last executing test programs: 1m49.624927269s ago: executing program 4 (id=5): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x3c, 0x44, 0x0, 0x0, 0x7a, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x13, 0x64, [@multicast2, @empty, @rand_addr=0x64010102, @loopback]}]}}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x0, @loopback, @multicast1}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000040)='./file0\x00', 0x10820, 0x0, 0x0, 0x0, &(0x7f0000000000)) 1m48.138729927s ago: executing program 4 (id=16): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 1m47.032779498s ago: executing program 4 (id=20): ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[], 0x28}}, 0x24040090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f000000e380), 0x0, 0x40000) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x7e, 0x25, 0x53, 0x20, 0x5ac, 0x218, 0xf5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x28, 0xe, 0x0, 0x0, [{{0x9, 0x4, 0xe9, 0xe0, 0x2, 0x3, 0x2f, 0x2, 0xd, [], [{{0x9, 0x5, 0xd, 0x3, 0x8, 0x8, 0x63, 0x98}}, {{0x9, 0x5, 0x8a, 0x3, 0x3ff, 0x4, 0x4, 0xd}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f00000001c0)) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x402, &(0x7f00000001c0)=ANY=[], 0x1, 0x242, &(0x7f0000000380)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000001020108000000000000000002000009240001801400018008000100ac14144008000200e08000010c0002800500010084000000"], 0x38}, 0x1, 0x0, 0x0, 0x4002001}, 0x4000000) 1m45.161329803s ago: executing program 3 (id=31): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getdents(r0, &(0x7f0000000040)=""/108, 0x6c) 1m44.27733025s ago: executing program 3 (id=34): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002480)="ee", 0x1}], 0x1}}], 0x1, 0x8800) 1m44.125139623s ago: executing program 3 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getitimer(0x0, &(0x7f0000000440)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1m43.149732852s ago: executing program 4 (id=39): getresuid(&(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000340)) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYRESDEC=0x0], 0x1, 0x1503, &(0x7f0000000580)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000300)='./bus\x00', 0x1a0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f00000001c0)='./file1\x00', 0x25) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 1m42.469343764s ago: executing program 3 (id=44): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x11) mount(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x55088, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) fallocate(r0, 0x20, 0x0, 0x8000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"/338], 0x0, 0x29f, &(0x7f0000000580)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") syz_open_procfs(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2010840, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x11a, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040250581a44000020001010902080101010050000904000012020600000b240ff3"], 0x0) 1m42.469140364s ago: executing program 4 (id=45): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x800) 1m42.15069805s ago: executing program 4 (id=48): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m41.948889684s ago: executing program 32 (id=48): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m39.49963476s ago: executing program 3 (id=66): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x14004040) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x569) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}}}}}, 0x0) connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e24, 0x7ffd, @empty, 0x3}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r2 = epoll_create1(0x0) epoll_pwait2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x3b, [0x0, 0x0, 0x0, 0x10000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xffffffff, 0x4], [0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000, 0x0, 0x0, 0xc4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000000, 0x2, 0x9, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x1], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x40f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2000001, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x1, 0x0, 0x0, 0x0, 0xfffffff8], [0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x1ed, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) 1m38.623083577s ago: executing program 3 (id=70): syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffff9c, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setresuid(0x0, 0xee01, 0x0) 1m38.288833554s ago: executing program 33 (id=70): syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffff9c, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setresuid(0x0, 0xee01, 0x0) 1m18.508924327s ago: executing program 1 (id=166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}]}]}, 0x30}}, 0x80) 1m18.242711722s ago: executing program 1 (id=169): add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) 1m18.073271325s ago: executing program 1 (id=172): syz_open_dev$hiddev(0x0, 0x0, 0x406040) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x248, &(0x7f0000000a00)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0xa08802, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESHEX=0x0, @ANYRES64=0x0], 0x1, 0x693, &(0x7f0000000ec0)="$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") setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=@RTM_DELMDB={0x18, 0x54, 0x93d}, 0x18}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001000}, 0xc0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r1, 0x0, 0x0, 0x24000810, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m17.81330333s ago: executing program 1 (id=176): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14008, &(0x7f0000000340)={[{@nodelalloc}, {@jqfmt_vfsv0}]}, 0x1, 0x52b, &(0x7f00000015c0)="$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") syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x88) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24040054) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './bus'}, 0x9) 1m16.341027288s ago: executing program 1 (id=192): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000040)={0x3, 0xffffffff, 0xf}) 1m15.821553608s ago: executing program 1 (id=198): r0 = socket(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) 1m15.631597062s ago: executing program 34 (id=198): r0 = socket(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) 1m14.017753102s ago: executing program 6 (id=210): bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB='\v\x00'], 0x48) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x1520, &(0x7f0000011680)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m13.57752895s ago: executing program 6 (id=214): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES8], 0xfd, 0x2fd, &(0x7f0000000140)="$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") syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x3800813, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@overriderock}, {@utf8}, {@session={'session', 0x3d, 0x17}}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x2}}, {@dmode}, {@mode={'mode', 0x3d, 0x80}}, {@nocompress}, {@block={'block', 0x3d, 0x200}}, {@map_acorn}, {@overriderock}, {@block={'block', 0x3d, 0x400}}, {@gid}, {@uid}, {@check_relaxed}, {@utf8}, {@dmode={'dmode', 0x3d, 0x50}}]}, 0x5, 0xa58, &(0x7f0000002080)="$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") fanotify_mark(0xffffffffffffffff, 0x455, 0x40000008, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1m13.126838629s ago: executing program 6 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, &(0x7f0000000280), 0x0}, 0x20) 1m12.865413644s ago: executing program 6 (id=219): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000280)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m12.52222069s ago: executing program 6 (id=222): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fdatasync(r0) 1m11.981097471s ago: executing program 6 (id=224): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="002207000000a991a9ca"], 0x0}, 0x0) 1m11.779674614s ago: executing program 35 (id=224): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="002207000000a991a9ca"], 0x0}, 0x0) 3.882460787s ago: executing program 7 (id=778): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xdc1f, 0x0, 0x0, 0x0, 0xc39d}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40e00, 0x46, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfe2d}, 0x94) 3.495758394s ago: executing program 7 (id=783): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) 3.325781317s ago: executing program 7 (id=786): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) syz_read_part_table(0x1054, &(0x7f0000002100)="$eJzsz7utAjEUBNDZz3u7G21LUASdkFMKEQlVICGRUAQhZYAwWFSAENI5gT321QQ3fFXT1TSWsz43WSQ5znXa5jTmNk+1NuWvzyHJ/+6a4fHTlEGf9ZxziZchWU7tq9E/r233zslq/+H1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAn3AMAAP//EFEKIw==") socket$nl_generic(0x10, 0x3, 0x10) wait4(r0, 0x0, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x3, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"}) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) 2.837054037s ago: executing program 0 (id=797): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000400)="57a748eaeb8e10533b3f57744ba0b20797e665daeca46c23d8626e650dcac5ebe25a999463e5dd0bc3b4ed32d748ee94d986205da10644fff9a6e0db2f323324bfbe368b0627b8a796d99c1c481e4a21f8cd428230eaa532133d6f54a1ae676c256496992010f91c4ffb87acebc4efd0db0d13d186f051ea1927b9e792495d774477a00ffbf22b3035be2828c43bca27969b00061cf8394703e7629a41", 0x9d}], 0x1) 2.700617189s ago: executing program 8 (id=800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.700124439s ago: executing program 0 (id=801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.64127027s ago: executing program 7 (id=802): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000980)='2', 0x51, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, 0x0) fallocate(r0, 0x10, 0x800, 0x8000) 2.556853142s ago: executing program 0 (id=805): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0xb) 2.556465802s ago: executing program 8 (id=806): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) 2.429255834s ago: executing program 8 (id=807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.429156084s ago: executing program 0 (id=808): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) mlockall(0x7) 2.186664049s ago: executing program 7 (id=811): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff850000004000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 2.101844281s ago: executing program 8 (id=812): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0xfffffffffffffe0a) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f00000001c0)={[], [{@dont_appraise}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_user={'subj_user', 0x3d, ',\xb6}'}}, {@obj_role={'obj_role', 0x3d, 'lazytime'}}, {@pcr={'pcr', 0x3d, 0x3f}}]}, 0x3e, 0x521, &(0x7f0000000e00)="$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") fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b0) connect$inet6(0xffffffffffffffff, &(0x7f0000000a40)={0xa, 0x4e24, 0x7ffd, @empty, 0x3}, 0x1c) 2.087937401s ago: executing program 0 (id=814): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac1a190272f0010203010902"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.989296103s ago: executing program 7 (id=816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @loopback, 0x1}, 0x1c) listen(r0, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 929.424322ms ago: executing program 8 (id=819): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3004402, &(0x7f0000000340), 0xfd, 0x56b, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0xfecc) r2 = open(&(0x7f0000000180)='./file1\x00', 0x66942, 0x389b0d52417bb201) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x20) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) sendfile(r0, r3, 0x0, 0x100001) 619.174329ms ago: executing program 5 (id=823): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000095"], &(0x7f0000000140)='GPL\x00', 0x5, 0xa2, &(0x7f00000002c0)=""/162, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 596.490469ms ago: executing program 8 (id=825): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd61, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000600)="76389e147583ddd0569ba5d19f106d743478721e", 0x0, 0x1c00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 580.599079ms ago: executing program 5 (id=826): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001680)={@cgroup=r0, 0xa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 516.83884ms ago: executing program 2 (id=828): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r1, @ANYBLOB="da6bb990"], 0x20) 340.731004ms ago: executing program 5 (id=829): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x8, &(0x7f0000000480)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 340.597124ms ago: executing program 2 (id=830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 269.429115ms ago: executing program 2 (id=831): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 269.288055ms ago: executing program 5 (id=832): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x1}]}]}, {0x0, [0x5f, 0x0, 0x5f, 0x5f]}}, 0x0, 0x32, 0x0, 0x5, 0xf518}, 0x28) 216.921666ms ago: executing program 2 (id=833): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000feffffff0000000010000000850000002500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 216.820636ms ago: executing program 5 (id=834): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ff0f000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r0}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="37000066def6db74dc07950000e95faa4672213259c6385fabeb76a9779d57a637adce00000000000000", @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 136.981148ms ago: executing program 5 (id=835): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3004402, &(0x7f0000000340), 0xfd, 0x56b, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = open(0x0, 0x66942, 0x389b0d52417bb201) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x20) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) sendfile(r0, r3, 0x0, 0x100001) 85.423119ms ago: executing program 2 (id=836): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x94) 46.74557ms ago: executing program 2 (id=837): syz_clone(0x20200100, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=838): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x11, 0x0, 0x0, 0xfffffffffffffffc) kernel console output (not intermixed with test programs): T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.450575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.493359][ T4599] loop0: detected capacity change from 0 to 8192 [ 80.500188][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 80.506917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.541207][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.548617][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.554430][ T4599] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.584845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.655148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.676079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.763987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.783659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.842788][ T4557] team0: Port device team_slave_0 added [ 80.856763][ T4609] netlink: 'syz.1.80': attribute type 25 has an invalid length. [ 80.867706][ T4609] netlink: 'syz.1.80': attribute type 7 has an invalid length. [ 80.920519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.976259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.036084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.065866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.079627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.094603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.104370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.124454][ T4557] team0: Port device team_slave_1 added [ 81.202235][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.269820][ T4557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.276820][ T4557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.303267][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 81.412606][ T4557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.435713][ T4557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.467849][ T4557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.617457][ T4287] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.647419][ T4557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.677621][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.790402][ T4557] device hsr_slave_0 entered promiscuous mode [ 81.853444][ T4557] device hsr_slave_1 entered promiscuous mode [ 81.857761][ T4287] usb 2-1: Using ep0 maxpacket: 8 [ 81.876114][ T4557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.894173][ T4557] Cannot create hsr debugfs directory [ 81.937739][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 81.987601][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.027717][ T4287] usb 2-1: unable to get BOS descriptor or descriptor too short [ 82.067690][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 82.117677][ T4287] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 82.137587][ T21] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 82.147616][ T4287] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 82.154336][ T21] usb 3-1: can't read configurations, error -71 [ 82.164982][ T4287] usb 2-1: config 8 interface 0 has no altsetting 0 [ 82.219233][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.237031][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.262869][ T4471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.287606][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 82.327661][ T4287] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 82.353317][ T4287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.363356][ T4557] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 82.375294][ T4287] usb 2-1: Product: syz [ 82.382143][ T4287] usb 2-1: Manufacturer: syz [ 82.386786][ T4287] usb 2-1: SerialNumber: syz [ 82.425048][ T4557] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 82.432451][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.459765][ T4557] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 82.467102][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.497409][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 82.501231][ T4557] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 82.508050][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.567332][ T23] usb 1-1: config 0 descriptor?? [ 82.584888][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 82.638656][ T23] hub 1-1:0.0: USB hub found [ 82.729977][ T4287] usb 2-1: selecting invalid altsetting 0 [ 82.847698][ T23] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 82.901299][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.910698][ T4287] snd-usb-audio: probe of 2-1:8.0 failed with error -12 [ 82.918401][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.970778][ T4287] usb 2-1: USB disconnect, device number 3 [ 83.018543][ T4598] udevd[4598]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.032381][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.060822][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.080339][ T4677] loop2: detected capacity change from 0 to 128 [ 83.088914][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.114259][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.125987][ T4557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.133335][ T4677] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 83.160074][ T4471] device veth0_vlan entered promiscuous mode [ 83.206587][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.245691][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.277233][ T4677] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 83.305795][ T4471] device veth1_vlan entered promiscuous mode [ 83.315780][ T4683] loop1: detected capacity change from 0 to 2048 [ 83.328658][ T4557] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.367699][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 83.377596][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 83.383594][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 83.393006][ T4683] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.402050][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.446725][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.468578][ T23] usb 1-1: USB disconnect, device number 2 [ 83.498667][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.539791][ T4687] loop2: detected capacity change from 0 to 128 [ 83.551600][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.595150][ T4481] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.602327][ T4481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.660849][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.679444][ T4687] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 83.706200][ T4687] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.740751][ T4471] device veth0_macvtap entered promiscuous mode [ 83.754136][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.764297][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.787804][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.852526][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.872250][ T4481] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.879498][ T4481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.905783][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.915977][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.948545][ T4471] device veth1_macvtap entered promiscuous mode [ 84.026227][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.088167][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.116173][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.143272][ T4700] loop1: detected capacity change from 0 to 2048 [ 84.188771][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.210815][ T4700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.211877][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.729898][ T4557] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.884983][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 84.893288][ T4557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.016316][ T4471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.029381][ T4471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.039573][ T4471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.068171][ T4471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.089685][ T4471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.100750][ T4471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.112566][ T4471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.123328][ T4471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.135433][ T4471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.165148][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.194622][ T4705] process 'syz.2.103' launched './file0' with NULL argv: empty string added [ 85.317177][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.358276][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.367053][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.400538][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.431692][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.445624][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.461593][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.462225][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.469495][ T4471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.469512][ T4471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.469520][ T4471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.469531][ T4471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.469539][ T4471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.469549][ T4471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.469557][ T4471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.469567][ T4471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.470538][ T4471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.474307][ T4714] tipc: Started in network mode [ 85.474335][ T4714] tipc: Node identity ea5019ef8289, cluster identity 4711 [ 85.474428][ T4714] tipc: Enabled bearer , priority 0 [ 85.487590][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.493014][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.493618][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.504432][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.673290][ T4471] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.673328][ T4471] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.673356][ T4471] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.673384][ T4471] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.686575][ T4708] tipc: Disabling bearer [ 85.795573][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.805135][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.825267][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.835943][ T4232] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 85.875791][ T4729] netlink: 32 bytes leftover after parsing attributes in process `syz.1.109'. [ 85.879876][ T4557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.005278][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.039089][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.108421][ T4737] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.133696][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.142097][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.147794][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 86.156607][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.218082][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.244212][ T4735] loop0: detected capacity change from 0 to 1024 [ 86.273147][ T4733] loop1: detected capacity change from 0 to 1024 [ 86.277589][ T9] tipc: Left network mode [ 86.287775][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.315549][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.344318][ T4733] hfsplus: failed to load root directory [ 86.373855][ T4232] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.397215][ T4232] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.415277][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.435383][ T4232] usb 3-1: config 0 descriptor?? [ 86.633971][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.650128][ T1334] cfg80211: failed to load regulatory.db [ 86.678621][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.842697][ T4765] loop0: detected capacity change from 0 to 1024 [ 86.913565][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.943587][ T4232] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 86.954237][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.961586][ T4232] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 86.969048][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 86.977958][ T4232] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 87.067776][ T4772] loop1: detected capacity change from 0 to 1024 [ 87.100146][ T4232] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 87.417999][ T4232] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 87.544325][ T4765] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.678214][ T4232] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 87.923968][ T4232] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 87.932855][ T4232] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 87.940352][ T4232] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 87.947797][ T4232] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 87.960167][ T4232] HID 045e:07da: Invalid code 65791 type 1 [ 87.966460][ T4232] HID 045e:07da: Invalid code 768 type 1 [ 87.972388][ T4232] HID 045e:07da: Invalid code 769 type 1 [ 87.985693][ T4232] HID 045e:07da: Invalid code 770 type 1 [ 88.121465][ T4232] HID 045e:07da: Invalid code 771 type 1 [ 88.318228][ T4232] HID 045e:07da: Invalid code 772 type 1 [ 88.516468][ T4232] HID 045e:07da: Invalid code 773 type 1 [ 88.531721][ T4232] HID 045e:07da: Invalid code 774 type 1 [ 88.676603][ T4232] HID 045e:07da: Invalid code 775 type 1 [ 88.779269][ T4232] HID 045e:07da: Invalid code 776 type 1 [ 88.957396][ C0] sched: RT throttling activated [ 89.231314][ T4232] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input6 [ 89.380025][ T4232] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 89.431078][ T4557] device veth0_vlan entered promiscuous mode [ 89.458255][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.466162][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.532487][ T4232] usb 3-1: USB disconnect, device number 5 [ 89.539274][ T4814] loop5: detected capacity change from 0 to 1024 [ 89.557848][ T4792] tipc: Enabled bearer , priority 0 [ 89.667606][ T4258] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.754086][ T4796] device syzkaller0 entered promiscuous mode [ 89.938544][ T4258] usb 2-1: Using ep0 maxpacket: 8 [ 90.113975][ T4258] usb 2-1: config 0 has no interfaces? [ 90.173230][ T4814] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.291414][ T4814] ext4 filesystem being mounted at /5/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.322495][ T4814] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #15: block 3: comm syz.5.125: lblock 3 mapped to illegal pblock 3 (length 3) [ 90.332714][ T4821] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.346165][ T4821] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.367765][ T4258] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 90.417009][ T4828] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #15: comm syz.5.125: lblock 0 mapped to illegal pblock 0 (length 3) [ 90.419778][ T4557] device veth1_vlan entered promiscuous mode [ 90.471251][ T4258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.497875][ T4814] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 90.517261][ T4814] EXT4-fs (loop5): This should not happen!! Data will be lost [ 90.517261][ T4814] [ 90.539471][ T4258] usb 2-1: Product: syz [ 90.557862][ T4258] usb 2-1: Manufacturer: syz [ 90.585273][ T4258] usb 2-1: SerialNumber: syz [ 90.606383][ T4825] fido_id[4825]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 90.635001][ T4258] usb 2-1: config 0 descriptor?? [ 90.688027][ T4816] tipc: Resetting bearer [ 90.688807][ T4259] tipc: Node number set to 108961704 [ 90.724433][ T4784] tipc: Resetting bearer [ 90.732907][ T4297] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 90.778427][ T4784] tipc: Disabling bearer [ 90.797601][ T4297] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 90.852365][ T4557] device veth0_macvtap entered promiscuous mode [ 90.859637][ T4297] EXT4-fs (loop5): This should not happen!! Data will be lost [ 90.859637][ T4297] [ 90.871495][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.895356][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.904653][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.920126][ T4557] device veth1_macvtap entered promiscuous mode [ 91.026352][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.063321][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.084126][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.104259][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.134428][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.145315][ T4259] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.176083][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.203180][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.229721][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.263122][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.270651][ T4858] loop2: detected capacity change from 0 to 512 [ 91.282415][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.305350][ T4557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.329889][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.372568][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.400525][ T4858] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002,. Quota mode: writeback. [ 91.402056][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.461570][ T4858] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.480315][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.497305][ T1108] usb 2-1: USB disconnect, device number 4 [ 91.504745][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.550185][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.561392][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.572405][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.593300][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.605615][ T4259] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 91.611857][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.625252][ T4259] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 91.628060][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.645067][ T4557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.655986][ T4557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.668075][ T4557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.714534][ T4868] loop1: detected capacity change from 0 to 8 [ 91.722842][ T4557] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.735237][ T4557] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.744091][ T4557] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.753151][ T4557] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.763346][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.773543][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.786917][ T4259] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 91.805719][ T4259] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 91.810417][ T4868] SQUASHFS error: lzo decompression failed, data probably corrupt [ 91.851267][ T4259] usb 1-1: Product: syz [ 91.855482][ T4259] usb 1-1: SerialNumber: syz [ 91.886966][ T4868] SQUASHFS error: Failed to read block 0x144: -5 [ 91.902581][ T4868] SQUASHFS error: Unable to read metadata cache entry [142] [ 91.911210][ T4868] SQUASHFS error: Unable to read inode 0x11f [ 91.923352][ T4870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.942504][ T4259] usb 1-1: bad CDC descriptors [ 91.967233][ T4259] usb 1-1: bad CDC descriptors [ 92.009206][ T4259] option 1-1:7.0: GSM modem (1-port) converter detected [ 92.162580][ T4299] usb 1-1: USB disconnect, device number 3 [ 92.190771][ T4299] option 1-1:7.0: device disconnected [ 92.329440][ T4878] tipc: Enabled bearer , priority 0 [ 92.382249][ T9] device hsr_slave_0 left promiscuous mode [ 92.411540][ T9] device hsr_slave_1 left promiscuous mode [ 92.426666][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.446275][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.463352][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.479898][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.530835][ T9] device bridge_slave_1 left promiscuous mode [ 92.537440][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.578053][ T9] device bridge_slave_0 left promiscuous mode [ 92.584302][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.613215][ T9] device veth1_macvtap left promiscuous mode [ 92.648398][ T9] device veth0_macvtap left promiscuous mode [ 92.654508][ T9] device veth1_vlan left promiscuous mode [ 92.678681][ T9] device veth0_vlan left promiscuous mode [ 92.735545][ T4893] loop0: detected capacity change from 0 to 512 [ 92.852493][ T4893] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002,. Quota mode: writeback. [ 92.879958][ T4893] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.126042][ T4899] loop0: detected capacity change from 0 to 1024 [ 93.164209][ T4903] loop1: detected capacity change from 0 to 512 [ 93.217692][ T4903] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 93.297734][ T4903] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.354420][ T9] team0 (unregistering): Port device team_slave_1 removed [ 93.395743][ T9] team0 (unregistering): Port device team_slave_0 removed [ 93.440278][ T4903] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 93.474666][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.613231][ T4903] EXT4-fs (loop1): 1 truncate cleaned up [ 93.672392][ T4903] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000066,nodioread_nolock,nodiscard,noquota,,errors=continue. Quota mode: none. [ 94.218356][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.237227][ T4903] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz.1.148: iget: bad i_size value: 5497558147880 [ 94.313854][ T4910] loop0: detected capacity change from 0 to 128 [ 94.329597][ T4908] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz.1.148: iget: bad i_size value: 5497558147880 [ 94.412821][ T9] bond0 (unregistering): Released all slaves [ 94.447353][ T4910] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.641500][ T4878] device syzkaller0 entered promiscuous mode [ 94.677987][ T4482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.686051][ T4482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.786951][ T4886] tipc: Resetting bearer [ 94.849081][ T4886] tipc: Disabling bearer [ 94.877499][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.975524][ T4481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.997809][ T4481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.011381][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.105030][ T4922] loop1: detected capacity change from 0 to 256 [ 95.167995][ T4922] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 95.198974][ T4922] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 95.199171][ T4925] loop2: detected capacity change from 0 to 512 [ 95.236186][ T4928] tipc: Started in network mode [ 95.247855][ T4922] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 95.257191][ T4928] tipc: Node identity 82d78a863ee9, cluster identity 4711 [ 95.277184][ T4922] UDF-fs: Scanning with blocksize 512 failed [ 95.283726][ T4928] tipc: Enabled bearer , priority 0 [ 95.293855][ T4922] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 95.339938][ T4928] tipc: Resetting bearer [ 95.371999][ T4922] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 95.955330][ T4927] tipc: Disabling bearer [ 95.967803][ T4943] loop5: detected capacity change from 0 to 512 [ 96.161160][ T4949] loop0: detected capacity change from 0 to 1024 [ 96.169911][ T4943] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002,. Quota mode: writeback. [ 96.223736][ T4943] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.259781][ T4956] loop2: detected capacity change from 0 to 1024 [ 96.306219][ T4949] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.336052][ T4959] loop6: detected capacity change from 0 to 1024 [ 96.343354][ T4949] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.518745][ T4956] hfsplus: xattr searching failed [ 96.587210][ T4959] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,nodioread_nolock,nouid32,noquota,auto_da_alloc,grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 96.614636][ T4959] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.756471][ T4971] loop5: detected capacity change from 0 to 256 [ 96.796751][ T4973] tipc: Enabled bearer , priority 0 [ 96.998152][ T4977] device syzkaller0 entered promiscuous mode [ 97.063375][ T4971] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 97.225434][ T4973] tipc: Resetting bearer [ 97.872780][ T4971] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 97.919322][ T3520] tipc: Node number set to 1759058415 [ 97.923111][ T4972] tipc: Resetting bearer [ 98.081770][ T4972] tipc: Disabling bearer [ 98.257002][ T4997] tipc: Started in network mode [ 98.286197][ T4997] tipc: Node identity 3277f6596b58, cluster identity 4711 [ 98.316099][ T4997] tipc: Enabled bearer , priority 0 [ 98.355207][ T5003] binder: 5002:5003 ioctl 400c620e 200000000240 returned -22 [ 98.374498][ T5001] tipc: Resetting bearer [ 98.416993][ T4995] tipc: Disabling bearer [ 98.423360][ T5006] loop1: detected capacity change from 0 to 16 [ 98.470639][ T5006] erofs: (device loop1): mounted with root inode @ nid 36. [ 98.703818][ T5015] loop1: detected capacity change from 0 to 512 [ 98.725030][ T5016] loop5: detected capacity change from 0 to 1024 [ 98.796401][ T5015] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 98.850815][ T5022] loop6: detected capacity change from 0 to 256 [ 98.871401][ T5015] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 98.897718][ T5020] loop2: detected capacity change from 0 to 256 [ 98.906368][ T5016] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 98.923508][ T5015] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.937567][ T5016] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.021448][ T5020] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.032271][ T5020] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 99.055820][ T5020] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 99.100446][ T5022] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 99.133565][ T5022] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 99.149807][ T5015] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 15: comm syz.1.176: lblock 2 mapped to illegal pblock 15 (length 1) [ 99.288054][ T5015] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 99.309362][ T5015] EXT4-fs error (device loop1): ext4_write_dquot:6189: comm syz.1.176: Failed to commit dquot type 0 [ 99.397049][ T5015] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #4: block 19: comm syz.1.176: lblock 2 mapped to illegal pblock 19 (length 1) [ 99.474898][ T5015] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 99.529136][ T5015] EXT4-fs error (device loop1): ext4_write_dquot:6189: comm syz.1.176: Failed to commit dquot type 1 [ 99.542058][ T5046] tipc: Enabled bearer , priority 0 [ 99.562791][ T5035] kvm [5033]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa50000efb3 [ 99.609514][ T5015] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 99.622970][ T5046] tipc: Resetting bearer [ 99.637847][ T5035] kvm [5033]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xa50000afb3 [ 99.693891][ T5015] EXT4-fs error (device loop1): ext4_dirty_inode:6040: inode #18: comm syz.1.176: mark_inode_dirty error [ 99.706331][ T5043] tipc: Disabling bearer [ 99.731837][ T5015] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.176: Invalid block bitmap block 2 in block_group 0 [ 99.772401][ T5049] loop6: detected capacity change from 0 to 2048 [ 99.810530][ T5015] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 15: comm syz.1.176: lblock 2 mapped to illegal pblock 15 (length 1) [ 99.846280][ T5015] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 99.864132][ T5015] EXT4-fs error (device loop1): ext4_write_dquot:6189: comm syz.1.176: Failed to commit dquot type 0 [ 99.916907][ T5049] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.925427][ T5015] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #4: block 19: comm syz.1.176: lblock 2 mapped to illegal pblock 19 (length 1) [ 99.982504][ T5015] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 100.458149][ T5066] loop2: detected capacity change from 0 to 256 [ 100.539875][ T5066] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 100.577816][ T5066] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 100.863633][ T5080] loop2: detected capacity change from 0 to 512 [ 100.931650][ T5077] tipc: Enabled bearer , priority 0 [ 100.948492][ T5077] device syzkaller0 entered promiscuous mode [ 100.990133][ T5080] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.200: casefold flag without casefold feature [ 101.017004][ T5080] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.200: couldn't read orphan inode 15 (err -117) [ 101.110477][ T5077] tipc: Resetting bearer [ 101.127720][ T5080] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 101.233855][ T5076] tipc: Resetting bearer [ 101.260165][ T5076] tipc: Disabling bearer [ 101.574611][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.917698][ T4259] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 102.305393][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.414328][ T5082] chnl_net:caif_netlink_parms(): no params data found [ 102.427322][ T5104] loop2: detected capacity change from 0 to 2048 [ 102.439854][ T4259] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.470592][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.487775][ T4259] usb 1-1: not running at top speed; connect to a high speed hub [ 102.509555][ T5107] loop6: detected capacity change from 0 to 256 [ 102.540730][ T5104] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.578866][ T5107] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 102.606557][ T5107] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 102.617442][ T4259] usb 1-1: config 3 has an invalid interface number: 98 but max is 0 [ 102.620327][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.625601][ T4259] usb 1-1: config 3 has no interface number 0 [ 102.651657][ T5104] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 102.700586][ T5104] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 102.713880][ T5104] EXT4-fs (loop2): This should not happen!! Data will be lost [ 102.713880][ T5104] [ 102.723775][ T5104] EXT4-fs (loop2): Total free blocks count 0 [ 102.729881][ T5104] EXT4-fs (loop2): Free/Dirty block details [ 102.735952][ T5104] EXT4-fs (loop2): free_blocks=66060288 [ 102.755282][ T5104] EXT4-fs (loop2): dirty_blocks=16 [ 102.763243][ T5104] EXT4-fs (loop2): Block reservation details [ 102.769771][ T5104] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 102.773706][ T4259] usb 1-1: config 3 interface 98 altsetting 10 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 102.838088][ T4259] usb 1-1: config 3 interface 98 altsetting 10 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.886328][ T4259] usb 1-1: config 3 interface 98 has no altsetting 0 [ 102.905251][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.926886][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.956308][ T5082] device bridge_slave_0 entered promiscuous mode [ 102.991935][ T5122] loop6: detected capacity change from 0 to 128 [ 102.999554][ T5120] loop5: detected capacity change from 0 to 512 [ 103.017125][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.034599][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.043758][ T5082] device bridge_slave_1 entered promiscuous mode [ 103.082247][ T4259] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=b9.a8 [ 103.094977][ T5126] loop2: detected capacity change from 0 to 512 [ 103.098012][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.115525][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.127546][ T4299] Bluetooth: hci1: command 0x0409 tx timeout [ 103.144958][ T4259] usb 1-1: Product: syz [ 103.175197][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.190249][ T4259] usb 1-1: Manufacturer: syz [ 103.194872][ T4259] usb 1-1: SerialNumber: syz [ 103.210799][ T5120] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002,. Quota mode: writeback. [ 103.241570][ T5126] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.216: corrupted in-inode xattr [ 103.265523][ T5120] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.293588][ T5126] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.216: couldn't read orphan inode 15 (err -117) [ 103.322534][ T5126] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.356331][ T5126] EXT4-fs warning (device loop2): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 103.390624][ T5082] team0: Port device team_slave_0 added [ 103.420316][ T5082] team0: Port device team_slave_1 added [ 103.429147][ T5120] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 3: comm syz.5.215: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=3723271288, rec_len=28623, size=2048 fake=0 [ 103.476255][ T5120] EXT4-fs (loop5): Remounting filesystem read-only [ 103.609565][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.616566][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.680904][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.696616][ T5137] loop6: detected capacity change from 0 to 4096 [ 103.701945][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.716784][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.743762][ T4259] usb 1-1: USB disconnect, device number 4 [ 103.744822][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.791400][ T5137] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.847547][ T4287] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 103.906010][ T5082] device hsr_slave_0 entered promiscuous mode [ 103.918078][ T4557] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /18/file1/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 103.942109][ T5082] device hsr_slave_1 entered promiscuous mode [ 103.950159][ T5082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.958040][ T5082] Cannot create hsr debugfs directory [ 104.123965][ T5082] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 104.134997][ T5082] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 104.158150][ T5082] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 104.205856][ T5146] loop0: detected capacity change from 0 to 256 [ 104.217700][ T4287] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.237567][ T4287] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.247006][ T5082] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 104.294240][ T5146] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 104.312960][ T5146] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 104.327931][ T4287] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 104.341069][ T4287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.359450][ T4287] usb 3-1: SerialNumber: syz [ 104.430301][ T4287] usb 3-1: 0:2 : does not exist [ 104.683961][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.740433][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.768836][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.819982][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.835275][ T5157] tipc: Enabling of bearer rejected, failed to enable media [ 104.892115][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.908153][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.937153][ T4482] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.944283][ T4482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.031548][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.049817][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.073165][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.094331][ T4482] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.101465][ T4482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.113519][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.186795][ T9] device hsr_slave_0 left promiscuous mode [ 105.198784][ T9] device hsr_slave_1 left promiscuous mode [ 105.208385][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 105.214978][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.223816][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.231699][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.241059][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.249068][ T9] device bridge_slave_1 left promiscuous mode [ 105.255409][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.264725][ T9] device bridge_slave_0 left promiscuous mode [ 105.274696][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.290418][ T9] device veth1_macvtap left promiscuous mode [ 105.296477][ T9] device veth0_macvtap left promiscuous mode [ 105.310332][ T9] device veth1_vlan left promiscuous mode [ 105.316183][ T9] device veth0_vlan left promiscuous mode [ 105.451390][ T5169] loop2: detected capacity change from 0 to 256 [ 105.535001][ T5169] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbb6ecf5a, utbl_chksum : 0xe619d30d) [ 105.757391][ T5173] loop2: detected capacity change from 0 to 2048 [ 105.801829][ T9] team0 (unregistering): Port device team_slave_1 removed [ 105.840070][ T9] team0 (unregistering): Port device team_slave_0 removed [ 105.841978][ T5173] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.863813][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.889587][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.975238][ T9] bond0 (unregistering): Released all slaves [ 106.050269][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.089738][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.118765][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.140910][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.170935][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.188535][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.239410][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.268331][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.312883][ T5082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.330578][ T5180] loop0: detected capacity change from 0 to 1024 [ 106.372018][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.396662][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.416715][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.443599][ T5180] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 106.496362][ T5180] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.658960][ T5180] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 3: comm syz.0.232: lblock 3 mapped to illegal pblock 3 (length 1) [ 106.704184][ T5180] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 106.710583][ T5187] EXT4-fs (loop0): shut down requested (1) [ 106.758241][ T5180] EXT4-fs (loop0): This should not happen!! Data will be lost [ 106.758241][ T5180] [ 106.847798][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.855108][ T5191] loop2: detected capacity change from 0 to 256 [ 106.855376][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.907999][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.924286][ T5191] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 106.953846][ T5161] chnl_net:caif_netlink_parms(): no params data found [ 106.968444][ T5191] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 107.048699][ T5194] loop5: detected capacity change from 0 to 1024 [ 107.066950][ T4394] Bluetooth: hci0: command 0x0409 tx timeout [ 107.107723][ T5194] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 107.216134][ T5208] udc-core: couldn't find an available UDC or it's busy [ 107.224929][ T5208] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 107.229234][ T5194] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 107.287834][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 107.351777][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.368911][ T5161] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.456963][ T5161] device bridge_slave_0 entered promiscuous mode [ 107.475001][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.483987][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.532038][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.546085][ T5161] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.565012][ T5161] device bridge_slave_1 entered promiscuous mode [ 107.587828][ T5216] tipc: Enabling of bearer rejected, failed to enable media [ 107.605216][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.617474][ T4299] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.638565][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.674590][ T5082] device veth0_vlan entered promiscuous mode [ 107.688485][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.698477][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.720982][ T5161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.748590][ T5161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.772614][ T5082] device veth1_vlan entered promiscuous mode [ 107.815589][ T5224] loop2: detected capacity change from 0 to 512 [ 107.832182][ T5161] team0: Port device team_slave_0 added [ 107.862787][ T5161] team0: Port device team_slave_1 added [ 107.864517][ T4299] usb 1-1: Using ep0 maxpacket: 16 [ 107.880682][ T5082] device veth0_macvtap entered promiscuous mode [ 107.895254][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.918702][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.985189][ T5224] EXT4-fs (loop2): 1 orphan inode deleted [ 107.998072][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.012888][ T4299] usb 1-1: config 0 interface 0 has no altsetting 0 [ 108.020778][ T4299] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 108.040470][ T5224] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.063791][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.077526][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.093279][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.102438][ T5224] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.127347][ T4299] usb 1-1: config 0 descriptor?? [ 108.163225][ T5082] device veth1_macvtap entered promiscuous mode [ 108.175980][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.260960][ T5161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.295005][ T5161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.357686][ T5161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.385276][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.400796][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.411637][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.413891][ T5235] loop5: detected capacity change from 0 to 256 [ 108.422162][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.422182][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.422196][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.702795][ T5235] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 108.936533][ T5235] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 109.011326][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.161817][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 109.184682][ T4299] usb 1-1: USB disconnect, device number 5 [ 109.217456][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.239145][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.253984][ T5161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.261019][ T5161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.288326][ T5161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.306479][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.326020][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.361060][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.374032][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 109.374844][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.414469][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.448128][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.463049][ T5243] loop0: detected capacity change from 0 to 1024 [ 109.469656][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.495746][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.526262][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.537011][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.555285][ T5243] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 109.591758][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.610190][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.668744][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.681684][ T5248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.247'. [ 109.753003][ T5082] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.807191][ T5250] loop2: detected capacity change from 0 to 512 [ 109.813500][ T5082] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.813534][ T5082] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.813559][ T5082] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.882603][ T5161] device hsr_slave_0 entered promiscuous mode [ 109.900408][ T5250] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.963989][ T5161] device hsr_slave_1 entered promiscuous mode [ 109.982287][ T5250] EXT4-fs (loop2): 1 truncate cleaned up [ 110.002331][ T5161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.020763][ T5250] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 110.047544][ T5161] Cannot create hsr debugfs directory [ 110.067938][ T5253] loop5: detected capacity change from 0 to 512 [ 110.248427][ T5253] EXT4-fs (loop5): Unrecognized mount option "context=staff_u" or missing value [ 110.288329][ T5250] fscrypt (loop2, inode 18): Mutually exclusive encryption flags (0x18) [ 110.394853][ T4773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.436049][ T4773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.538888][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.632565][ T1488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.656453][ T1488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.697016][ T5262] loop0: detected capacity change from 0 to 512 [ 110.704726][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.827575][ T5262] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 110.856059][ T5262] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.887620][ T5266] loop2: detected capacity change from 0 to 256 [ 110.928033][ T5266] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 110.996180][ T5161] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 111.032293][ T5266] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 111.069976][ T5161] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 111.121457][ T5161] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 111.171851][ T5276] loop0: detected capacity change from 0 to 2048 [ 111.192688][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.207815][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 111.227411][ T5276] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.257353][ T5161] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 111.404449][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.541183][ T5298] loop7: detected capacity change from 0 to 512 [ 111.554911][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.567021][ T5300] loop5: detected capacity change from 0 to 512 [ 111.670203][ T5298] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002,. Quota mode: writeback. [ 111.732251][ T5309] loop0: detected capacity change from 0 to 8 [ 111.739253][ T5298] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.781184][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.859212][ T5300] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 111.939384][ T5161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.024933][ T5300] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.083936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.092362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.125467][ T5316] loop7: detected capacity change from 0 to 1024 [ 112.146005][ T5318] loop0: detected capacity change from 0 to 128 [ 112.175809][ T5161] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.183531][ T5318] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.215144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.223863][ T5318] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.238096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.287700][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.294792][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.370156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.458365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.527852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.536424][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.543571][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.078357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.215728][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.224942][ T4803] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 113.278861][ T5329] loop7: detected capacity change from 0 to 1024 [ 113.288011][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 113.296335][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.309764][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.326625][ T5329] EXT4-fs (loop7): inline encryption not supported [ 113.342924][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.359591][ T5329] EXT4-fs (loop7): Ignoring removed nobh option [ 113.365970][ T5329] EXT4-fs (loop7): Ignoring removed bh option [ 113.398532][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.421219][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.438273][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.447610][ T5329] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.476671][ T5332] loop5: detected capacity change from 0 to 2048 [ 113.479294][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.522033][ T5334] loop0: detected capacity change from 0 to 2048 [ 113.536777][ T5161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.561347][ T5329] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 113.585432][ T9] tipc: Left network mode [ 113.592273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.619237][ T5334] EXT4-fs (loop0): Ignoring removed bh option [ 113.633035][ T5332] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.684480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.731510][ T5329] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3871: comm syz.7.268: Allocating blocks 385-513 which overlap fs metadata [ 113.762377][ T5334] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 113.975081][ T5329] EXT4-fs (loop7): pa ffff888075ff6ee0: logic 16, phys. 129, len 24 [ 113.984100][ T5329] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 6 [ 114.917071][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.940120][ T1488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.964188][ T5353] loop0: detected capacity change from 0 to 1024 [ 115.003027][ T5161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.013573][ T5355] loop5: detected capacity change from 0 to 1024 [ 115.044186][ T5357] loop7: detected capacity change from 0 to 1024 [ 115.154557][ T5355] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 115.184068][ T5353] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.186277][ T5355] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.297110][ T5355] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #15: block 3: comm syz.5.276: lblock 3 mapped to illegal pblock 3 (length 1) [ 115.321058][ T26] audit: type=1804 audit(1758211646.748:7): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.275" name="/newroot/65/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 115.346106][ T5355] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 115.421262][ T5355] EXT4-fs (loop5): This should not happen!! Data will be lost [ 115.421262][ T5355] [ 115.496868][ T5370] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #15: block 3: comm syz.5.276: lblock 3 mapped to illegal pblock 3 (length 1) [ 115.761755][ T9] device hsr_slave_0 left promiscuous mode [ 115.785904][ T5376] loop7: detected capacity change from 0 to 4096 [ 115.792914][ T9] device hsr_slave_1 left promiscuous mode [ 115.862960][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.882330][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.906119][ T5376] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.923471][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.994856][ T5383] loop0: detected capacity change from 0 to 1024 [ 116.017099][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.056476][ T9] device bridge_slave_1 left promiscuous mode [ 116.111147][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.133261][ T5383] EXT4-fs (loop0): inline encryption not supported [ 116.133948][ T9] device bridge_slave_0 left promiscuous mode [ 116.147902][ T5383] EXT4-fs (loop0): Ignoring removed nobh option [ 116.183083][ T5383] EXT4-fs (loop0): Ignoring removed bh option [ 116.189548][ T5383] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.202651][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.280376][ T5383] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 116.318332][ T26] audit: type=1800 audit(1758211647.748:8): pid=5383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.283" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 116.342391][ T5383] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.283: Allocating blocks 385-513 which overlap fs metadata [ 116.371332][ T9] device veth1_macvtap left promiscuous mode [ 116.408428][ T9] device veth0_macvtap left promiscuous mode [ 116.414537][ T9] device veth1_vlan left promiscuous mode [ 116.420753][ T9] device veth0_vlan left promiscuous mode [ 116.440258][ T5383] EXT4-fs (loop0): pa ffff888059e402a0: logic 16, phys. 129, len 24 [ 116.448446][ T5383] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 116.605372][ T4188] Trying to write to read-only block-device loop0 [ 116.625590][ T4188] Trying to write to read-only block-device loop0 [ 116.640467][ T4188] Trying to write to read-only block-device loop0 [ 116.646968][ T4188] Trying to write to read-only block-device loop0 [ 116.667516][ T4188] Trying to write to read-only block-device loop0 [ 116.675191][ T4188] Trying to write to read-only block-device loop0 [ 116.709085][ T4188] Trying to write to read-only block-device loop0 [ 116.724252][ T4188] Trying to write to read-only block-device loop0 [ 116.737142][ T4188] Trying to write to read-only block-device loop0 [ 116.751181][ T4188] Trying to write to read-only block-device loop0 [ 116.819157][ T5406] loop2: detected capacity change from 0 to 512 [ 116.886266][ T5408] loop7: detected capacity change from 0 to 2048 [ 116.902217][ T5406] EXT4-fs (loop2): Unrecognized mount option "context=staff_u" or missing value [ 116.924455][ T5408] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.096634][ T5413] loop2: detected capacity change from 0 to 8 [ 117.145780][ T9] team0 (unregistering): Port device team_slave_1 removed [ 117.155539][ T5414] loop7: detected capacity change from 0 to 512 [ 117.185208][ T5413] SQUASHFS error: Unable to read directory block [629:26] [ 117.195381][ T9] team0 (unregistering): Port device team_slave_0 removed [ 117.214175][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.235654][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.267579][ T5414] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000000,. Quota mode: writeback. [ 117.327582][ T5414] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.375151][ T5414] EXT4-fs error (device loop7): ext4_add_entry:2486: inode #12: comm syz.7.294: Directory hole found for htree leaf block 0 [ 117.392159][ T5414] EXT4-fs (loop7): Remounting filesystem read-only [ 117.505108][ T9] bond0 (unregistering): Released all slaves [ 117.660331][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.685527][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.737073][ T5430] loop5: detected capacity change from 0 to 1024 [ 117.754496][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.773544][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.792976][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.811011][ T5435] loop0: detected capacity change from 0 to 2048 [ 117.818199][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.838608][ T5161] device veth0_vlan entered promiscuous mode [ 117.852872][ T5161] device veth1_vlan entered promiscuous mode [ 117.882095][ T5430] loop5: detected capacity change from 0 to 8 [ 117.891845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.900682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.909003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.917651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.931407][ T5161] device veth0_macvtap entered promiscuous mode [ 117.951505][ T5161] device veth1_macvtap entered promiscuous mode [ 117.959782][ T5430] SQUASHFS error: zlib decompression failed, data probably corrupt [ 117.969040][ T5430] SQUASHFS error: Failed to read block 0x9b: -5 [ 117.975658][ T5430] SQUASHFS error: Unable to read metadata cache entry [99] [ 118.007848][ T5330] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 118.035166][ T5161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.058772][ T5430] SQUASHFS error: Unable to read inode 0x127 [ 118.065576][ T5161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.076254][ T5161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.094781][ T5161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.131655][ T5161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.142272][ T5161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.174018][ T5161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.184700][ T5161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.204067][ T5161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.222427][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.308264][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.325596][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.388046][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.414990][ T5161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.432288][ T5161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.442660][ T5330] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 118.513245][ T5437] x_tables: duplicate underflow at hook 1 [ 118.534536][ T5437] fuse: Bad value for 'fd' [ 118.772444][ T5161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.793010][ T5161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.817847][ T5161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.853554][ T5161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.903014][ T5161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.934274][ T5161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.998742][ T5161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.008799][ T5330] usb 8-1: config 0 has no interface number 0 [ 119.015131][ T5330] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 119.030550][ T5330] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 119.057841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.095067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.130105][ T5161] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.144742][ T5161] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.154564][ T5161] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.166555][ T5161] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.177885][ T5330] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 119.207629][ T5330] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 119.220618][ T5330] usb 8-1: Product: syz [ 119.232163][ T5330] usb 8-1: SerialNumber: syz [ 119.266732][ T5330] usb 8-1: config 0 descriptor?? [ 119.303017][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.321027][ T5330] input: syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.120/input/input10 [ 119.345024][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.367664][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.404372][ T5450] loop5: detected capacity change from 0 to 164 [ 119.433838][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.459135][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.504363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.548907][ T4394] usb 8-1: USB disconnect, device number 2 [ 119.652021][ T5452] loop5: detected capacity change from 0 to 1024 [ 119.678465][ T5452] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 119.689102][ T5452] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (53445!=20869) [ 119.735888][ T5452] EXT4-fs error (device loop5): ext4_get_journal_inode:5160: inode #32: comm syz.5.311: iget: special inode unallocated [ 119.752668][ T5456] tipc: Enabling of bearer rejected, failed to enable media [ 119.777963][ T5452] EXT4-fs (loop5): no journal found [ 119.783194][ T5452] EXT4-fs (loop5): can't get journal size [ 119.821210][ T5452] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,usrquota,,errors=continue. Quota mode: writeback. [ 119.992708][ T5465] loop0: detected capacity change from 0 to 512 [ 120.354735][ T5476] loop0: detected capacity change from 0 to 2048 [ 120.384511][ T5484] loop5: detected capacity change from 0 to 128 [ 120.497893][ T5490] loop8: detected capacity change from 0 to 512 [ 120.505183][ T5484] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.516400][ T5484] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.616139][ T5490] EXT4-fs (loop8): Mount option "noacl" will be removed by 3.5 [ 120.616139][ T5490] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 120.616139][ T5490] [ 120.891507][ T5490] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.324: iget: bad i_size value: 38620345925642 [ 120.939129][ T5490] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.324: couldn't read orphan inode 15 (err -117) [ 121.138015][ T5490] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodiscard,i_version,nodioread_nolock,noacl,stripe=0x00000000000000d8,barrier=0xfffffffffffff23e,abort,,errors=continue. Quota mode: writeback. [ 121.263667][ T5502] loop2: detected capacity change from 0 to 1024 [ 121.457726][ T5502] EXT4-fs (loop2): inline encryption not supported [ 121.483374][ T5502] EXT4-fs (loop2): Ignoring removed nobh option [ 121.527446][ T5502] EXT4-fs (loop2): Ignoring removed bh option [ 121.580637][ T5502] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.722964][ T5502] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 121.838963][ T5512] tipc: Started in network mode [ 121.843866][ T5512] tipc: Node identity 5edd65841c4e, cluster identity 4711 [ 121.857326][ T5512] tipc: Enabled bearer , priority 0 [ 121.865299][ T5512] device syzkaller0 entered promiscuous mode [ 121.885005][ T5512] tipc: Resetting bearer [ 121.894722][ T26] audit: type=1800 audit(1758211653.318:9): pid=5502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.327" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 121.918411][ T5502] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.327: Allocating blocks 385-513 which overlap fs metadata [ 121.964524][ T5501] EXT4-fs (loop2): pa ffff888073949b60: logic 16, phys. 129, len 24 [ 121.973146][ T5501] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 122.007624][ T5511] tipc: Resetting bearer [ 122.034427][ T5511] tipc: Disabling bearer [ 122.133609][ T5516] loop0: detected capacity change from 0 to 1024 [ 122.144009][ T4775] bio_check_ro: 2 callbacks suppressed [ 122.144023][ T4775] Trying to write to read-only block-device loop2 [ 122.160190][ T4196] Trying to write to read-only block-device loop2 [ 122.166683][ T4196] Trying to write to read-only block-device loop2 [ 122.202831][ T4775] Trying to write to read-only block-device loop2 [ 122.219661][ T4196] Trying to write to read-only block-device loop2 [ 122.226912][ T4775] Trying to write to read-only block-device loop2 [ 122.244008][ T4196] Trying to write to read-only block-device loop2 [ 122.277245][ T4196] Trying to write to read-only block-device loop2 [ 122.324172][ T4775] Trying to write to read-only block-device loop2 [ 122.333519][ T4775] Trying to write to read-only block-device loop2 [ 122.386211][ T5520] loop8: detected capacity change from 0 to 1024 [ 122.464548][ T5523] loop2: detected capacity change from 0 to 8 [ 122.567900][ T26] audit: type=1800 audit(1758211653.998:10): pid=5520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.334" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 122.593827][ T5523] /dev/loop2: Can't open blockdev [ 122.777557][ T5330] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 122.894190][ T5529] loop2: detected capacity change from 0 to 1024 [ 123.177667][ T5330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 64 [ 123.209786][ T5330] usb 1-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00 [ 123.257467][ T5330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.294981][ T5330] usb 1-1: config 0 descriptor?? [ 123.347731][ T5524] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.578053][ T5539] loop2: detected capacity change from 0 to 1024 [ 123.820575][ T5330] wacom 0003:056A:00D8.0004: unknown main item tag 0x0 [ 123.839284][ T5546] loop5: detected capacity change from 0 to 8 [ 123.849089][ T5330] wacom 0003:056A:00D8.0004: Unknown device_type for 'HID 056a:00d8'. Assuming pen. [ 123.927980][ T5330] wacom 0003:056A:00D8.0004: hidraw0: USB HID v0.00 Device [HID 056a:00d8] on usb-dummy_hcd.0-1/input0 [ 123.992396][ T5330] input: Wacom Bamboo Comic 2FG Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D8.0004/input/input12 [ 124.123963][ T5330] usb 1-1: USB disconnect, device number 6 [ 124.262383][ T5557] loop5: detected capacity change from 0 to 512 [ 124.284870][ T5556] fido_id[5556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 124.378723][ T5557] EXT4-fs (loop5): Ignoring removed oldalloc option [ 124.475023][ T5562] loop2: detected capacity change from 0 to 2048 [ 124.508064][ T5557] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.348: Parent and EA inode have the same ino 15 [ 124.542745][ T5557] EXT4-fs (loop5): Remounting filesystem read-only [ 124.543044][ T5557] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.348: Parent and EA inode have the same ino 15 [ 124.561178][ T5557] EXT4-fs (loop5): Remounting filesystem read-only [ 124.561451][ T5557] EXT4-fs (loop5): 1 orphan inode deleted [ 124.561472][ T5557] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,nogrpid,oldalloc,mb_optimize_scan=0x0000000000000001,. Quota mode: none. [ 124.847733][ T5568] loop2: detected capacity change from 0 to 512 [ 124.890001][ T5557] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.348: deleted inode referenced: 15 [ 124.951402][ T5557] EXT4-fs (loop5): Remounting filesystem read-only [ 124.974441][ T5570] loop0: detected capacity change from 0 to 1024 [ 125.020073][ T5572] loop8: detected capacity change from 0 to 1024 [ 125.091738][ T5572] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 125.169729][ T5572] EXT4-fs error (device loop8): ext4_get_journal_inode:5160: inode #32: comm syz.8.356: iget: special inode unallocated [ 125.299799][ T5572] EXT4-fs (loop8): no journal found [ 125.305055][ T5572] EXT4-fs (loop8): can't get journal size [ 125.385337][ T5572] EXT4-fs (loop8): filesystem is read-only [ 125.429123][ T5574] tipc: Enabled bearer , priority 0 [ 125.486399][ T5572] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000,. Quota mode: none. [ 125.666374][ T5578] device syzkaller0 entered promiscuous mode [ 126.225518][ T5573] tipc: Resetting bearer [ 126.290507][ T5573] tipc: Disabling bearer [ 126.622074][ T5600] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.877871][ T4394] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 126.897449][ T5606] loop2: detected capacity change from 0 to 1024 [ 128.347476][ T4394] usb 9-1: Using ep0 maxpacket: 32 [ 128.477786][ T4394] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.499032][ T4394] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.514998][ T1108] Bluetooth: hci3: command 0x0401 tx timeout [ 128.621273][ T5619] tipc: Enabled bearer , priority 0 [ 128.632765][ T5621] loop2: detected capacity change from 0 to 2048 [ 128.647854][ T4394] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 128.656925][ T4394] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 128.668241][ T5619] device syzkaller0 entered promiscuous mode [ 128.688776][ T4394] usb 9-1: Product: syz [ 128.692968][ T4394] usb 9-1: Manufacturer: syz [ 128.722823][ T5618] tipc: Resetting bearer [ 128.757248][ T5618] tipc: Disabling bearer [ 128.778807][ T4394] hub 9-1:4.0: USB hub found [ 128.999016][ T4394] hub 9-1:4.0: 2 ports detected [ 129.227971][ T4394] hub 9-1:4.0: hub_hub_status failed (err = -71) [ 129.308898][ T4394] hub 9-1:4.0: config failed, can't get hub status (err -71) [ 129.626773][ T4394] usb 9-1: USB disconnect, device number 2 [ 129.750936][ T5631] loop2: detected capacity change from 0 to 1024 [ 130.086828][ T5639] loop8: detected capacity change from 0 to 2048 [ 130.993764][ T5647] loop0: detected capacity change from 0 to 512 [ 131.281936][ T5650] loop0: detected capacity change from 0 to 1024 [ 131.559115][ T5654] tipc: Enabled bearer , priority 0 [ 131.567673][ T5330] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 131.612680][ T5654] device syzkaller0 entered promiscuous mode [ 131.658961][ T5653] tipc: Resetting bearer [ 131.737263][ T5653] tipc: Disabling bearer [ 131.837730][ T5330] usb 9-1: Using ep0 maxpacket: 16 [ 131.977707][ T5330] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.009148][ T5330] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.027422][ T5330] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 132.056859][ T5330] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.057011][ T5658] loop7: detected capacity change from 0 to 2048 [ 132.089273][ T5330] usb 9-1: config 0 descriptor?? [ 132.138419][ T5658] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.293074][ T5642] loop2: detected capacity change from 0 to 65536 [ 132.601523][ T5330] hid-multitouch 0003:1FD2:6007.0005: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input0 [ 132.738538][ T4231] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 132.741637][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.753487][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.801155][ T5330] usb 9-1: USB disconnect, device number 3 [ 132.816906][ T5677] loop0: detected capacity change from 0 to 512 [ 132.825766][ T5673] fido_id[5673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 132.913460][ T5679] loop5: detected capacity change from 0 to 1024 [ 132.970940][ T5679] EXT4-fs (loop5): inline encryption not supported [ 132.996043][ T5679] EXT4-fs (loop5): Ignoring removed nobh option [ 133.006831][ T5679] EXT4-fs (loop5): Ignoring removed bh option [ 133.019448][ T5679] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.073102][ T5679] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 133.668040][ T26] audit: type=1800 audit(1758211665.068:11): pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.398" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 133.925418][ T5679] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3871: comm syz.5.398: Allocating blocks 385-513 which overlap fs metadata [ 133.940534][ T4231] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 133.952280][ T4231] usb 8-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.958710][ T5679] EXT4-fs (loop5): pa ffff888059e40460: logic 16, phys. 129, len 24 [ 133.966034][ T4231] usb 8-1: config 0 interface 0 has no altsetting 0 [ 133.974055][ T5679] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 134.011656][ T4231] usb 8-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 134.041746][ T4231] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.101484][ T5694] loop8: detected capacity change from 0 to 1024 [ 134.119997][ T4231] usb 8-1: config 0 descriptor?? [ 134.137725][ T5665] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 134.208249][ T5698] loop0: detected capacity change from 0 to 128 [ 134.236735][ T4471] bio_check_ro: 2 callbacks suppressed [ 134.236747][ T4471] Trying to write to read-only block-device loop5 [ 134.250765][ T4471] Trying to write to read-only block-device loop5 [ 134.257325][ T4471] Trying to write to read-only block-device loop5 [ 134.264161][ T4471] Trying to write to read-only block-device loop5 [ 134.273156][ T4471] Trying to write to read-only block-device loop5 [ 134.283412][ T4471] Trying to write to read-only block-device loop5 [ 134.288512][ T5694] loop8: detected capacity change from 0 to 8 [ 134.300750][ T4471] Trying to write to read-only block-device loop5 [ 134.308137][ T4471] Trying to write to read-only block-device loop5 [ 134.316139][ T4471] Trying to write to read-only block-device loop5 [ 134.327468][ T4471] Trying to write to read-only block-device loop5 [ 134.603722][ T5694] SQUASHFS error: zlib decompression failed, data probably corrupt [ 134.683861][ T5694] SQUASHFS error: Failed to read block 0x9b: -5 [ 135.211886][ T5694] SQUASHFS error: Unable to read metadata cache entry [99] [ 135.261133][ T5694] SQUASHFS error: Unable to read inode 0x127 [ 136.277635][ T4231] usbhid 8-1:0.0: can't add hid device: -71 [ 136.283648][ T4231] usbhid: probe of 8-1:0.0 failed with error -71 [ 136.347545][ T4231] usb 8-1: USB disconnect, device number 3 [ 136.371303][ T5709] loop7: detected capacity change from 0 to 512 [ 136.470542][ T5709] EXT4-fs (loop7): Ignoring removed oldalloc option [ 136.494354][ T5709] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 136.531244][ T5715] loop2: detected capacity change from 0 to 128 [ 136.567363][ T26] audit: type=1400 audit(1758211667.988:12): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5716 comm="syz.8.410" [ 136.582966][ T5718] loop8: detected capacity change from 0 to 512 [ 136.584730][ T5709] EXT4-fs (loop7): 1 truncate cleaned up [ 136.618406][ T5718] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 136.646865][ T5709] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x000000000000007c,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 136.823809][ T5718] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 136.836071][ T26] audit: type=1800 audit(1758211668.228:13): pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.405" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 136.845674][ T5718] System zones: 1-12 [ 136.883024][ T5718] EXT4-fs (loop8): 1 truncate cleaned up [ 136.896078][ T5718] EXT4-fs (loop8): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,grpquota,debug,nodioread_nolock,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000003ff,bsddf,debug,,errors=continue. Quota mode: writeback. [ 137.608138][ T5082] EXT4-fs error (device loop7): mb_free_blocks:1860: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 137.626768][ T5715] loop2: detected capacity change from 0 to 512 [ 137.651675][ T5727] loop0: detected capacity change from 0 to 1024 [ 137.833496][ T5736] loop7: detected capacity change from 0 to 512 [ 137.874607][ T5733] loop8: detected capacity change from 0 to 2048 [ 137.906165][ T5736] EXT4-fs (loop7): Ignoring removed nobh option [ 137.928009][ T5736] EXT4-fs (loop7): inline encryption not supported [ 137.956826][ T5741] loop5: detected capacity change from 0 to 512 [ 138.032623][ T5733] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.049779][ T5733] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.074262][ T5746] loop2: detected capacity change from 0 to 2048 [ 138.122367][ T5736] EXT4-fs (loop7): Test dummy encryption mode enabled [ 138.135522][ T5733] fs-verity: sha512 using implementation "sha512-avx2" [ 138.190270][ T5736] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 138.212828][ T5736] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.414: invalid indirect mapped block 2683928664 (level 1) [ 138.240779][ T5733] syz.8.416 (5733) used greatest stack depth: 21032 bytes left [ 138.284624][ T5736] EXT4-fs (loop7): 1 truncate cleaned up [ 138.338021][ T5746] udc-core: couldn't find an available UDC or it's busy [ 138.345289][ T5736] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nojournal_checksum,inlinecrypt,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,test_dummy_encryption,,,errors=continue. Quota mode: writeback. [ 138.379186][ T5756] device syzkaller0 entered promiscuous mode [ 138.393424][ T5746] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 138.506119][ T4751] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 138.584620][ T5761] netlink: 64 bytes leftover after parsing attributes in process `syz.8.424'. [ 138.604217][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.8.424'. [ 138.700743][ T5736] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 138.837766][ T4751] usb 6-1: device descriptor read/64, error -71 [ 139.157665][ T4751] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 139.339856][ T5684] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 139.524134][ T4751] usb 6-1: device descriptor read/64, error -71 [ 139.707165][ T5770] 9pnet: Insufficient options for proto=fd [ 139.717958][ T4751] usb usb6-port1: attempt power cycle [ 139.834057][ T5777] loop2: detected capacity change from 0 to 512 [ 139.987636][ T4231] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 139.989726][ T5777] netlink: 56 bytes leftover after parsing attributes in process `syz.2.429'. [ 140.377996][ T4231] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 140.439575][ T4231] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.580837][ T4231] usb 1-1: config 1 has no interface number 0 [ 140.684053][ T4231] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.795388][ T4231] usb 1-1: config 1 interface 105 has no altsetting 0 [ 140.807490][ T4751] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 140.967718][ T4231] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 140.977713][ T4751] usb 6-1: device descriptor read/8, error -71 [ 140.984020][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.006162][ T4231] usb 1-1: Product: syz [ 141.020551][ T4231] usb 1-1: Manufacturer: syz [ 141.036799][ T4231] usb 1-1: SerialNumber: syz [ 141.082617][ T5790] loop5: detected capacity change from 0 to 512 [ 141.099882][ T5788] loop2: detected capacity change from 0 to 2048 [ 141.164157][ T5792] device syzkaller0 entered promiscuous mode [ 141.206137][ T5796] loop8: detected capacity change from 0 to 512 [ 141.307718][ T4231] aqc111: probe of 1-1:1.105 failed with error -22 [ 141.345638][ T4231] usb 1-1: USB disconnect, device number 7 [ 141.418100][ T5796] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002,. Quota mode: writeback. [ 141.490002][ T5796] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.757392][ T5823] loop8: detected capacity change from 0 to 128 [ 142.811431][ T5827] loop2: detected capacity change from 0 to 1024 [ 142.834239][ T5829] loop0: detected capacity change from 0 to 1024 [ 142.860652][ T5823] EXT4-fs (loop8): Test dummy encryption mode enabled [ 142.903477][ T5823] EXT4-fs (loop8): mounted filesystem without journal. Opts: minixdf,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 142.919005][ T5823] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.043711][ T5840] EXT4-fs (loop8): resizing filesystem from 64 to 1 blocks [ 143.108149][ T5840] EXT4-fs warning (device loop8): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 143.226918][ T5845] loop0: detected capacity change from 0 to 512 [ 143.971070][ T5847] loop5: detected capacity change from 0 to 2048 [ 144.082113][ T5853] loop7: detected capacity change from 0 to 512 [ 144.176957][ T5845] loop0: detected capacity change from 0 to 512 [ 144.457626][ T5853] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.550554][ T5853] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.669184][ T5875] loop2: detected capacity change from 0 to 2048 [ 144.824393][ T5882] loop8: detected capacity change from 0 to 1024 [ 144.866282][ T4394] kernel write not supported for file /snd/seq (pid: 4394 comm: kworker/1:6) [ 144.913089][ T5882] EXT4-fs (loop8): inline encryption not supported [ 144.957579][ T5882] EXT4-fs (loop8): Ignoring removed nobh option [ 144.980743][ T5891] loop2: detected capacity change from 0 to 256 [ 145.006460][ T5882] EXT4-fs (loop8): Ignoring removed bh option [ 145.023463][ T5882] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.040506][ T5893] loop5: detected capacity change from 0 to 512 [ 145.239575][ T5891] /dev/loop2: Can't open blockdev [ 145.269665][ T5882] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 146.097824][ T5893] loop5: detected capacity change from 0 to 512 [ 146.114487][ T26] audit: type=1800 audit(1758211677.538:14): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.467" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 146.189146][ T5905] loop7: detected capacity change from 0 to 1024 [ 146.196892][ T5912] udc-core: couldn't find an available UDC or it's busy [ 146.213182][ T5882] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3871: comm syz.8.467: Allocating blocks 497-513 which overlap fs metadata [ 146.218768][ T5912] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 146.228751][ T5882] EXT4-fs (loop8): pa ffff888073949a80: logic 256, phys. 385, len 8 [ 146.243162][ T5882] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 146.317900][ T5905] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.406263][ T5161] EXT4-fs error (device loop8): mb_free_blocks:1860: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 146.499298][ T5921] device syzkaller0 entered promiscuous mode [ 146.530147][ T4773] bio_check_ro: 2 callbacks suppressed [ 146.530162][ T4773] Trying to write to read-only block-device loop8 [ 146.548464][ T5161] Trying to write to read-only block-device loop8 [ 146.551165][ T5924] netlink: 76 bytes leftover after parsing attributes in process `syz.0.485'. [ 146.554977][ T5161] Trying to write to read-only block-device loop8 [ 146.572885][ T4773] Trying to write to read-only block-device loop8 [ 146.587456][ T4773] Trying to write to read-only block-device loop8 [ 146.607457][ T5161] Trying to write to read-only block-device loop8 [ 146.615567][ T4773] Trying to write to read-only block-device loop8 [ 146.631503][ T4773] Trying to write to read-only block-device loop8 [ 146.638207][ T26] audit: type=1804 audit(1758211678.058:15): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.477" name="/newroot/36/file1/file1" dev="loop7" ino=15 res=1 errno=0 [ 146.676776][ T5161] Trying to write to read-only block-device loop8 [ 146.700564][ T5161] Trying to write to read-only block-device loop8 [ 146.871758][ T5928] loop8: detected capacity change from 0 to 256 [ 147.412054][ T5936] xt_nat: multiple ranges no longer supported [ 147.509535][ T5936] loop5: detected capacity change from 0 to 512 [ 147.942964][ T5936] EXT4-fs (loop5): Ignoring removed orlov option [ 147.972878][ T5928] /dev/loop8: Can't open blockdev [ 148.118566][ T5936] EXT4-fs (loop5): write access unavailable, skipping orphan cleanup [ 148.126749][ T5936] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,sysvgroups,,errors=continue. Quota mode: writeback. [ 148.482848][ T3561] udevd[3561]: worker [5130] terminated by signal 33 (Unknown signal 33) [ 148.539678][ T3561] udevd[3561]: worker [5130] failed while handling '/devices/virtual/block/loop7' [ 148.599895][ T3561] udevd[3561]: worker [4174] terminated by signal 33 (Unknown signal 33) [ 148.633762][ T3561] udevd[3561]: worker [4174] failed while handling '/devices/virtual/block/loop8' [ 148.659769][ T3561] udevd[3561]: worker [4197] terminated by signal 33 (Unknown signal 33) [ 148.690037][ T5948] loop2: detected capacity change from 0 to 1024 [ 148.696700][ T3561] udevd[3561]: worker [4197] failed while handling '/devices/virtual/block/loop5' [ 148.952923][ T5959] device syzkaller0 entered promiscuous mode [ 149.105316][ T5968] loop8: detected capacity change from 0 to 1024 [ 149.277703][ T4751] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 149.557617][ T4751] usb 8-1: Using ep0 maxpacket: 16 [ 149.688254][ T4751] usb 8-1: config 0 has an invalid interface number: 244 but max is 0 [ 149.713758][ T4751] usb 8-1: config 0 has no interface number 0 [ 149.983559][ T5974] loop5: detected capacity change from 0 to 256 [ 150.008601][ T4751] usb 8-1: New USB device found, idVendor=1b3d, idProduct=0145, bcdDevice=6e.e5 [ 150.039634][ T5974] /dev/loop5: Can't open blockdev [ 150.048298][ T4751] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.097712][ T4751] usb 8-1: Product: syz [ 150.102193][ T4751] usb 8-1: Manufacturer: syz [ 150.107249][ T4751] usb 8-1: SerialNumber: syz [ 150.123123][ T5976] loop2: detected capacity change from 0 to 1024 [ 150.174360][ T4751] usb 8-1: config 0 descriptor?? [ 150.235507][ T4751] ftdi_sio 8-1:0.244: FTDI USB Serial Device converter detected [ 150.253648][ T4751] usb 8-1: Detected FT-X [ 150.368067][ T5992] device pim6reg1 entered promiscuous mode [ 150.376425][ T5990] loop0: detected capacity change from 0 to 1024 [ 150.391165][ T5992] loop8: detected capacity change from 0 to 256 [ 150.448511][ T4751] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 151.012518][ T4751] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 151.216838][ T4751] usb 8-1: USB disconnect, device number 4 [ 151.253470][ T4751] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 151.273596][ T4751] ftdi_sio 8-1:0.244: device disconnected [ 151.330486][ T6002] device syzkaller0 entered promiscuous mode [ 151.373373][ T6004] loop5: detected capacity change from 0 to 256 [ 151.374684][ T5992] /dev/loop8: Can't open blockdev [ 151.457563][ T6004] /dev/loop5: Can't open blockdev [ 151.611780][ T6009] loop2: detected capacity change from 0 to 8192 [ 151.635257][ T6017] loop5: detected capacity change from 0 to 1024 [ 151.694095][ T6023] loop8: detected capacity change from 0 to 1024 [ 151.880457][ T6027] loop7: detected capacity change from 0 to 1024 [ 151.901529][ T6029] loop5: detected capacity change from 0 to 1024 [ 151.935406][ T6033] loop8: detected capacity change from 0 to 512 [ 151.962881][ T6037] loop0: detected capacity change from 0 to 256 [ 151.973913][ T6027] EXT4-fs (loop7): inline encryption not supported [ 151.982866][ T6027] EXT4-fs (loop7): Ignoring removed nobh option [ 151.993881][ T6027] EXT4-fs (loop7): Ignoring removed bh option [ 152.003752][ T6027] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.027074][ T6041] udc-core: couldn't find an available UDC or it's busy [ 152.035586][ T6041] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 152.047839][ T6027] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 152.087913][ T6037] /dev/loop0: Can't open blockdev [ 152.089370][ T6029] loop5: detected capacity change from 0 to 1024 [ 152.110750][ T26] audit: type=1800 audit(1758211683.538:16): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.527" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 152.140057][ T6027] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3871: comm syz.7.527: Allocating blocks 385-513 which overlap fs metadata [ 152.198986][ T6027] EXT4-fs (loop7): pa ffff888059e40a80: logic 16, phys. 129, len 24 [ 152.207118][ T6027] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 6 [ 152.243252][ T6029] loop5: detected capacity change from 0 to 8 [ 152.270067][ T6051] tipc: Enabled bearer , priority 0 [ 152.286274][ T6051] tipc: Resetting bearer [ 152.304048][ T6053] loop0: detected capacity change from 0 to 1024 [ 152.311968][ T6050] tipc: Disabling bearer [ 152.337706][ T6029] /dev/loop5: Can't open blockdev [ 152.571161][ T6064] loop0: detected capacity change from 0 to 512 [ 153.030467][ T6070] loop8: detected capacity change from 0 to 1024 [ 153.250991][ T6081] loop2: detected capacity change from 0 to 256 [ 153.261710][ T6079] loop5: detected capacity change from 0 to 1024 [ 153.277130][ T6077] loop0: detected capacity change from 0 to 1024 [ 153.337505][ T6081] /dev/loop2: Can't open blockdev [ 153.573156][ T6087] tipc: Enabled bearer , priority 0 [ 153.589689][ T6087] tipc: Resetting bearer [ 153.613914][ T6086] tipc: Disabling bearer [ 153.896102][ T6070] syz.8.543 (6070) used greatest stack depth: 21024 bytes left [ 153.968319][ T6111] loop2: detected capacity change from 0 to 512 [ 154.055433][ T6116] loop8: detected capacity change from 0 to 256 [ 154.104393][ T6118] loop0: detected capacity change from 0 to 1024 [ 154.187625][ T6116] /dev/loop8: Can't open blockdev [ 154.410172][ T6134] loop2: detected capacity change from 0 to 512 [ 155.491087][ T6145] loop5: detected capacity change from 0 to 1024 [ 155.502192][ T6149] loop0: detected capacity change from 0 to 512 [ 155.583638][ T6152] loop8: detected capacity change from 0 to 256 [ 155.670309][ T6149] loop0: detected capacity change from 0 to 512 [ 155.697575][ T6152] /dev/loop8: Can't open blockdev [ 155.873855][ T6158] netlink: 48 bytes leftover after parsing attributes in process `syz.5.579'. [ 156.154054][ T26] audit: type=1326 audit(1758211687.488:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1abcdd7ba9 code=0x7ffc0000 [ 156.736704][ T26] audit: type=1326 audit(1758211687.498:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1abcdd7ba9 code=0x7ffc0000 [ 156.763911][ T26] audit: type=1326 audit(1758211687.508:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1abcdd7ba9 code=0x7ffc0000 [ 156.788695][ T6165] loop5: detected capacity change from 0 to 128 [ 156.827493][ T26] audit: type=1326 audit(1758211687.508:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1abcdd7ba9 code=0x7ffc0000 [ 156.951550][ T6168] loop0: detected capacity change from 0 to 512 [ 156.963719][ T26] audit: type=1326 audit(1758211687.508:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1abcdd7ba9 code=0x7ffc0000 [ 157.148218][ T26] audit: type=1326 audit(1758211687.508:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1abcdd7ba9 code=0x7ffc0000 [ 157.170898][ T26] audit: type=1326 audit(1758211687.508:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1abcdd7ba9 code=0x7ffc0000 [ 157.194509][ T26] audit: type=1326 audit(1758211687.508:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1abcdd7ba9 code=0x7ffc0000 [ 157.718203][ T26] audit: type=1326 audit(1758211687.508:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1abcdd7ba9 code=0x7ffc0000 [ 157.903631][ T26] audit: type=1326 audit(1758211687.518:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1abcdd7ba9 code=0x7ffc0000 [ 157.926103][ T26] audit: type=1326 audit(1758211687.518:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1abcdd7ba9 code=0x7ffc0000 [ 157.996834][ T26] audit: type=1326 audit(1758211687.518:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f1abcdd7ba9 code=0x7ffc0000 [ 158.098234][ T6180] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 158.130987][ T6188] loop5: detected capacity change from 0 to 256 [ 158.133470][ T26] audit: type=1326 audit(1758211687.518:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1abcdd7ba9 code=0x7ffc0000 [ 158.149344][ T6187] loop7: detected capacity change from 0 to 1024 [ 158.173069][ T26] audit: type=1326 audit(1758211687.518:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1abcdd7ba9 code=0x7ffc0000 [ 158.223851][ T6187] EXT4-fs (loop7): Ignoring removed orlov option [ 158.230480][ T6188] /dev/loop5: Can't open blockdev [ 158.240637][ T6187] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 158.267847][ T26] audit: type=1326 audit(1758211687.518:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1abcdd7ba9 code=0x7ffc0000 [ 158.378461][ T6187] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=remount-ro,noauto_da_alloc,nomblk_io_submit,. Quota mode: none. [ 158.564861][ T6208] loop5: detected capacity change from 0 to 8 [ 158.720690][ T6208] /dev/loop5: Can't open blockdev [ 158.800656][ T6218] loop2: detected capacity change from 0 to 512 [ 159.433962][ T6224] loop7: detected capacity change from 0 to 256 [ 159.596129][ T6226] loop5: detected capacity change from 0 to 1024 [ 159.644987][ T6228] udc-core: couldn't find an available UDC or it's busy [ 159.645018][ T6224] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 159.653953][ T6228] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 159.685121][ T6230] loop0: detected capacity change from 0 to 512 [ 159.695173][ T6224] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 159.707492][ T1108] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 159.855221][ T6234] loop5: detected capacity change from 0 to 1024 [ 159.858495][ T6230] loop0: detected capacity change from 0 to 512 [ 159.900567][ T6236] loop7: detected capacity change from 0 to 512 [ 159.947481][ T1108] usb 9-1: Using ep0 maxpacket: 32 [ 159.953626][ T6236] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 159.991205][ T6236] EXT4-fs (loop7): 1 truncate cleaned up [ 159.998531][ T6236] EXT4-fs (loop7): mounted filesystem without journal. Opts: nolazytime,lazytime,journal_path=./bus,bsdgroups,lazytime,noload,,errors=continue. Quota mode: none. [ 160.055698][ T6241] loop0: detected capacity change from 0 to 512 [ 160.067779][ T1108] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 160.082575][ T1108] usb 9-1: config 0 has no interface number 0 [ 160.086827][ T6243] loop5: detected capacity change from 0 to 1024 [ 160.119881][ T6241] EXT4-fs (loop0): Invalid want_extra_isize 95 [ 160.247816][ T1108] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 160.259451][ T1108] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.268233][ T1108] usb 9-1: Product: syz [ 160.272418][ T1108] usb 9-1: Manufacturer: syz [ 160.277075][ T1108] usb 9-1: SerialNumber: syz [ 160.284008][ T1108] usb 9-1: config 0 descriptor?? [ 160.328329][ T1108] smsc95xx v2.0.0 [ 161.247263][ T6267] loop5: detected capacity change from 0 to 512 [ 161.285497][ T6262] loop0: detected capacity change from 0 to 8192 [ 161.353375][ T6262] loop0: p1 p2 [ 161.356952][ T6262] loop0: partition table partially beyond EOD, truncated [ 161.366252][ T6272] loop7: detected capacity change from 0 to 1024 [ 161.401540][ T6262] loop0: p1 start 16777216 is beyond EOD, truncated [ 161.411450][ T6262] loop0: p2 size 515840 extends beyond EOD, truncated [ 161.514241][ T6272] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 161.557712][ T6272] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.653955][ T6272] EXT4-fs (loop7): shut down requested (1) [ 161.729513][ T6284] loop0: detected capacity change from 0 to 1024 [ 161.749902][ T1108] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 161.788464][ T1108] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 161.837583][ T1108] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 161.854207][ T1108] smsc95xx: probe of 9-1:0.67 failed with error -71 [ 161.886887][ T1108] usb 9-1: USB disconnect, device number 4 [ 161.959334][ T6286] loop7: detected capacity change from 0 to 1024 [ 162.012011][ T6288] loop0: detected capacity change from 0 to 1024 [ 162.190835][ T6288] loop0: detected capacity change from 0 to 8 [ 162.197084][ T6276] loop5: detected capacity change from 0 to 8192 [ 162.347585][ T6288] /dev/loop0: Can't open blockdev [ 162.478210][ T6296] loop2: detected capacity change from 0 to 16 [ 163.054945][ T6296] /dev/loop2: Can't open blockdev [ 163.949232][ T4775] hfsplus: b-tree write err: -5, ino 4 [ 164.514908][ T6309] loop7: detected capacity change from 0 to 256 [ 164.594215][ T6316] loop8: detected capacity change from 0 to 1024 [ 164.715887][ T6323] device syzkaller0 entered promiscuous mode [ 165.580433][ T6330] loop2: detected capacity change from 0 to 1024 [ 165.834574][ T6329] loop2: detected capacity change from 0 to 8 [ 165.889492][ T6346] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 165.915911][ T6343] loop0: detected capacity change from 0 to 1024 [ 165.962303][ T6329] /dev/loop2: Can't open blockdev [ 166.053677][ T6348] loop8: detected capacity change from 0 to 8 [ 166.649639][ T6348] /dev/loop8: Can't open blockdev [ 166.905383][ T6366] loop0: detected capacity change from 0 to 1024 [ 166.992117][ T6370] device syzkaller0 entered promiscuous mode [ 167.163659][ T6373] loop2: detected capacity change from 0 to 1024 [ 167.424802][ T6385] loop8: detected capacity change from 0 to 8 [ 167.522705][ T6385] /dev/loop8: Can't open blockdev [ 167.644863][ T6396] loop5: detected capacity change from 0 to 1024 [ 167.750647][ T6401] kvm: vcpu 0: requested 56 ns lapic timer period limited to 200000 ns [ 167.987148][ T6415] loop0: detected capacity change from 0 to 1024 [ 168.083903][ T6427] user requested TSC rate below hardware speed [ 168.088502][ T6425] loop2: detected capacity change from 0 to 1024 [ 168.145858][ T6430] loop8: detected capacity change from 0 to 1024 [ 168.240803][ T6438] device team0 entered promiscuous mode [ 168.252892][ T6438] device team_slave_0 entered promiscuous mode [ 168.287634][ T6438] device team_slave_1 entered promiscuous mode [ 168.682035][ T6464] loop5: detected capacity change from 0 to 1024 [ 169.305673][ T6499] loop2: detected capacity change from 0 to 1024 [ 169.343745][ T6502] syz.5.717[6502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.343839][ T6502] syz.5.717[6502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.533651][ T6505] user requested TSC rate below hardware speed [ 170.065881][ T6534] loop0: detected capacity change from 0 to 1024 [ 170.244093][ T6543] user requested TSC rate below hardware speed [ 170.802514][ T6579] user requested TSC rate below hardware speed [ 171.181833][ T6587] loop5: detected capacity change from 0 to 1024 [ 171.909128][ T6600] loop7: detected capacity change from 0 to 1024 [ 172.043537][ T6610] user requested TSC rate below hardware speed [ 172.165520][ T6600] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.439219][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 172.439233][ T26] audit: type=1804 audit(1758211703.868:49): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.757" name="/newroot/77/file1/file1" dev="loop7" ino=15 res=1 errno=0 [ 173.481046][ T6671] loop7: detected capacity change from 0 to 8192 [ 173.585285][ T6671] loop7: p1 p2 [ 173.589148][ T6671] loop7: partition table partially beyond EOD, truncated [ 173.616569][ T6671] loop7: p1 start 16777216 is beyond EOD, truncated [ 173.633304][ T6671] loop7: p2 size 515840 extends beyond EOD, truncated [ 173.900958][ T6705] loop7: detected capacity change from 0 to 1024 [ 173.901442][ T6706] loop2: detected capacity change from 0 to 1024 [ 173.991775][ T6705] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 174.017680][ T6705] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.050344][ T6705] EXT4-fs error (device loop7): ext4_map_blocks:739: inode #15: block 3: comm syz.7.802: lblock 3 mapped to illegal pblock 3 (length 1) [ 174.081108][ T6705] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 174.104531][ T6705] EXT4-fs (loop7): This should not happen!! Data will be lost [ 174.104531][ T6705] [ 174.117763][ T6718] EXT4-fs error (device loop7): ext4_map_blocks:629: inode #15: block 3: comm syz.7.802: lblock 3 mapped to illegal pblock 3 (length 1) [ 174.385869][ T6727] loop2: detected capacity change from 0 to 1024 [ 174.426024][ T6731] loop5: detected capacity change from 0 to 2048 [ 174.767573][ T4231] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 175.007583][ T4231] usb 1-1: Using ep0 maxpacket: 32 [ 175.128641][ T4231] usb 1-1: config 0 has no interfaces? [ 175.320907][ T6735] xt_hashlimit: size too large, truncated to 1048576 [ 175.377869][ T4231] usb 1-1: New USB device found, idVendor=1aac, idProduct=0219, bcdDevice=f0.72 [ 175.397255][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.405967][ T4231] usb 1-1: Product: syz [ 175.474461][ T4231] usb 1-1: Manufacturer: syz [ 175.492338][ T4231] usb 1-1: SerialNumber: syz [ 175.514072][ T4231] usb 1-1: config 0 descriptor?? [ 175.538814][ T6743] device syzkaller0 entered promiscuous mode [ 175.591118][ T6747] loop8: detected capacity change from 0 to 1024 [ 175.773302][ T6729] udc-core: couldn't find an available UDC or it's busy [ 175.807884][ T6729] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 175.827250][ T4751] usb 1-1: USB disconnect, device number 8 [ 176.374543][ T6780] loop5: detected capacity change from 0 to 1024 [ 281.337324][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 281.344364][ C0] (detected by 0, t=10502 jiffies, g=21437, q=354) [ 281.350979][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10478 (4294965261-4294954783), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 281.364354][ C0] rcu: rcu_preempt kthread starved for 10478 jiffies! g21437 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 281.375567][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 281.385541][ C0] rcu: RCU grace-period kthread stack dump: [ 281.391433][ C0] task:rcu_preempt state:R running task stack:27008 pid: 15 ppid: 2 flags:0x00004000 [ 281.402240][ C0] Call Trace: [ 281.405529][ C0] [ 281.408471][ C0] __schedule+0x11bb/0x4390 [ 281.413013][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 281.418409][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 281.424319][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 281.430234][ C0] ? _raw_spin_unlock+0x40/0x40 [ 281.435108][ C0] ? rcu_is_watching+0x11/0xa0 [ 281.439882][ C0] ? release_firmware_map_entry+0x190/0x190 [ 281.445839][ C0] schedule+0x11b/0x1e0 [ 281.450011][ C0] schedule_timeout+0x15c/0x280 [ 281.454884][ C0] ? console_conditional_schedule+0x40/0x40 [ 281.460788][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 281.466697][ C0] ? update_process_times+0x200/0x200 [ 281.472103][ C0] ? prepare_to_swait_event+0x331/0x350 [ 281.477670][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 281.482541][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 281.488706][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 281.493485][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 281.498701][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 281.503920][ C0] rcu_gp_kthread+0x98/0x350 [ 281.508528][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 281.513670][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 281.519581][ C0] ? __kthread_parkme+0x157/0x1b0 [ 281.524625][ C0] kthread+0x436/0x520 [ 281.528707][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 281.533831][ C0] ? kthread_blkcg+0xd0/0xd0 [ 281.538435][ C0] ret_from_fork+0x1f/0x30 [ 281.542873][ C0] [ 281.545901][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 281.552238][ C0] NMI backtrace for cpu 0 [ 281.556572][ C0] CPU: 0 PID: 6779 Comm: syz.8.825 Not tainted syzkaller #0 [ 281.563871][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 281.573953][ C0] Call Trace: [ 281.577256][ C0] [ 281.580127][ C0] dump_stack_lvl+0x168/0x230 [ 281.584825][ C0] ? show_regs_print_info+0x20/0x20 [ 281.590039][ C0] ? load_image+0x3b0/0x3b0 [ 281.594577][ C0] ? irq_work_queue+0xbf/0x140 [ 281.599375][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 281.604328][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 281.610495][ C0] ? _printk+0xcc/0x110 [ 281.614665][ C0] ? cpu_online+0x1d/0x30 [ 281.619005][ C0] ? load_image+0x3b0/0x3b0 [ 281.623520][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 281.629614][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 281.635606][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 281.641772][ C0] print_other_cpu_stall+0x10c8/0x1220 [ 281.647250][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 281.652196][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 281.657493][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 281.662542][ C0] rcu_sched_clock_irq+0x831/0x1110 [ 281.667761][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 281.672625][ C0] ? hrtimer_run_queues+0x162/0x440 [ 281.677856][ C0] ? account_process_tick+0x227/0x3a0 [ 281.683253][ C0] update_process_times+0x193/0x200 [ 281.688469][ C0] tick_sched_timer+0x37d/0x560 [ 281.693337][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 281.698553][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 281.704120][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 281.709259][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 281.715344][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 281.720325][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 281.726328][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 281.731979][ C0] [ 281.734924][ C0] [ 281.737863][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 281.743860][ C0] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 281.749792][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 ff b6 c7 02 66 2e 0f 1f 84 00 00 00 00 00 [ 281.769408][ C0] RSP: 0018:ffffc900031bfcb0 EFLAGS: 00000246 [ 281.775493][ C0] RAX: 00000000000000f6 RBX: ffffffff8bbc2a20 RCX: 000000000000083f [ 281.783475][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 281.791468][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10172067af [ 281.799451][ C0] R10: ffffed10172067af R11: 1ffff110172067ae R12: ffff8880b9033b01 [ 281.807436][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000020 [ 281.815436][ C0] arch_irq_work_raise+0x82/0xd0 [ 281.820397][ C0] irq_work_queue+0x95/0x140 [ 281.825004][ C0] bpf_send_signal_common+0x2b2/0x420 [ 281.830423][ C0] ? rcu_lock_release+0x20/0x20 [ 281.835286][ C0] ? __cant_sleep+0x210/0x210 [ 281.839980][ C0] ? __context_tracking_exit+0x4c/0x80 [ 281.845457][ C0] bpf_send_signal+0x15/0x20 [ 281.850079][ C0] bpf_prog_7ba5217f62dcd359+0x38/0xac0 [ 281.855637][ C0] bpf_trace_run2+0x15b/0x2d0 [ 281.860327][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 281.865183][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 281.871191][ C0] ? lock_chain_count+0x20/0x20 [ 281.876073][ C0] __bpf_trace_sys_enter+0x60/0x70 [ 281.881209][ C0] trace_sys_enter+0x65/0x80 [ 281.885811][ C0] syscall_trace_enter+0x115/0x180 [ 281.890944][ C0] do_syscall_64+0x24/0xa0 [ 281.895371][ C0] ? clear_bhb_loop+0x30/0x80 [ 281.900063][ C0] ? clear_bhb_loop+0x30/0x80 [ 281.904746][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 281.910646][ C0] RIP: 0033:0x7f754d087da9 [ 281.915073][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 281.934689][ C0] RSP: 002b:00007f754b310b40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 281.943120][ C0] RAX: ffffffffffffffda RBX: 00007f754d333188 RCX: 00007f754d087da9 [ 281.951147][ C0] RDX: 00007f754b310b40 RSI: 00007f754b310c70 RDI: 0000000000000011 [ 281.959132][ C0] RBP: 00007f754d333180 R08: 0000000000000000 R09: 0000000000000000 [ 281.967114][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.975090][ C0] R13: 00007f754d333218 R14: 00007ffddb9b8530 R15: 00007ffddb9b8618 [ 281.983100][ C0]