last executing test programs: 3m54.507912732s ago: executing program 1 (id=833): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000b80)=""/4096, 0x3a, 0x1000, 0x1}, 0x28) 3m53.715916027s ago: executing program 1 (id=837): ppoll(0xfffffffffffffffe, 0x0, &(0x7f0000000100), 0x0, 0x0) 3m53.588993942s ago: executing program 1 (id=839): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r1, r0, r0, 0x0) r2 = getegid() keyctl$chown(0x4, r0, 0xee01, r2) 3m53.430072979s ago: executing program 1 (id=842): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000d80)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965720063726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="a520ad23321534a883fa116848e7295e8693132df1638d943e7dacc03c8d2d9fca2aeb72f72ed82af2ceb592a5eea7e56631ff9ac0d92bcc5e6859b316fd2ac8694577d071f3f31f92dfdbdd695e5edca5b90abb53107e708b90150fc9eee8418e9511b8a4ce6f69a31472378258a55e8aa64d4a9859bfb3d6d3e49cf0a4c8b0044d37812dd15af758d8177ad1d630193b27881a8a06b8221dbceefe3fbf199b81bc31338d35cf4cb9f7f28e7abc55afd41f3a8b4a1e3fc4cd2dece6d1659ab1fc8511c18f9bd3c80004efbd7cfda12866316c01cc4a69ca09f85189380f835231d8ae5332237152dc3ed45d7f88", @ANYRES64, @ANYRESDEC], 0x1, 0x703, &(0x7f0000001f80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1004020, 0x0) 3m52.083508438s ago: executing program 1 (id=850): fcntl$notify(0xffffffffffffffff, 0x402, 0x4) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x7, 0x0, 0x3, {[@nop]}}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000b00)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x3, {[@window={0x3, 0x3, 0x40}]}}}}}}}}, 0x0) 3m51.893778026s ago: executing program 1 (id=851): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m50.2149558s ago: executing program 32 (id=851): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m23.171991612s ago: executing program 4 (id=941): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f00000012c0)={[{@mode={'mode', 0x3d, 0x82}}, {@longad}, {@dmode={'dmode', 0x3d, 0x7fff}}, {@volume={'volume', 0x3d, 0x2}}, {@shortad}, {@lastblock={'lastblock', 0x3d, 0x3}}, {@gid_forget}, {@fileset={'fileset', 0x3d, 0x2}}, {@adinicb}, {@gid_ignore}, {@gid_forget}, {@uid_forget}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'utf8'}}], [{@euid_gt}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@dont_hash}, {@fowner_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}, 0x2, 0xc2d, &(0x7f00000001c0)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x400000f007) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f008) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f007) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001000000000000000000000000000000000000000000000002000000000000000000000000000000ddba00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400"], 0xfc}}, 0x0) 3m22.582394658s ago: executing program 4 (id=943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, 0x0) 3m19.681531134s ago: executing program 4 (id=947): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) accept(r1, &(0x7f00000000c0)=@isdn, 0x0) 3m19.572495609s ago: executing program 4 (id=950): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f00000005c0)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a85035eb86c32a59f1f3acdb98c", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRESHEX, @ANYRES8=0x0], 0x1, 0x6eb, &(0x7f0000000dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x1d8) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = open(&(0x7f00000007c0)='./bus\x00', 0x105000, 0x91) dup3(r2, r1, 0x80000) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7a, 0x3, 0x0, 0x0, 0x16, 0x0, "57e8a2ab783becf476e00d96072000001ea8a1d91bd98d4b5aeaeeb8785d96000100fff50000000094d75396dccd0ff600001000a81b0000000100000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x1, 0x2]}}) 3m19.112892859s ago: executing program 4 (id=952): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "6c54e12b"}]}}, 0x0}, 0x0) 3m17.779643477s ago: executing program 4 (id=958): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007111b3000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x58) 3m16.733194093s ago: executing program 33 (id=958): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007111b3000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x58) 2m49.452352295s ago: executing program 5 (id=1078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x27) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000540)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240), 0x12) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, 0x0, 0x0) 2m48.245565148s ago: executing program 5 (id=1083): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffe, 0x380000, @mcast1, 0x401}, 0x1c) 2m47.571604567s ago: executing program 5 (id=1088): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x3, 0x2f) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000028, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) 2m47.176030254s ago: executing program 5 (id=1091): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000680), 0x3, 0x48c, &(0x7f0000000e80)="$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") chdir(&(0x7f0000000400)='./file0\x00') creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r1, &(0x7f0000000040)=""/61, 0x3d) 2m45.745871157s ago: executing program 5 (id=1100): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 2m44.436013974s ago: executing program 5 (id=1110): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1870441, &(0x7f0000000940), 0x2, 0x5b6, &(0x7f0000000980)="$eJzs3c9vFFUcAPDv7G4XStFWYlQ8mEZDIFFaWsDgjwPcCcEfNy9WWgiy/Ait0aKJJcGLifHigcSTB/G/UKJXTyYePHjxZEjQGC4ao2tmd3ZZ2t3+osvUzueTTPe9ebP73kC/fW9n3tsNoLBG0x+liN0RcSmJGO4oq0RWONo87s4fH5xKtyTq9dd+TyLJ9rWOT7LHoezJ/wxH/PBtErvKS+udnb9ybqpWm7mc5cfnzl8an52/sv/s+akzM2dmLkw+P3nk8KHDRyYO3Nf5lTrSx6+9/e7wxyfe+PLzv5OJr34+kcTR+O10s6zzPDbKaIzGn/X6h4v3p/+uRza6spyU278ndyWLd7BpVbIYqUbE4zEc5Y7/zeH46JVcGwf0VT2JqAMFlYh/KKjWOKD13n5174NLfR6VAA/C7WPpz4Eu8V9pXhuMkRiIiD2Lntflkt66pHV8/92Ja+kWfboOB3S3cHVblloc/0kjNkdieyO3407pnuu86QjgZPaY7n91nfWPLsqLf3hwFq5GxBPdxv8rx/+bHfH/1jrrF/8AAAAAAACwcW4ei4jnut3/K2X35rbH0437f0nz/t+Pd1cIHt2A+le+/1e6tQHVAF3cPhbxctf5v+05viPlLPdQczZgcvpsbeZARDwcEftiYFuan1imjv2f7Lreq6xz/l+6pfW35gJm7bhV2Xbvc6an5qbu55yBpttXI56s9J7/k/b/SWf/37Qz/XtwaZV17Npz42Svskb8t164a/wD/VL/ImJv1/4/aR+TLP/5HOON8cB4a1Sw1FPvf/p1r/pX7v+Bfkn7/x3Lx/9I0vl5PbNre/1qRBycr9R7la93/F9NXi+3Xj/13tTc3OWJiGpyfOn+ybW1GbaqVjy04iWN/33PLH/9rz3+74jDwYhYWGWdj/079EuvMv0/5CeN/+k19f9rT0zeGPmmV/2r6/8PNfr0fdke1/9geasN0LzbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/R6WI2BlJaaydLpXGxiKGIuLR2FGqXZyde/b0xXcuTKdlje//L7W+6Xe4mU9a3/8/0pGfXJQ/GBGPRMRn5cFGfuzUxdp03icPAAAAAAAAAAAAAAAAAAAAm8RQj/X/qV/LebcO6LtK9ijeoXgqeTcAyI34h+IS/1Bc4h+KS/xDca0z/t0ugC1A/w9FNbC6w7b3ux1AHvT/AAAAAACwpdx86YXrSUQsvDjY2FLVrKx9Y3Awr9YB/VTKuwFAbszhheIy9QeKq+fk3+qDbQeQn6Sd+qverbz37P+kPw0CAAAAAAAAAAAAAJbYu/vmTyuu/we2JOv/obis/4fisv4fist7fGClVfzW/wMAAAAAAAAAAABA/mbnr5ybqtVmLktIbLbEQERsgmbkkKjmH545/2ECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa/gsAAP//GTcgUQ==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/time_for_children\x00') 1m1.822486999s ago: executing program 0 (id=1492): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) fsopen(0x0, 0x1) socket$packet(0x11, 0x3, 0x300) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, r4, r4, 0x0) r6 = getegid() keyctl$chown(0x4, r4, 0xee01, r6) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) 1m0.750090525s ago: executing program 0 (id=1496): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@resuid}, {@test_dummy_encryption}, {@errors_continue}, {@data_err_ignore}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000"], 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1b1c) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000d00)={0x1, 0x5, 0xfffa, &(0x7f0000000b00)=""/243}) socketpair$unix(0x1, 0x1, 0x0, 0x0) 57.404640501s ago: executing program 0 (id=1510): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x3800813, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=cp1251,unhide,nojoliet,nojoliet,norock,overriderockperm,dmode=0x000000000000,nocompress,check=relaxed,norock,map=normal,check=relaxed,cruft,dmode=0x0\x0000000000000009,map=acorn,\x00'], 0x9, 0xa51, &(0x7f0000001240)="$eJzs3ctvXNd9B/DvHZISQ7u24qiuKzjiSK4UxmEpkqqlCl6kEjmSmPJRkBRgoYsojahCEFu3cQs4RoEoQNFVjBZo0UW7M7rqykA2TReFN0W7a1ZdFCj8LwRdqSsG986QHJIzHIrhy8rnQ8zMffzuOec+zj2cmTv3hC+WtVe3jK2tVY99jt/75yMoMSfYrenPP/n04/Lxw6c5lb68U/xLMpiknvQneSMZmJpeXJjrkdCT5EGSz5Iiyek0X/fkQYq/zsub45+l+Mcy365O7TVlelnjl9pxH38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHASFVPT4+MTxanMzN97r96U1HeYml5cKLK2tnPO+jJNP6l6/S5+0jPfpCgfGRxc7+r7jbObs19PUr+YN5tjb1YdkmcwH730+pl3v9JfW1++W2l+Iaf3nuwH3//oyXdWV1e+13FuURxgqU6Y5jFypzE/s7QwM3fzTqM+s7RQv3Ht2viVu7eX6rdnZhtL95eWG3P1qcXGzeWFxfrI1NfrEzduXK03xu4v3Ju/Mz0221ifeP03J8fHr9W/NfZ7jZuLSwvzV741tjR1d2Z2dmb+ThVTzi5jrpcH4u/OLNeXGzfn6vVHj1dXrm4rWV+2Hb9l0ESv9SmDJnsFTY5PTk5MTE5O/LDVe/bGhGvv3Hjn+vh4/3jTy2kNZEfEIR20nCxf6r6bD/4kDvtUa7b/yWxmMp97eS/1jn9Tmc5iFjLXZX7Levt/6Upj12zT1v63Wvn+tvnnyqeLOd8aHezS/ncpy9H9fZDv56M8yXeymtWs5HvHXqKj/buTRuYzk6UsZCZzuVlNqbem1HMj13It4/l27mY4S+nP7cxkNo0s5X6WspxGdURNZTGN3MxyFrKYekYyla+nnoncyI1cTT2NjOV+FnIv87mT6dysUnmUx9V2v7pLGTeCJvYSNLlL0I7GvFv7v2H7Io3t/5zwAqrtupcP4SwO+7PWav9P9Q4dmdoy2n94hQIAAAAO1K//Z145+9p//G9S5KvV9/K3Z2Yb48ddLAAAAOAAVZfrvVm+DJRDX03h/T8AAAC8aIrqN3ZFkqEMN4fWfwnlQwAAAAB4QVTf/59PMbw5wft/AAAAeMH0vsd+z4hidP32v/WHzdeHrYjmWDF0e2a2MTa1MPvuRC5XdxmofmmwI7W+pBiofn7wdi40oy4MNV+HNlMs8xwsoybG3p3I27nYWpGRt8qXt0Y6RE42I7/WjPxae2RftkReLSMB4EV3cZf2eK/t/9sZbUaMnqua/P5zW9rgvqplHdeyAsBJsdHHzv+3ujTr0P6fb94b4Hy39v+3dnn/X0a8lkfDzUsKxvLdvJ/VPMxoWlccDHdKdb03guZlCKM9Pg0Yal2y8NPrtYzu+DxgcGNd22NXMpnRjp8ItKVbrJfhajOu77D2AgAcrYu7tsPr7X/1IXnX9n909/f/bW2uSwoB4CTY6MH+eQeG9x583OsIAGyllQYAAAAAAAAAAAAAAAAAAAAAAAAAAICDt6cb+P/X5WR1dSXZb2cBHQZ++u//+itdY370UjL4PCXcfaCWAynz6SQHsu6HN9CX5Lhy/2aee6lyH5+UTfciDRRPqwr7C6VzzCcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjkSR9HWaXktOJxlPcuXoS3V4nh53AQ5KfX+LFc/yLB/mlYMuDgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAL7vW/f9rab6+1JyU/lpyKcmDJL9/3GV8HoM95j87onKcPH9UPbfd/7+WDGStSH/W1tbWkmJganpxYa48FIrT5fzPP/n04/LRNckfrA/s7FWhTKDMYUvnEq0c2qYMbF3qy9VSQ9MrHzz5s/f/pD59qzowby3fnp2eu7P4O5uBrxc/bnaB0N4Nwnp5/+LSv/1N2+RTrcx/nP5uK7I939tVvtM78/21Tkt3yXcPHq+uTJY5LTfeW/7zP661z3otF5K3RpKRrTn9YfnoktOF7dtzq+JnxV8Vr+Tv86Da/+XWKNaKche9Wq3/lx49Xl0Z++77qw83yvSDxx+2JXAmw0kebq1lPco0XJ1POnqpynWgzHW8CiqfzvZIb1dtKU5sbtct6/Dl6pAZeq51qHdfh0qP7d4q0dXtJVorK8nf/ulXcnnXPX26Q4qXe+TYUfGz4n+Ku/nv/GVb/x+1cv9fSsfa2SGJKrLtSGmft6V61S5trvlk+4xvb0+za63kEPwof5Df3tj/ter8315vJrvUm43z0TfbJnapN+tVq0u9OL21pu6oFy296sXOmvpPr+5oUbbmmrPbWqTW2afbMq1ynm1GdSnnr+YbSf+55zqjfKPHGaXX8vut//9QjOT/8lT/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMlXJH2dpteSS0nOJHm1HK8na9tjnu4jv9pQsZ9iHpj9lPmLp+i6osWzPMuHeeWoSwQAAAAAAADA4bg1/fknn35cPqrv4/vyG7XWnHrSn+RM8XcDU9OLC3M9EhpIHqx/pT/YOaTL5Dwon17eHP+sHHujR37He/kAAHyh/TwAAP//FnluMg==") inotify_init() mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 55.208187107s ago: executing program 0 (id=1515): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x192) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84000, 0x0) 52.215894838s ago: executing program 0 (id=1522): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000600)=0x1d, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) 50.851756587s ago: executing program 35 (id=1522): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000600)=0x1d, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) 11.499979877s ago: executing program 2 (id=1712): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x40012100, 0x0) 10.097018528s ago: executing program 2 (id=1717): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 9.668176397s ago: executing program 2 (id=1721): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x103000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00'}, 0x18) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r4, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0xffa6, 0x0, 0xd0}, 0x20008000) 8.00809656s ago: executing program 7 (id=1731): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 6.264105426s ago: executing program 6 (id=1737): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[], 0x2c}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 5.421659373s ago: executing program 3 (id=1739): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x3, 0x0, &(0x7f0000000380)="b10100", &(0x7f0000000000), 0x0, 0x700}, 0x50) 4.661839656s ago: executing program 6 (id=1740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) 4.504165833s ago: executing program 3 (id=1742): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x13, &(0x7f0000000000)=""/140, &(0x7f00000001c0)=0x8c) 3.462780229s ago: executing program 8 (id=1743): semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000240)=""/4096) 3.462655029s ago: executing program 3 (id=1744): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000440)=0xb28e, 0x4) 3.180093961s ago: executing program 8 (id=1745): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r1, 0x8, 0x0) write$binfmt_script(r3, 0x0, 0xfffffe48) close_range(r0, 0xffffffffffffffff, 0x0) 3.175333191s ago: executing program 3 (id=1746): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.907411363s ago: executing program 8 (id=1747): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006910650000000000040000000000000095000000e8ff0000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 2.711570421s ago: executing program 7 (id=1748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x36, 0x0}}], 0x1, 0x4) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 2.498916541s ago: executing program 2 (id=1749): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@errors_remount}]}, 0x3, 0x4cc, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) 2.372177356s ago: executing program 6 (id=1750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}}, 0x0) 2.307695619s ago: executing program 8 (id=1751): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a0083de00000000251f87bd000000000000000008"], 0x20}}, 0x0) 2.225232373s ago: executing program 7 (id=1752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) read(r0, &(0x7f0000000100)=""/229, 0xe5) 2.168130125s ago: executing program 6 (id=1753): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00040'], 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f00000002c0)="1344e1cc0c4a9b1fa6d247a6550679ff1351fbce44a5b481a3a3e9d3ff6db70a7c33c8a85947516a15742c48bd29821f5b8353675764e75de02beeb1dc47d65bf18bc24707ddacb8ea92b8a1258b6185f37f6e8da46c809ad2846050f4c8446ec83b87b7cf5c5cf8a364631032da4a", 0x6f, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 2.062192779s ago: executing program 2 (id=1754): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(r0, 0x22, &(0x7f0000000300)={0x15, 0x8, 0x5}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r3, 0x141601) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x18, r4, 0x719, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x880) 2.022753142s ago: executing program 8 (id=1755): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183b000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0xc, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 1.944390095s ago: executing program 3 (id=1756): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x9], [0x0, 0xf], [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]], '\x00', [{0x0, 0x1}, {}, {}, {0xfffffffe, 0xffffffff, 0x0, 0x1, 0x1}, {0x0, 0x80, 0x0, 0x0, 0x1}, {0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x100}], '\x00', 0x1000}) 1.892014027s ago: executing program 7 (id=1757): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[], 0x118) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 1.328965592s ago: executing program 6 (id=1758): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 1.036582495s ago: executing program 2 (id=1759): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x103000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00'}, 0x18) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r4, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0xffa6, 0x0, 0xd0}, 0x20008000) 836.054233ms ago: executing program 3 (id=1760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0xc8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030010850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0), 0x6, 0x5fd, &(0x7f0000000c00)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 835.763773ms ago: executing program 8 (id=1761): socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000004b680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101341) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe5, 0xe0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") 481.389529ms ago: executing program 7 (id=1762): add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000001e80)={'fscrypt:', @desc3}, &(0x7f0000001ec0)={0x0, "b3662275fe0e0c3ed955308df975b61985fefdb4ae1e625ecc4f21b39d3d43131b1a6cb864e9c4da9c5aebd353b36bcc493f97ce35c7f36b2ab6b2b078796159", 0x2d}, 0x3b, 0xfffffffffffffffb) 310.701687ms ago: executing program 6 (id=1763): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000021, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x7, 0x6e, &(0x7f00000002c0)=ANY=[], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000000)=0x1000000) 0s ago: executing program 7 (id=1764): syz_emit_ethernet(0x1d, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x1, 0x0, @private=0xa010101, @local}}}}}}, 0x0) kernel console output (not intermixed with test programs): 255.902448][ T6065] usb 5-1: Manufacturer: syz [ 255.907130][ T6065] usb 5-1: SerialNumber: syz [ 255.928718][ T6065] usb 5-1: config 0 descriptor?? [ 256.074571][ T6611] netlink: 'syz.2.702': attribute type 12 has an invalid length. [ 256.092723][ T6611] netlink: 'syz.2.702': attribute type 29 has an invalid length. [ 256.122243][ T4343] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 256.134657][ T6611] netlink: 148 bytes leftover after parsing attributes in process `syz.2.702'. [ 256.167882][ T4343] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 256.181167][ T6611] netlink: 'syz.2.702': attribute type 2 has an invalid length. [ 256.203842][ T6611] netlink: 23 bytes leftover after parsing attributes in process `syz.2.702'. [ 256.229736][ T4851] usb 5-1: USB disconnect, device number 6 [ 256.235897][ T4343] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 256.275724][ T4343] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 256.321484][ T4343] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 256.862562][ T4343] lan78xx: probe of 1-1:1.0 failed with error -71 [ 256.875550][ T4343] usb 1-1: USB disconnect, device number 6 [ 257.156390][ T6631] loop4: detected capacity change from 0 to 1024 [ 257.435143][ T6631] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.706: Invalid block bitmap block 0 in block_group 0 [ 257.454189][ T6645] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 257.915510][ T6631] Quota error (device loop4): write_blk: dquota write failed [ 257.942252][ T6631] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 257.953278][ T6631] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.706: Failed to acquire dquot type 0 [ 257.979824][ T6631] EXT4-fs error (device loop4): ext4_free_blocks:6205: comm syz.4.706: Freeing blocks not in datazone - block = 0, count = 4096 [ 258.004538][ T6631] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.706: Invalid inode bitmap blk 0 in block_group 0 [ 258.020646][ T4649] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 258.030432][ T6631] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 258.056151][ T6631] EXT4-fs (loop4): 1 orphan inode deleted [ 258.059083][ T4649] EXT4-fs error (device loop4): ext4_release_dquot:6845: comm kworker/u4:11: Failed to release dquot type 0 [ 258.065273][ T6631] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 258.502985][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 258.515007][ T5040] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 258.530365][ T5040] EXT4-fs error (device loop4): ext4_release_dquot:6845: comm kworker/u4:16: Failed to release dquot type 0 [ 258.606070][ T6670] loop0: detected capacity change from 0 to 512 [ 258.652251][ T6670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.716667][ T6670] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 258.790551][ T6670] EXT4-fs (loop0): 1 truncate cleaned up [ 258.797752][ T6670] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 258.812442][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'. [ 258.837765][ T6670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.720'. [ 258.846795][ T6670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.720'. [ 259.081897][ T6681] loop1: detected capacity change from 0 to 512 [ 259.104281][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 259.137404][ T6681] EXT4-fs: Ignoring removed bh option [ 259.222845][ T6681] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 259.338813][ T6681] EXT4-fs (loop1): 1 truncate cleaned up [ 259.352149][ T6681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 259.430134][ T5609] EXT4-fs (loop1): unmounting filesystem. [ 263.362318][ T6712] loop3: detected capacity change from 0 to 1024 [ 263.721045][ T6727] fuse: Bad value for 'fd' [ 265.596326][ T6744] loop1: detected capacity change from 0 to 1024 [ 265.755090][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 265.775348][ T27] audit: type=1800 audit(1763621987.556:13): pid=6744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.743" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 267.106770][ T6767] 9pnet_fd: Insufficient options for proto=fd [ 267.114196][ T6767] xt_TCPMSS: Only works on TCP SYN packets [ 267.839184][ T6786] loop4: detected capacity change from 0 to 128 [ 269.254160][ T6812] loop3: detected capacity change from 0 to 256 [ 269.610122][ T6812] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 269.790549][ T6816] fuse: Bad value for 'fd' [ 269.849392][ T26] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 270.053801][ T26] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 270.073178][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 270.120980][ T26] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 270.154206][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.180198][ T26] usb 5-1: config 0 descriptor?? [ 270.202548][ T6803] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 270.463535][ T6843] loop1: detected capacity change from 0 to 8 [ 270.514420][ T6843] SQUASHFS error: lzo decompression failed, data probably corrupt [ 270.538034][ T6843] SQUASHFS error: Failed to read block 0x91: -5 [ 270.544485][ T6843] SQUASHFS error: Unable to read metadata cache entry [8f] [ 270.558374][ T6843] SQUASHFS error: Unable to read inode 0x11f [ 270.740201][ T26] elecom 0003:056E:010D.0004: unknown main item tag 0x0 [ 270.747988][ T26] elecom 0003:056E:010D.0004: unknown global tag 0xd [ 270.754740][ T26] elecom 0003:056E:010D.0004: item 0 4 1 13 parsing failed [ 270.769879][ T26] elecom: probe of 0003:056E:010D.0004 failed with error -22 [ 271.664275][ T26] usb 5-1: USB disconnect, device number 7 [ 272.682375][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 273.001448][ T6865] loop1: detected capacity change from 0 to 128 [ 273.379638][ T6865] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 274.228136][ T6865] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 274.529158][ T6861] bond0: (slave bond_slave_1): Releasing backup interface [ 274.649630][ T5609] EXT4-fs (loop1): unmounting filesystem. [ 274.881067][ T6885] loop1: detected capacity change from 0 to 16 [ 274.965675][ T6885] erofs: (device loop1): mounted with root inode @ nid 36. [ 276.429440][ T6893] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 276.452279][ T6893] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 276.463766][ T6893] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 276.482790][ T6892] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 276.492302][ T6892] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 276.503326][ T6892] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 277.707441][ T6908] loop3: detected capacity change from 0 to 2048 [ 277.866343][ T6908] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.913972][ T6927] loop1: detected capacity change from 0 to 1024 [ 279.015504][ T6932] loop0: detected capacity change from 0 to 256 [ 279.053660][ T6932] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.075721][ T6932] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 279.102219][ T6932] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 279.374114][ T6932] exFAT-fs (loop0): abnormal access to deleted source dentry [ 279.583433][ T6942] loop3: detected capacity change from 0 to 2048 [ 279.725461][ T6942] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 279.800135][ T6942] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 280.020346][ T6942] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 280.492190][ T6952] loop1: detected capacity change from 0 to 1024 [ 280.517630][ T6952] EXT4-fs: Ignoring removed orlov option [ 283.011682][ T6952] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 283.444666][ T6942] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 283.868347][ T6942] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 283.900702][ T6942] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 283.932926][ T6942] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 283.945624][ T6942] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 283.987380][ T6942] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 284.070595][ T6942] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 284.124866][ T6942] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=385, location=385 [ 284.141807][ T6942] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 284.165735][ T6961] loop1: detected capacity change from 0 to 128 [ 284.172835][ T6942] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 284.324506][ T6961] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 284.345109][ T6942] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 285.318339][ T6961] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.606799][ T4342] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 286.816953][ T4342] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 520 [ 286.909951][ T4342] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 287.202341][ T4342] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 287.339664][ T4342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 287.413999][ T4342] usb 5-1: SerialNumber: syz [ 287.502064][ T6973] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 287.597109][ T6999] loop1: detected capacity change from 0 to 512 [ 287.613396][ T6999] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 287.647970][ T6999] EXT4-fs (loop1): invalid journal inode [ 287.673301][ T6999] EXT4-fs (loop1): can't get journal size [ 287.743424][ T6973] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 287.751733][ T6999] EXT4-fs (loop1): 1 truncate cleaned up [ 287.757545][ T6999] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 287.774679][ T7007] loop3: detected capacity change from 0 to 512 [ 287.796366][ T7007] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 287.851950][ T7007] EXT4-fs (loop3): 1 truncate cleaned up [ 287.891036][ T7007] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 288.025710][ T7013] loop0: detected capacity change from 0 to 164 [ 288.123054][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 288.152567][ T7013] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 288.226295][ T4342] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 288.405933][ T4367] usb 5-1: USB disconnect, device number 8 [ 288.448359][ T4367] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 288.491606][ T7015] loop3: detected capacity change from 0 to 1024 [ 288.538628][ T7015] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 288.841786][ T7015] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 288.873798][ T7015] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 289.126327][ T75] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 304 with error 28 [ 289.228347][ T75] EXT4-fs (loop3): This should not happen!! Data will be lost [ 289.228347][ T75] [ 289.251024][ T5609] EXT4-fs (loop1): unmounting filesystem. [ 289.382764][ T75] EXT4-fs (loop3): Total free blocks count 0 [ 289.554280][ T75] EXT4-fs (loop3): Free/Dirty block details [ 289.697842][ T75] EXT4-fs (loop3): free_blocks=20480 [ 289.733344][ T75] EXT4-fs (loop3): dirty_blocks=304 [ 289.762664][ T75] EXT4-fs (loop3): Block reservation details [ 289.785167][ T75] EXT4-fs (loop3): i_reserved_data_blocks=19 [ 289.898771][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 290.428477][ T7055] loop1: detected capacity change from 0 to 1024 [ 290.474365][ T7055] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 291.405156][ T7055] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 291.541199][ T5609] hfsplus: bad catalog entry type [ 291.549477][ T7063] loop3: detected capacity change from 0 to 128 [ 291.558507][ T5609] hfsplus: bad catalog entry type [ 291.587825][ T7069] capability: warning: `syz.2.849' uses deprecated v2 capabilities in a way that may be insecure [ 291.958848][ T7074] 9pnet_fd: Insufficient options for proto=fd [ 291.968575][ T7074] xt_TCPMSS: Only works on TCP SYN packets [ 292.632842][ T7078] loop4: detected capacity change from 0 to 128 [ 292.705377][ T7078] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 292.728417][ T7078] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 292.868981][ T75] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.486471][ T75] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.685556][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 294.543842][ T75] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.545715][ T7095] loop4: detected capacity change from 0 to 512 [ 294.612458][ T7095] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.744666][ T75] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.809030][ T7095] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 294.835533][ T7095] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.857: attempt to clear invalid blocks 2 len 1 [ 294.858427][ T7095] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 295.173583][ T7095] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.857: invalid indirect mapped block 1819239214 (level 0) [ 295.558779][ T7095] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.857: invalid indirect mapped block 1819239214 (level 1) [ 295.668082][ T7095] EXT4-fs (loop4): 1 truncate cleaned up [ 295.673826][ T7095] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 296.123278][ T7114] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work [ 296.138797][ T4272] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.192637][ T4272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.286508][ T4272] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.309516][ T4272] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.327679][ T4272] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 296.344142][ T4272] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.299914][ T7128] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.866' resets device [ 297.594307][ T7133] 9pnet_fd: Insufficient options for proto=fd [ 297.604833][ T7133] xt_TCPMSS: Only works on TCP SYN packets [ 298.437926][ T4272] Bluetooth: hci3: command 0x0409 tx timeout [ 298.657808][ T4342] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 298.694523][ T7108] chnl_net:caif_netlink_parms(): no params data found [ 298.861600][ T4342] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 298.889492][ T4342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.953118][ T4342] usb 4-1: Product: syz [ 298.957364][ T4342] usb 4-1: Manufacturer: syz [ 298.986575][ T4342] usb 4-1: SerialNumber: syz [ 299.026520][ T4342] r8152-cfgselector 4-1: config 0 descriptor?? [ 299.052092][ T7160] loop0: detected capacity change from 0 to 16 [ 299.122834][ T7160] erofs: (device loop0): mounted with root inode @ nid 36. [ 299.180062][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 299.571575][ T4342] r8152-cfgselector 4-1: Unknown version 0x0000 [ 299.777077][ T4342] r8152-cfgselector 4-1: Unknown version 0x0000 [ 299.783904][ T4342] r8152-cfgselector 4-1: bad CDC descriptors [ 299.792432][ T4342] r8152-cfgselector 4-1: Unknown version 0x0000 [ 299.800429][ T4342] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 299.884036][ T7166] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 299.927001][ T7166] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 299.938265][ T7166] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 300.578146][ T4272] Bluetooth: hci3: command 0x041b tx timeout [ 301.234737][ T7108] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.243068][ T7108] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.256674][ T7108] device bridge_slave_0 entered promiscuous mode [ 301.269582][ T7108] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.276919][ T7108] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.285677][ T7108] device bridge_slave_1 entered promiscuous mode [ 301.463952][ T7188] 9pnet_fd: Insufficient options for proto=fd [ 301.474560][ T7188] xt_TCPMSS: Only works on TCP SYN packets [ 302.162269][ T7108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.550064][ T7108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.598049][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 303.334074][ T75] device hsr_slave_0 left promiscuous mode [ 303.445637][ T75] device hsr_slave_1 left promiscuous mode [ 303.507954][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.515590][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.590876][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.602277][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.612529][ T75] device bridge_slave_1 left promiscuous mode [ 303.619667][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.622016][ T7216] loop3: detected capacity change from 0 to 16 [ 303.635947][ T75] device bridge_slave_0 left promiscuous mode [ 303.652830][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.750777][ T75] device veth1_macvtap left promiscuous mode [ 303.770808][ T75] device veth0_macvtap left promiscuous mode [ 303.787433][ T75] device veth1_vlan left promiscuous mode [ 303.854898][ T75] device veth0_vlan left promiscuous mode [ 303.888855][ T7216] erofs: (device loop3): mounted with root inode @ nid 36. [ 304.887652][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 304.989207][ T7230] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.442981][ T7230] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 305.454004][ T7230] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 307.431089][ T7249] loop0: detected capacity change from 0 to 512 [ 307.444625][ T7249] EXT4-fs: Ignoring removed oldalloc option [ 307.452198][ T7246] 9pnet_fd: Insufficient options for proto=fd [ 307.471694][ T7246] xt_TCPMSS: Only works on TCP SYN packets [ 307.490227][ T7249] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 307.523173][ T7249] EXT4-fs (loop0): orphan cleanup on readonly fs [ 307.553298][ T7249] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.895: inode has both inline data and extents flags [ 307.610034][ T7249] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.895: couldn't read orphan inode 15 (err -117) [ 307.623293][ T7249] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 307.740201][ T7249] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 307.790941][ T7260] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.895: inode has both inline data and extents flags [ 307.791126][ T7249] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 307.884745][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 307.994644][ T7266] loop0: detected capacity change from 0 to 512 [ 308.029446][ T7266] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.040450][ T7266] ext4: Unknown parameter 'seclabel' [ 309.289182][ T7293] loop3: detected capacity change from 0 to 512 [ 309.470367][ T7296] loop0: detected capacity change from 0 to 1024 [ 309.477810][ T7296] EXT4-fs: Ignoring removed orlov option [ 310.761126][ T7293] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.911: inode has both inline data and extents flags [ 310.787354][ T7296] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 310.848026][ T27] audit: type=1800 audit(1763622032.596:14): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.910" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 310.873464][ T7293] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.911: couldn't read orphan inode 15 (err -117) [ 311.149349][ T7293] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 313.308439][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 313.471515][ T7318] loop3: detected capacity change from 0 to 128 [ 313.510784][ T7318] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 313.543215][ T7318] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 313.616149][ T75] team0 (unregistering): Port device team_slave_1 removed [ 313.761460][ T75] team0 (unregistering): Port device team_slave_0 removed [ 314.310610][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.375084][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.401865][ T7329] loop3: detected capacity change from 0 to 2048 [ 314.435660][ T7329] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.317455][ T75] bond0 (unregistering): Released all slaves [ 315.447232][ T7108] team0: Port device team_slave_0 added [ 315.579198][ T7108] team0: Port device team_slave_1 added [ 315.639343][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 315.808508][ T7108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.873723][ T7108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.054606][ T7108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.074405][ T7349] 9pnet_fd: Insufficient options for proto=fd [ 317.084920][ T7349] xt_TCPMSS: Only works on TCP SYN packets [ 317.244390][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.252016][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.318786][ T7108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.417707][ T7108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.546420][ T7108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.782988][ T7358] Illegal XDP return value 256 on prog (id 158) dev syz_tun, expect packet loss! [ 317.813346][ T7108] device hsr_slave_0 entered promiscuous mode [ 317.865152][ T7361] loop3: detected capacity change from 0 to 2048 [ 317.884822][ T7361] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.885217][ T7108] device hsr_slave_1 entered promiscuous mode [ 319.363037][ T7377] loop4: detected capacity change from 0 to 16 [ 319.423264][ T7377] erofs: (device loop4): mounted with root inode @ nid 36. [ 319.761738][ T7382] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 319.774563][ T7382] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 319.786221][ T7382] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 320.297956][ T4367] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 320.391011][ T7108] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 320.404178][ T7388] loop3: detected capacity change from 0 to 8192 [ 320.443003][ T7388] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 320.478500][ T7108] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 320.507801][ T4367] usb 1-1: Using ep0 maxpacket: 16 [ 320.516165][ T4367] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 320.537056][ T7108] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 320.559801][ T4367] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.566046][ T7108] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 320.590499][ T4367] usb 1-1: config 0 has no interface number 0 [ 320.616474][ T7400] loop4: detected capacity change from 0 to 2048 [ 320.631420][ T4367] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 320.673145][ T4367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.700872][ T7400] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.744780][ T4367] usb 1-1: Product: syz [ 320.755710][ T4367] usb 1-1: Manufacturer: syz [ 320.788785][ T4367] usb 1-1: SerialNumber: syz [ 320.808149][ T4367] usb 1-1: config 0 descriptor?? [ 320.843993][ T4367] asix: probe of 1-1:0.251 failed with error -22 [ 321.021090][ T126] usb 1-1: USB disconnect, device number 7 [ 321.555680][ T7108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.884616][ T7108] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.964970][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.988472][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.183662][ T7108] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 322.194163][ T7108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.208264][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 322.237486][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.085213][ T4490] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.092763][ T4490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.134472][ T7437] loop4: detected capacity change from 0 to 1024 [ 324.147844][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.157069][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.166132][ T4490] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.173486][ T4490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.182511][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.192385][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.201950][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.266105][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.332549][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.340723][ T27] audit: type=1800 audit(1763622046.116:15): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.950" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 324.362158][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.372230][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.375978][ T27] audit: type=1804 audit(1763622046.126:16): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.950" name="/newroot/183/bus/bus" dev="loop4" ino=26 res=1 errno=0 [ 324.381021][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.410996][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.419893][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.434700][ T27] audit: type=1800 audit(1763622046.126:17): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.950" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 324.456236][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.479247][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.487488][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.517030][ T4267] hfsplus: bad catalog entry type [ 326.516766][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.575224][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.753948][ T7108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.263939][ T7479] loop3: detected capacity change from 0 to 128 [ 327.473931][ T7482] 9pnet_fd: Insufficient options for proto=fd [ 327.487682][ T7482] xt_TCPMSS: Only works on TCP SYN packets [ 327.495579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 327.503972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 327.512340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 327.520716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 327.529281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 327.537651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 327.546098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 327.554478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 327.563107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 327.571476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 327.997757][ T27] audit: type=1800 audit(1763622049.776:18): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.962" name="bus" dev="loop3" ino=1048638 res=0 errno=0 [ 328.025208][ T7479] syz.3.962: attempt to access beyond end of device [ 328.025208][ T7479] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 329.138283][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 329.151441][ T4272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 329.160724][ T4272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.169925][ T4272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 329.178027][ T4272] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 329.185379][ T4272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.959731][ T7496] chnl_net:caif_netlink_parms(): no params data found [ 329.993407][ T7512] loop3: detected capacity change from 0 to 512 [ 330.639120][ T7512] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 330.774632][ T7512] EXT4-fs (loop3): shut down requested (0) [ 331.396011][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 331.434172][ T7496] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.442295][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.485240][ T7537] loop0: detected capacity change from 0 to 128 [ 331.674390][ T27] audit: type=1800 audit(1763622053.346:19): pid=7537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.969" name="bus" dev="loop0" ino=1048639 res=0 errno=0 [ 331.687951][ T7496] device bridge_slave_0 entered promiscuous mode [ 331.704304][ T7538] syz.0.969: attempt to access beyond end of device [ 331.704304][ T7538] loop0: rw=2049, sector=585, nr_sectors = 456 limit=128 [ 331.764307][ T7496] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.788935][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.822170][ T7496] device bridge_slave_1 entered promiscuous mode [ 331.834636][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 331.897210][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 331.938560][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.068593][ T7496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.119855][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.199047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.267071][ T7108] device veth0_vlan entered promiscuous mode [ 332.287334][ T7496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.511511][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.536633][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.594267][ T7108] device veth1_vlan entered promiscuous mode [ 332.787872][ T4320] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 332.813956][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 332.832349][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 332.882697][ T7496] team0: Port device team_slave_0 added [ 332.949026][ T7496] team0: Port device team_slave_1 added [ 332.974045][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.988039][ T4320] usb 1-1: unable to get BOS descriptor or descriptor too short [ 333.015488][ T4320] usb 1-1: config 8 has an invalid interface number: 215 but max is 0 [ 333.025074][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.052330][ T4320] usb 1-1: config 8 has no interface number 0 [ 333.095719][ T4320] usb 1-1: config 8 interface 215 has no altsetting 0 [ 333.141910][ T4320] usb 1-1: string descriptor 0 read error: -22 [ 333.177108][ T4320] usb 1-1: New USB device found, idVendor=090a, idProduct=1001, bcdDevice= 1.00 [ 333.197263][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.255972][ T4320] usb-storage 1-1:8.215: USB Mass Storage device detected [ 333.290791][ T7496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.328886][ T4320] usb-storage 1-1:8.215: Quirks match for vid 090a pid 1001: 2 [ 333.362454][ T7496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.477804][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 333.497656][ T7496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.508391][ T4320] usb 1-1: USB disconnect, device number 8 [ 333.520388][ T7108] device veth0_macvtap entered promiscuous mode [ 333.529922][ T7496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.537284][ T7496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.676403][ T7496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.741691][ T7108] device veth1_macvtap entered promiscuous mode [ 334.701883][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.777737][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.846252][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.887496][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.927615][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.988530][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.024182][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.065701][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.086764][ T7108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.102437][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 335.172147][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 335.193918][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.229327][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.328312][ T7496] device hsr_slave_0 entered promiscuous mode [ 335.338095][ T7496] device hsr_slave_1 entered promiscuous mode [ 335.351095][ T7496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.429438][ T7496] Cannot create hsr debugfs directory [ 335.452178][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.501206][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.541201][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.557714][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 335.595563][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.634048][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.666462][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.705818][ T7108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.730233][ T7108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.746202][ T7108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.798438][ T6065] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 335.817908][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.831578][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.878723][ T7108] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.887500][ T7108] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.896470][ T7108] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.905265][ T7108] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.098214][ T4490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.106624][ T4490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.128550][ T6065] usb 4-1: Using ep0 maxpacket: 16 [ 336.135683][ T6065] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 336.157129][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.176001][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.186541][ T6065] usb 4-1: config 0 has no interface number 0 [ 336.209924][ T6065] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 336.223134][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 336.236457][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.244574][ T6065] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 336.285289][ T6065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.335972][ T6065] usb 4-1: Product: syz [ 336.341138][ T6065] usb 4-1: Manufacturer: syz [ 336.345813][ T6065] usb 4-1: SerialNumber: syz [ 336.380107][ T6065] usb 4-1: config 0 descriptor?? [ 336.664898][ T7615] loop0: detected capacity change from 0 to 512 [ 336.680661][ T7496] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 336.705049][ T7615] EXT4-fs: Invalid commit interval 536871081, must be smaller than 21474836 [ 336.741671][ T7496] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 336.788898][ T7496] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.814491][ T7496] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 337.006925][ T6065] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.214/input/input11 [ 337.233472][ T4342] usb 4-1: USB disconnect, device number 8 [ 337.290756][ T7496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.631205][ T7637] device wireguard0 entered promiscuous mode [ 337.684908][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 337.711120][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 337.765965][ T7496] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.820386][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 337.856727][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 337.915526][ T4490] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.923001][ T4490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.975143][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 337.986344][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.013434][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.122211][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.155317][ T4490] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.162550][ T4490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.297063][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 338.338805][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 338.378076][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 338.411886][ T7646] kvm: pic: level sensitive irq not supported [ 338.412209][ T7646] kvm: pic: non byte read [ 338.448166][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.456823][ T7646] kvm: pic: single mode not supported [ 338.456843][ T7646] kvm: pic: level sensitive irq not supported [ 338.475927][ T7646] kvm: pic: non byte read [ 338.478341][ T7652] loop0: detected capacity change from 0 to 256 [ 338.486157][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 338.510829][ T7646] kvm: pic: non byte read [ 338.525581][ T7646] kvm: pic: non byte read [ 338.538616][ T7646] kvm: pic: non byte read [ 338.564446][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 338.575532][ T7646] kvm: pic: non byte read [ 338.632922][ T7646] kvm: pic: non byte read [ 338.633644][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 338.657124][ T7646] kvm: pic: non byte read [ 338.670891][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 338.686419][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.687313][ T7646] kvm: pic: non byte read [ 338.736164][ T7646] kvm: pic: level sensitive irq not supported [ 338.736246][ T7646] kvm: pic: non byte read [ 338.750327][ T7496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.802702][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 338.869002][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 338.888117][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.104707][ T7668] loop0: detected capacity change from 0 to 8 [ 339.174679][ T7669] loop3: detected capacity change from 0 to 1024 [ 339.187438][ T7668] SQUASHFS error: zlib decompression failed, data probably corrupt [ 339.210710][ T7669] EXT4-fs (loop3): inodes count not valid: 1 vs 32 [ 339.234965][ T7668] SQUASHFS error: Failed to read block 0x9b: -5 [ 339.254226][ T7668] SQUASHFS error: Unable to read metadata cache entry [99] [ 339.275071][ T7668] SQUASHFS error: Unable to read inode 0x127 [ 340.063190][ T7689] loop3: detected capacity change from 0 to 2048 [ 340.154671][ T7689] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 340.216429][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1016'. [ 340.325834][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.379918][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 340.442674][ T7496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.758536][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 342.783601][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 343.031677][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 343.049269][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 343.075229][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 343.105982][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 343.137689][ T7496] device veth0_vlan entered promiscuous mode [ 343.175584][ T7496] device veth1_vlan entered promiscuous mode [ 343.284560][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 343.338556][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 343.364003][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 343.390634][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 343.503910][ T7496] device veth0_macvtap entered promiscuous mode [ 343.530289][ T7496] device veth1_macvtap entered promiscuous mode [ 343.709400][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.054049][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.742746][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.851290][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.884622][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.916780][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.997697][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.087809][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.160889][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.224407][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.289745][ T7496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.349706][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.411566][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.471932][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.564499][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.617712][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.687672][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.733168][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.780996][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.821372][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.831938][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.843508][ T7496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.852809][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 345.861943][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 345.873552][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.883672][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.918659][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.940081][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.976334][ T7496] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.005108][ T7496] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.041288][ T7496] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.054862][ T7496] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.093501][ T7809] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1046'. [ 346.454521][ T5017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.466851][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.523442][ T5017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.769381][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.427621][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.532337][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 347.716794][ T7834] loop5: detected capacity change from 0 to 128 [ 347.749920][ T7834] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 347.809314][ T7834] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 349.147793][ T7845] xt_TCPMSS: Only works on TCP SYN packets [ 349.708052][ T4342] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 349.890356][ T7855] loop3: detected capacity change from 0 to 512 [ 349.900474][ T7855] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 349.920015][ T4342] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.967677][ T4342] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.048350][ T4342] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.138362][ T4342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.183973][ T4342] usb 6-1: Product: syz [ 350.208946][ T4342] usb 6-1: Manufacturer: syz [ 350.219630][ T4342] usb 6-1: SerialNumber: syz [ 350.277319][ T7865] loop0: detected capacity change from 0 to 16 [ 350.327145][ T7865] erofs: (device loop0): mounted with root inode @ nid 36. [ 350.599712][ T4342] usb 6-1: 0:2 : does not exist [ 350.831551][ T7870] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 350.884460][ T7870] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 350.895655][ T7870] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 351.218321][ T4342] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 351.249462][ T7871] loop6: detected capacity change from 0 to 764 [ 351.276745][ T7855] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 351.322583][ T4342] usb 6-1: USB disconnect, device number 2 [ 352.229693][ T4379] udevd[4379]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.337735][ T4392] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 352.540579][ T4392] usb 1-1: unable to get BOS descriptor or descriptor too short [ 352.581482][ T4392] usb 1-1: config 5 has an invalid interface number: 42 but max is 0 [ 352.699559][ T4392] usb 1-1: config 5 has no interface number 0 [ 352.705753][ T4392] usb 1-1: config 5 interface 42 has no altsetting 0 [ 352.714449][ T7893] loop6: detected capacity change from 0 to 512 [ 352.723447][ T7893] EXT4-fs: Ignoring removed i_version option [ 352.738365][ T7893] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 352.776903][ T4392] usb 1-1: New USB device found, idVendor=0499, idProduct=5009, bcdDevice=6b.2b [ 352.803035][ T7893] EXT4-fs (loop6): 1 truncate cleaned up [ 352.816968][ T4392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.835575][ T7893] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 352.877788][ T4392] usb 1-1: Product: syz [ 352.882021][ T4392] usb 1-1: Manufacturer: syz [ 352.886928][ T4392] usb 1-1: SerialNumber: syz [ 353.056543][ T7496] EXT4-fs (loop6): unmounting filesystem. [ 353.429827][ T4392] snd-usb-audio: probe of 1-1:5.42 failed with error -2 [ 354.251453][ T4392] usb 1-1: USB disconnect, device number 9 [ 354.790539][ T7927] loop6: detected capacity change from 0 to 128 [ 354.966963][ T27] audit: type=1800 audit(1763622076.686:20): pid=7927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1079" name="bus" dev="loop6" ino=1048649 res=0 errno=0 [ 355.008882][ T7927] syz.6.1079: attempt to access beyond end of device [ 355.008882][ T7927] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 355.381044][ T4379] udevd[4379]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:5.42/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.703884][ T7936] loop0: detected capacity change from 0 to 2048 [ 355.818125][ T7936] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 356.138810][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 356.247038][ T7953] loop3: detected capacity change from 0 to 1024 [ 356.523109][ T27] audit: type=1800 audit(1763622078.306:21): pid=7953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1087" name="file2" dev="loop3" ino=21 res=0 errno=0 [ 356.730105][ T7964] loop5: detected capacity change from 0 to 512 [ 356.939438][ T7970] Bluetooth: MGMT ver 1.22 [ 357.042556][ T4649] hfsplus: b-tree write err: -5, ino 4 [ 357.353591][ T7964] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1091: inode #1: comm syz.5.1091: iget: illegal inode # [ 357.450427][ T7964] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1091: error while reading EA inode 1 err=-117 [ 357.464761][ T7964] EXT4-fs (loop5): 1 orphan inode deleted [ 357.504650][ T7964] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 357.856955][ T7108] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 358.055710][ T7108] EXT4-fs (loop5): unmounting filesystem. [ 359.431077][ T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.551122][ T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.786039][ T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.941380][ T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.093959][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.104309][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.123146][ T8031] loop3: detected capacity change from 0 to 2048 [ 361.135119][ T8031] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 361.169916][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.187463][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.195751][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 361.205584][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.680934][ T8049] loop0: detected capacity change from 0 to 16 [ 361.749528][ T8049] erofs: (device loop0): mounted with root inode @ nid 36. [ 361.870954][ T8054] device wireguard0 entered promiscuous mode [ 361.922273][ T8034] chnl_net:caif_netlink_parms(): no params data found [ 362.093204][ T8061] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 362.105060][ T8061] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 362.116796][ T8061] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 362.554320][ T8064] loop6: detected capacity change from 0 to 512 [ 362.586818][ T8064] EXT4-fs: Ignoring removed mblk_io_submit option [ 362.612664][ T8064] EXT4-fs: Ignoring removed orlov option [ 362.635659][ T8064] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 362.716150][ T8064] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 362.817849][ T8064] System zones: 1-12 [ 362.860611][ T8064] EXT4-fs (loop6): orphan cleanup on readonly fs [ 362.869674][ T8064] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1125: invalid indirect mapped block 12 (level 1) [ 362.942834][ T8064] EXT4-fs (loop6): Remounting filesystem read-only [ 362.983355][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.991035][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.999652][ T8034] device bridge_slave_0 entered promiscuous mode [ 363.001690][ T8064] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1125: invalid indirect mapped block 2 (level 2) [ 363.011019][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.026972][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.038014][ T8034] device bridge_slave_1 entered promiscuous mode [ 363.127807][ T8064] EXT4-fs (loop6): Remounting filesystem read-only [ 363.178060][ T8064] EXT4-fs (loop6): 1 truncate cleaned up [ 363.183798][ T8064] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 363.216449][ T8034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.238176][ T4272] Bluetooth: hci3: command 0x0409 tx timeout [ 363.260223][ T8034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.285041][ T8084] loop0: detected capacity change from 0 to 128 [ 363.353415][ T27] audit: type=1800 audit(1763622085.096:22): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1130" name="bus" dev="loop0" ino=1048653 res=0 errno=0 [ 363.391240][ T8084] syz.0.1130: attempt to access beyond end of device [ 363.391240][ T8084] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 363.507750][ T7496] EXT4-fs (loop6): unmounting filesystem. [ 363.744634][ T8034] team0: Port device team_slave_0 added [ 363.825202][ T8034] team0: Port device team_slave_1 added [ 364.266156][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.285836][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.327987][ T126] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 364.426150][ T8034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.439262][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.446279][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.547712][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 364.555539][ T126] usb 4-1: unable to get BOS descriptor or descriptor too short [ 364.601901][ T126] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 364.654339][ T126] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 364.716997][ T126] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 364.728458][ T8034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.787775][ T126] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 364.852809][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.910606][ T126] usb 4-1: Product: syz [ 364.935547][ T126] usb 4-1: Manufacturer: syz [ 364.959718][ T126] usb 4-1: SerialNumber: syz [ 365.293728][ T126] cdc_ncm 4-1:1.0: bind() failure [ 365.306146][ T126] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 365.317683][ T4272] Bluetooth: hci3: command 0x041b tx timeout [ 365.340378][ T126] cdc_ncm 4-1:1.1: bind() failure [ 365.349452][ T126] usb 4-1: USB disconnect, device number 9 [ 365.473972][ T8107] device wireguard0 entered promiscuous mode [ 365.536416][ T8034] device hsr_slave_0 entered promiscuous mode [ 365.543988][ T8034] device hsr_slave_1 entered promiscuous mode [ 365.552094][ T8034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.572100][ T8034] Cannot create hsr debugfs directory [ 365.825645][ T8118] loop6: detected capacity change from 0 to 512 [ 365.842067][ T8118] EXT4-fs: Ignoring removed mblk_io_submit option [ 365.860494][ T8118] EXT4-fs: Ignoring removed mblk_io_submit option [ 365.913485][ T8118] EXT4-fs (loop6): Test dummy encryption mode enabled [ 365.951517][ T8118] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 366.024606][ T8118] EXT4-fs error (device loop6): __ext4_iget:5091: inode #2: block 134217728: comm syz.6.1139: invalid block [ 366.109199][ T8118] EXT4-fs (loop6): Remounting filesystem read-only [ 366.127893][ T8118] EXT4-fs (loop6): get root inode failed [ 366.133620][ T8118] EXT4-fs (loop6): mount failed [ 367.521732][ T8138] xt_TCPMSS: Only works on TCP SYN packets [ 368.108154][ T4272] Bluetooth: hci3: command 0x040f tx timeout [ 368.297335][ T8143] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1144'. [ 369.117768][ T22] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 369.185733][ T8159] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 369.549078][ T22] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 369.654003][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.846388][ T22] usb 7-1: config 0 descriptor?? [ 370.241793][ T4272] Bluetooth: hci3: command 0x0419 tx timeout [ 370.401895][ T46] device hsr_slave_0 left promiscuous mode [ 370.422895][ T46] device hsr_slave_1 left promiscuous mode [ 370.437261][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.455451][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.491504][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.513378][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.568871][ T46] device bridge_slave_1 left promiscuous mode [ 370.597899][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.649905][ T46] device bridge_slave_0 left promiscuous mode [ 370.670281][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.773470][ T8185] ptrace attach of "./syz-executor exec"[4270] was attempted by ""[8185] [ 370.825052][ T46] device veth1_macvtap left promiscuous mode [ 370.838984][ T46] device veth0_macvtap left promiscuous mode [ 370.852894][ T46] device veth1_vlan left promiscuous mode [ 370.862869][ T46] device veth0_vlan left promiscuous mode [ 370.886959][ T8188] loop0: detected capacity change from 0 to 256 [ 370.918565][ T8188] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 370.971280][ T27] audit: type=1800 audit(1763622092.746:23): pid=8188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1155" name="file1" dev="loop0" ino=1048654 res=0 errno=0 [ 371.602040][ T8199] loop0: detected capacity change from 0 to 2048 [ 371.616184][ T8199] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.667927][ T8199] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1159'. [ 372.535380][ T22] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 372.547159][ T22] asix: probe of 7-1:0.0 failed with error -71 [ 372.557785][ T22] usb 7-1: USB disconnect, device number 2 [ 372.744751][ T46] team0 (unregistering): Port device team_slave_1 removed [ 372.875446][ T46] team0 (unregistering): Port device team_slave_0 removed [ 373.014288][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.095210][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.358595][ T8226] loop6: detected capacity change from 0 to 2048 [ 373.630181][ T8229] loop6: detected capacity change from 0 to 8 [ 373.654935][ T8229] SQUASHFS error: Unable to read inode 0x11f [ 374.176006][ T8236] loop2: detected capacity change from 0 to 7 [ 374.185049][ T8236] Dev loop2: unable to read RDB block 7 [ 374.201610][ T8236] loop2: unable to read partition table [ 374.210345][ T8236] loop2: partition table beyond EOD, truncated [ 374.216703][ T8236] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 374.234344][ T8237] binder: 8235:8237 ioctl 400c620e 200000000000 returned -22 [ 374.245108][ T8236] Bluetooth: MGMT ver 1.22 [ 374.382909][ T46] bond0 (unregistering): Released all slaves [ 375.203161][ T8034] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 375.284212][ T8034] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 375.325103][ T8034] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 375.404699][ T8034] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 375.457304][ T8252] loop6: detected capacity change from 0 to 128 [ 375.499811][ T8252] EXT4-fs (loop6): Test dummy encryption mode enabled [ 375.545287][ T8252] EXT4-fs error (device loop6): __ext4_fill_super:5397: inode #2: comm syz.6.1176: iget: checksum invalid [ 375.611314][ T8252] EXT4-fs (loop6): get root inode failed [ 375.691977][ T8252] EXT4-fs (loop6): mount failed [ 376.617097][ T8034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.721702][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.774731][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.832516][ T8034] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.051101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 377.122966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.393204][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.400456][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.786018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.795298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.804546][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.811772][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.894585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 378.684140][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.690798][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.743457][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 378.865353][ T8300] xt_NFQUEUE: number of total queues is 0 [ 379.626534][ T8034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 379.638702][ T8034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.727810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 379.809108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 380.178628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.764579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 380.775374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 380.791638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 380.800975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.810637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 380.861083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.888227][ T8311] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 381.119082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 381.127442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 381.223362][ T8327] loop0: detected capacity change from 0 to 1024 [ 381.256948][ T8327] EXT4-fs: Ignoring removed bh option [ 381.301880][ T8327] EXT4-fs: inline encryption not supported [ 381.364205][ T8327] EXT4-fs (loop0): unable to read superblock [ 383.202861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 383.218922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 383.242967][ T8034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.182372][ T26] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 385.916939][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 385.938704][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 386.086800][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 386.109976][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 386.191186][ T8034] device veth0_vlan entered promiscuous mode [ 386.228528][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 386.257609][ T26] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 386.266709][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.276794][ T26] usb 4-1: config 0 descriptor?? [ 387.077896][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 387.257929][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 387.269466][ T26] uclogic 0003:2179:0053.0005: interface is invalid, ignoring [ 387.343760][ T8034] device veth1_vlan entered promiscuous mode [ 387.456631][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 387.469787][ T26] usb 4-1: USB disconnect, device number 10 [ 387.482498][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 387.501982][ T8034] device veth0_macvtap entered promiscuous mode [ 387.668916][ T8034] device veth1_macvtap entered promiscuous mode [ 387.739705][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.797659][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.867803][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.111619][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.155461][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.173638][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.194289][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.219067][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.239712][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.266350][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.307661][ T4343] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 388.310259][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.345714][ T8438] loop3: detected capacity change from 0 to 2048 [ 388.374925][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 388.396787][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 388.410273][ T8438] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.431141][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 388.481818][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 388.523381][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.527787][ T4343] usb 1-1: Using ep0 maxpacket: 8 [ 388.557684][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.573122][ T4343] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 388.603527][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.604108][ T4343] usb 1-1: config 179 has no interface number 0 [ 388.622655][ T4343] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 388.636723][ T4343] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 388.649894][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.660916][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.671668][ T4343] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 388.683199][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.693355][ T4343] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 388.777729][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.807250][ T4343] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 388.820933][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.829377][ T4343] usb 1-1: config 179 interface 65 has no altsetting 0 [ 388.837976][ T4343] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 388.847448][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.878393][ T8432] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 388.887199][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.924853][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.942359][ T4343] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input12 [ 388.958986][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.988181][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 388.999075][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 389.054114][ T8034] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.093761][ T8034] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.137808][ T8034] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.194292][ T8034] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.259158][ T4343] usb 1-1: USB disconnect, device number 10 [ 389.259215][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 389.308192][ T4343] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 389.606959][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.625727][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.693271][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 389.774457][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.812563][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.919771][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 390.433272][ T8480] loop3: detected capacity change from 0 to 128 [ 390.498793][ T27] audit: type=1800 audit(1763622112.286:24): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1229" name="bus" dev="loop3" ino=1048667 res=0 errno=0 [ 390.699080][ T8487] syz.3.1229: attempt to access beyond end of device [ 390.699080][ T8487] loop3: rw=2049, sector=457, nr_sectors = 584 limit=128 [ 391.266425][ T8477] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 393.348009][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1243'. [ 393.458081][ T8526] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1243'. [ 393.584414][ T8529] loop0: detected capacity change from 0 to 2048 [ 393.646272][ T8529] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 396.714150][ T8560] loop0: detected capacity change from 0 to 1024 [ 396.848280][ T8560] hfsplus: gid requires an argument [ 396.902511][ T8560] hfsplus: unable to parse mount options [ 397.921200][ T8574] loop0: detected capacity change from 0 to 128 [ 397.968734][ T8574] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 398.013046][ T8574] FAT-fs (loop0): bread failed, FSINFO block (sector = 148) [ 398.252077][ T8579] loop6: detected capacity change from 0 to 256 [ 398.354464][ T8579] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 399.327135][ T8603] loop6: detected capacity change from 0 to 1024 [ 399.655035][ T8612] loop7: detected capacity change from 0 to 8 [ 399.686561][ T8613] loop6: detected capacity change from 0 to 256 [ 399.767427][ T8612] SQUASHFS error: Failed to read block 0x4de: -5 [ 399.809669][ T8613] exFAT-fs (loop6): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 399.840861][ T8612] SQUASHFS error: Failed to read block 0x4de: -5 [ 399.858376][ T27] audit: type=1800 audit(1763622121.646:25): pid=8612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1270" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 400.453048][ T8631] "syz.2.1276" (8631) uses obsolete ecb(arc4) skcipher [ 401.867379][ T8644] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 403.603435][ T8689] loop7: detected capacity change from 0 to 512 [ 403.694842][ T8689] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 403.929765][ T8697] loop6: detected capacity change from 0 to 16 [ 403.974929][ T8697] erofs: (device loop6): mounted with root inode @ nid 36. [ 404.014302][ T8697] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 404.088710][ T8697] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 404.099759][ T8697] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 404.811613][ T4352] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.956596][ T8710] loop6: detected capacity change from 0 to 2048 [ 405.116619][ T8710] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.127907][ T4851] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 405.945792][ T4352] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.012817][ T4851] usb 4-1: Using ep0 maxpacket: 16 [ 406.024294][ T4851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.116238][ T4851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.155861][ T4851] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 406.192989][ T4851] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 406.214060][ T4851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.227240][ T4851] usb 4-1: config 0 descriptor?? [ 406.279561][ T4352] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.521100][ T4352] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.582279][ T8743] loop6: detected capacity change from 0 to 16 [ 406.679416][ T4851] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 406.752936][ T8743] erofs: (device loop6): mounted with root inode @ nid 36. [ 406.760592][ T4851] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 406.790591][ T4851] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 406.830362][ T8743] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 406.841124][ T8743] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 406.854270][ T8743] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 406.889974][ T4851] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 406.898386][ T4851] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 406.919668][ T4851] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 406.954931][ T4851] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 406.968439][ T4851] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 406.977933][ T4851] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 406.985791][ T4851] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 406.993378][ T4851] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 407.001248][ T4851] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 407.010154][ T4851] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 407.105058][ T4851] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 407.112861][ T4851] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 407.120603][ T4851] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 407.180224][ T4851] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input13 [ 407.234092][ T4851] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 407.353047][ T4851] usb 4-1: USB disconnect, device number 11 [ 407.827168][ T8756] loop3: detected capacity change from 0 to 2048 [ 407.903877][ T8756] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.961673][ T8753] fido_id[8753]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 408.610611][ T8779] loop7: detected capacity change from 0 to 16 [ 408.619254][ T8779] erofs: (device loop7): mounted with root inode @ nid 36. [ 408.631277][ T8779] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 408.647326][ T8779] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 408.681927][ T8779] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 409.732581][ T27] audit: type=1326 audit(1764146419.382:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.6.1327" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1aa778f749 code=0x0 [ 411.289237][ T8821] loop0: detected capacity change from 0 to 512 [ 411.305754][ T8821] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 411.327303][ T8821] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 411.379236][ T8821] EXT4-fs (loop0): group descriptors corrupted! [ 412.391460][ T8832] loop6: detected capacity change from 0 to 512 [ 412.405994][ T8832] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 412.560352][ T4379] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 412.862263][ T8843] 9pnet_fd: Insufficient options for proto=fd [ 413.607605][ T4352] device hsr_slave_0 left promiscuous mode [ 413.641500][ T4352] device hsr_slave_1 left promiscuous mode [ 413.676417][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.687440][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.734924][ T8856] loop7: detected capacity change from 0 to 256 [ 413.742402][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.758683][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.838091][ T4352] device bridge_slave_1 left promiscuous mode [ 413.847832][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.971205][ T4352] device bridge_slave_0 left promiscuous mode [ 414.008883][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.080296][ T4352] device veth1_macvtap left promiscuous mode [ 414.086466][ T4352] device veth0_macvtap left promiscuous mode [ 414.107552][ T4352] device veth1_vlan left promiscuous mode [ 414.295906][ T4352] device veth0_vlan left promiscuous mode [ 415.035343][ T8872] loop3: detected capacity change from 0 to 8192 [ 415.386195][ T8872] loop3: p1 p2 p4 [ 415.576000][ T8872] loop3: p1 size 65536 extends beyond EOD, truncated [ 415.626231][ T8872] loop3: p2 start 861536256 is beyond EOD, truncated [ 415.649480][ T8872] loop3: p4 size 65536 extends beyond EOD, truncated [ 416.418999][ T8898] 9pnet_fd: Insufficient options for proto=fd [ 416.988578][ T4403] udevd[4403]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 417.055446][ T4379] udevd[4379]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 418.661306][ T4352] team0 (unregistering): Port device team_slave_1 removed [ 418.729092][ T4352] team0 (unregistering): Port device team_slave_0 removed [ 418.871977][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.088279][ T8922] kvm: emulating exchange as write [ 419.171462][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.736111][ T8934] loop3: detected capacity change from 0 to 512 [ 420.759088][ T8934] EXT4-fs: Ignoring removed mblk_io_submit option [ 420.765586][ T8934] EXT4-fs: Ignoring removed bh option [ 420.795697][ T8934] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 420.814605][ T8934] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 420.823077][ T8934] System zones: 0-2, 18-18, 34-35 [ 420.837392][ T8934] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 420.908725][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 421.252933][ T4352] bond0 (unregistering): Released all slaves [ 423.203161][ T8909] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1360'. [ 423.214220][ T8909] device gretap0 entered promiscuous mode [ 423.634839][ T8962] loop7: detected capacity change from 0 to 512 [ 423.688499][ T8962] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 423.820544][ T8962] EXT4-fs (loop7): 1 truncate cleaned up [ 423.826985][ T8962] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 423.862548][ T14] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 423.873558][ T8962] EXT4-fs error (device loop7): ext4_lookup:1858: inode #16: comm syz.7.1380: iget: bad i_size value: 5497558147880 [ 423.981135][ T8034] EXT4-fs (loop7): unmounting filesystem. [ 424.104161][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 424.121512][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.180081][ T14] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7 [ 424.212372][ T14] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 424.251155][ T14] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 424.303882][ T14] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.362542][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.387173][ T14] usb 4-1: Product: syz [ 424.391417][ T14] usb 4-1: Manufacturer: syz [ 424.467705][ T14] usb 4-1: SerialNumber: syz [ 424.615023][ T8986] mmap: syz.0.1387 (8986) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 424.730077][ T14] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 425.064641][ T8992] loop0: detected capacity change from 0 to 512 [ 425.212019][ T8992] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 425.793693][ T8992] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 426.146285][ T14] usb 4-1: USB disconnect, device number 12 [ 426.416017][ T8992] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 426.424189][ T8992] System zones: 0-2, 18-18, 34-34 [ 426.545476][ T8992] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1391: iget: bad i_size value: 360287970189639680 [ 426.585470][ T8992] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1391: couldn't read orphan inode 15 (err -117) [ 426.610570][ T8992] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 426.836811][ T9015] loop7: detected capacity change from 0 to 1024 [ 426.850313][ T9015] EXT4-fs: Ignoring removed orlov option [ 426.983411][ T4504] udevd[4504]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.030061][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 427.603672][ T9015] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 427.768722][ T27] audit: type=1800 audit(1764146437.160:27): pid=9015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1396" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 428.554708][ T9024] loop3: detected capacity change from 0 to 256 [ 428.655463][ T9024] exFAT-fs (loop3): invalid boot record signature [ 428.723005][ T9024] exFAT-fs (loop3): failed to read boot sector [ 428.770528][ T9024] exFAT-fs (loop3): failed to recognize exfat type [ 428.863963][ T8034] EXT4-fs (loop7): unmounting filesystem. [ 431.440596][ T9064] loop6: detected capacity change from 0 to 1024 [ 431.756000][ T9064] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.1409: Invalid block bitmap block 0 in block_group 0 [ 431.771604][ T9064] Quota error (device loop6): write_blk: dquota write failed [ 431.779385][ T9064] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 431.789868][ T9064] EXT4-fs error (device loop6): ext4_acquire_dquot:6809: comm syz.6.1409: Failed to acquire dquot type 0 [ 431.813645][ T9064] EXT4-fs error (device loop6): ext4_free_blocks:6205: comm syz.6.1409: Freeing blocks not in datazone - block = 0, count = 4096 [ 431.834792][ T9064] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.1409: Invalid inode bitmap blk 0 in block_group 0 [ 431.854034][ T4352] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-8 [ 431.864183][ T9064] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 431.875350][ T9064] EXT4-fs (loop6): 1 orphan inode deleted [ 431.881258][ T9064] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 432.419897][ T9067] syz.0.1412 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 432.440808][ T4352] EXT4-fs error (device loop6): ext4_release_dquot:6845: comm kworker/u4:6: Failed to release dquot type 0 [ 433.753648][ T9071] loop7: detected capacity change from 0 to 1024 [ 433.761046][ T9071] EXT4-fs: Ignoring removed orlov option [ 433.999153][ T7496] EXT4-fs (loop6): unmounting filesystem. [ 434.150548][ T9071] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 434.168924][ T27] audit: type=1800 audit(1764146443.519:28): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1413" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 436.361704][ T8034] EXT4-fs (loop7): unmounting filesystem. [ 436.972325][ T9100] loop0: detected capacity change from 0 to 1024 [ 436.984329][ T9100] ext4: Unknown parameter 'noacl' [ 437.431068][ T27] audit: type=1326 audit(1764146446.764:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.2.1427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9258d8f749 code=0x0 [ 438.556012][ T9129] loop0: detected capacity change from 0 to 8 [ 439.301635][ T9138] device wireguard0 entered promiscuous mode [ 439.641380][ T9129] SQUASHFS error: lzo decompression failed, data probably corrupt [ 439.800555][ T9129] SQUASHFS error: Failed to read block 0x91: -5 [ 439.846079][ T9129] SQUASHFS error: Unable to read metadata cache entry [8f] [ 439.906393][ T9129] SQUASHFS error: Unable to read inode 0x11f [ 440.079106][ T9146] loop7: detected capacity change from 0 to 1024 [ 440.581951][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.591471][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.173799][ T4893] hfsplus: b-tree write err: -5, ino 8 [ 443.559670][ T9193] loop7: detected capacity change from 0 to 512 [ 443.607728][ T9193] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 444.862486][ T9182] device bridge1 entered promiscuous mode [ 450.635787][ T9251] tty tty1: ldisc open failed (-12), clearing slot 0 [ 453.219069][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 456.527979][ T9303] device vlan0 entered promiscuous mode [ 456.744428][ T9318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 460.480443][ T9353] loop6: detected capacity change from 0 to 16 [ 460.562220][ T9353] erofs: (device loop6): mounted with root inode @ nid 36. [ 461.954158][ T9371] loop3: detected capacity change from 0 to 512 [ 462.050568][ T9371] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1491: bad orphan inode 15 [ 462.571889][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'. [ 462.621505][ T9371] ext4_test_bit(bit=14, block=18) = 1 [ 462.634268][ T9371] is_bad_inode(inode)=0 [ 462.660409][ T9371] NEXT_ORPHAN(inode)=1023 [ 462.674819][ T9371] max_ino=32 [ 462.682546][ T9371] i_nlink=0 [ 462.698725][ T9371] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2935: inode #15: comm syz.3.1491: corrupted xattr block 19 [ 462.732026][ T9371] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 462.767143][ T9371] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 462.803979][ T9371] ext4 filesystem being mounted at /309/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 463.016283][ T9384] loop6: detected capacity change from 0 to 4096 [ 463.149236][ T9371] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz.3.1491: Directory hole found for htree leaf block 0 [ 463.310747][ T9384] ext4: Unknown parameter 'noacl' [ 463.520091][ T4379] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 463.694625][ T9384] loop6: detected capacity change from 0 to 2048 [ 463.707155][ T9394] loop0: detected capacity change from 0 to 4096 [ 463.741175][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 463.754134][ T9384] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 463.780290][ T9384] EXT4-fs (loop6): unmounting filesystem. [ 465.200558][ T9414] loop6: detected capacity change from 0 to 2048 [ 465.421144][ T9414] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.462520][ T9394] EXT4-fs (loop0): Test dummy encryption mode enabled [ 465.490021][ T9394] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 465.500124][ T9394] System zones: 0-5 [ 465.507088][ T9394] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 466.085942][ T9430] device wireguard0 entered promiscuous mode [ 466.237136][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 466.250475][ T9439] loop3: detected capacity change from 0 to 256 [ 466.356291][ T9439] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104f4, chksum : 0x5f17efa6, utbl_chksum : 0xe619d30d) [ 467.045450][ T9442] loop0: detected capacity change from 0 to 1764 [ 467.945532][ T9451] loop3: detected capacity change from 0 to 16 [ 468.009245][ T9451] erofs: (device loop3): mounted with root inode @ nid 36. [ 471.504109][ T9478] loop7: detected capacity change from 0 to 128 [ 471.543949][ T9478] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 471.722201][ T9478] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 472.131563][ T9485] device wireguard0 entered promiscuous mode [ 472.576666][ T4893] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 472.980136][ T9493] loop6: detected capacity change from 0 to 1024 [ 473.365171][ T9502] loop3: detected capacity change from 0 to 16 [ 473.683222][ T9502] erofs: (device loop3): mounted with root inode @ nid 36. [ 474.658006][ T9529] loop3: detected capacity change from 0 to 128 [ 474.675052][ T9529] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 474.954664][ T9531] device wireguard0 entered promiscuous mode [ 475.055386][ T9529] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 475.628397][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 475.715889][ T4272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 475.725604][ T4272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 475.737106][ T4272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 475.751008][ T4272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 475.759151][ T4272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 476.028768][ T9547] loop6: detected capacity change from 0 to 16 [ 476.067114][ T9547] erofs: (device loop6): mounted with root inode @ nid 36. [ 476.109525][ T9547] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 476.174416][ T9547] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 476.246637][ T9547] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 476.890288][ T9572] loop3: detected capacity change from 0 to 256 [ 476.967798][ T9537] chnl_net:caif_netlink_parms(): no params data found [ 477.053935][ T9572] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 477.280775][ T9577] device wireguard0 entered promiscuous mode [ 477.823404][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 478.436779][ T9537] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.491589][ T9537] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.528323][ T9537] device bridge_slave_0 entered promiscuous mode [ 478.575783][ T9537] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.577170][ T9603] loop6: detected capacity change from 0 to 16 [ 478.607189][ T9537] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.625805][ T9603] erofs: (device loop6): mounted with root inode @ nid 36. [ 478.679024][ T9603] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 478.689005][ T9537] device bridge_slave_1 entered promiscuous mode [ 478.729315][ T9603] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 478.765058][ T9603] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 478.862341][ T9537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.934151][ T9537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.074485][ T9537] team0: Port device team_slave_0 added [ 479.117110][ T9537] team0: Port device team_slave_1 added [ 479.944691][ T4272] Bluetooth: hci1: command 0x041b tx timeout [ 480.211082][ T9537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.218274][ T9537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.245502][ T9537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.681630][ T9537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.748412][ T9537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.942061][ T9537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.130217][ T9641] loop3: detected capacity change from 0 to 16 [ 481.144788][ T9641] erofs: (device loop3): mounted with root inode @ nid 36. [ 481.161029][ T9641] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 481.177504][ T9641] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 481.190882][ T9641] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 481.987475][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 482.017103][ T9537] device hsr_slave_0 entered promiscuous mode [ 482.114341][ T9537] device hsr_slave_1 entered promiscuous mode [ 482.441193][ T9658] loop7: detected capacity change from 0 to 8 [ 482.481193][ T9657] xt_TPROXY: Can be used only with -p tcp or -p udp [ 482.766053][ T9537] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 482.835520][ T9537] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 482.866398][ T9537] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 482.922228][ T9537] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 483.203176][ T9537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.240171][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 483.254684][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 483.286490][ T9537] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.308357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 483.323973][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 483.343771][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.350945][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.391430][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 483.410601][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 483.444205][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 483.493394][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.500644][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.534715][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 483.604553][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 483.659522][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 483.732366][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 483.764315][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 483.773972][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 483.799223][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 483.825764][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 483.933524][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 484.045878][ T9537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.063536][ T4272] Bluetooth: hci1: command 0x0419 tx timeout [ 484.135583][ T9537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 484.185810][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 484.207111][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 486.996047][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 487.129685][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 487.178354][ T9537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.644843][ T9781] loop6: detected capacity change from 0 to 1024 [ 487.694705][ T9781] EXT4-fs: Ignoring removed i_version option [ 487.700814][ T9781] EXT4-fs: inline encryption not supported [ 487.737576][ T9781] EXT4-fs (loop6): Test dummy encryption mode enabled [ 487.757600][ T9781] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 488.069210][ T9792] loop3: detected capacity change from 0 to 512 [ 488.093008][ T9792] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 488.407812][ T7496] EXT4-fs (loop6): unmounting filesystem. [ 488.743987][ T9809] loop6: detected capacity change from 0 to 512 [ 488.753565][ T9809] EXT4-fs: Ignoring removed orlov option [ 488.759336][ T9809] EXT4-fs: Ignoring removed i_version option [ 488.784084][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 489.006628][ T9809] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.1625: inode #1: comm syz.6.1625: iget: illegal inode # [ 489.022878][ T9809] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1625: error while reading EA inode 1 err=-117 [ 489.038305][ T9809] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.1625: inode #1: comm syz.6.1625: iget: illegal inode # [ 489.053071][ T9809] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1625: error while reading EA inode 1 err=-117 [ 489.071896][ T9809] EXT4-fs (loop6): 1 orphan inode deleted [ 489.077868][ T9809] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 489.771540][ T9814] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1628'. [ 490.517088][ T9828] "syz.7.1633" (9828) uses obsolete ecb(arc4) skcipher [ 490.832574][ T9834] loop3: detected capacity change from 0 to 1024 [ 490.916313][ T9834] EXT4-fs: Ignoring removed i_version option [ 490.922417][ T9834] EXT4-fs: inline encryption not supported [ 490.935648][ T9832] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1634'. [ 491.021043][ T9834] EXT4-fs (loop3): Test dummy encryption mode enabled [ 491.065786][ T7496] EXT4-fs (loop6): unmounting filesystem. [ 491.126260][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 491.157782][ T9834] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 491.183488][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 491.289548][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 491.315133][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 491.372006][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 491.413691][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 491.506826][ T9848] loop6: detected capacity change from 0 to 1024 [ 491.601761][ T9848] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.1637: Invalid block bitmap block 0 in block_group 0 [ 491.617416][ T9848] Quota error (device loop6): write_blk: dquota write failed [ 491.625105][ T9848] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 491.635605][ T9848] EXT4-fs error (device loop6): ext4_acquire_dquot:6809: comm syz.6.1637: Failed to acquire dquot type 0 [ 491.664608][ T9848] EXT4-fs error (device loop6): ext4_free_blocks:6205: comm syz.6.1637: Freeing blocks not in datazone - block = 0, count = 4096 [ 491.683264][ T9848] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.1637: Invalid inode bitmap blk 0 in block_group 0 [ 491.699049][ T9848] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 491.708842][ T9848] EXT4-fs (loop6): 1 orphan inode deleted [ 491.714929][ T9848] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 491.724746][ T4372] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-8 [ 491.875423][ T9537] device veth0_vlan entered promiscuous mode [ 491.892751][ T4372] EXT4-fs error (device loop6): ext4_release_dquot:6845: comm kworker/u4:7: Failed to release dquot type 0 [ 492.300004][ T9537] device veth1_vlan entered promiscuous mode [ 492.742224][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 493.056159][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 494.266956][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 494.299673][ T7496] EXT4-fs (loop6): unmounting filesystem. [ 494.515724][ T9858] netlink: 'syz.3.1641': attribute type 29 has an invalid length. [ 494.941050][ T9867] loop3: detected capacity change from 0 to 16 [ 495.035809][ T9867] erofs: (device loop3): mounted with root inode @ nid 36. [ 495.036832][ T9537] device veth0_macvtap entered promiscuous mode [ 495.098765][ T9537] device veth1_macvtap entered promiscuous mode [ 495.156664][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.192836][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.225422][ T9874] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1647'. [ 495.250675][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.264512][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.303013][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.344645][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.399548][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.427622][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.438353][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.449234][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.488993][ T9537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.518336][ T9880] netlink: 'syz.2.1650': attribute type 30 has an invalid length. [ 495.536280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 495.562935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 495.617438][ T9888] loop6: detected capacity change from 0 to 1024 [ 495.628063][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.659254][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.669679][ T9888] hfsplus: wrong filesystem version [ 495.708340][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.754411][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.780487][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.808455][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.843980][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.854731][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.864648][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.875181][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.893174][ T9537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.911035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 495.952742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 495.986720][ T9537] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.014511][ T9537] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.035661][ T9537] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.059761][ T9896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1656'. [ 496.069108][ T9537] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.109090][ T9897] loop6: detected capacity change from 0 to 512 [ 496.157465][ T9897] EXT4-fs: Ignoring removed orlov option [ 496.217708][ T9897] EXT4-fs: Ignoring removed mblk_io_submit option [ 496.251749][ T9900] loop7: detected capacity change from 0 to 1024 [ 496.252673][ T9897] EXT4-fs (loop6): orphan cleanup on readonly fs [ 496.318352][ T9897] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 496.371938][ T9897] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 496.458817][ T4893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.504629][ T9897] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.1655: attempt to clear invalid blocks 2 len 1 [ 496.515116][ T4893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.533888][ T5293] hfsplus: b-tree write err: -5, ino 8 [ 496.573989][ T9897] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1655: invalid indirect mapped block 1819239214 (level 0) [ 496.599770][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.625946][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.633459][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 496.662599][ T9897] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1655: invalid indirect mapped block 1819239214 (level 1) [ 496.697547][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 496.778419][ T9897] EXT4-fs (loop6): 1 truncate cleaned up [ 496.790162][ T9897] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 496.849732][ T9912] loop7: detected capacity change from 0 to 2048 [ 496.923559][ T9912] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 496.967684][ T4879] hfsplus: b-tree write err: -5, ino 4 [ 497.027964][ T7496] EXT4-fs (loop6): unmounting filesystem. [ 497.064890][ T9912] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1659'. [ 498.175009][ T9929] xt_hashlimit: max too large, truncated to 1048576 [ 498.182067][ T9929] No such timeout policy "syz1" [ 498.917968][ T9933] IPv6: NLM_F_REPLACE set, but no existing node found! [ 500.915332][ T27] audit: type=1326 audit(1764146510.191:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.8.1678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f268d18f749 code=0x0 [ 502.069349][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.075794][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.885840][T10006] loop6: detected capacity change from 0 to 128 [ 503.290562][T10009] loop7: detected capacity change from 0 to 1024 [ 503.443091][T10009] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.1686: Invalid block bitmap block 0 in block_group 0 [ 503.458817][T10009] Quota error (device loop7): write_blk: dquota write failed [ 503.466414][T10009] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 503.476780][T10009] EXT4-fs error (device loop7): ext4_acquire_dquot:6809: comm syz.7.1686: Failed to acquire dquot type 0 [ 503.492824][T10009] EXT4-fs error (device loop7): ext4_free_blocks:6205: comm syz.7.1686: Freeing blocks not in datazone - block = 0, count = 4096 [ 503.510049][T10009] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.1686: Invalid inode bitmap blk 0 in block_group 0 [ 503.528935][T10009] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 503.545241][T10009] EXT4-fs (loop7): 1 orphan inode deleted [ 503.551325][T10009] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 503.828477][T10006] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 503.888687][T10006] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.160157][ T5017] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-8 [ 504.176507][ T5017] EXT4-fs error (device loop7): ext4_release_dquot:6845: comm kworker/u4:15: Failed to release dquot type 0 [ 505.163139][ T7496] EXT4-fs (loop6): unmounting filesystem. [ 505.423596][ T8034] EXT4-fs (loop7): unmounting filesystem. [ 505.772082][T10032] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 509.141317][T10051] loop6: detected capacity change from 0 to 2048 [ 509.197407][T10058] loop3: detected capacity change from 0 to 1024 [ 509.301644][T10051] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 509.350777][T10058] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #3: block 2: comm syz.3.1701: lblock 2 mapped to illegal pblock 2 (length 1) [ 509.368663][T10058] Quota error (device loop3): write_blk: dquota write failed [ 509.381130][T10058] Quota error (device loop3): find_free_dqentry: Can't write quota data block 2 [ 509.390866][T10058] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 509.401544][T10058] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.1701: Failed to acquire dquot type 0 [ 509.427041][T10058] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.1701: lblock 2 mapped to illegal pblock 2 (length 1) [ 509.466548][T10051] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1698'. [ 509.496286][T10058] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 509.525387][T10058] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.1701: Failed to acquire dquot type 0 [ 509.536698][T10068] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1702'. [ 509.566159][T10058] EXT4-fs error (device loop3): ext4_free_blocks:6205: comm syz.3.1701: Freeing blocks not in datazone - block = 0, count = 4096 [ 509.612107][T10058] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.1701: lblock 2 mapped to illegal pblock 2 (length 1) [ 509.720182][T10058] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 509.781404][T10058] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.1701: Failed to acquire dquot type 0 [ 509.855606][T10058] EXT4-fs (loop3): 1 orphan inode deleted [ 509.861619][T10058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 511.165291][ T14] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 511.505348][T10064] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 511.558962][T10094] loop8: detected capacity change from 0 to 512 [ 511.737012][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 511.755364][ T14] usb 7-1: Using ep0 maxpacket: 8 [ 511.762816][ T14] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 511.772069][ T14] usb 7-1: config 179 has no interface number 0 [ 511.778836][ T14] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 511.790539][ T14] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 511.802602][ T14] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 511.804247][T10094] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 511.821890][ T14] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 511.935416][ T14] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 511.935511][T10094] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.944528][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.978860][T10076] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 512.213894][ T14] usb 7-1: USB disconnect, device number 3 [ 512.213974][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 512.214019][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 512.237599][ T27] audit: type=1800 audit(1764146521.500:31): pid=10094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1707" name="file1" dev="loop8" ino=18 res=0 errno=0 [ 512.252725][T10094] Quota error (device loop8): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 512.517360][T10094] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 512.596983][T10094] EXT4-fs error (device loop8): ext4_acquire_dquot:6809: comm syz.8.1707: Failed to acquire dquot type 0 [ 513.570534][ T9537] EXT4-fs (loop8): unmounting filesystem. [ 513.992814][T10133] loop6: detected capacity change from 0 to 8 [ 514.094096][T10133] SQUASHFS error: zlib decompression failed, data probably corrupt [ 514.112653][T10133] SQUASHFS error: Failed to read block 0x4de: -5 [ 514.134302][T10133] SQUASHFS error: zlib decompression failed, data probably corrupt [ 514.146870][T10133] SQUASHFS error: Failed to read block 0x4df: -5 [ 514.162824][T10133] SQUASHFS error: zlib decompression failed, data probably corrupt [ 514.172459][T10133] SQUASHFS error: Failed to read block 0x4e0: -5 [ 514.208662][T10133] SQUASHFS error: zlib decompression failed, data probably corrupt [ 514.223619][T10133] SQUASHFS error: Failed to read block 0x4de: -5 [ 514.250115][ T27] audit: type=1800 audit(1764146523.520:32): pid=10133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1719" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 514.561055][T10152] mmap: syz.6.1724 (10152): VmData 37470208 exceed data ulimit 9868. Update limits or use boot option ignore_rlimit_data. [ 515.952593][T10181] loop6: detected capacity change from 0 to 512 [ 516.003015][T10181] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 517.203855][T10193] device wg1 entered promiscuous mode [ 518.394411][T10205] raw_sendmsg: syz.6.1737 forgot to set AF_INET. Fix it! [ 523.097516][T10273] loop3: detected capacity change from 0 to 1024 [ 523.281834][T10273] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1760: Invalid block bitmap block 0 in block_group 0 [ 523.339540][T10278] loop8: detected capacity change from 0 to 128 [ 523.434336][T10273] Quota error (device loop3): write_blk: dquota write failed [ 523.484947][T10273] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 523.526703][T10273] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.1760: Failed to acquire dquot type 0 [ 523.597236][T10273] EXT4-fs error (device loop3): ext4_free_blocks:6205: comm syz.3.1760: Freeing blocks not in datazone - block = 0, count = 4096 [ 523.670134][T10273] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1760: Invalid inode bitmap blk 0 in block_group 0 [ 523.686649][ T4429] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 523.711272][T10273] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 523.721705][ T4429] EXT4-fs error (device loop3): ext4_release_dquot:6845: comm kworker/u4:8: Failed to release dquot type 0 [ 523.732017][T10273] EXT4-fs (loop3): 1 orphan inode deleted [ 523.759469][T10273] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 523.777808][T10285] ------------[ cut here ]------------ [ 523.783576][T10285] WARNING: CPU: 1 PID: 10285 at mm/page_alloc.c:5590 __alloc_pages+0x2f4/0x4e0 [ 523.793264][T10285] Modules linked in: [ 523.797504][T10285] CPU: 1 PID: 10285 Comm: syz.6.1763 Not tainted syzkaller #0 [ 523.805380][T10285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 523.815645][T10285] RIP: 0010:__alloc_pages+0x2f4/0x4e0 [ 523.821114][T10285] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 32 1f 45 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff [ 523.840868][T10285] RSP: 0018:ffffc90003727a00 EFLAGS: 00010246 [ 523.847044][T10285] RAX: ffffc90003727a00 RBX: 1ffff920006e4f44 RCX: 0000000000000000 [ 523.855081][T10285] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003727a68 [ 523.863185][T10285] RBP: ffffc90003727b00 R08: dffffc0000000000 R09: ffffc90003727a40 [ 523.871281][T10285] R10: fffff520006e4f4d R11: 1ffff920006e4f48 R12: 0000000000000013 [ 523.879388][T10285] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 523.887486][T10285] FS: 00007f1aa85ae6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 523.896550][T10285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.903481][T10285] CR2: 0000200000000000 CR3: 00000000633a4000 CR4: 00000000003506e0 [ 523.911575][T10285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 523.919693][T10285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 523.927788][T10285] Call Trace: [ 523.931644][T10285] [ 523.934812][T10285] ? zone_statistics+0x170/0x170 [ 523.939906][T10285] ? __might_fault+0xa6/0x120 [ 523.944654][T10285] ? __lock_acquire+0x7c50/0x7c50 [ 523.949796][T10285] ? do_vfs_ioctl+0xcb5/0x1d10 [ 523.954742][T10285] __kmalloc_large_node+0x8c/0x1e0 [ 523.959986][T10285] ? raw_ioctl+0x17c7/0x39c0 [ 523.964659][T10285] __kmalloc+0x110/0x240 [ 523.969396][T10285] ? _copy_from_user+0x10b/0x170 [ 523.974513][T10285] raw_ioctl+0x17c7/0x39c0 [ 523.979148][T10285] ? tomoyo_path_number_perm+0x4ae/0x600 [ 523.984859][T10285] ? __kmem_cache_free+0xb6/0x1f0 [ 523.990266][T10285] ? tomoyo_path_number_perm+0x503/0x600 [ 523.996190][T10285] ? tomoyo_path_number_perm+0x1b6/0x600 [ 524.002008][T10285] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 524.007781][T10285] ? make_qualifier+0x3f0/0x3f0 [ 524.013043][T10285] ? __fget_files+0x28/0x4d0 [ 524.017776][T10285] ? bpf_lsm_file_ioctl+0x5/0x10 [ 524.022796][T10285] ? security_file_ioctl+0x7c/0xa0 [ 524.028145][T10285] ? make_qualifier+0x3f0/0x3f0 [ 524.034113][T10285] __se_sys_ioctl+0xfa/0x170 [ 524.038827][T10285] do_syscall_64+0x4c/0xa0 [ 524.043334][T10285] ? clear_bhb_loop+0x60/0xb0 [ 524.048306][T10285] ? clear_bhb_loop+0x60/0xb0 [ 524.053149][T10285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 524.059246][T10285] RIP: 0033:0x7f1aa778f749 [ 524.063822][T10285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.083820][T10285] RSP: 002b:00007f1aa85ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 524.093235][T10285] RAX: ffffffffffffffda RBX: 00007f1aa79e5fa0 RCX: 00007f1aa778f749 [ 524.101437][T10285] RDX: 0000200000000000 RSI: 00000000c0085508 RDI: 0000000000000003 [ 524.109964][T10285] RBP: 00007f1aa7813f91 R08: 0000000000000000 R09: 0000000000000000 [ 524.118315][T10285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.126572][T10285] R13: 00007f1aa79e6038 R14: 00007f1aa79e5fa0 R15: 00007ffc7504a338 [ 524.134893][T10285] [ 524.138300][T10285] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 524.145630][T10285] CPU: 1 PID: 10285 Comm: syz.6.1763 Not tainted syzkaller #0 [ 524.153617][T10285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 524.164297][T10285] Call Trace: [ 524.167621][T10285] [ 524.170595][T10285] dump_stack_lvl+0x168/0x22e [ 524.175370][T10285] ? memcpy+0x3c/0x60 [ 524.179458][T10285] ? show_regs_print_info+0x12/0x12 [ 524.185011][T10285] ? load_image+0x3b0/0x3b0 [ 524.189696][T10285] panic+0x2c9/0x710 [ 524.193668][T10285] ? bpf_jit_dump+0xd0/0xd0 [ 524.198353][T10285] __warn+0x2f8/0x4f0 [ 524.202401][T10285] ? __alloc_pages+0x2f4/0x4e0 [ 524.207231][T10285] ? __alloc_pages+0x2f4/0x4e0 [ 524.212095][T10285] report_bug+0x2ba/0x4f0 [ 524.216802][T10285] ? __alloc_pages+0x2f4/0x4e0 [ 524.221842][T10285] handle_bug+0x3a/0x70 [ 524.226248][T10285] exc_invalid_op+0x16/0x40 [ 524.232211][T10285] asm_exc_invalid_op+0x16/0x20 [ 524.237384][T10285] RIP: 0010:__alloc_pages+0x2f4/0x4e0 [ 524.243051][T10285] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 32 1f 45 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff [ 524.263249][T10285] RSP: 0018:ffffc90003727a00 EFLAGS: 00010246 [ 524.269740][T10285] RAX: ffffc90003727a00 RBX: 1ffff920006e4f44 RCX: 0000000000000000 [ 524.278557][T10285] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003727a68 [ 524.287301][T10285] RBP: ffffc90003727b00 R08: dffffc0000000000 R09: ffffc90003727a40 [ 524.296036][T10285] R10: fffff520006e4f4d R11: 1ffff920006e4f48 R12: 0000000000000013 [ 524.304941][T10285] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 524.314042][T10285] ? zone_statistics+0x170/0x170 [ 524.319134][T10285] ? __might_fault+0xa6/0x120 [ 524.323929][T10285] ? __lock_acquire+0x7c50/0x7c50 [ 524.329580][T10285] ? do_vfs_ioctl+0xcb5/0x1d10 [ 524.334592][T10285] __kmalloc_large_node+0x8c/0x1e0 [ 524.340505][T10285] ? raw_ioctl+0x17c7/0x39c0 [ 524.345779][T10285] __kmalloc+0x110/0x240 [ 524.350219][T10285] ? _copy_from_user+0x10b/0x170 [ 524.355306][T10285] raw_ioctl+0x17c7/0x39c0 [ 524.360323][T10285] ? tomoyo_path_number_perm+0x4ae/0x600 [ 524.366292][T10285] ? __kmem_cache_free+0xb6/0x1f0 [ 524.371557][T10285] ? tomoyo_path_number_perm+0x503/0x600 [ 524.377426][T10285] ? tomoyo_path_number_perm+0x1b6/0x600 [ 524.383131][T10285] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 524.388683][T10285] ? make_qualifier+0x3f0/0x3f0 [ 524.394237][T10285] ? __fget_files+0x28/0x4d0 [ 524.399098][T10285] ? bpf_lsm_file_ioctl+0x5/0x10 [ 524.404397][T10285] ? security_file_ioctl+0x7c/0xa0 [ 524.409634][T10285] ? make_qualifier+0x3f0/0x3f0 [ 524.414807][T10285] __se_sys_ioctl+0xfa/0x170 [ 524.419651][T10285] do_syscall_64+0x4c/0xa0 [ 524.424252][T10285] ? clear_bhb_loop+0x60/0xb0 [ 524.429017][T10285] ? clear_bhb_loop+0x60/0xb0 [ 524.434126][T10285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 524.440091][T10285] RIP: 0033:0x7f1aa778f749 [ 524.444765][T10285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.465276][T10285] RSP: 002b:00007f1aa85ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 524.474294][T10285] RAX: ffffffffffffffda RBX: 00007f1aa79e5fa0 RCX: 00007f1aa778f749 [ 524.483289][T10285] RDX: 0000200000000000 RSI: 00000000c0085508 RDI: 0000000000000003 [ 524.492620][T10285] RBP: 00007f1aa7813f91 R08: 0000000000000000 R09: 0000000000000000 [ 524.501170][T10285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.509212][T10285] R13: 00007f1aa79e6038 R14: 00007f1aa79e5fa0 R15: 00007ffc7504a338 [ 524.517563][T10285] [ 524.520977][T10285] Kernel Offset: disabled [ 524.525446][T10285] Rebooting in 86400 seconds..