus': -2 [ 290.171604][ T7155] FAT-fs (loop6): Directory bread(block 66) failed [ 290.195411][ T7155] FAT-fs (loop6): Directory bread(block 67) failed [ 290.213235][ T7155] FAT-fs (loop6): Directory bread(block 68) failed [ 290.467333][ T7155] FAT-fs (loop6): Directory bread(block 69) failed [ 290.725426][ T7155] FAT-fs (loop6): Directory bread(block 70) failed [ 290.876222][ T7155] FAT-fs (loop6): Directory bread(block 71) failed [ 290.914808][ T7155] FAT-fs (loop6): Directory bread(block 72) failed [ 290.989703][ T7155] FAT-fs (loop6): Directory bread(block 73) failed [ 291.143919][ T26] audit: type=1800 audit(2000000127.830:80): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.722" name="bus" dev="loop6" ino=1048638 res=0 errno=0 [ 291.512491][ T7186] device syzkaller0 entered promiscuous mode [ 292.295135][ T7206] binder: 7203:7206 ioctl c0306201 200000000040 returned -14 [ 292.444707][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.6.741'. [ 292.975190][ T7212] loop2: detected capacity change from 0 to 512 [ 293.078861][ T7212] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 293.088335][ T7212] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.336604][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 293.502822][ T7223] loop1: detected capacity change from 0 to 256 [ 293.618636][ T7223] FAT-fs (loop1): Directory bread(block 64) failed [ 293.663538][ T7223] FAT-fs (loop1): Directory bread(block 65) failed [ 293.700373][ T7223] FAT-fs (loop1): Directory bread(block 66) failed [ 293.722621][ T7223] FAT-fs (loop1): Directory bread(block 67) failed [ 293.763114][ T7223] FAT-fs (loop1): Directory bread(block 68) failed [ 293.782057][ T7234] tipc: Enabled bearer , priority 0 [ 293.789181][ T7223] FAT-fs (loop1): Directory bread(block 69) failed [ 293.795904][ T7223] FAT-fs (loop1): Directory bread(block 70) failed [ 293.814105][ T7234] device syzkaller0 entered promiscuous mode [ 293.852168][ T7223] FAT-fs (loop1): Directory bread(block 71) failed [ 293.904840][ T7234] tipc: Resetting bearer [ 293.916200][ T7223] FAT-fs (loop1): Directory bread(block 72) failed [ 293.933293][ T7233] tipc: Resetting bearer [ 293.933819][ T7223] FAT-fs (loop1): Directory bread(block 73) failed [ 293.991814][ T7242] loop2: detected capacity change from 0 to 256 [ 294.178184][ T7233] tipc: Disabling bearer [ 294.201703][ T26] audit: type=1800 audit(2000000130.890:81): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.743" name="bus" dev="loop1" ino=1048640 res=0 errno=0 [ 295.854791][ T7250] loop2: detected capacity change from 0 to 512 [ 296.288076][ T7267] loop0: detected capacity change from 0 to 512 [ 296.565375][ T7267] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 296.574707][ T7267] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.905400][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 297.507627][ T7291] loop1: detected capacity change from 0 to 1024 [ 297.595000][ T7291] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 297.680181][ T7291] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.698366][ T7291] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.761: Freeing blocks not in datazone - block = 0, count = 16 [ 297.824030][ T7289] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.761: bg 0: block 112: padding at end of block bitmap is not set [ 298.021639][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 298.045916][ T7289] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 298.076234][ T7289] EXT4-fs (loop1): This should not happen!! Data will be lost [ 298.076234][ T7289] [ 298.131597][ T7289] EXT4-fs (loop1): Total free blocks count 0 [ 298.192814][ T7289] EXT4-fs (loop1): Free/Dirty block details [ 298.199608][ T7309] loop2: detected capacity change from 0 to 256 [ 298.211102][ T7289] EXT4-fs (loop1): free_blocks=0 [ 298.219116][ T7289] EXT4-fs (loop1): dirty_blocks=16 [ 298.224388][ T7289] EXT4-fs (loop1): Block reservation details [ 298.236811][ T7289] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 298.284297][ T7309] FAT-fs (loop2): Directory bread(block 64) failed [ 298.287433][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 298.307855][ T22] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 298.319510][ T7309] FAT-fs (loop2): Directory bread(block 65) failed [ 298.342997][ T7309] FAT-fs (loop2): Directory bread(block 66) failed [ 298.346240][ T22] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 298.396716][ T7309] FAT-fs (loop2): Directory bread(block 67) failed [ 298.436780][ T7309] FAT-fs (loop2): Directory bread(block 68) failed [ 298.443409][ T7309] FAT-fs (loop2): Directory bread(block 69) failed [ 298.538415][ T7309] FAT-fs (loop2): Directory bread(block 70) failed [ 298.548460][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 298.566288][ T22] usb 1-1: config 179 has no interface number 0 [ 298.573122][ T22] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 298.582700][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.603519][ T7309] FAT-fs (loop2): Directory bread(block 71) failed [ 298.766318][ T7309] FAT-fs (loop2): Directory bread(block 72) failed [ 298.773231][ T7309] FAT-fs (loop2): Directory bread(block 73) failed [ 300.708069][ T26] audit: type=1800 audit(2000000137.370:82): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.766" name="bus" dev="loop2" ino=1048641 res=0 errno=0 [ 301.031591][ T7327] loop6: detected capacity change from 0 to 512 [ 301.126680][ T7327] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 301.135857][ T7327] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.197727][ T4543] usb 1-1: USB disconnect, device number 5 [ 301.293703][ T6588] EXT4-fs (loop6): unmounting filesystem. [ 304.378762][ T7377] loop1: detected capacity change from 0 to 4096 [ 307.389801][ T7377] EXT4-fs: failed to create workqueue [ 307.395267][ T7377] EXT4-fs (loop1): mount failed [ 307.489169][ T7381] loop0: detected capacity change from 0 to 256 [ 307.596997][ T7381] FAT-fs (loop0): Directory bread(block 64) failed [ 307.653129][ T7381] FAT-fs (loop0): Directory bread(block 65) failed [ 307.695141][ T7381] FAT-fs (loop0): Directory bread(block 66) failed [ 307.834641][ T14] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 307.901000][ T7381] FAT-fs (loop0): Directory bread(block 67) failed [ 307.907801][ T7381] FAT-fs (loop0): Directory bread(block 68) failed [ 307.918035][ T7381] FAT-fs (loop0): Directory bread(block 69) failed [ 307.924727][ T7381] FAT-fs (loop0): Directory bread(block 70) failed [ 307.931392][ T7381] FAT-fs (loop0): Directory bread(block 71) failed [ 307.938075][ T7381] FAT-fs (loop0): Directory bread(block 72) failed [ 307.944728][ T7381] FAT-fs (loop0): Directory bread(block 73) failed [ 308.057944][ T14] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.093162][ T14] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.304271][ T14] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 308.615891][ T7389] loop2: detected capacity change from 0 to 512 [ 308.722819][ T14] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.746050][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.754123][ T14] usb 7-1: Product: syz [ 308.758936][ T14] usb 7-1: Manufacturer: syz [ 308.763617][ T14] usb 7-1: SerialNumber: syz [ 308.883413][ T7389] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 308.892674][ T7389] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.038425][ T7382] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 309.116870][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 309.398720][ T26] audit: type=1800 audit(2000000146.090:83): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.782" name="bus" dev="loop0" ino=1048642 res=0 errno=0 [ 309.625234][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f96c800: rx timeout, send abort [ 309.670319][ T22] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 309.683153][ T7382] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 309.829967][ T7418] device ip6gre1 entered promiscuous mode [ 309.891557][ T22] usb 2-1: unable to get BOS descriptor or descriptor too short [ 309.902672][ T14] cdc_ncm 7-1:1.0: bind() failure [ 309.913514][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.930822][ T14] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 309.934404][ T22] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 309.959433][ T22] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 309.976970][ T14] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 309.990873][ T22] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 309.995275][ T14] usbtest: probe of 7-1:1.1 failed with error -71 [ 310.011636][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.028280][ T22] usb 2-1: Product: syz [ 310.035431][ T14] usb 7-1: USB disconnect, device number 3 [ 310.051215][ T22] usb 2-1: Manufacturer: syz [ 310.063754][ T22] usb 2-1: SerialNumber: syz [ 310.130901][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f96ec00: rx timeout, send abort [ 310.146151][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f96c800: abort rx timeout. Force session deactivation [ 310.301628][ T22] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 310.327252][ T22] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 310.343037][ T22] usb 2-1: 1:1 : unsupported sample bitwidth 1 in 252 bytes [ 310.360864][ T22] usb 2-1: unit 2 not found! [ 310.365563][ T22] usb 2-1: unit 0 not found! [ 310.421571][ T22] usb 2-1: USB disconnect, device number 8 [ 310.566320][ T7426] device syzkaller0 entered promiscuous mode [ 310.639273][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f96ec00: abort rx timeout. Force session deactivation [ 310.715349][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.731889][ T7428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.003851][ T7441] loop0: detected capacity change from 0 to 512 [ 311.266306][ T7441] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 311.275751][ T7441] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.525168][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 311.562796][ T7453] loop1: detected capacity change from 0 to 2048 [ 311.746176][ T14] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 311.761057][ T7453] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 311.919148][ T7453] [ 311.921579][ T7453] ====================================================== [ 311.928628][ T7453] WARNING: possible circular locking dependency detected [ 311.935711][ T7453] syzkaller #0 Not tainted [ 311.940168][ T7453] ------------------------------------------------------ [ 311.947214][ T7453] syz.1.801/7453 is trying to acquire lock: [ 311.953141][ T7453] ffff8880547d9ee0 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 311.963007][ T7453] [ 311.963007][ T7453] but task is already holding lock: [ 311.970456][ T7453] ffff88802f100c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2f40 [ 311.980619][ T7453] [ 311.980619][ T7453] which lock already depends on the new lock. [ 311.980619][ T7453] [ 311.991069][ T7453] [ 311.991069][ T7453] the existing dependency chain (in reverse order) is: [ 312.000128][ T7453] [ 312.000128][ T7453] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 312.008617][ T7453] percpu_down_read+0x44/0x1a0 [ 312.013962][ T7453] ext4_writepages+0x20f/0x2f40 [ 312.019400][ T7453] do_writepages+0x3ba/0x640 [ 312.024563][ T7453] __writeback_single_inode+0x156/0x1160 [ 312.030768][ T7453] writeback_single_inode+0x3cb/0x8e0 [ 312.036677][ T7453] write_inode_now+0x17f/0x210 [ 312.041977][ T7453] iput+0x613/0x980 [ 312.046319][ T7453] ext4_xattr_block_set+0x273b/0x32b0 [ 312.052224][ T7453] ext4_expand_extra_isize_ea+0x120b/0x1dc0 [ 312.058649][ T7453] __ext4_expand_extra_isize+0x301/0x3e0 [ 312.064821][ T7453] __ext4_mark_inode_dirty+0x47f/0x770 [ 312.070842][ T7453] ext4_evict_inode+0xa7f/0x1110 [ 312.076358][ T7453] evict+0x4c9/0x8d0 [ 312.080823][ T7453] ext4_orphan_cleanup+0xbeb/0x1420 [ 312.086620][ T7453] ext4_fill_super+0x6ee3/0x78c0 [ 312.092135][ T7453] get_tree_bdev+0x3f1/0x610 [ 312.097301][ T7453] vfs_get_tree+0x88/0x270 [ 312.102334][ T7453] do_new_mount+0x24a/0xa40 [ 312.107409][ T7453] __se_sys_mount+0x2e3/0x3d0 [ 312.112651][ T7453] do_syscall_64+0x4c/0xa0 [ 312.117650][ T7453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.124298][ T7453] [ 312.124298][ T7453] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 312.131924][ T7453] __lock_acquire+0x2d07/0x7d10 [ 312.137361][ T7453] lock_acquire+0x1bb/0x4a0 [ 312.142439][ T7453] down_write+0x36/0x60 [ 312.147178][ T7453] ext4_destroy_inline_data+0x24/0xe0 [ 312.153135][ T7453] ext4_writepages+0x670/0x2f40 [ 312.158566][ T7453] do_writepages+0x3ba/0x640 [ 312.163726][ T7453] filemap_fdatawrite_wbc+0x11e/0x180 [ 312.169693][ T7453] file_write_and_wait_range+0x159/0x230 [ 312.175948][ T7453] ext4_sync_file+0x23b/0xca0 [ 312.181203][ T7453] ext4_buffered_write_iter+0x2f6/0x390 [ 312.187331][ T7453] ext4_file_write_iter+0x1cf/0x1710 [ 312.193194][ T7453] vfs_write+0x4b1/0xa30 [ 312.198022][ T7453] __x64_sys_pwrite64+0x197/0x220 [ 312.203631][ T7453] do_syscall_64+0x4c/0xa0 [ 312.208630][ T7453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.215112][ T7453] [ 312.215112][ T7453] other info that might help us debug this: [ 312.215112][ T7453] [ 312.225393][ T7453] Possible unsafe locking scenario: [ 312.225393][ T7453] [ 312.232886][ T7453] CPU0 CPU1 [ 312.238294][ T7453] ---- ---- [ 312.243700][ T7453] lock(&sbi->s_writepages_rwsem); [ 312.248955][ T7453] lock(&ei->xattr_sem); [ 312.255854][ T7453] lock(&sbi->s_writepages_rwsem); [ 312.263633][ T7453] lock(&ei->xattr_sem); [ 312.268016][ T7453] [ 312.268016][ T7453] *** DEADLOCK *** [ 312.268016][ T7453] [ 312.276196][ T7453] 2 locks held by syz.1.801/7453: [ 312.281275][ T7453] #0: ffff888053f16460 (sb_writers#4){.+.+}-{0:0}, at: vfs_write+0x26b/0xa30 [ 312.290258][ T7453] #1: ffff88802f100c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2f40 [ 312.300882][ T7453] [ 312.300882][ T7453] stack backtrace: [ 312.306916][ T7453] CPU: 0 PID: 7453 Comm: syz.1.801 Not tainted syzkaller #0 [ 312.314264][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 312.324776][ T7453] Call Trace: [ 312.328108][ T7453] [ 312.331079][ T7453] dump_stack_lvl+0x188/0x24e [ 312.335872][ T7453] ? load_image+0x400/0x400 [ 312.340431][ T7453] ? show_regs_print_info+0x12/0x12 [ 312.345699][ T7453] ? print_circular_bug+0x12b/0x1a0 [ 312.350964][ T7453] check_noncircular+0x296/0x330 [ 312.355979][ T7453] ? add_chain_block+0x940/0x940 [ 312.360985][ T7453] ? lockdep_lock+0xf1/0x1f0 [ 312.365638][ T7453] ? _find_first_zero_bit+0xcf/0x100 [ 312.370980][ T7453] __lock_acquire+0x2d07/0x7d10 [ 312.375902][ T7453] ? verify_lock_unused+0x140/0x140 [ 312.381175][ T7453] ? mark_lock+0x94/0x320 [ 312.385573][ T7453] ? verify_lock_unused+0x140/0x140 [ 312.390835][ T7453] ? __lock_acquire+0x12f4/0x7d10 [ 312.395927][ T7453] lock_acquire+0x1bb/0x4a0 [ 312.400491][ T7453] ? ext4_destroy_inline_data+0x24/0xe0 [ 312.406111][ T7453] ? read_lock_is_recursive+0x10/0x10 [ 312.411558][ T7453] ? ext4_journal_check_start+0x17e/0x240 [ 312.417332][ T7453] down_write+0x36/0x60 [ 312.421550][ T7453] ? ext4_destroy_inline_data+0x24/0xe0 [ 312.427163][ T7453] ext4_destroy_inline_data+0x24/0xe0 [ 312.432695][ T7453] ext4_writepages+0x670/0x2f40 [ 312.437607][ T7453] ? __lock_acquire+0x7d10/0x7d10 [ 312.442707][ T7453] ? verify_lock_unused+0x140/0x140 [ 312.448060][ T7453] ? mark_lock+0x94/0x320 [ 312.452460][ T7453] ? __might_sleep+0xd0/0xd0 [ 312.457114][ T7453] ? ext4_read_folio+0x370/0x370 [ 312.462124][ T7453] ? __lock_acquire+0x7d10/0x7d10 [ 312.467222][ T7453] ? do_raw_spin_lock+0x128/0x2f0 [ 312.472386][ T7453] ? do_raw_spin_unlock+0x11d/0x230 [ 312.477659][ T7453] ? ext4_read_folio+0x370/0x370 [ 312.482659][ T7453] do_writepages+0x3ba/0x640 [ 312.487318][ T7453] ? filemap_fdatawrite_wbc+0x113/0x180 [ 312.492932][ T7453] ? __writepage+0x130/0x130 [ 312.497584][ T7453] ? __lock_acquire+0x7d10/0x7d10 [ 312.502676][ T7453] ? __rwlock_init+0x140/0x140 [ 312.507501][ T7453] ? do_raw_spin_unlock+0x11d/0x230 [ 312.512813][ T7453] filemap_fdatawrite_wbc+0x11e/0x180 [ 312.518258][ T7453] file_write_and_wait_range+0x159/0x230 [ 312.523972][ T7453] ? __filemap_set_wb_err+0x230/0x230 [ 312.529413][ T7453] ? __lock_acquire+0x7d10/0x7d10 [ 312.534508][ T7453] ? generic_file_direct_write+0x330/0x330 [ 312.540390][ T7453] ext4_sync_file+0x23b/0xca0 [ 312.545144][ T7453] ext4_buffered_write_iter+0x2f6/0x390 [ 312.550771][ T7453] ext4_file_write_iter+0x1cf/0x1710 [ 312.556135][ T7453] ? rcu_read_lock_any_held+0xb0/0x130 [ 312.561664][ T7453] ? ext4_file_read_iter+0x650/0x650 [ 312.567019][ T7453] ? end_current_label_crit_section+0x14b/0x170 [ 312.573320][ T7453] ? common_file_perm+0x171/0x1c0 [ 312.578413][ T7453] vfs_write+0x4b1/0xa30 [ 312.582727][ T7453] ? file_end_write+0x250/0x250 [ 312.587651][ T7453] ? __fget_files+0x43d/0x4b0 [ 312.592400][ T7453] ? __fdget+0x17c/0x200 [ 312.596715][ T7453] ? __x64_sys_pwrite64+0xf2/0x220 [ 312.601901][ T7453] __x64_sys_pwrite64+0x197/0x220 [ 312.607002][ T7453] ? ksys_pwrite64+0x1b0/0x1b0 [ 312.611837][ T7453] ? lockdep_hardirqs_on+0x94/0x140 [ 312.617109][ T7453] do_syscall_64+0x4c/0xa0 [ 312.621594][ T7453] ? clear_bhb_loop+0x60/0xb0 [ 312.626326][ T7453] ? clear_bhb_loop+0x60/0xb0 [ 312.631063][ T7453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.637014][ T7453] RIP: 0033:0x7f223479c819 [ 312.641492][ T7453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.661158][ T7453] RSP: 002b:00007f2235664028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 312.669648][ T7453] RAX: ffffffffffffffda RBX: 00007f2234a15fa0 RCX: 00007f223479c819 [ 312.677673][ T7453] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000005 [ 312.685697][ T7453] RBP: 00007f2234832c91 R08: 0000000000000000 R09: 0000000000000000 [ 312.693727][ T7453] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 312.701766][ T7453] R13: 00007f2234a16038 R14: 00007f2234a15fa0 R15: 00007ffd0cd9f1b8 [ 312.709817][ T7453] [ 312.735720][ T7453] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 312.751022][ T7453] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 312.763679][ T7453] EXT4-fs (loop1): This should not happen!! Data will be lost [ 312.763679][ T7453] [ 312.784511][ T14] usb 7-1: config 250 has too many interfaces: 241, using maximum allowed: 32 [ 312.797174][ T14] usb 7-1: config 250 has an invalid descriptor of length 14, skipping remainder of the config [ 312.808483][ T14] usb 7-1: config 250 has 0 interfaces, different from the descriptor's value: 241 [ 312.820401][ T7453] EXT4-fs (loop1): Total free blocks count 0 [ 312.826828][ T14] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 312.837268][ T7453] EXT4-fs (loop1): Free/Dirty block details [ 312.843322][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.851908][ T7453] EXT4-fs (loop1): free_blocks=4096 [ 312.861670][ T7453] EXT4-fs (loop1): dirty_blocks=48 [ 312.868029][ T7453] EXT4-fs (loop1): Block reservation details [ 312.874569][ T7453] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 312.959487][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 313.270032][ T14] usb 7-1: string descriptor 0 read error: -71 [ 313.281558][ T14] usb 7-1: USB disconnect, device number 4 [ 317.158980][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.165397][ T1277] ieee802154 phy1 wpan1: encryption failed: -22