last executing test programs: 4m25.527859024s ago: executing program 4 (id=436): socket$nl_generic(0x10, 0x3, 0x10) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "712a47568b2c402e2c5792b5adbbb82e0c1f8ee15ff7a4373a68eb060d768899", "4a3eb3768515948dfab2e1f39f58465d11fafea228a4086797ceab4b73313c93", "2a9b70e21ec29d05eb89d11e2ed69c5ab4272fac74fcaab9925fabaa303bac61", "38e510a45bd95217d2b38c09fedae469737f49b6a3ef2793f4dae81d598e4809", "f16f995bdf5e1d0f32a39b81f061d8cf37f3a57c678b2356afda00", "87e20d1a690faf456b2d5369", 0x7afc, 0x3, 0x4, 0x6fa, 0x7ff}}) 4m24.847964437s ago: executing program 4 (id=438): openat$vcsa(0xffffffffffffff9c, &(0x7f0000001140), 0x141002, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) write$sndseq(r0, 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 4m24.521229968s ago: executing program 4 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(r0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000001fe000014a800000000000000000000000000000000003e37ef2e6ae76391b57e94dee93e45494a309e3dd52b2dec0c3a4fb12648ffa6859d7511850c278a3396b13c98522efb829add3c5e535aee5ea22b7aa335e5fb815c1b83e48cf09e486a325fb00b55f06c8afa37991a5d71e26cb97472e0852cca7bfef61761f42447ce920835aa1a4050da772d292d61905c233786dbe7ebd61d413c6278b94683577c3d7a41cbef467319642394faeaa738d01949c84ea7202093ce7ae5e874d464030e69b855d120"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040004) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x8, 0xfa04, 0xc8, 0x6c02, 0x1f8, 0x194, 0x194, 0x1f8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x8}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1002, 0x2, 0x4}, {0x1, 0x2, 0x4}, {0x4, 0x6}, 0x3, 0x1005}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000380), 0x1a, 0x0, 0x0, 0x8}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) 4m21.910900834s ago: executing program 4 (id=450): openat$vcsa(0xffffffffffffff9c, &(0x7f0000001140), 0x141002, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) write$sndseq(r0, 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 4m21.674300051s ago: executing program 4 (id=454): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") open(0x0, 0x4827e, 0x195) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000140)=0x7f) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)={[{@i_version}, {@nolazytime}, {@mb_optimize_scan}, {@grpjquota}, {@errors_remount}]}, 0x2, 0x29f, &(0x7f0000000b00)="$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") open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) ppoll(&(0x7f0000000280)=[{r4, 0x901b}], 0x1, 0x0, 0x0, 0x0) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 4m20.961530905s ago: executing program 4 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(r0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000001fe000014a800000000000000000000000000000000003e37ef2e6ae76391b57e94dee93e45494a309e3dd52b2dec0c3a4fb12648ffa6859d7511850c278a3396b13c98522efb829add3c5e535aee5ea22b7aa335e5fb815c1b83e48cf09e486a325fb00b55f06c8afa37991a5d71e26cb97472e0852cca7bfef61761f42447ce920835aa1a4050da772d292d61905c233786dbe7ebd61d413c6278b94683577c3d7a41cbef467319642394faeaa738d01949c84ea7202093ce7ae5e874d464030e69b855d120"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040004) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x8, 0xfa04, 0xc8, 0x6c02, 0x1f8, 0x194, 0x194, 0x1f8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x8}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1002, 0x2, 0x4}, {0x1, 0x2, 0x4}, {0x4, 0x6}, 0x3, 0x1005}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000380), 0x1a, 0x0, 0x0, 0x8}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) 4m5.821374753s ago: executing program 32 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(r0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000001fe000014a800000000000000000000000000000000003e37ef2e6ae76391b57e94dee93e45494a309e3dd52b2dec0c3a4fb12648ffa6859d7511850c278a3396b13c98522efb829add3c5e535aee5ea22b7aa335e5fb815c1b83e48cf09e486a325fb00b55f06c8afa37991a5d71e26cb97472e0852cca7bfef61761f42447ce920835aa1a4050da772d292d61905c233786dbe7ebd61d413c6278b94683577c3d7a41cbef467319642394faeaa738d01949c84ea7202093ce7ae5e874d464030e69b855d120"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040004) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x8, 0xfa04, 0xc8, 0x6c02, 0x1f8, 0x194, 0x194, 0x1f8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0xff, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x8}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1002, 0x2, 0x4}, {0x1, 0x2, 0x4}, {0x4, 0x6}, 0x3, 0x1005}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000380), 0x1a, 0x0, 0x0, 0x8}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) 3m2.488057596s ago: executing program 2 (id=848): mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145840, 0x1ba) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m2.262325304s ago: executing program 2 (id=851): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$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") open(&(0x7f0000000100)='./file1\x00', 0x6000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adff", @ANYRES32=r0, @ANYBLOB="eb91"], 0x40c}}, 0x0) 3m1.226867198s ago: executing program 2 (id=854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x5, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x2d, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000003, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0x9, 0x2, 0x2, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0x9, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x2, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x2, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x4, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xc1, 0x7, 0x7, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0xdddd1000, 0x4, 0x5, 0xc3, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0x3000, 0x30}, {0xd000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0xffffffffffffffff, 0xb500, 0x3000, [0x9, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m0.820067842s ago: executing program 2 (id=858): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000040)=ANY=[], 0x2, 0x1518, &(0x7f0000000280)="$eJzs3Au4TtXWOPAx5pxLm8Sb5D7HHIs3uUySJJeERJIkR5J7QpIkSUhscktCEnJPcg/JLST3+y33JDmSJAkJSeb/0anPOadzTuf8z/k+3/Pt8Xue9ew59nrHeMfa4332u9baz36/7jCoct0qFWszM/xb8E9fUgEgBQD6AkBmAIgAoESWElkAh0J6jan/3pOI/6wHp17pDsSVJPNP22T+aZvMP22T+adtMv+0Teaftsn80zaZvxBp2dZpOa+VLe1u/8r9/wz/aOfv3v8Huf//v468//8fcrjI6M/XF7m+47+QIvNP22T+aZvMP22T+adtMv+0Teb/f1wEUOEf7Jb5p20yfyHSsit9/1m2K7td6defEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQoi04Vy4zADAr+sr3ZcQQgghhBBCCCH+c8JVfx6lu3KNCCGEEEIIIYQQ4r8RggINBiJIB1dBCqSHDHA1ZIRrIBNkhgRcC1ngOsgK10M2yA45ICfkgtyQBywQOGCIIS/kgyTcAPnhRigABaEQFAYPRaAo3ATF4GYoDrdACbgVSsJtUApKQxkoC7dDObgDykMFqAh3QiW4CypDFbgbqsI9UA3uhepwH9SA+6EmPAC14A9QGx6EOvAQ1IWHoR7UhwbQEBpBY2jy/5X/PHSBF6ArdINU6A494EXoCb2gN/SBvvAS9IOXoT+8AgNgIAyCV2EwvAZD4HUYCsNgOLwBI2AkjILRMAbGwjh4E8bDWzAB3oaJMAkmwxSYCtNgOrwDM2AmzIJ3YTa8B3NgLsyD+bAA3oeFsAgWwwewBD6EpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGt8BFsg+2wA3bCLtgNe+Bj2AufwD74FPbDZ3+dn/kf55/9q/yOCAioUKFBg+kwHaZgCmbADJgRM2ImzIQJTGAWzIJZMStmw2yYA3NgLsyFeTAPEhIyMubFvJjEJObH/FgAC2AhLIQePRbFolgMb8biWBxLYAksiSWxFJbG0lgWy2I5LIflsTxWxIpYCSthZayMd+PdeA9Ww2pYHatjDayBNbEm1sJaWBtrYx2sg3WxLtbDetgAG2AjbIRNsAk2xabYDJthC2yBLbEltsJW2BpbYxtsg20RsR22w/bYHjtgB+yInbATPo/P4wv4AnbDSqo79sAe2BN7Ym/sg33wJeyHL+PL+AoOwIE4CF/FV/E1HIJncCgOw+E4HMupkTgKRyOrsTgOx+F4HI8TcAJOxEk4CafgVJyG03E6zsCZOBPfxdn4Hr6Hc3EuzscFuAAX4iJcjItxCZ7FpbgMl+MKXImrcCWuwbW4BtfjBlyPm3ATbsEt+BF+hNtxO+7Enbgbd+PH+DF+gp/gANyP+/EAHsCDeBAP4SE8jIfxCB7Bo3gUj+ExPI7H8QSexFN4Ek/jaTyDZ/EcnsPzeB4v4LO5vqyzu+C6AaAuMcqodCqdSlEpKoPKoDKqjCqTyqQSKqGyqCwqq8qqsqlsKofKoXKpXCqPyqNIkWIVq7wqr0qqpMqv8qsCqoAqpAopr7wqqoqqYqqYKq6KqxLqVlVS3aZKqdKquS+ryqpyqoUvryqoiqqiqqTuUpVVFVVFVVVVVTVVTVVX1VUNVUPVVA+oWqo79sYH1aXJ1FUDsZ4ahA1UQ9VINVav4SOqqRqCzVRz1UI9pobhUGylmvrW6knVRo3CtuppNRqfUe3VWOygnlMdVSfVWT2vuqhmvuuvtzvVFOypeqneqo+agXepSxOrrF5RA9RANUi9qubja2qIel0NVcPUcPWGGqFGqlFqtBqjxqpx6k01Xr2lJqi31UQ1SU1WU9RUNU1NV++oGWqmmqXeVbPVe2qOmqvmqflqgXpfLVSL1GL1gVqiPlRL1TK1XK1QK9UqtVqtUWvVOrVebVAb1Sa1WW1RW9VHapvarnaonWqX2q32qI/VXvWJ2qc+VfvVZ+qA+qM6qD5Xh9QX6rD6Uh1RX6mj6mt1TH2jjqtv1Ql1Up1S36nT6vvEGXVWnVM/qPPqR3VB/aQuqqBAo1Zaa6MjnU5fpVN0ep1BX61BX6Mz6cw6oa/VWfR1Oqu+XmfT2XUOnVPn0rl1Hm01aadZxzqvzqeT+gadX9+oC+iCupAurL0uoovqm3QxfbMurm/RJfStuqS+TZfSpXUZXVbfrsvpO3R5XUFX1HfqSvouXVlX0XfrqvoeXU3fq6vr+3QNfb+uqR/QtfQfdG39oK6jH9J19cO6nq6vG+iGupFurJvoR3RT/ahuppvrFvox3VI/rlvpJ3Rr/aRuo5/SbfXTup1+RrfXz+oO+jndUXfSnfVP+qIOuqvuplN1d91Dv6h76l66t+6j++qXdD/9su6vX9ED9EA9SL+qB+vX9BD9uh6qh+nh+g09Qo/Uo/RoPUaP1eP0m3q8fktP0G/riXqSnqyn6Kl6mu79S6VZ/0T+W38jv//Pz75Fb9Uf6W16u96hd+pderfeo/fovXqv3qf36f16vz6gD+iD+qA+pA/pw/qwPqKP6KP6qD6mj+nj+rg+oU/qH/R3+rT+Xp/RZ/VZ/YM+r8/rC7/8DMCgUUYbYyKTzlxlUkx6k8FcbTKaa0wmk9kkzLUmi7nOZDXXm2wmu8lhcppcJrfJY6wh4wyb2OQ1+UzS3GDymxtNAVPQFDKFjTdFTFFz07+d/3v9NTFNTFPT1DQzzUwL08K0NC1NK9PKtDatTRvTxrQ1bU070860N+1NB9PBdDQdTWfT2XQxXUxX09WkmlTTw7xoeppeprfpY/qal0w/08/0N/3NADPADDKDzGAz2AwxQ8xQM9QMN8PNCDPCjDKjzBgzxowz48x4M95MMBPMRDPRTDaTzVQz1Uw3080MM8PMMrPMbDPbzDFzzDwzzywwC8xCs9AsNovNErPELDXLzDKzwqwwq8wqs8asMevMOrPBbDCbzCaz1Gw1W802s83sMDvMLrPL7DF7zF6z1+wz+8x+s98cMAfMQXPQHDKHzGFz2BwxR8xRc9QcM8fMcXPcnDAnzClzypw2p80Zc8acM+fMeXPeXDAXzEVz8dJpX6QiFZnIROmidFFKlBJliDJEGaOMUaYoU5SIElGWKEuUNbo+yhZlj3JEOaNcUe4oFWxEkYs4iqO8Ub4oGd0Q5Y9ujApEBaNCUeHIR0WiotFNUbHo5qh4dEtUIro1KhndFpWKSkdlorLR7VG56I6ofFQhqhjdGVWK7ooqR1Wiu6Oq0T1RtejeqHp0X1Qjuj+qGT0Q1Yr+ENWOHozqRA9FdaOHo3pR/ahB1DBqFDWOmvxH64dwJvujvqvtZlNtd9vDvmh72l62t+1j+9qXbD/7su1vX7ED7EA7yL5qB9vX7BD7uh1qh9nh9g07wo60o+xoO8aOtePsm3a8fctOsG/biXaSnWyn2Kl2mp1u37Ez7Ew7y75rZ9v37Bw7186z8+0C+75daBfZxfYDu8R+aJfaZXa5XWFX2lV2tV1j19p1dr3dYDfaTXaz3WK32o/sNrvd7rA77S672+6xH9u99hO7z35q99vP7AH7R3vQfm4P2S/sYfulPWK/skft1/aY/cYet9/aE/akPWW/s6ft9/aMPWvP2R/sefujvWB/shdtuHRyf+ntnQwZSkfpKIVSKANloIyUkTJRJkpQgrJQFspKWSkbZaMclINyUS7KQ3noEiamvJSXkpSk/JSfClABKkSFyJOnolSUilExKk7FqQSVoJJUkkpRKSpDZeh2up3uoDuoAlWgO+lOuovuoipUhapSVapG1ag6VacaVINqUk2qRbWoNtWmOlSH6lJdqkf1qAE1oEbUiJpQE2pKTakZNaMW1IJaUktqRa2oNbWmNtSG2lJbakftqD21pw7UgTpSR+pMnakLdaGu1JVSKZV6UA/qST2pN/WmvtSX+lE/6k/9aQANoEE0iAbTYBpCQ2goDaPh9AaNoJE0ikbTGBpL42gcjafxNIEm0ESaSJNpMk2lqTSdptMMmkGzaBbNptk0h+bQPJpHC2gBLaSFtJgW0xJaQktpKS2n5bSSVtJqWk1raS2tp/W0kTbSZtpMW2krbaNttIN20C7aRXtoD+2lvbSP9tF+2k8H6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2iU3SaTtMZOkPn6Bydpx/pAv1EFylQilOQwV3tMrprXCaX2aW49O5SHAHApTiHy+lyudwuj7Mum8v+FzE55wq4gq6QK+y8K+KKupt+E5dypV0ZV9bd7sq5O1z538RV3T2umrvXVXf3uSru7r+Ia7j7XU33sKvl6rvarqGr4xq7utHDrp6r7xq4hq6Ra+xausddK/eEa+2edG3cU7+JF7pFbq1b59a7DW6v+8Sdcz+4o+5rd9796Lq6bq6ve8n1cy+7/u4VN8AN/E083L3hRriRbpQb7ca4sb+JJ7spbqqb5qa7d9wMN/M38QL3vpvtFrs5bq6b5+b/HF/qabH7wC1xH7qlbplb7la4lW6VW+3W/FevK9wmt9ltcXvcx26b2+52uJ1hl9v9c3zpOPa5T91+95k74r5yB93n7pA75g67L3+OLx3fMfeNO+6+dSfcSXfKfedOu+/dGXf25+O/dOzfuZ/cRRccMLJizYYjTsdXcQqn5wx8NWfkazgTZ+YEX8tZ+LrMmfl6zsbZOQfn5Fycm/OwZWLHzDHn5Xyc5Bs4P9/IBbggF+LC7LkIF+WbuBjfzMX5Fi7Bt3JJvo1LcWkuw2X5dq4fQijPFbgi38mVQuDKXIXv5qp8D1fje7k638c1+H6uyQ9wLf4D1+YHuQ4/xHX5Ya7H9bkBN+RG3Jib8CPclB/lZtycW/Bj3JIf51b8BLfmJ7kNP8Vt+Wlux89we36WO/Bz3JE7cWd+nrvwC9yVu3Eqd+ce/CL35F7cm/twX36J+/HL3J9f4QE8kAfxqzyYX+Mh/DoP5WE8nN/gETySR/FoHsNjeRy/yeP5LZ7Ab/NEnsSTeQpP5Wk8nd/hGTyTZ/G7PJvf4zk8l+fxfF7A7/NCXsSL+QNewh/yUl7Gy3kFr+RVvJrX8Fpex+t5A2/kTbyZt/BW/oi38XbewTt5F+/mPfwx7+VPeB9/yvv5Mz7Af+SD/Dkf4i/4MH/JR/grPspf8zH+ho/zt3yCT/Ip/o5P8/d8hs/yOf6Bz/OPfIF/4oscGGKMVaxjE0dxuviqOCVOH2eIr44zxtfEmeLMcSK+Ns4SXxdnja+Ps8XZ4xxxzjhXnDvOE9uYYhdzHMd543xxMr4hzh/fGBeIC8aF4sKxj4vEReOb4mLxzXHx+Ja4RHxrXDK+LYbU0vHD95WNb4/LxXfE5eMKccX4zrhSfFdcOa4S3x1Xje+Jq8X3xtXj++Li8f1xzfiBuFb8h7h2/GBcJ34orhs/HNeL68cN4oZxo7hx3CR+JG4aPxo3i5vHLeLH4pbx43Gr+Im4dfxk3CZ+6nf3p8bd4x7xi/GLcQj3ql+uE5MLk4uSi5MfJJckP0wuTS5LLk+uSK5MrkquTq5Jrk2uS65PbkhuTG5Kbk5uSYZQ5Srw6JXX3vjIp/NX+RSf3mfwV/uM/hqfyWf2CX+tz+Kv81n99T6bz+5z+Jw+l8/t83jryTvPPvZ5fT6f9Df4/P5GX8AX9IV8Ye99EV/UN/ZNfBPf1D/qm/nmvoV/zD/mH/eP+yf8E/5J38Y/5dv6p307/4xv75/1z/rnfEffyXf2z/su/gXf1XfzqT7V9/A9fE/f0/f2vX1f39f38/18f9/fD/AD/CA/yA/2g/0QP8QP9UP9cD/cj/Aj/Cg/yo/xY/w4P86P9+P9BD/BT/QT/WQ/2U/1U/10P93P8DP8LD/Lzy4w28/xc/w8P88v8Av8Qr/QL/aL/RK/xC/1S/1yv9yv9Cv9ar/ar/Vr/Xq/3m/0G/1mv9lv9Vv9Nr/N7/A7/C6/y+/xe/xev9fv8/v8fr/fH/AH/EF/0B/yX/jD/kt/xH/lj/qv/TH/jT/uv/Un/El/yn/nT/vv/Rl/1p/zP/jz/kd/wf/kL/rgxyXeTIxPvJWYkHg7MTExKTE5MSUxNTEtMT3xTmJGYmZiVuLdxOzEe4k5ibmJeYn5iQWJ9xMLE4sSixMfJJYkPkwsTSxLLE+sSKxMrEqEkHtbHPKGfCEZbgj5w42hQCgYCoXCwYcioWi4KRQLN4fi4ZZQItwaSobbQqlQOpQJ9UOD0DA0Co1Dk/BIaBoeDc1C89AiPBZahsdDq/BEaB2eDG3CU6FteDq0C8+E9uHZ0CE8FzqGTqFzeD50CS+ErqFbSA3dQ4/wYugZeoXeoU/oG14K/cLLoX94JQwIA8Og8GoYHF4LQ8LrYWgYFoaHN8KIMDKMCqPDmDA2jAtvhvHhrTAhvB0mhklhcpgSpoZpYXp4J8wIM8Os8G6YHd4Lc8LcMC/MDwvC+2FhWBQWhw/CkvBhWBqWheVhRVgZVoXVYU1YG9aF9WFD2Bg2hc1hS9gaPgrbwvawI+wMu8LusCd8HPaGT8K+8GnYHz4LB8Ifw8HweTgUvgiHw5fhSPgqHA1fh2Phm3A8fBtOhJPhVPgunA7fhzPhbDgXfgjnw4/hQvgpXJT/WRNCCCGE+Kfo39nf/W98Lx0A/HpJ1AMArtme8/Bf19yY7U/rXipXywQAPNmtw4O/bpUqpaam/vLYpRqifHMBIPGX9X+Nl0ELeBxaQ3Mo9jf766U6neffqZ+8FSDDz9GfThFT4Nf4z+vf/HfqP/LY8IUl43NZ/kH9uQAF8l3OSQ+X48v1i/+d+tmb/k7/6T8fB9Dsz3IywuX4cv2i8Cg8Ba3/4pFCCCGEEEIIIcSf9FJl2v3960/9X9fnuczlnKvgcvx71+dCCCGEEEIIIYS48p7p1PmJR1q3bt7un1vgL3+X/tey/u4i5Zcu/t06spDF/9gifdp40V6p30hCCCGEEEKI/y6XT/qvdCdCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIUTa9T/xcWJX+hiFEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIK+3/BQAA//++0jN5") syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) rename(&(0x7f0000002240)='./file1\x00', &(0x7f0000000040)='.\x02\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00001e6000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xa75) 2m59.475533526s ago: executing program 2 (id=860): unshare(0x2a020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000000021f38e9e0500000800000085000000a5000000bf91080000000000b70200000200000084ffea0085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m58.041681453s ago: executing program 2 (id=868): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x5, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x2d, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000003, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0x9, 0x2, 0x2, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0x9, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x2, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x2, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x4, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xc1, 0x7, 0x7, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0xdddd1000, 0x4, 0x5, 0xc3, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0x3000, 0x30}, {0xd000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0xffffffffffffffff, 0xb500, 0x3000, [0x9, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m57.718041854s ago: executing program 33 (id=868): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x5, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x2d, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000003, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0x9, 0x2, 0x2, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0x9, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x2, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x2, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x4, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xc1, 0x7, 0x7, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0xdddd1000, 0x4, 0x5, 0xc3, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0x3000, 0x30}, {0xd000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0xffffffffffffffff, 0xb500, 0x3000, [0x9, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.350396201s ago: executing program 3 (id=1756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = gettid() ptrace$setregset(0x4205, r3, 0x0, &(0x7f0000000240)={0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0x2000}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, 0x0, 0x0) r6 = dup(r5) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) 18.761930233s ago: executing program 3 (id=1759): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000006000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a656374000014000280080001"], 0xe8}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000002c0007012bbd7000ffdbdf25057c000008000180d8ba7c430c0003"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc810) 18.148133843s ago: executing program 3 (id=1762): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000080)) 12.701245522s ago: executing program 3 (id=1781): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.\x00\x00\x00', 0x4}], 0x1}, 0x80054) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2082, 0x0) 12.405920582s ago: executing program 3 (id=1786): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r0, r0, 0x0, 0x80000000) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000280)=""/133) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x128, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x260, 0x20a, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [], [0x0, 0x0, 0x0, 0xffffff00], 'pimreg1\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x0, 0x4}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x22, 0x0, 0x4, 0xc}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@local, @local, [], [0x0, 0x0, 0x0, 0xff], 'syzkaller1\x00', 'caif0\x00', {0xff}, {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 11.085174616s ago: executing program 3 (id=1792): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004a14633277fbac141411e0000601be3e7d2a", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.476145316s ago: executing program 34 (id=1792): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004a14633277fbac141411e0000601be3e7d2a", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.168026357s ago: executing program 1 (id=1822): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 5.982750523s ago: executing program 1 (id=1824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'pim6reg1\x00', @multicast}) 5.638440485s ago: executing program 1 (id=1833): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000000}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) 5.466361541s ago: executing program 1 (id=1834): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000080)) 4.285329389s ago: executing program 6 (id=1842): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 4.167725003s ago: executing program 6 (id=1845): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x69, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000180)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) 3.97775588s ago: executing program 6 (id=1848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0xffdd) 2.556023887s ago: executing program 1 (id=1852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000000000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.555788136s ago: executing program 1 (id=1853): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4c}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000bc0)={0x40, 0x18, 0x4, "b446fc10"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0x61}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.434747051s ago: executing program 6 (id=1856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) 2.395750232s ago: executing program 6 (id=1859): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004040080, 0x1c00000, 0x6, 0x0, 0xf, 0x0, 0x8000], 0x1, 0x3c4210}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.204077498s ago: executing program 5 (id=1861): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) 2.202380948s ago: executing program 6 (id=1862): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000580)='./file1\x00', 0x1004801, &(0x7f0000000140)=ANY=[], 0x1, 0x217, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) fadvise64(r0, 0xb400, 0x40000c104, 0x3) 2.082177142s ago: executing program 5 (id=1864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) request_key(0x0, 0x0, &(0x7f00000007c0)='\x00', 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000000) symlink(&(0x7f000000a900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) 1.81777628s ago: executing program 0 (id=1866): renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1) 1.066807825s ago: executing program 0 (id=1867): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f0000000140)='./file0\x00', 0x204b82f, 0x0, 0xff, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x190787b, 0x0, 0x1, 0x0, &(0x7f0000000000)) 1.031086547s ago: executing program 5 (id=1868): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) listen(r0, 0x8001) 762.687326ms ago: executing program 0 (id=1869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) 762.518775ms ago: executing program 5 (id=1870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000540)) 562.861702ms ago: executing program 5 (id=1871): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0xffa4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) 517.483213ms ago: executing program 0 (id=1872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc) 345.039779ms ago: executing program 0 (id=1873): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x32, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 100.030067ms ago: executing program 5 (id=1874): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 0s ago: executing program 0 (id=1875): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffd2d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffedf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x3d, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r2, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): s obsolete (PF_INET,SOCK_PACKET) [ 229.756561][ T6551] loop0: detected capacity change from 0 to 16 [ 229.865830][ T6558] netlink: 'syz.5.707': attribute type 4 has an invalid length. [ 229.891835][ T6551] erofs: (device loop0): mounted with root inode @ nid 36. [ 230.080758][ T6563] loop2: detected capacity change from 0 to 2048 [ 230.248225][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'. [ 230.372893][ T6563] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.498263][ T6587] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 233.202902][ T6610] loop3: detected capacity change from 0 to 256 [ 233.336003][ T6610] FAT-fs (loop3): Directory bread(block 64) failed [ 233.375035][ T6614] netlink: 'syz.5.721': attribute type 4 has an invalid length. [ 233.393158][ T6610] FAT-fs (loop3): Directory bread(block 65) failed [ 233.474838][ T6610] FAT-fs (loop3): Directory bread(block 66) failed [ 233.559684][ T6610] FAT-fs (loop3): Directory bread(block 67) failed [ 233.603688][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 233.603737][ T6610] FAT-fs (loop3): Directory bread(block 68) failed [ 233.729265][ T6610] FAT-fs (loop3): Directory bread(block 69) failed [ 233.918141][ T6610] FAT-fs (loop3): Directory bread(block 70) failed [ 234.019440][ T6610] FAT-fs (loop3): Directory bread(block 71) failed [ 234.026162][ T6610] FAT-fs (loop3): Directory bread(block 72) failed [ 234.131112][ T6610] FAT-fs (loop3): Directory bread(block 73) failed [ 234.138931][ T6639] loop0: detected capacity change from 0 to 2048 [ 234.275320][ T6653] netlink: 32 bytes leftover after parsing attributes in process `syz.5.731'. [ 234.497422][ T6639] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 237.108111][ T6711] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 237.530090][ T6724] loop1: detected capacity change from 0 to 2048 [ 237.921758][ T6724] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.952116][ T26] audit: type=1800 audit(1780508305.926:29): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.749" name="bus" dev="loop1" ino=1368 res=0 errno=0 [ 237.972628][ T6743] netlink: 'syz.5.752': attribute type 4 has an invalid length. [ 238.247659][ T6745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.755'. [ 238.477443][ T6760] loop0: detected capacity change from 0 to 8 [ 238.508397][ T6759] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 238.533033][ T6760] attempt to access beyond end of device [ 238.533033][ T6760] loop0: rw=2048, want=36028797018963976, limit=8 [ 238.545248][ T6760] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 238.553622][ T6760] unable to read xattr id index table [ 239.468543][ T6785] netlink: 20 bytes leftover after parsing attributes in process `syz.0.770'. [ 239.557254][ T6789] loop1: detected capacity change from 0 to 2048 [ 239.709640][ T6789] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.817719][ T26] audit: type=1800 audit(1780508307.696:30): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.769" name="bus" dev="loop1" ino=1368 res=0 errno=0 [ 239.900616][ T6792] loop3: detected capacity change from 0 to 1024 [ 240.023003][ T6792] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 240.182095][ T6792] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (6416!=35945) [ 240.267420][ T6792] EXT4-fs error (device loop3): ext4_fill_super:4872: inode #2: comm syz.3.760: iget: special inode unallocated [ 240.333090][ T6792] EXT4-fs (loop3): get root inode failed [ 240.344633][ T6801] loop1: detected capacity change from 0 to 2048 [ 240.346781][ T6792] EXT4-fs (loop3): mount failed [ 240.541799][ T6801] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 240.642083][ T26] audit: type=1800 audit(1780508308.616:31): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.775" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 240.683134][ T6801] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 240.921331][ T6807] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 19 with max blocks 479 with error 28 [ 240.992258][ T6807] EXT4-fs (loop1): This should not happen!! Data will be lost [ 240.992258][ T6807] [ 241.047955][ T6807] EXT4-fs (loop1): Total free blocks count 0 [ 241.096040][ T6807] EXT4-fs (loop1): Free/Dirty block details [ 241.174167][ T6807] EXT4-fs (loop1): free_blocks=4096 [ 241.208503][ T6807] EXT4-fs (loop1): dirty_blocks=512 [ 241.214560][ T6807] EXT4-fs (loop1): Block reservation details [ 241.259024][ T6807] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 241.374228][ T4331] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 241.440286][ T4331] EXT4-fs (loop1): This should not happen!! Data will be lost [ 241.440286][ T4331] [ 241.485077][ T6830] loop0: detected capacity change from 0 to 256 [ 241.736694][ T6835] loop2: detected capacity change from 0 to 2048 [ 241.793862][ T6835] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.811317][ T6830] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 241.812690][ T26] audit: type=1800 audit(1780508309.786:32): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.785" name="bus" dev="loop2" ino=1368 res=0 errno=0 [ 242.229856][ T6852] loop0: detected capacity change from 0 to 512 [ 242.282520][ T6852] EXT4-fs (loop0): Ignoring removed orlov option [ 242.311683][ T6852] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 242.356972][ T6852] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.790: corrupted in-inode xattr [ 242.415374][ T6852] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.790: couldn't read orphan inode 15 (err -117) [ 242.455974][ T6852] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 243.316970][ T6887] loop2: detected capacity change from 0 to 2048 [ 243.416189][ T6887] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.436600][ T26] audit: type=1800 audit(1780508311.406:33): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.798" name="bus" dev="loop2" ino=1368 res=0 errno=0 [ 243.502489][ T6896] loop3: detected capacity change from 0 to 1024 [ 243.552151][ T6897] netlink: 'syz.0.800': attribute type 4 has an invalid length. [ 244.142549][ T6903] loop0: detected capacity change from 0 to 8 [ 244.880911][ T6931] loop1: detected capacity change from 0 to 256 [ 244.949650][ T6931] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 244.973485][ T6934] loop2: detected capacity change from 0 to 1024 [ 245.052612][ T6934] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 245.100065][ T6934] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (6416!=35945) [ 245.160425][ T6934] EXT4-fs error (device loop2): ext4_fill_super:4872: inode #2: comm syz.2.802: iget: special inode unallocated [ 245.227029][ T6934] EXT4-fs (loop2): get root inode failed [ 245.327566][ T6934] EXT4-fs (loop2): mount failed [ 245.458420][ T6940] loop1: detected capacity change from 0 to 2048 [ 245.653325][ T6940] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.677615][ T26] audit: type=1800 audit(1780508313.646:34): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.812" name="bus" dev="loop1" ino=1368 res=0 errno=0 [ 245.766399][ T6947] loop3: detected capacity change from 0 to 8 [ 245.832469][ T6947] attempt to access beyond end of device [ 245.832469][ T6947] loop3: rw=2048, want=36028797018963976, limit=8 [ 245.844540][ T6947] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 245.852147][ T6947] unable to read xattr id index table [ 246.550866][ T6980] loop3: detected capacity change from 0 to 2048 [ 246.639649][ T6980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.840036][ T6985] device wlan0 entered promiscuous mode [ 246.919361][ T6984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.733952][ T7000] loop0: detected capacity change from 0 to 512 [ 247.908462][ T6998] loop1: detected capacity change from 0 to 8 [ 247.975475][ T6998] attempt to access beyond end of device [ 247.975475][ T6998] loop1: rw=2048, want=36028797018963976, limit=8 [ 247.987750][ T6998] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 247.995280][ T6998] unable to read xattr id index table [ 248.012977][ T7000] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 248.321781][ T7000] process 'syz.0.832' launched './file0' with NULL argv: empty string added [ 248.489703][ T26] audit: type=1326 audit(1780508316.466:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.1.835" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c42887e59 code=0x0 [ 249.964286][ T7039] loop0: detected capacity change from 0 to 128 [ 249.992249][ T7035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.206934][ T7039] attempt to access beyond end of device [ 250.206934][ T7039] loop0: rw=2049, want=753, limit=128 [ 250.983381][ T7068] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 251.011427][ T7067] loop2: detected capacity change from 0 to 1024 [ 251.667700][ T26] audit: type=1800 audit(1780508319.626:36): pid=7067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.851" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 251.723306][ T7067] netlink: 148 bytes leftover after parsing attributes in process `syz.2.851'. [ 251.786469][ T7067] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 252.359387][ T7090] loop2: detected capacity change from 0 to 256 [ 252.419421][ T7090] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.492172][ T7090] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 252.512271][ T7090] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 252.696780][ T7093] loop0: detected capacity change from 0 to 2048 [ 253.395063][ T7093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.863445][ T7103] device wlan0 entered promiscuous mode [ 253.906157][ T7109] loop0: detected capacity change from 0 to 512 [ 253.941011][ T7102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.959845][ T7108] loop3: detected capacity change from 0 to 1024 [ 254.117811][ T7117] xt_TCPMSS: Only works on TCP SYN packets [ 254.393432][ T7109] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrquota,,errors=continue. Quota mode: writeback. [ 254.518086][ T26] audit: type=1800 audit(1780508322.446:37): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.864" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 254.682707][ T7108] netlink: 140 bytes leftover after parsing attributes in process `syz.3.864'. [ 254.888732][ T7109] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.944545][ T7108] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 255.035052][ T26] audit: type=1800 audit(1780508323.006:38): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.862" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 255.347583][ T4236] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 255.433288][ T7132] loop0: detected capacity change from 0 to 256 [ 255.466179][ T7132] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.569887][ T7135] loop3: detected capacity change from 0 to 2048 [ 255.632404][ T7135] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 255.643735][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.650089][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.777814][ T4236] usb 2-1: unable to get BOS descriptor or descriptor too short [ 255.857980][ T4236] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.876203][ T4236] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 255.901312][ T4236] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 255.955987][ T4236] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 256.014491][ T4236] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 256.045068][ T7145] loop0: detected capacity change from 0 to 2048 [ 256.073292][ T4236] usb 2-1: config 1 interface 1 has no altsetting 0 [ 256.226915][ T7142] chnl_net:caif_netlink_parms(): no params data found [ 256.417918][ T4236] usb 2-1: string descriptor 0 read error: -22 [ 256.427721][ T4236] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 256.488438][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.073057][ T7142] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.167735][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.200288][ T7142] device bridge_slave_0 entered promiscuous mode [ 257.258826][ T7142] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.269404][ T7161] xt_TCPMSS: Only works on TCP SYN packets [ 257.305893][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.336387][ T7142] device bridge_slave_1 entered promiscuous mode [ 257.393406][ T7142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.398649][ T4236] usb 2-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4 [ 257.426603][ T7142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.464732][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.531174][ T7165] device wlan0 entered promiscuous mode [ 257.644509][ T7164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.714605][ T7142] team0: Port device team_slave_0 added [ 257.756705][ T7142] team0: Port device team_slave_1 added [ 257.785305][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.865887][ T7169] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 258.010155][ T1109] Bluetooth: hci2: command 0x0409 tx timeout [ 258.625660][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.794502][ T7173] loop1: detected capacity change from 0 to 1024 [ 258.870463][ T26] audit: type=1800 audit(1780508326.846:39): pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.881" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 258.895207][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.048715][ T7173] netlink: 140 bytes leftover after parsing attributes in process `syz.1.881'. [ 259.097392][ T7173] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 259.171297][ T7142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.188817][ T7142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.215350][ T7142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.269806][ T7142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.366275][ T7181] loop0: detected capacity change from 0 to 2048 [ 259.407847][ T7142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.588304][ T7181] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.945222][ T4236] usb 2-1: Warning! Unlikely big volume range (=13285), cval->res is probably wrong. [ 259.955378][ T4236] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = -13285/0/1 [ 260.039288][ T7142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.069469][ T4236] usb 2-1: USB disconnect, device number 6 [ 260.117385][ T1109] Bluetooth: hci2: command 0x041b tx timeout [ 260.360880][ T7189] loop1: detected capacity change from 0 to 8 [ 260.536843][ T7189] unable to read inode lookup table [ 260.761811][ T7142] device hsr_slave_0 entered promiscuous mode [ 260.890881][ T7142] device hsr_slave_1 entered promiscuous mode [ 261.010051][ T7142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.137286][ T7142] Cannot create hsr debugfs directory [ 262.499189][ T4330] Bluetooth: hci2: command 0x040f tx timeout [ 262.602857][ T7208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.794090][ T7142] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 262.816876][ T7216] loop1: detected capacity change from 0 to 1024 [ 262.845194][ T7142] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 262.883218][ T26] audit: type=1800 audit(1780508330.856:40): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.893" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 262.907619][ T7216] netlink: 140 bytes leftover after parsing attributes in process `syz.1.893'. [ 262.916618][ T7216] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 262.957194][ T7142] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 263.087668][ T7142] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 263.834846][ T7229] loop3: detected capacity change from 0 to 2048 [ 264.026142][ T7229] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.141650][ T26] audit: type=1800 audit(1780508332.086:41): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.894" name="bus" dev="loop3" ino=1368 res=0 errno=0 [ 264.216125][ T7236] loop0: detected capacity change from 0 to 128 [ 264.418490][ T7240] futex_wake_op: syz.5.897 tries to shift op by 144; fix this program [ 264.576625][ T7242] input: syz1 as /devices/virtual/input/input10 [ 265.183315][ T4330] Bluetooth: hci2: command 0x0419 tx timeout [ 265.284128][ T7236] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 265.339365][ T7236] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 265.527180][ T7142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.666406][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.713886][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.906354][ T7260] loop1: detected capacity change from 0 to 2048 [ 265.911267][ T7142] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.924373][ T7262] loop0: detected capacity change from 0 to 1024 [ 265.951685][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.981700][ T7260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.009446][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.059480][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.066624][ T4275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.079184][ T26] audit: type=1800 audit(1780508334.056:42): pid=7262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.904" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 266.144948][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.263153][ T7262] netlink: 148 bytes leftover after parsing attributes in process `syz.0.904'. [ 266.291313][ T7262] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 266.374283][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.398656][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.473562][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.480754][ T4275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.578187][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.610624][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.701599][ T7278] xt_TCPMSS: Only works on TCP SYN packets [ 266.961342][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.120648][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.570162][ T7252] loop3: detected capacity change from 0 to 8192 [ 267.585089][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.605663][ T7281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.616627][ T4682] loop3: p1 p2 p3 [ 267.620865][ T4682] loop3: partition table partially beyond EOD, truncated [ 267.634045][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.673561][ T4682] loop3: p1 start 51379968 is beyond EOD, truncated [ 267.688456][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.725666][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.742526][ T4682] loop3: p3 size 100663552 extends beyond EOD, truncated [ 267.758703][ T7287] loop1: detected capacity change from 0 to 1024 [ 267.780800][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.800006][ T7252] loop3: p1 p2 p3 [ 267.807163][ T7252] loop3: partition table partially beyond EOD, truncated [ 267.835032][ T7142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.856073][ T7287] EXT4-fs (loop1): Ignoring removed oldalloc option [ 267.875321][ T7287] EXT4-fs (loop1): Ignoring removed orlov option [ 267.899435][ T7252] loop3: p1 start 51379968 is beyond EOD, truncated [ 267.924741][ T7142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.935335][ T7252] loop3: p3 size 100663552 extends beyond EOD, truncated [ 267.948346][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.968343][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.969024][ T7287] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,nojournal_checksum,jqfmt=vfsv0,norecovery,debug_want_extra_isize=0x0000000000000036,orlov,journal_ioprio=0x0000000000000003,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 268.279680][ T7295] netlink: 'syz.0.910': attribute type 12 has an invalid length. [ 268.500545][ T154] device hsr_slave_0 left promiscuous mode [ 268.540243][ T154] device hsr_slave_1 left promiscuous mode [ 268.558690][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.590152][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.633996][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.711092][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.726454][ T7313] loop3: detected capacity change from 0 to 512 [ 268.750110][ T4682] udevd[4682]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 268.762782][ T4267] udevd[4267]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 268.773576][ T154] device bridge_slave_1 left promiscuous mode [ 268.806768][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.818134][ T7313] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 268.825500][ T7313] EXT4-fs (loop3): inline encryption not supported [ 268.869179][ T154] device bridge_slave_0 left promiscuous mode [ 268.875447][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.910602][ T7313] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 268.974586][ T7313] EXT4-fs (loop3): 1 truncate cleaned up [ 269.013362][ T4267] udevd[4267]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 269.025598][ T154] device veth1_macvtap left promiscuous mode [ 269.038858][ T7323] xt_TCPMSS: Only works on TCP SYN packets [ 269.104546][ T7313] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,quota,inlinecrypt,,errors=continue. Quota mode: writeback. [ 269.214689][ T154] device veth0_macvtap left promiscuous mode [ 269.340524][ T4682] udevd[4682]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 269.386087][ T154] device veth1_vlan left promiscuous mode [ 269.540403][ T154] device veth0_vlan left promiscuous mode [ 269.857676][ T7290] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 384: padding at end of block bitmap is not set [ 270.259697][ T7335] loop3: detected capacity change from 0 to 2048 [ 270.338955][ T7335] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.460762][ T7352] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 271.557460][ T154] team0 (unregistering): Port device team_slave_1 removed [ 271.644504][ T154] team0 (unregistering): Port device team_slave_0 removed [ 271.708038][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.742271][ T7360] loop3: detected capacity change from 0 to 256 [ 271.750370][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.846236][ T7363] xt_TCPMSS: Only works on TCP SYN packets [ 272.331069][ T7360] FAT-fs (loop3): Directory bread(block 64) failed [ 272.521691][ T7360] FAT-fs (loop3): Directory bread(block 65) failed [ 272.696489][ T7360] FAT-fs (loop3): Directory bread(block 66) failed [ 272.703193][ T7360] FAT-fs (loop3): Directory bread(block 67) failed [ 272.709860][ T7360] FAT-fs (loop3): Directory bread(block 68) failed [ 272.716427][ T7360] FAT-fs (loop3): Directory bread(block 69) failed [ 272.723138][ T7360] FAT-fs (loop3): Directory bread(block 70) failed [ 272.729754][ T7360] FAT-fs (loop3): Directory bread(block 71) failed [ 272.736380][ T7360] FAT-fs (loop3): Directory bread(block 72) failed [ 272.743025][ T7360] FAT-fs (loop3): Directory bread(block 73) failed [ 272.864190][ T7367] attempt to access beyond end of device [ 272.864190][ T7367] loop3: rw=2049, want=1736, limit=256 [ 273.017225][ T4231] attempt to access beyond end of device [ 273.017225][ T4231] loop3: rw=1, want=1232, limit=256 [ 273.025896][ T154] bond0 (unregistering): Released all slaves [ 273.128617][ T7373] loop0: detected capacity change from 0 to 2048 [ 273.250955][ T7373] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.265451][ T26] audit: type=1800 audit(1780508341.236:43): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.931" name="bus" dev="loop0" ino=1368 res=0 errno=0 [ 273.682269][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.698605][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.752276][ T7142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.006067][ T7391] loop3: detected capacity change from 0 to 1024 [ 274.207145][ T7391] EXT4-fs (loop3): Ignoring removed oldalloc option [ 274.238795][ T7391] EXT4-fs (loop3): Ignoring removed orlov option [ 274.387402][ T7391] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,nojournal_checksum,jqfmt=vfsv0,norecovery,debug_want_extra_isize=0x0000000000000036,orlov,journal_ioprio=0x0000000000000003,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 274.820576][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.838335][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.914840][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.948454][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.965633][ T7142] device veth0_vlan entered promiscuous mode [ 274.976768][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.995314][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.118948][ T7421] xt_TCPMSS: Only works on TCP SYN packets [ 275.316741][ T7142] device veth1_vlan entered promiscuous mode [ 275.869865][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.030249][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.059401][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.098391][ T7424] loop3: detected capacity change from 0 to 2048 [ 276.123219][ T7142] device veth0_macvtap entered promiscuous mode [ 276.162847][ T7142] device veth1_macvtap entered promiscuous mode [ 276.174817][ T7432] loop1: detected capacity change from 0 to 256 [ 276.226925][ T7424] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 276.403410][ T7432] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 276.423125][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.357421][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.368142][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.380254][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.391758][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.403272][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.423657][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.516142][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.582294][ T7142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.597816][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.621573][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.650936][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.662250][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.700873][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.734900][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.765391][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.807027][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.853804][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.875727][ T7455] loop1: detected capacity change from 0 to 1024 [ 277.905262][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.951784][ T7142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.020873][ T7463] xt_TCPMSS: Only works on TCP SYN packets [ 278.215905][ T7142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.444700][ T7142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.708195][ T7142] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.937782][ T7142] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.987774][ T7142] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.047422][ T7142] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.111548][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.139759][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.455288][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.485362][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.569032][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.637917][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.652901][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.676505][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 280.571378][ T7455] attempt to access beyond end of device [ 280.571378][ T7455] loop1: rw=0, want=393286, limit=1024 [ 281.212300][ T7516] loop1: detected capacity change from 0 to 1024 [ 281.260038][ T7516] hfsplus: invalid length 32517 has been corrected to 255 [ 281.393905][ T7524] loop0: detected capacity change from 0 to 256 [ 281.451468][ T26] audit: type=1800 audit(1780508349.426:44): pid=7516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.965" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 281.607758][ T7524] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 281.714526][ T7516] hfsplus: b-tree write err: -5, ino 20 [ 281.886832][ T4231] hfsplus: b-tree write err: -5, ino 20 [ 283.695356][ T7564] loop6: detected capacity change from 0 to 1024 [ 283.815232][ T7568] capability: warning: `syz.5.983' uses 32-bit capabilities (legacy support in use) [ 283.857815][ T26] audit: type=1800 audit(1780508351.836:45): pid=7564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.981" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 284.173252][ T4236] Bluetooth: hci0: command 0x0c1a tx timeout [ 284.257598][ T1109] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 284.421934][ T7591] futex_wake_op: syz.5.989 tries to shift op by 144; fix this program [ 284.678791][ T1109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.709893][ T1109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.745112][ T1109] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.793075][ T1109] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.821444][ T1109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.856297][ T1109] usb 1-1: config 0 descriptor?? [ 285.445098][ T1109] usbhid 1-1:0.0: can't add hid device: -71 [ 285.453826][ T1109] usbhid: probe of 1-1:0.0 failed with error -71 [ 285.486262][ T1109] usb 1-1: USB disconnect, device number 5 [ 285.624532][ T7611] loop6: detected capacity change from 0 to 2048 [ 285.658043][ T7611] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.137275][ T7629] loop0: detected capacity change from 0 to 1024 [ 286.168508][ T7633] futex_wake_op: syz.5.1000 tries to shift op by 144; fix this program [ 286.187852][ T4236] Bluetooth: hci0: command 0x0406 tx timeout [ 286.261550][ T7634] loop6: detected capacity change from 0 to 1024 [ 286.268266][ T7629] hfsplus: xattr searching failed [ 286.353272][ T7634] EXT4-fs (loop6): Ignoring removed oldalloc option [ 286.374484][ T7634] EXT4-fs (loop6): Ignoring removed orlov option [ 286.478825][ T7634] EXT4-fs (loop6): mounted filesystem without journal. Opts: oldalloc,nojournal_checksum,jqfmt=vfsv0,norecovery,debug_want_extra_isize=0x0000000000000036,orlov,journal_ioprio=0x0000000000000003,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 286.861014][ T7656] loop6: detected capacity change from 0 to 1024 [ 287.047686][ T4236] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 287.237599][ T26] audit: type=1800 audit(1780508355.206:46): pid=7656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1008" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 287.797987][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.910245][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.942329][ T7683] loop6: detected capacity change from 0 to 512 [ 287.983206][ T4236] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.007980][ T4236] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.025102][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.075137][ T4236] usb 2-1: config 0 descriptor?? [ 288.112003][ T7690] loop0: detected capacity change from 0 to 1024 [ 288.137700][ T7683] EXT4-fs (loop6): 1 truncate cleaned up [ 288.146453][ T7683] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,,errors=continue. Quota mode: none. [ 288.216532][ T7142] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 288.290028][ T7690] EXT4-fs (loop0): Ignoring removed oldalloc option [ 288.301100][ T7690] EXT4-fs (loop0): Ignoring removed orlov option [ 288.347837][ T4232] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 288.376144][ T7690] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,nojournal_checksum,jqfmt=vfsv0,norecovery,debug_want_extra_isize=0x0000000000000036,orlov,journal_ioprio=0x0000000000000003,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 288.462999][ T7701] futex_wake_op: syz.5.1020 tries to shift op by 144; fix this program [ 288.589352][ T7694] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 288.607790][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 288.718131][ T4236] usbhid 2-1:0.0: can't add hid device: -71 [ 288.743357][ T4236] usbhid: probe of 2-1:0.0 failed with error -71 [ 288.798728][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.039645][ T4236] usb 2-1: USB disconnect, device number 7 [ 289.096572][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.317984][ T4232] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 289.362985][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.414232][ T7142] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 234881024 (level 0) [ 289.428638][ T7708] loop1: detected capacity change from 0 to 1024 [ 289.458271][ T4232] usb 4-1: config 0 descriptor?? [ 289.559149][ T26] audit: type=1800 audit(1780508357.536:47): pid=7708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1022" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 289.864918][ T7716] loop0: detected capacity change from 0 to 2048 [ 289.964882][ T7716] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.077796][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 290.316750][ T4232] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 290.461160][ T4236] usb 4-1: USB disconnect, device number 7 [ 290.516077][ T7728] fido_id[7728]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 290.583324][ T7] usb 7-1: unable to get BOS descriptor or descriptor too short [ 290.717649][ T1109] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 290.897580][ T4232] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 290.968011][ T7] usb 7-1: string descriptor 0 read error: -22 [ 290.974886][ T7] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 290.991485][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.119067][ T1109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.134401][ T1109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.146073][ T1109] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.163777][ T1109] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.173182][ T1109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.192599][ T1109] usb 2-1: config 0 descriptor?? [ 291.258769][ T4232] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 291.271779][ T4232] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.282811][ T4232] usb 1-1: config 0 has no interface number 0 [ 291.290468][ T4232] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 291.300923][ T4232] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.361924][ T7743] futex_wake_op: syz.3.1032 tries to shift op by 144; fix this program [ 291.648877][ T4232] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 291.744287][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.854907][ T4232] usb 1-1: Product: syz [ 291.914571][ T4232] usb 1-1: Manufacturer: syz [ 291.970422][ T4232] usb 1-1: SerialNumber: syz [ 292.206963][ T4232] usb 1-1: config 0 descriptor?? [ 292.261526][ T1109] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 292.269437][ T7] usb 7-1: current rate 16533172 is different from the runtime rate 48000 [ 292.322231][ T7752] xt_TCPMSS: Only works on TCP SYN packets [ 292.332323][ T1109] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 292.514236][ T4234] usb 7-1: USB disconnect, device number 2 [ 292.728306][ T4232] usbtouchscreen: probe of 1-1:0.117 failed with error -71 [ 292.745576][ T4232] usb 1-1: USB disconnect, device number 6 [ 293.085690][ T7767] loop6: detected capacity change from 0 to 1024 [ 293.176581][ T26] audit: type=1800 audit(1780508361.146:48): pid=7767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1035" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 293.761189][ T7] usb 2-1: USB disconnect, device number 8 [ 294.087252][ T4266] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 294.124777][ T7801] loop0: detected capacity change from 0 to 1024 [ 294.206057][ T4266] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 294.306665][ T7801] hfsplus: invalid length 32517 has been corrected to 255 [ 294.733065][ T7813] loop0: detected capacity change from 0 to 1024 [ 294.881021][ T26] audit: type=1800 audit(1780508362.856:49): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1048" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 294.903140][ T7813] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.1048'. [ 295.298486][ T7822] loop3: detected capacity change from 0 to 2048 [ 295.408668][ T7822] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.423395][ T26] audit: type=1800 audit(1780508363.396:50): pid=7822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1047" name="bus" dev="loop3" ino=1368 res=0 errno=0 [ 295.484540][ T7825] loop0: detected capacity change from 0 to 512 [ 295.577888][ T7825] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 295.922260][ T7842] loop1: detected capacity change from 0 to 1024 [ 296.041467][ T7842] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.1059'. [ 296.051234][ T26] audit: type=1800 audit(1780508364.016:51): pid=7842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1059" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 296.239846][ T7849] loop6: detected capacity change from 0 to 256 [ 297.217151][ T7849] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 297.287036][ T7849] FAT-fs (loop6): Filesystem has been set read-only [ 297.318631][ T7854] loop1: detected capacity change from 0 to 1024 [ 297.333325][ T7849] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 297.390627][ T7849] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 297.456353][ T7859] futex_wake_op: syz.0.1066 tries to shift op by 144; fix this program [ 297.888634][ T26] audit: type=1800 audit(1780508365.836:52): pid=7849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1063" name="file1" dev="loop6" ino=1048637 res=0 errno=0 [ 298.624429][ T7876] loop6: detected capacity change from 0 to 512 [ 298.720145][ T7876] EXT4-fs (loop6): Ignoring removed orlov option [ 298.859029][ T7876] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 299.078823][ T7876] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.1069: corrupted in-inode xattr [ 299.190158][ T7876] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1069: couldn't read orphan inode 15 (err -117) [ 299.257293][ T7876] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 299.284861][ T7891] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.1075'. [ 299.400993][ T7896] loop1: detected capacity change from 0 to 512 [ 299.510785][ T7896] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1077: inode has both inline data and extents flags [ 299.580124][ T7896] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1077: couldn't read orphan inode 15 (err -117) [ 299.593634][ T7896] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 299.687555][ T7896] overlayfs: missing 'lowerdir' [ 301.751050][ T7945] loop6: detected capacity change from 0 to 512 [ 301.813364][ T7945] EXT4-fs (loop6): Ignoring removed orlov option [ 301.824395][ T7945] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 301.900557][ T7945] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.1092: corrupted in-inode xattr [ 302.006242][ T7955] loop0: detected capacity change from 0 to 128 [ 302.010684][ T7945] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1092: couldn't read orphan inode 15 (err -117) [ 302.063026][ T7955] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 302.094046][ T7955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.124413][ T7945] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 302.709168][ T7974] loop0: detected capacity change from 0 to 1024 [ 302.844623][ T7974] EXT4-fs (loop0): Ignoring removed bh option [ 302.946111][ T7974] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000005,dioread_lock,barrier=0x0000000000000004,barrier=0x0000000000000100,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,errors=continue,bh,init_itable,. Quota mode: none. [ 303.299948][ T7983] loop6: detected capacity change from 0 to 256 [ 303.372463][ T1109] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 303.382154][ T7983] exFAT-fs (loop6): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 303.458327][ T1109] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 303.487025][ T26] audit: type=1800 audit(1780508371.456:53): pid=7983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1104" name="file1" dev="loop6" ino=1048638 res=0 errno=0 [ 303.941602][ T7987] loop1: detected capacity change from 0 to 2048 [ 304.007046][ T7987] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.022777][ T26] audit: type=1800 audit(1780508371.996:54): pid=7987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1096" name="bus" dev="loop1" ino=1368 res=0 errno=0 [ 304.078260][ T7994] loop6: detected capacity change from 0 to 512 [ 304.107884][ T4236] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 304.204449][ T7994] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrquota,,errors=continue. Quota mode: writeback. [ 304.218981][ T7994] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.280288][ T26] audit: type=1800 audit(1780508372.256:55): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1106" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 304.307581][ T4236] usb 4-1: device descriptor read/64, error -71 [ 304.588717][ T4236] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 304.602715][ T8008] loop6: detected capacity change from 0 to 512 [ 304.626480][ T8008] EXT4-fs (loop6): Ignoring removed orlov option [ 304.649786][ T8008] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 304.706341][ T8008] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.1108: corrupted in-inode xattr [ 304.763639][ T8008] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1108: couldn't read orphan inode 15 (err -117) [ 304.786708][ T8008] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 304.813059][ T4236] usb 4-1: device descriptor read/64, error -71 [ 304.837982][ T4266] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 304.941801][ T4236] usb usb4-port1: attempt power cycle [ 305.357974][ T4236] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 305.489210][ T4236] usb 4-1: device descriptor read/8, error -71 [ 305.589466][ T8027] loop0: detected capacity change from 0 to 2048 [ 305.666928][ T8027] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.686263][ T26] audit: type=1800 audit(1780508373.656:56): pid=8027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1115" name="bus" dev="loop0" ino=1368 res=0 errno=0 [ 305.727745][ T4266] usb 2-1: unable to get BOS descriptor or descriptor too short [ 305.777980][ T4266] usb 2-1: not running at top speed; connect to a high speed hub [ 305.957582][ T4236] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 306.041062][ T4266] usb 2-1: config 128 has an invalid interface number: 163 but max is 0 [ 306.068105][ T4236] usb 4-1: device descriptor read/8, error -71 [ 306.198439][ T4236] usb usb4-port1: unable to enumerate USB device [ 306.781441][ T8043] loop0: detected capacity change from 0 to 2048 [ 306.814530][ T4266] usb 2-1: config 128 has no interface number 0 [ 306.820942][ T4266] usb 2-1: config 128 interface 163 has no altsetting 0 [ 306.919865][ T8043] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.048911][ T4266] usb 2-1: New USB device found, idVendor=0489, idProduct=5255, bcdDevice=f4.65 [ 307.072899][ T8059] loop3: detected capacity change from 0 to 512 [ 307.084138][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.130475][ T8059] EXT4-fs (loop3): Ignoring removed orlov option [ 307.136130][ T4266] usb 2-1: Product: syz [ 307.155014][ T8061] loop6: detected capacity change from 0 to 2048 [ 307.167014][ T4266] usb 2-1: Manufacturer: syz [ 307.182761][ T8059] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 307.197147][ T4266] usb 2-1: SerialNumber: syz [ 307.299122][ T8059] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1124: corrupted in-inode xattr [ 307.314536][ T8061] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.379524][ T8059] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1124: couldn't read orphan inode 15 (err -117) [ 307.406989][ T26] audit: type=1800 audit(1780508375.376:57): pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1117" name="bus" dev="loop6" ino=1368 res=0 errno=0 [ 307.447892][ T8059] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 307.551243][ T4266] usb 2-1: USB disconnect, device number 9 [ 308.328405][ T8091] loop1: detected capacity change from 0 to 128 [ 308.557785][ T8093] loop3: detected capacity change from 0 to 2048 [ 308.607365][ T8093] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.637308][ T26] audit: type=1800 audit(1780508376.606:58): pid=8093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1129" name="bus" dev="loop3" ino=1368 res=0 errno=0 [ 309.158398][ T8114] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 309.408963][ T8123] loop1: detected capacity change from 0 to 2048 [ 309.539366][ T8123] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.623044][ T8128] loop0: detected capacity change from 0 to 2048 [ 309.688031][ T8128] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.794476][ T26] audit: type=1800 audit(1780508377.676:59): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1142" name="bus" dev="loop0" ino=1368 res=0 errno=0 [ 310.129159][ T8149] loop0: detected capacity change from 0 to 1024 [ 310.209686][ T8149] hfsplus: invalid length 32517 has been corrected to 255 [ 310.443804][ T26] audit: type=1800 audit(1780508378.416:60): pid=8149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1149" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 312.175552][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1158'. [ 312.551623][ T8197] loop3: detected capacity change from 0 to 512 [ 312.648988][ T8197] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 312.782317][ T8197] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,nodiscard,dioread_nolock,. Quota mode: writeback. [ 312.830975][ T8208] loop0: detected capacity change from 0 to 1024 [ 312.854084][ T8203] loop1: detected capacity change from 0 to 2048 [ 312.877879][ T8197] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.937281][ T8208] hfsplus: invalid length 32517 has been corrected to 255 [ 312.958344][ T8203] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 312.999017][ T26] audit: type=1800 audit(1780508380.976:61): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1165" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 313.113114][ T8203] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 313.163709][ T8203] EXT4-fs error (device loop1) in ext4_setattr:5645: error 28 [ 314.034663][ T7] Bluetooth: hci5: command 0x0406 tx timeout [ 314.557972][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 314.797683][ T23] usb 2-1: device descriptor read/64, error -71 [ 315.247765][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 315.282171][ T8248] loop3: detected capacity change from 0 to 2048 [ 315.313930][ T8248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.440651][ T23] usb 2-1: device descriptor read/64, error -71 [ 315.559286][ T23] usb usb2-port1: attempt power cycle [ 315.657300][ T8262] loop6: detected capacity change from 0 to 1024 [ 315.823950][ T8262] hfsplus: invalid length 32517 has been corrected to 255 [ 315.847844][ T26] audit: type=1800 audit(1780508383.826:62): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1176" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 315.998437][ T8268] loop3: detected capacity change from 0 to 512 [ 316.076091][ T8268] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 316.107916][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 316.202858][ T8268] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,nodiscard,dioread_nolock,. Quota mode: writeback. [ 316.218641][ T23] usb 2-1: device descriptor read/8, error -71 [ 316.292886][ T8268] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.489559][ T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 316.580888][ T23] usb 2-1: device descriptor read/8, error -71 [ 316.697870][ T23] usb usb2-port1: unable to enumerate USB device [ 316.827215][ T8301] loop6: detected capacity change from 0 to 1024 [ 316.892905][ T8301] hfsplus: invalid length 32517 has been corrected to 255 [ 316.933112][ T26] audit: type=1800 audit(1780508384.906:63): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1190" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 317.080311][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.086729][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.310537][ T8311] loop6: detected capacity change from 0 to 512 [ 317.345566][ T8311] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 317.618498][ T8311] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,nodiscard,dioread_nolock,. Quota mode: writeback. [ 317.712618][ T8311] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.237814][ T8333] loop1: detected capacity change from 0 to 1024 [ 318.304718][ T8337] loop3: detected capacity change from 0 to 2048 [ 318.328397][ T8333] hfsplus: invalid length 32517 has been corrected to 255 [ 318.374412][ T26] audit: type=1800 audit(1780508386.346:64): pid=8333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1202" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 318.417888][ T7] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 318.495713][ T8337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.562970][ T8342] loop0: detected capacity change from 0 to 512 [ 318.686681][ T8342] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 318.875957][ T8342] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,nodiscard,dioread_nolock,. Quota mode: writeback. [ 318.964345][ T8342] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.977828][ T7] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 318.989184][ T7] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 319.000360][ T7] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.193022][ T8352] loop3: detected capacity change from 0 to 512 [ 319.218113][ T7] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.243661][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.278615][ T7] usb 7-1: Product: syz [ 319.282929][ T7] usb 7-1: Manufacturer: syz [ 319.289096][ T7] usb 7-1: SerialNumber: syz [ 319.294755][ T8352] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrquota,,errors=continue. Quota mode: writeback. [ 319.340054][ T8329] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 319.353192][ T8352] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.779346][ T8359] loop1: detected capacity change from 0 to 1024 [ 319.886678][ T8359] hfsplus: xattr searching failed [ 319.913758][ T8359] hfsplus: xattr searching failed [ 319.978182][ T8363] attempt to access beyond end of device [ 319.978182][ T8363] loop0: rw=0, want=393286, limit=1024 [ 320.053594][ T4690] hfsplus: b-tree write err: -5, ino 3 [ 320.119763][ T4187] hfsplus: node 4:3 still has 2 user(s)! [ 320.232088][ T7] cdc_ncm 7-1:1.0: bind() failure [ 320.264782][ T8380] 9pnet: Insufficient options for proto=fd [ 320.287849][ T8374] hfsplus: invalid length 32517 has been corrected to 255 [ 320.297103][ T7] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 320.327627][ T7] cdc_ncm 7-1:1.1: bind() failure [ 320.368351][ T26] audit: type=1800 audit(1780508388.346:65): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1219" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 320.424490][ T7] usb 7-1: USB disconnect, device number 3 [ 320.487931][ T4331] hfsplus: b-tree write err: -5, ino 20 [ 321.191256][ T8402] set_capacity_and_notify: 2 callbacks suppressed [ 321.191273][ T8402] loop1: detected capacity change from 0 to 1024 [ 321.222147][ T8407] 9pnet: Insufficient options for proto=fd [ 321.329769][ T8402] attempt to access beyond end of device [ 321.329769][ T8402] loop1: rw=0, want=393286, limit=1024 [ 322.703223][ T8442] 9pnet: Insufficient options for proto=fd [ 323.964411][ T8458] loop6: detected capacity change from 0 to 2048 [ 324.213365][ T8464] loop0: detected capacity change from 0 to 2048 [ 324.309491][ T8464] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.652757][ T8458] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 324.855345][ T8458] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 324.914113][ T8458] EXT4-fs error (device loop6) in ext4_setattr:5645: error 28 [ 325.460712][ T8480] 9pnet: Insufficient options for proto=fd [ 325.585371][ T8487] loop0: detected capacity change from 0 to 512 [ 325.652656][ T8491] loop1: detected capacity change from 0 to 1024 [ 325.665160][ T8487] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 325.726710][ T8491] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 325.768923][ T8491] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 325.768923][ T8491] [ 325.827601][ T7] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 325.930251][ T8487] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,nodiscard,dioread_nolock,. Quota mode: writeback. [ 325.956100][ T8487] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.099894][ T7] usb 7-1: Using ep0 maxpacket: 16 [ 326.217833][ T7] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 326.239980][ T7] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 326.266673][ T7] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 326.283365][ T7] usb 7-1: config 1 has no interface number 1 [ 326.298927][ T7] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 326.335411][ T7] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 326.829298][ T8513] loop3: detected capacity change from 0 to 2048 [ 326.898877][ T7] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 326.990176][ T8513] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.252427][ T26] audit: type=1800 audit(1780508395.096:66): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1268" name="bus" dev="loop3" ino=1368 res=0 errno=0 [ 327.354620][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.428319][ T7] usb 7-1: Product: syz [ 327.432580][ T7] usb 7-1: Manufacturer: syz [ 327.517593][ T7] usb 7-1: SerialNumber: syz [ 327.533461][ T8517] loop1: detected capacity change from 0 to 1024 [ 327.593991][ T8517] EXT4-fs (loop1): Ignoring removed oldalloc option [ 327.608413][ T8517] EXT4-fs (loop1): Ignoring removed orlov option [ 327.697119][ T8517] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,nojournal_checksum,jqfmt=vfsv0,norecovery,debug_want_extra_isize=0x0000000000000036,orlov,journal_ioprio=0x0000000000000003,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 327.911393][ T7] usb 7-1: USB disconnect, device number 4 [ 327.985183][ T8526] loop3: detected capacity change from 0 to 512 [ 328.094602][ T8526] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrquota,,errors=continue. Quota mode: writeback. [ 328.166113][ T8530] loop1: detected capacity change from 0 to 512 [ 328.180079][ T8526] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.220140][ T4682] udevd[4682]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.297284][ T8530] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 328.415529][ T8530] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,nodiscard,dioread_nolock,. Quota mode: writeback. [ 328.584631][ T8538] loop3: detected capacity change from 0 to 1024 [ 328.591245][ T8530] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.692912][ T8538] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 328.727423][ T8538] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 328.727423][ T8538] [ 328.889005][ T8538] loop3: detected capacity change from 0 to 128 [ 328.962350][ T8538] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nolazytime,mb_optimize_scan=0x0000000000000000,grpjquota=,errors=remount-ro,. Quota mode: none. [ 328.979566][ T8538] ext4 filesystem being mounted at /234/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 329.022553][ T8542] loop6: detected capacity change from 0 to 2048 [ 329.130988][ T8542] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.239323][ T26] audit: type=1800 audit(1780508397.216:67): pid=8542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1276" name="bus" dev="loop6" ino=1368 res=0 errno=0 [ 329.336724][ T26] audit: type=1326 audit(1780508397.246:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8549 comm="syz.5.1280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f217eacbe59 code=0x0 [ 329.418928][ T8555] loop3: detected capacity change from 0 to 2048 [ 329.475652][ T8555] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 330.870535][ T8553] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 330.886984][ T8553] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 330.899598][ T8553] EXT4-fs (loop3): This should not happen!! Data will be lost [ 330.899598][ T8553] [ 330.910120][ T8553] EXT4-fs (loop3): Total free blocks count 0 [ 330.916592][ T8553] EXT4-fs (loop3): Free/Dirty block details [ 330.922644][ T8553] EXT4-fs (loop3): free_blocks=2415919504 [ 330.928473][ T8553] EXT4-fs (loop3): dirty_blocks=3856 [ 330.933798][ T8553] EXT4-fs (loop3): Block reservation details [ 330.939944][ T8553] EXT4-fs (loop3): i_reserved_data_blocks=241 [ 331.073286][ T4331] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 2048 with error 28 [ 331.107048][ T4331] EXT4-fs (loop3): This should not happen!! Data will be lost [ 331.107048][ T4331] [ 332.222226][ T8571] loop3: detected capacity change from 0 to 1024 [ 332.255656][ T8571] hfsplus: invalid length 32517 has been corrected to 255 [ 332.358349][ T26] audit: type=1800 audit(1780508400.336:69): pid=8571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1283" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 332.487388][ T4397] hfsplus: b-tree write err: -5, ino 20 [ 332.610732][ T8582] loop0: detected capacity change from 0 to 128 [ 332.665625][ T8585] loop3: detected capacity change from 0 to 1024 [ 332.694223][ T8582] FAT-fs (loop0): Directory bread(block 524322) failed [ 332.712242][ T8585] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 332.737564][ T8585] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 332.737564][ T8585] [ 332.750888][ T8582] FAT-fs (loop0): Directory bread(block 524323) failed [ 332.804851][ T8582] FAT-fs (loop0): Directory bread(block 524324) failed [ 332.847578][ T8582] FAT-fs (loop0): Directory bread(block 524325) failed [ 332.859773][ T8582] FAT-fs (loop0): Directory bread(block 524326) failed [ 332.883524][ T8582] FAT-fs (loop0): Directory bread(block 524327) failed [ 332.913091][ T8589] loop6: detected capacity change from 0 to 2048 [ 332.919725][ T8582] FAT-fs (loop0): Directory bread(block 524328) failed [ 332.926644][ T8582] FAT-fs (loop0): Directory bread(block 524329) failed [ 333.081267][ T8589] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 333.120129][ T8582] FAT-fs (loop0): Directory bread(block 524322) failed [ 333.133065][ T8582] FAT-fs (loop0): Directory bread(block 524323) failed [ 333.165063][ T8595] loop3: detected capacity change from 0 to 512 [ 333.194418][ T8589] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 333.270620][ T8589] EXT4-fs error (device loop6) in ext4_setattr:5645: error 28 [ 333.357165][ T8595] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrquota,,errors=continue. Quota mode: writeback. [ 333.483701][ T8595] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.694871][ T26] audit: type=1800 audit(1780508401.666:70): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1296" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 334.163767][ T8611] loop0: detected capacity change from 0 to 2048 [ 334.196824][ T8611] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.211931][ T26] audit: type=1800 audit(1780508402.186:71): pid=8604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1297" name="bus" dev="loop0" ino=1368 res=0 errno=0 [ 334.517638][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 334.535148][ T8622] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 334.929014][ T8630] loop3: detected capacity change from 0 to 2048 [ 334.987190][ T8632] loop0: detected capacity change from 0 to 512 [ 335.023286][ T8630] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 335.087832][ T8632] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrquota,,errors=continue. Quota mode: writeback. [ 335.108824][ T8630] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 335.149717][ T8632] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.203750][ T8630] EXT4-fs error (device loop3) in ext4_setattr:5645: error 28 [ 335.229457][ T26] audit: type=1800 audit(1780508403.206:72): pid=8632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1309" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 336.096742][ T8666] loop6: detected capacity change from 0 to 512 [ 336.300729][ T8666] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrquota,,errors=continue. Quota mode: writeback. [ 336.360266][ T8666] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.477828][ T26] audit: type=1800 audit(1780508404.456:73): pid=8666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1322" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 336.736559][ T8677] loop0: detected capacity change from 0 to 2048 [ 336.795946][ T8677] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.811822][ T26] audit: type=1800 audit(1780508404.786:74): pid=8677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1319" name="bus" dev="loop0" ino=1368 res=0 errno=0 [ 337.047088][ T8680] hfsplus: invalid length 32517 has been corrected to 255 [ 337.157009][ T26] audit: type=1800 audit(1780508405.126:75): pid=8680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1324" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 337.285155][ T8681] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 337.321683][ T8692] set_capacity_and_notify: 2 callbacks suppressed [ 337.321699][ T8692] loop3: detected capacity change from 0 to 512 [ 337.345907][ T8681] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 337.385772][ T8681] EXT4-fs error (device loop1) in ext4_setattr:5645: error 28 [ 337.528910][ T8692] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 337.845651][ T8692] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,nodiscard,dioread_nolock,. Quota mode: writeback. [ 338.003139][ T8710] loop6: detected capacity change from 0 to 2048 [ 338.078669][ T8710] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.207574][ T26] audit: type=1800 audit(1780508406.116:76): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1332" name="bus" dev="loop6" ino=1367 res=0 errno=0 [ 338.488401][ T8692] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.689463][ T8715] loop0: detected capacity change from 0 to 1764 [ 338.857049][ T8720] loop3: detected capacity change from 0 to 1024 [ 338.950146][ T8720] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 338.957342][ T8720] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 338.957342][ T8720] [ 339.127985][ T8720] loop3: detected capacity change from 0 to 128 [ 339.252901][ T8724] loop0: detected capacity change from 0 to 8 [ 339.339825][ T8720] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nolazytime,mb_optimize_scan=0x0000000000000000,grpjquota=,errors=remount-ro,. Quota mode: none. [ 339.356728][ T8720] ext4 filesystem being mounted at /248/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 339.909096][ T8736] loop6: detected capacity change from 0 to 2048 [ 340.133496][ T8740] loop1: detected capacity change from 0 to 1024 [ 340.150511][ T8736] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 340.199023][ T8740] EXT4-fs (loop1): Ignoring removed oldalloc option [ 340.211360][ T8740] EXT4-fs (loop1): Ignoring removed orlov option [ 340.222660][ T26] audit: type=1800 audit(1780508408.196:77): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1339" name="bus" dev="loop6" ino=1368 res=0 errno=0 [ 340.454663][ T8740] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,nojournal_checksum,jqfmt=vfsv0,norecovery,debug_want_extra_isize=0x0000000000000036,orlov,journal_ioprio=0x0000000000000003,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 340.500069][ T8744] loop3: detected capacity change from 0 to 2048 [ 340.598709][ T8744] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 340.732826][ T8744] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 340.774064][ T8744] EXT4-fs error (device loop3) in ext4_setattr:5645: error 28 [ 341.080745][ T8758] loop0: detected capacity change from 0 to 2048 [ 341.089682][ T4266] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 341.604443][ T8758] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.709223][ T26] audit: type=1800 audit(1780508409.636:78): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1350" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 342.057780][ T4266] usb 2-1: Using ep0 maxpacket: 16 [ 342.208031][ T4266] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.277945][ T8768] attempt to access beyond end of device [ 342.277945][ T8768] loop3: rw=2048, want=36028797018963976, limit=8 [ 342.290611][ T8768] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 342.298474][ T8768] unable to read xattr id index table [ 342.461980][ T4266] usb 2-1: config 0 has no interfaces? [ 342.694204][ T8770] set_capacity_and_notify: 1 callbacks suppressed [ 342.694222][ T8770] loop0: detected capacity change from 0 to 1024 [ 342.794662][ T8770] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 342.802562][ T4266] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 342.874082][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.897883][ T8770] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 342.897883][ T8770] [ 342.923911][ T4266] usb 2-1: Product: syz [ 342.945409][ T4266] usb 2-1: Manufacturer: syz [ 342.958006][ T4266] usb 2-1: SerialNumber: syz [ 343.032680][ T4266] usb 2-1: config 0 descriptor?? [ 343.117836][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1358'. [ 343.167878][ T8770] loop0: detected capacity change from 0 to 128 [ 343.231182][ T8770] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nolazytime,mb_optimize_scan=0x0000000000000000,grpjquota=,errors=remount-ro,. Quota mode: none. [ 343.248260][ T8770] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 343.528648][ T4234] usb 2-1: USB disconnect, device number 14 [ 343.665868][ T8786] loop6: detected capacity change from 0 to 512 [ 343.799099][ T8786] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.1360: inode has both inline data and extents flags [ 343.839050][ T8786] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1360: couldn't read orphan inode 15 (err -117) [ 343.851551][ T8786] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 344.037358][ T8798] loop6: detected capacity change from 0 to 2048 [ 344.140424][ T8798] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 344.185023][ T8798] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 344.207509][ T8798] EXT4-fs error (device loop6) in ext4_setattr:5645: error 28 [ 344.431794][ T8805] loop3: detected capacity change from 0 to 2048 [ 344.546426][ T8807] loop1: detected capacity change from 0 to 2048 [ 344.566296][ T8805] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.583560][ T26] audit: type=1800 audit(1780508412.556:79): pid=8805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1362" name="bus" dev="loop3" ino=1368 res=0 errno=0 [ 344.610238][ T8808] loop6: detected capacity change from 0 to 512 [ 344.661309][ T8807] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.675025][ T8808] EXT4-fs (loop6): invalid journal inode [ 344.715381][ T26] audit: type=1800 audit(1780508412.676:80): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1364" name="bus" dev="loop1" ino=1368 res=0 errno=0 [ 344.746603][ T8808] EXT4-fs (loop6): can't get journal size [ 344.795152][ T8808] EXT4-fs (loop6): 1 truncate cleaned up [ 344.801207][ T8808] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 345.217324][ T8816] loop0: detected capacity change from 0 to 8 [ 345.380650][ T8816] attempt to access beyond end of device [ 345.380650][ T8816] loop0: rw=2048, want=36028797018963976, limit=8 [ 345.393214][ T8816] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 345.400993][ T8816] unable to read xattr id index table [ 346.054300][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'. [ 346.338660][ T8826] loop0: detected capacity change from 0 to 1024 [ 346.419120][ T8826] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 346.476087][ T8826] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 346.476087][ T8826] [ 346.732639][ T8831] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967272. macoff=96 [ 346.790234][ T8832] loop6: detected capacity change from 0 to 512 [ 346.847039][ T8826] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nolazytime,mb_optimize_scan=0x0000000000000000,grpjquota=,errors=remount-ro,. Quota mode: none. [ 346.864104][ T8826] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 346.911801][ T8832] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.1373: inode has both inline data and extents flags [ 346.927740][ T8832] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1373: couldn't read orphan inode 15 (err -117) [ 346.948194][ T8832] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 348.547647][ T8856] set_capacity_and_notify: 1 callbacks suppressed [ 348.547664][ T8856] loop3: detected capacity change from 0 to 16 [ 348.607179][ T8858] loop6: detected capacity change from 0 to 2048 [ 348.721536][ T8859] loop1: detected capacity change from 0 to 2048 [ 348.808318][ T8859] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.922649][ T26] audit: type=1800 audit(1780508416.846:81): pid=8859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1376" name="bus" dev="loop1" ino=1368 res=0 errno=0 [ 348.973054][ T8856] erofs: (device loop3): mounted with root inode @ nid 36. [ 349.197642][ T8858] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 349.224110][ T8856] attempt to access beyond end of device [ 349.224110][ T8856] loop3: rw=524288, want=34359738368, limit=16 [ 349.310595][ T4204] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -4082 in[4096, 0] out[9000] [ 349.358563][ T8856] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 349.504474][ T8856] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 349.728048][ T8856] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 350.072567][ T8856] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 350.516652][ T8856] attempt to access beyond end of device [ 350.516652][ T8856] loop3: rw=524288, want=56, limit=16 [ 350.617031][ T8856] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -4082 in[4096, 0] out[8192] [ 350.698450][ T26] audit: type=1800 audit(1780508418.676:82): pid=8856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1382" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 350.840229][ T8872] loop1: detected capacity change from 0 to 1024 [ 350.904133][ T8872] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 350.928039][ T8872] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 350.928039][ T8872] [ 351.008610][ T8876] loop0: detected capacity change from 0 to 2048 [ 351.156344][ T8876] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.177973][ T26] audit: type=1800 audit(1780508419.146:83): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1381" name="bus" dev="loop0" ino=1368 res=0 errno=0 [ 351.263316][ T8878] binder: 8877:8878 ioctl c0306201 200000000080 returned -14 [ 351.321018][ T8879] binder: 8877:8879 ioctl c0306201 2000000003c0 returned -14 [ 351.681571][ T8887] loop6: detected capacity change from 0 to 1024 [ 352.279787][ T8902] loop0: detected capacity change from 0 to 2048 [ 352.544190][ T8902] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 352.583576][ T26] audit: type=1800 audit(1780508420.556:84): pid=8902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1393" name="bus" dev="loop0" ino=1368 res=0 errno=0 [ 352.775610][ T8901] loop3: detected capacity change from 0 to 2048 [ 352.995934][ T8901] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 353.261136][ T144] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 353.277253][ T8921] loop6: detected capacity change from 0 to 1024 [ 353.327928][ T144] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 353.371845][ T8921] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 353.387493][ T144] EXT4-fs (loop3): This should not happen!! Data will be lost [ 353.387493][ T144] [ 353.427499][ T8921] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 353.427499][ T8921] [ 353.439648][ T144] EXT4-fs (loop3): Total free blocks count 0 [ 353.446009][ T144] EXT4-fs (loop3): Free/Dirty block details [ 353.488381][ T144] EXT4-fs (loop3): free_blocks=2415919504 [ 353.527256][ T144] EXT4-fs (loop3): dirty_blocks=64 [ 353.548250][ T144] EXT4-fs (loop3): Block reservation details [ 353.567747][ T144] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 353.642709][ T144] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 353.702700][ T144] EXT4-fs (loop3): This should not happen!! Data will be lost [ 353.702700][ T144] [ 354.682116][ T8938] loop3: detected capacity change from 0 to 1024 [ 355.229756][ T8953] loop6: detected capacity change from 0 to 1024 [ 355.321241][ T8953] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 355.357502][ T8953] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 355.357502][ T8953] [ 355.674894][ T8953] loop6: detected capacity change from 0 to 128 [ 355.864971][ T8953] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nolazytime,mb_optimize_scan=0x0000000000000000,grpjquota=,errors=remount-ro,. Quota mode: none. [ 355.882099][ T8953] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 356.003297][ T8974] netlink: 'syz.1.1422': attribute type 1 has an invalid length. [ 356.058133][ T8974] netlink: 'syz.1.1422': attribute type 4 has an invalid length. [ 356.127526][ T8974] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1422'. [ 356.212623][ T8980] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1424'. [ 356.283706][ T8979] loop0: detected capacity change from 0 to 2048 [ 356.435158][ T8979] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 357.053686][ T8999] loop6: detected capacity change from 0 to 128 [ 357.227376][ T9002] loop3: detected capacity change from 0 to 512 [ 357.533988][ T9002] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1431: inode has both inline data and extents flags [ 357.689837][ T9015] loop1: detected capacity change from 0 to 2048 [ 357.734270][ T9002] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1431: couldn't read orphan inode 15 (err -117) [ 357.865561][ T9015] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 357.905845][ T26] audit: type=1800 audit(1780508425.876:85): pid=9015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1433" name="bus" dev="loop1" ino=1368 res=0 errno=0 [ 358.159195][ T9002] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 358.581599][ T9025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1439'. [ 358.637953][ T5314] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 358.733885][ T9032] loop0: detected capacity change from 0 to 128 [ 358.907692][ T5314] usb 7-1: Using ep0 maxpacket: 16 [ 359.005195][ T9032] FAT-fs (loop0): Directory bread(block 524322) failed [ 359.077736][ T9032] FAT-fs (loop0): Directory bread(block 524323) failed [ 359.112436][ T9032] FAT-fs (loop0): Directory bread(block 524324) failed [ 359.118496][ T5314] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 359.138542][ T5314] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.160774][ T9032] FAT-fs (loop0): Directory bread(block 524325) failed [ 359.177593][ T9032] FAT-fs (loop0): Directory bread(block 524326) failed [ 359.187737][ T9032] FAT-fs (loop0): Directory bread(block 524327) failed [ 359.196360][ T9032] FAT-fs (loop0): Directory bread(block 524328) failed [ 359.207569][ T5314] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 359.219486][ T9038] loop3: detected capacity change from 0 to 2048 [ 359.232900][ T5314] usb 7-1: config 1 has no interface number 1 [ 359.239667][ T9032] FAT-fs (loop0): Directory bread(block 524329) failed [ 359.241272][ T5314] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 359.275978][ T9038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.355340][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 359.366799][ T9032] FAT-fs (loop0): Directory bread(block 524322) failed [ 359.384044][ T9032] FAT-fs (loop0): Directory bread(block 524323) failed [ 359.522330][ T5314] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 360.153013][ T9060] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1453'. [ 360.364614][ T5314] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.374328][ T5314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.382809][ T5314] usb 7-1: Product: syz [ 360.387022][ T5314] usb 7-1: Manufacturer: syz [ 360.393022][ T5314] usb 7-1: SerialNumber: syz [ 360.938259][ T5314] usb 7-1: USB disconnect, device number 5 [ 361.189746][ T4682] udevd[4682]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.456297][ T9088] loop1: detected capacity change from 0 to 8 [ 361.993148][ T9093] loop3: detected capacity change from 0 to 1024 [ 362.003779][ T9088] attempt to access beyond end of device [ 362.003779][ T9088] loop1: rw=2048, want=36028797018963976, limit=8 [ 362.015832][ T9088] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 362.023422][ T9088] unable to read xattr id index table [ 362.043215][ T9093] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 362.107566][ T9093] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 362.107566][ T9093] [ 362.568462][ T9103] netlink: 'syz.1.1467': attribute type 29 has an invalid length. [ 362.582760][ T9103] netlink: 'syz.1.1467': attribute type 29 has an invalid length. [ 362.670380][ T9106] netlink: 'syz.1.1467': attribute type 29 has an invalid length. [ 362.804277][ T9103] netlink: 'syz.1.1467': attribute type 29 has an invalid length. [ 364.032722][ T9135] loop6: detected capacity change from 0 to 1024 [ 364.677683][ T9135] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 364.749669][ T9135] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 364.749669][ T9135] [ 365.006774][ T9146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1484'. [ 365.044584][ T9148] loop3: detected capacity change from 0 to 2048 [ 365.122717][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1480'. [ 365.349463][ T9148] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.505908][ T9135] loop6: detected capacity change from 0 to 128 [ 366.287074][ T9155] loop0: detected capacity change from 0 to 512 [ 366.426485][ T9135] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nolazytime,mb_optimize_scan=0x0000000000000000,grpjquota=,errors=remount-ro,. Quota mode: none. [ 366.428686][ T9155] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.1486: inode has both inline data and extents flags [ 366.443783][ T9135] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 366.495155][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1488'. [ 366.558603][ T9155] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1486: couldn't read orphan inode 15 (err -117) [ 366.643959][ T9155] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 367.430621][ T9187] loop6: detected capacity change from 0 to 2048 [ 368.127629][ T9187] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.150121][ T26] audit: type=1800 audit(1780508436.126:86): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1496" name="bus" dev="loop6" ino=1368 res=0 errno=0 [ 368.171945][ T9194] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.1498'. [ 368.509312][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1497'. [ 369.272234][ T9200] loop1: detected capacity change from 0 to 2048 [ 369.354362][ T9200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 370.514433][ T9232] loop0: detected capacity change from 0 to 2048 [ 370.609894][ T9232] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 370.695356][ T26] audit: type=1800 audit(1780508438.626:87): pid=9232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1510" name="bus" dev="loop0" ino=1368 res=0 errno=0 [ 371.301900][ T9240] lo speed is unknown, defaulting to 1000 [ 371.336308][ T9240] lo speed is unknown, defaulting to 1000 [ 371.602329][ T9240] lo speed is unknown, defaulting to 1000 [ 372.288266][ T9247] device syzkaller0 entered promiscuous mode [ 372.484928][ T9259] loop6: detected capacity change from 0 to 2048 [ 372.550853][ T4330] lo speed is unknown, defaulting to 1000 [ 372.579431][ T9259] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 372.602688][ T9240] infiniband syz2: set down [ 372.622177][ T9240] infiniband syz2: added lo [ 372.835728][ T9240] infiniband syz2: Couldn't open port 1 [ 373.361718][ T9240] RDS/IB: syz2: added [ 373.366591][ T9240] smc: adding ib device syz2 with port count 1 [ 373.445063][ T9273] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 373.451420][ T9240] smc: ib device syz2 port 1 has pnetid [ 373.485435][ T9273] syzkaller1: linktype set to 778 [ 373.524957][ T4237] lo speed is unknown, defaulting to 1000 [ 373.589465][ T9240] lo speed is unknown, defaulting to 1000 [ 374.814858][ T9303] loop1: detected capacity change from 0 to 256 [ 374.856777][ T9240] lo speed is unknown, defaulting to 1000 [ 374.882964][ T9304] loop6: detected capacity change from 0 to 2048 [ 374.930766][ T9303] FAT-fs (loop1): Directory bread(block 64) failed [ 374.974692][ T9303] FAT-fs (loop1): Directory bread(block 65) failed [ 374.998471][ T9304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.037977][ T9303] FAT-fs (loop1): Directory bread(block 66) failed [ 375.211652][ T9303] FAT-fs (loop1): Directory bread(block 67) failed [ 375.363740][ T9303] FAT-fs (loop1): Directory bread(block 68) failed [ 375.593410][ T9303] FAT-fs (loop1): Directory bread(block 69) failed [ 375.747667][ T9303] FAT-fs (loop1): Directory bread(block 70) failed [ 375.858159][ T9240] lo speed is unknown, defaulting to 1000 [ 376.001030][ T9303] FAT-fs (loop1): Directory bread(block 71) failed [ 376.030536][ T9303] FAT-fs (loop1): Directory bread(block 72) failed [ 376.067575][ T9303] FAT-fs (loop1): Directory bread(block 73) failed [ 376.154996][ T9312] loop0: detected capacity change from 0 to 1024 [ 376.250864][ T9317] loop6: detected capacity change from 0 to 512 [ 376.374275][ T9317] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.1541: inode has both inline data and extents flags [ 376.410402][ T9317] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1541: couldn't read orphan inode 15 (err -117) [ 376.425438][ T9317] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 376.454188][ T9240] lo speed is unknown, defaulting to 1000 [ 376.490734][ T9323] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1542'. [ 376.520866][ T9323] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 376.830307][ T9240] lo speed is unknown, defaulting to 1000 [ 378.516730][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.523883][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.941071][ T9358] loop1: detected capacity change from 0 to 8 [ 379.382210][ T9367] lo speed is unknown, defaulting to 1000 [ 380.587520][ T4236] Bluetooth: hci2: command 0x0406 tx timeout [ 380.646009][ T9384] lo speed is unknown, defaulting to 1000 [ 380.787096][ T9386] loop0: detected capacity change from 0 to 2048 [ 380.863796][ T9386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.130349][ T4235] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 383.347582][ T4235] usb 7-1: device descriptor read/64, error -71 [ 383.643918][ T4235] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 383.893646][ T9455] lo speed is unknown, defaulting to 1000 [ 384.672479][ T4235] usb 7-1: device descriptor read/64, error -71 [ 384.804095][ T4235] usb usb7-port1: attempt power cycle [ 385.227854][ T4235] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 385.338730][ T4235] usb 7-1: device descriptor read/8, error -71 [ 385.617737][ T4235] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 385.788929][ T4235] usb 7-1: device descriptor read/8, error -71 [ 386.041348][ T4235] usb usb7-port1: unable to enumerate USB device [ 386.458952][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1599'. [ 387.377063][ T9505] lo speed is unknown, defaulting to 1000 [ 388.477684][ T1109] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 389.971116][ T9526] loop3: detected capacity change from 0 to 2048 [ 389.988454][ T1109] usb 2-1: device descriptor read/64, error -71 [ 390.016863][ T9526] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 390.128512][ T26] audit: type=1800 audit(1780508458.056:88): pid=9526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1610" name="bus" dev="loop3" ino=1368 res=0 errno=0 [ 390.317594][ T1109] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 390.527863][ T1109] usb 2-1: device descriptor read/64, error -71 [ 390.647970][ T1109] usb usb2-port1: attempt power cycle [ 391.905842][ T9552] loop3: detected capacity change from 0 to 512 [ 392.082421][ T9556] lo speed is unknown, defaulting to 1000 [ 393.020006][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1622'. [ 393.177135][ T9552] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1621: inode has both inline data and extents flags [ 393.313866][ T9552] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1621: couldn't read orphan inode 15 (err -117) [ 393.500662][ T9552] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 393.650586][ T9614] lo speed is unknown, defaulting to 1000 [ 393.792785][ T9618] loop1: detected capacity change from 0 to 8 [ 393.838546][ T9618] attempt to access beyond end of device [ 393.838546][ T9618] loop1: rw=2048, want=36028797018963976, limit=8 [ 393.850771][ T9618] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 393.858454][ T9618] unable to read xattr id index table [ 398.085000][ T9699] tap0: tun_chr_ioctl cmd 1074025681 [ 399.752329][ T9733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1662'. [ 399.769913][ T9735] loop3: detected capacity change from 0 to 128 [ 399.813505][ T9735] FAT-fs (loop3): Directory bread(block 524322) failed [ 399.822256][ T9735] FAT-fs (loop3): Directory bread(block 524323) failed [ 399.840637][ T9735] FAT-fs (loop3): Directory bread(block 524324) failed [ 399.857513][ T9735] FAT-fs (loop3): Directory bread(block 524325) failed [ 399.893579][ T9735] FAT-fs (loop3): Directory bread(block 524326) failed [ 399.907699][ T9735] FAT-fs (loop3): Directory bread(block 524327) failed [ 399.917743][ T9735] FAT-fs (loop3): Directory bread(block 524328) failed [ 399.924684][ T9735] FAT-fs (loop3): Directory bread(block 524329) failed [ 399.977604][ T4330] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 400.197535][ T4330] usb 7-1: device descriptor read/64, error -71 [ 400.507615][ T4330] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 400.574950][ T9763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1677'. [ 400.716840][ T9766] loop1: detected capacity change from 0 to 512 [ 400.747622][ T4330] usb 7-1: device descriptor read/64, error -71 [ 400.817870][ T9766] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1678: inode has both inline data and extents flags [ 400.880097][ T9766] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1678: couldn't read orphan inode 15 (err -117) [ 400.898637][ T4330] usb usb7-port1: attempt power cycle [ 400.976274][ T9766] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 401.027625][ T9777] loop0: detected capacity change from 0 to 128 [ 401.114255][ T9777] FAT-fs (loop0): Directory bread(block 524322) failed [ 401.185361][ T9777] FAT-fs (loop0): Directory bread(block 524323) failed [ 401.233780][ T9777] FAT-fs (loop0): Directory bread(block 524324) failed [ 401.256203][ T9777] FAT-fs (loop0): Directory bread(block 524325) failed [ 401.307669][ T9777] FAT-fs (loop0): Directory bread(block 524326) failed [ 401.314629][ T9777] FAT-fs (loop0): Directory bread(block 524327) failed [ 401.327685][ T4330] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 401.358228][ T9777] FAT-fs (loop0): Directory bread(block 524328) failed [ 401.390393][ T9777] FAT-fs (loop0): Directory bread(block 524329) failed [ 401.447731][ T4330] usb 7-1: device descriptor read/8, error -71 [ 401.907733][ T4330] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 401.920483][ T9798] loop3: detected capacity change from 0 to 256 [ 401.942518][ T9798] exfat: Deprecated parameter 'namecase' [ 401.950364][ T9798] exfat: Deprecated parameter 'namecase' [ 402.004479][ T9801] loop1: detected capacity change from 0 to 2048 [ 402.037782][ T4330] usb 7-1: device descriptor read/8, error -71 [ 402.044650][ T9798] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 402.095679][ T9801] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.118192][ T26] audit: type=1800 audit(1780508470.096:89): pid=9801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1688" name="bus" dev="loop1" ino=1368 res=0 errno=0 [ 402.157775][ T4330] usb usb7-port1: unable to enumerate USB device [ 402.217963][ T9803] loop0: detected capacity change from 0 to 512 [ 402.324360][ T9803] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.1692: inode has both inline data and extents flags [ 402.367692][ T9803] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1692: couldn't read orphan inode 15 (err -117) [ 402.434655][ T9803] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 402.798889][ T9817] tap0: tun_chr_ioctl cmd 1074025692 [ 403.377558][ T4236] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 403.788752][ T4236] usb 1-1: unable to get BOS descriptor or descriptor too short [ 404.287843][ T4236] usb 1-1: string descriptor 0 read error: -22 [ 404.295109][ T4236] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 404.355545][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.661002][ T9851] loop3: detected capacity change from 0 to 2048 [ 404.744939][ T9851] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.883712][ T26] audit: type=1800 audit(1780508472.806:90): pid=9851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1711" name="bus" dev="loop3" ino=1368 res=0 errno=0 [ 405.427642][ T4236] usb 1-1: 1:1: cannot get freq at ep 0x1 [ 405.565205][ T4236] usb 1-1: USB disconnect, device number 7 [ 405.577284][ T9862] lo speed is unknown, defaulting to 1000 [ 405.802920][ T9869] loop6: detected capacity change from 0 to 2048 [ 405.880644][ T9869] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.902845][ T26] audit: type=1800 audit(1780508473.876:91): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1718" name="bus" dev="loop6" ino=1368 res=0 errno=0 [ 406.369134][ T9868] loop3: detected capacity change from 0 to 512 [ 406.580939][ T4336] udevd[4336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.697940][ T9868] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1719: inode has both inline data and extents flags [ 406.714858][ T9868] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1719: couldn't read orphan inode 15 (err -117) [ 407.533642][ T9868] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 409.025708][ T9918] loop0: detected capacity change from 0 to 2048 [ 409.692162][ T9918] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.732171][ T26] audit: type=1800 audit(1780508477.706:92): pid=9915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1732" name="bus" dev="loop0" ino=1368 res=0 errno=0 [ 411.819523][ T9966] loop1: detected capacity change from 0 to 2048 [ 411.934366][ T9966] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 411.955279][ T26] audit: type=1800 audit(1780508479.926:93): pid=9966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1748" name="bus" dev="loop1" ino=1368 res=0 errno=0 [ 412.854959][ T9974] loop0: detected capacity change from 0 to 2048 [ 412.934259][ T9974] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.049072][ T26] audit: type=1800 audit(1780508480.976:94): pid=9974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1751" name="bus" dev="loop0" ino=1368 res=0 errno=0 [ 413.321917][ T9978] loop6: detected capacity change from 0 to 8 [ 415.447470][T10007] loop1: detected capacity change from 0 to 2048 [ 415.570909][T10007] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.627993][ T26] audit: type=1800 audit(1780508483.576:95): pid=10007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1765" name="bus" dev="loop1" ino=1368 res=0 errno=0 [ 416.339370][T10013] loop0: detected capacity change from 0 to 2048 [ 416.521033][T10013] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.639411][ T26] audit: type=1800 audit(1780508484.566:96): pid=10013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1768" name="bus" dev="loop0" ino=1368 res=0 errno=0 [ 417.206836][T10021] lo speed is unknown, defaulting to 1000 [ 420.052619][T10039] lo speed is unknown, defaulting to 1000 [ 420.331382][T10045] loop0: detected capacity change from 0 to 2048 [ 420.462860][T10045] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.482496][ T26] audit: type=1800 audit(1780508488.456:97): pid=10045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1779" name="bus" dev="loop0" ino=1368 res=0 errno=0 [ 420.485946][T10054] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1782'. [ 420.735608][T10060] loop0: detected capacity change from 0 to 512 [ 420.870136][T10060] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.1784: inode has both inline data and extents flags [ 420.945299][T10060] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1784: couldn't read orphan inode 15 (err -117) [ 421.513463][T10060] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 421.797397][T10068] lo speed is unknown, defaulting to 1000 [ 422.235260][ T1170] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.366680][ T1170] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.604657][ T1170] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.648864][T10093] loop1: detected capacity change from 0 to 8 [ 422.732123][ T1170] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.430551][T10107] loop1: detected capacity change from 0 to 2048 [ 423.991000][T10107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.056671][ T26] audit: type=1800 audit(1780508492.026:98): pid=10105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1801" name="bus" dev="loop1" ino=1368 res=0 errno=0 [ 424.571011][T10120] lo speed is unknown, defaulting to 1000 [ 425.423882][T10117] lo speed is unknown, defaulting to 1000 [ 425.635191][T10136] rdma_rxe: already configured on lo [ 425.777972][ T4330] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 425.979108][ T4330] usb 1-1: device descriptor read/64, error -71 [ 426.331140][ T4330] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 426.657769][ T4330] usb 1-1: device descriptor read/64, error -71 [ 426.817927][ T4330] usb usb1-port1: attempt power cycle [ 426.955169][T10117] chnl_net:caif_netlink_parms(): no params data found [ 427.007907][T10170] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 427.015923][T10170] syzkaller0: linktype set to 778 [ 427.161205][T10178] device pim6reg1 entered promiscuous mode [ 427.251799][ T4330] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 427.377190][ T4330] usb 1-1: device descriptor read/8, error -71 [ 427.394989][T10132] Bluetooth: hci3: command 0x0409 tx timeout [ 427.403731][T10117] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.502194][T10117] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.538775][T10117] device bridge_slave_0 entered promiscuous mode [ 427.579172][T10117] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.586804][T10117] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.671430][T10117] device bridge_slave_1 entered promiscuous mode [ 427.820754][T10207] loop6: detected capacity change from 0 to 2048 [ 427.898342][T10207] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 427.977616][ T26] audit: type=1800 audit(1780508495.916:99): pid=10207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1832" name="bus" dev="loop6" ino=1368 res=0 errno=0 [ 428.507630][ T4330] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 428.590862][T10117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.637152][T10117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.778043][ T4330] usb 1-1: device not accepting address 11, error -71 [ 428.786530][ T4330] usb usb1-port1: unable to enumerate USB device [ 428.806339][T10117] team0: Port device team_slave_0 added [ 428.907530][T10117] team0: Port device team_slave_1 added [ 429.078889][T10117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.160849][T10117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.264742][T10117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.523133][T10258] loop0: detected capacity change from 0 to 2048 [ 429.531707][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 429.822463][T10117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.895948][T10117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.238092][T10117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.265855][T10258] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 430.299233][ T26] audit: type=1800 audit(1780508498.276:100): pid=10253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1847" name="bus" dev="loop0" ino=1368 res=0 errno=0 [ 430.391443][T10117] device hsr_slave_0 entered promiscuous mode [ 430.540459][T10117] device hsr_slave_1 entered promiscuous mode [ 430.817792][ T4266] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 430.960363][T10285] loop6: detected capacity change from 0 to 16 [ 431.044526][T10117] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 431.079701][T10285] erofs: (device loop6): mounted with root inode @ nid 36. [ 431.158707][T10117] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 431.182209][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 431.221091][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 431.922187][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 356351 of nid 36 [ 431.977646][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 432.005954][T10300] loop0: detected capacity change from 0 to 512 [ 432.013230][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 352255 of nid 36 [ 432.026832][ T4330] Bluetooth: hci3: command 0x040f tx timeout [ 432.036837][T10117] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 432.095258][T10300] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.1867: inode has both inline data and extents flags [ 432.109745][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 432.154728][T10300] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1867: couldn't read orphan inode 15 (err -117) [ 432.169191][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 432.169901][T10300] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 432.198359][T10117] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 432.217900][ T4266] usb 2-1: unable to get BOS descriptor or descriptor too short [ 432.229533][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 432.243510][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 432.255058][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 339967 of nid 36 [ 432.269864][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 432.281388][T10285] erofs: (device loop6): z_erofs_extent_lookback: unknown type 3 @ lcn 80 of nid 36 [ 432.307017][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 432.316428][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 331775 of nid 36 [ 432.349251][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 432.359727][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 432.369466][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 432.380062][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 432.442128][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 432.470314][T10285] erofs: (device loop6): z_erofs_extent_lookback: unknown type 3 @ lcn 72 of nid 36 [ 432.521158][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 432.564151][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 299007 of nid 36 [ 432.617820][ T4266] usb 2-1: string descriptor 0 read error: -22 [ 432.621223][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 432.630589][ T4266] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 432.657725][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.665895][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 432.700810][T10285] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 432.748233][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 432.763607][T10117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.779699][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 286719 of nid 36 [ 432.791358][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 432.801177][T10285] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 432.811021][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 432.850264][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 432.863303][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.872081][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 67 @ nid 36 [ 432.900393][T10117] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.907094][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 66 @ nid 36 [ 432.907127][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 432.907148][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 432.907237][T10285] erofs: (device loop6): z_erofs_extent_lookback: unknown type 3 @ lcn 62 of nid 36 [ 432.907260][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 432.907279][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 258047 of nid 36 [ 432.982851][T10325] [ 432.985640][T10325] ============================= [ 433.006715][T10325] WARNING: suspicious RCU usage [ 433.012558][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 433.021582][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 433.023018][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 433.039110][T10325] syzkaller #0 Not tainted [ 433.050278][T10325] ----------------------------- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 433.075800][T10325] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 433.084966][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 253951 of nid 36 [ 433.124974][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 433.129962][ T9587] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.141385][ T9587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.157511][T10325] [ 433.157511][T10325] other info that might help us debug this: [ 433.157511][T10325] [ 433.164730][T10285] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 433.227509][T10325] [ 433.227509][T10325] rcu_scheduler_active = 2, debug_locks = 1 [ 433.235645][T10325] 1 lock held by syz.5.1874/10325: [ 433.287816][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 433.295537][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 433.329632][T10325] #0: ffffffff8c31f4e0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 433.377726][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 433.386890][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 433.405073][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 433.417480][T10325] [ 433.417480][T10325] stack backtrace: [ 433.419303][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 433.452922][T10325] CPU: 1 PID: 10325 Comm: syz.5.1874 Not tainted syzkaller #0 [ 433.460551][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 433.470666][T10325] Call Trace: [ 433.473985][T10325] [ 433.476937][T10325] dump_stack_lvl+0x188/0x250 [ 433.481697][T10325] ? load_image+0x400/0x400 [ 433.486260][T10325] ? show_regs_print_info+0x20/0x20 [ 433.487588][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 225279 of nid 36 [ 433.491496][T10325] ? print_tainted+0x148/0x170 [ 433.506998][T10325] ? lockdep_rcu_suspicious+0x110/0x180 [ 433.512606][T10325] get_callchain_entry+0x2a5/0x3b0 [ 433.517805][T10325] get_perf_callchain+0xab/0x460 [ 433.522787][T10325] ? put_callchain_entry+0xb0/0xb0 [ 433.527954][T10325] ? mark_lock+0x94/0x320 [ 433.532353][T10325] ? verify_lock_unused+0x140/0x140 [ 433.537570][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 433.537761][T10325] ? __lock_acquire+0x13bc/0x7d10 [ 433.546803][T10285] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 433.551839][T10325] __bpf_get_stack+0x2db/0x530 [ 433.565998][T10325] ? stack_map_get_build_id_offset+0x860/0x860 [ 433.572211][T10325] ? bpf_prog_14d9fb3786f83342+0x3d/0xecc [ 433.577976][T10325] bpf_get_stack_raw_tp+0x189/0x1c0 [ 433.583295][T10325] bpf_prog_14d9fb3786f83342+0x3d/0xecc [ 433.588887][T10325] bpf_prog_run_pin_on_cpu+0xa4/0x140 [ 433.594302][T10325] bpf_prog_test_run_syscall+0x35a/0x4f0 [ 433.599976][T10325] ? sock_gen_cookie+0x60/0x60 [ 433.604786][T10325] ? sock_gen_cookie+0x60/0x60 [ 433.609584][T10325] bpf_prog_test_run+0x31e/0x390 [ 433.614639][T10325] __sys_bpf+0x5a5/0x6f0 [ 433.617590][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 433.618924][T10325] ? bpf_link_show_fdinfo+0x380/0x380 [ 433.633366][T10325] ? vtime_user_exit+0x2c8/0x3e0 [ 433.638459][T10325] __x64_sys_bpf+0x78/0x90 [ 433.642938][T10325] do_syscall_64+0x4c/0xa0 [ 433.647641][T10325] ? clear_bhb_loop+0x30/0x80 [ 433.652420][T10325] ? clear_bhb_loop+0x30/0x80 [ 433.657168][T10325] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 433.660216][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 217087 of nid 36 [ 433.663104][T10325] RIP: 0033:0x7f217eacbe59 [ 433.677527][T10325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.697189][T10325] RSP: 002b:00007f217cd25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 433.705653][T10325] RAX: ffffffffffffffda RBX: 00007f217ed44fa0 RCX: 00007f217eacbe59 [ 433.713680][T10325] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 433.719791][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 433.721691][T10325] RBP: 00007f217eb61d6f R08: 0000000000000000 R09: 0000000000000000 [ 433.738726][T10325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.746743][T10325] R13: 00007f217ed45038 R14: 00007f217ed44fa0 R15: 00007fff259a8ac8 [ 433.754774][T10325] [ 433.770830][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 433.803888][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 433.867611][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 433.876707][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 433.930861][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 433.972301][T10285] erofs: (device loop6): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 434.017818][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 434.026929][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 176127 of nid 36 [ 434.067628][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 434.068166][T10325] [ 434.079596][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 172031 of nid 36 [ 434.096701][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 434.112423][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 434.122294][ T1109] Bluetooth: hci3: command 0x0419 tx timeout [ 434.130884][T10325] ============================= [ 434.151647][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 434.165613][T10325] WARNING: suspicious RCU usage [ 434.190145][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 37 @ nid 36 [ 434.197936][T10325] syzkaller #0 Not tainted [ 434.203693][T10325] ----------------------------- [ 434.217616][T10285] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 434.227046][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 434.238047][T10325] include/linux/perf_event.h:1274 suspicious rcu_dereference_check() usage! [ 434.246788][T10325] [ 434.246788][T10325] other info that might help us debug this: [ 434.246788][T10325] [ 434.256443][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 35 @ nid 36 [ 434.315577][T10325] [ 434.315577][T10325] rcu_scheduler_active = 2, debug_locks = 1 [ 434.330206][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 434.347478][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 33 @ nid 36 [ 434.356673][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 434.357752][T10325] 1 lock held by syz.5.1874/10325: [ 434.391534][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 434.391573][T10325] #0: [ 434.408212][ T4266] usb 2-1: 1:1: cannot get freq at ep 0x1 [ 434.429462][T10285] erofs: (device loop6): z_erofs_extent_lookback: unknown type 3 @ lcn 28 of nid 36 [ 434.446801][T10325] ffffffff8c31f4e0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 434.456593][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 29 @ nid 36 [ 434.472858][T10325] [ 434.472858][T10325] stack backtrace: [ 434.500866][T10325] CPU: 1 PID: 10325 Comm: syz.5.1874 Not tainted syzkaller #0 [ 434.508410][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.518530][T10325] Call Trace: [ 434.521396][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 118783 of nid 36 [ 434.521845][T10325] [ 434.534908][T10325] dump_stack_lvl+0x188/0x250 [ 434.539631][T10325] ? load_image+0x400/0x400 [ 434.544192][T10325] ? show_regs_print_info+0x20/0x20 [ 434.549459][T10325] ? lockdep_rcu_suspicious+0x110/0x180 [ 434.555063][T10325] perf_callchain_kernel+0x5f1/0x720 [ 434.560441][T10325] ? load_image+0x400/0x400 [ 434.564990][T10325] ? show_regs_print_info+0x20/0x20 [ 434.570248][T10325] ? print_tainted+0x148/0x170 [ 434.575061][T10325] ? arch_perf_update_userpage+0x3c0/0x3c0 [ 434.580940][T10325] ? get_callchain_entry+0x181/0x3b0 [ 434.586280][T10325] get_perf_callchain+0x356/0x460 [ 434.591361][T10325] ? put_callchain_entry+0xb0/0xb0 [ 434.596521][T10325] ? mark_lock+0x94/0x320 [ 434.597621][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 28 @ nid 36 [ 434.600897][T10325] ? verify_lock_unused+0x140/0x140 [ 434.615160][T10325] ? __lock_acquire+0x13bc/0x7d10 [ 434.620245][T10325] __bpf_get_stack+0x2db/0x530 [ 434.625074][T10325] ? stack_map_get_build_id_offset+0x860/0x860 [ 434.631280][T10325] ? bpf_prog_14d9fb3786f83342+0x3d/0xecc [ 434.637046][T10325] bpf_get_stack_raw_tp+0x189/0x1c0 [ 434.637880][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 434.642291][T10325] bpf_prog_14d9fb3786f83342+0x3d/0xecc [ 434.657002][T10325] bpf_prog_run_pin_on_cpu+0xa4/0x140 [ 434.662433][T10325] bpf_prog_test_run_syscall+0x35a/0x4f0 [ 434.668125][T10325] ? sock_gen_cookie+0x60/0x60 [ 434.672953][T10325] ? sock_gen_cookie+0x60/0x60 [ 434.677577][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 110591 of nid 36 [ 434.677756][T10325] bpf_prog_test_run+0x31e/0x390 [ 434.692708][T10325] __sys_bpf+0x5a5/0x6f0 [ 434.697003][T10325] ? bpf_link_show_fdinfo+0x380/0x380 [ 434.697567][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 434.702433][T10325] ? vtime_user_exit+0x2c8/0x3e0 [ 434.716433][T10325] __x64_sys_bpf+0x78/0x90 [ 434.720919][T10325] do_syscall_64+0x4c/0xa0 [ 434.725387][T10325] ? clear_bhb_loop+0x30/0x80 [ 434.730110][T10325] ? clear_bhb_loop+0x30/0x80 [ 434.734841][T10325] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 434.736694][T10285] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 434.740793][T10325] RIP: 0033:0x7f217eacbe59 [ 434.740820][T10325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.740841][T10325] RSP: 002b:00007f217cd25028 EFLAGS: 00000246 [ 434.754753][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 434.755266][T10325] ORIG_RAX: 0000000000000141 [ 434.794731][T10325] RAX: ffffffffffffffda RBX: 00007f217ed44fa0 RCX: 00007f217eacbe59 [ 434.800673][T10285] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 434.802746][T10325] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 434.815358][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 434.820054][T10325] RBP: 00007f217eb61d6f R08: 0000000000000000 R09: 0000000000000000 [ 434.820075][T10325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.820090][T10325] R13: 00007f217ed45038 R14: 00007f217ed44fa0 R15: 00007fff259a8ac8 [ 434.820126][T10325] [ 434.898834][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 434.957738][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 434.966956][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 434.995042][T10285] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 435.025880][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 435.042091][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 435.052462][ T4266] usb 2-1: USB disconnect, device number 18 [ 435.070951][T10285] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 435.108138][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 435.137477][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 435.146596][T10285] erofs: (device loop6): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 435.169367][T10285] attempt to access beyond end of device [ 435.169367][T10285] loop6: rw=524288, want=13478624080, limit=16 [ 435.189441][T10285] attempt to access beyond end of device [ 435.189441][T10285] loop6: rw=524288, want=56, limit=16 [ 435.214886][T10285] attempt to access beyond end of device [ 435.214886][T10285] loop6: rw=524288, want=40, limit=16 [ 435.226493][T10285] attempt to access beyond end of device [ 435.226493][T10285] loop6: rw=524288, want=96, limit=16 [ 435.246977][T10285] attempt to access beyond end of device [ 435.246977][T10285] loop6: rw=524288, want=32, limit=16 [ 435.277632][T10285] attempt to access beyond end of device [ 435.277632][T10285] loop6: rw=524288, want=15495015312, limit=16 [ 435.309449][T10285] attempt to access beyond end of device [ 435.309449][T10285] loop6: rw=524288, want=15495015288, limit=16 [ 435.342140][ T1170] device hsr_slave_0 left promiscuous mode [ 435.361758][ T1170] device hsr_slave_1 left promiscuous mode [ 435.377320][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.385216][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.408455][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.415942][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.458295][ T1170] device bridge_slave_1 left promiscuous mode [ 435.464623][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.478212][ T1170] device bridge_slave_0 left promiscuous mode [ 435.495546][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.565730][ T1170] device veth1_macvtap left promiscuous mode [ 435.578980][ T1170] device veth0_macvtap left promiscuous mode [ 435.585126][ T1170] device veth1_vlan left promiscuous mode [ 435.605010][ T1170] device veth0_vlan left promiscuous mode [ 435.852616][ T1170] team0 (unregistering): Port device team_slave_1 removed [ 435.872713][ T1170] team0 (unregistering): Port device team_slave_0 removed [ 435.888505][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.905356][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.982380][ T1170] bond0 (unregistering): Released all slaves [ 438.018251][ T1170] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.096621][ T1170] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.180336][ T1170] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.224679][ T1170] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.351218][ T1170] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.414717][ T1170] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.481262][ T1170] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.554436][ T1170] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.951152][ T1170] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.996404][ T1170] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.064678][ T1170] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.133181][ T1170] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.261995][ T1170] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.315112][ T1170] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.367798][ T1170] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.434582][ T1170] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.962173][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.968717][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.088830][ T1170] device hsr_slave_0 left promiscuous mode [ 442.095353][ T1170] device hsr_slave_1 left promiscuous mode [ 442.102508][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.110483][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.121100][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.135127][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.143368][ T1170] device bridge_slave_1 left promiscuous mode [ 442.155867][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.165419][ T1170] device bridge_slave_0 left promiscuous mode [ 442.177886][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.204617][ T1170] device hsr_slave_0 left promiscuous mode [ 442.211425][ T1170] device hsr_slave_1 left promiscuous mode [ 442.218437][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.225915][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.242296][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.251710][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.260043][ T1170] device bridge_slave_1 left promiscuous mode [ 442.266295][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.277840][ T1170] device bridge_slave_0 left promiscuous mode [ 442.284087][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.298617][ T1170] device hsr_slave_0 left promiscuous mode [ 442.311338][ T1170] device hsr_slave_1 left promiscuous mode [ 442.318402][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.326259][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.340620][ T1170] device bridge_slave_1 left promiscuous mode [ 442.346881][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.363135][ T1170] device bridge_slave_0 left promiscuous mode [ 442.369448][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.383000][ T1170] device hsr_slave_0 left promiscuous mode [ 442.390054][ T1170] device hsr_slave_1 left promiscuous mode [ 442.396644][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.404606][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.413003][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.420872][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.429669][ T1170] device bridge_slave_1 left promiscuous mode [ 442.435921][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.445747][ T1170] device bridge_slave_0 left promiscuous mode [ 442.458807][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.479744][ T1170] device hsr_slave_0 left promiscuous mode [ 442.486490][ T1170] device hsr_slave_1 left promiscuous mode [ 442.499161][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.506664][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.515534][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.537583][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.545593][ T1170] device bridge_slave_1 left promiscuous mode [ 442.558252][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.567065][ T1170] device bridge_slave_0 left promiscuous mode [ 442.577278][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.597190][ T1170] device veth1_macvtap left promiscuous mode [ 442.603647][ T1170] device veth0_macvtap left promiscuous mode [ 442.609924][ T1170] device veth1_vlan left promiscuous mode [ 442.615761][ T1170] device veth0_vlan left promiscuous mode [ 442.623035][ T1170] device veth1_macvtap left promiscuous mode [ 442.629353][ T1170] device veth0_macvtap left promiscuous mode [ 442.635466][ T1170] device veth1_vlan left promiscuous mode [ 442.641564][ T1170] device veth0_vlan left promiscuous mode [ 442.651001][ T1170] device veth1_macvtap left promiscuous mode [ 442.657041][ T1170] device veth0_macvtap left promiscuous mode [ 442.663550][ T1170] device veth1_vlan left promiscuous mode [ 442.669858][ T1170] device veth0_vlan left promiscuous mode [ 442.679995][ T1170] device veth1_macvtap left promiscuous mode [ 442.686089][ T1170] device veth0_macvtap left promiscuous mode [ 442.692589][ T1170] device veth1_vlan left promiscuous mode [ 442.700840][ T1170] device veth0_vlan left promiscuous mode