last executing test programs: 2m34.960397422s ago: executing program 3 (id=787): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x81) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000004400)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x20, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006340)={0x2020}, 0x2058) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r3, &(0x7f0000002140)={0x20, 0x0, r5, {0x0, 0x0, 0x80003ff}}, 0x20) getdents64(r4, 0x0, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x209200, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r6, &(0x7f0000000280)) 2m34.481149901s ago: executing program 3 (id=788): unshare(0x60600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000040)=r2, 0x4) 2m34.30009613s ago: executing program 3 (id=790): r0 = syz_open_procfs(0x0, 0x0) r1 = fanotify_init(0x8, 0x2) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) io_setup(0x5ff, &(0x7f0000000040)=0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x100000001}]) 2m34.116665909s ago: executing program 3 (id=795): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) 2m33.959527319s ago: executing program 3 (id=796): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x34, r1, 0x1, 0xffffffff, 0x25dfdc02, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4020004) 2m33.446524777s ago: executing program 3 (id=803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00') preadv(r3, &(0x7f0000003440)=[{&(0x7f0000000140)=""/245, 0xf5}], 0x1, 0x162, 0xb) inotify_init1(0x0) 2m33.224654806s ago: executing program 32 (id=803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00') preadv(r3, &(0x7f0000003440)=[{&(0x7f0000000140)=""/245, 0xf5}], 0x1, 0x162, 0xb) inotify_init1(0x0) 1m56.20214216s ago: executing program 4 (id=1019): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000400)={0x1d, r3, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000007d00)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000ac0)="4eb3263f43782521", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000000) 1m55.252536376s ago: executing program 4 (id=1032): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xeb, 0x1}}]}, 0x2c}}, 0x0) 1m55.160445586s ago: executing program 4 (id=1035): syz_clone(0x22384500, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) setpriority(0x1, 0x0, 0xff) 1m53.183091718s ago: executing program 4 (id=1057): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000300)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 1m52.630559776s ago: executing program 4 (id=1061): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/50, 0x32}], 0x3}, 0x12) 1m51.656397183s ago: executing program 4 (id=1073): socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x2000140d) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x9) 1m51.459601712s ago: executing program 33 (id=1073): socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x2000140d) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x9) 3.598455844s ago: executing program 5 (id=1767): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r0, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='{'}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x170c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x240008d4) 3.516052363s ago: executing program 6 (id=1769): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000280)={0xffffffffffffffff, 0x1}, 0x0) 3.503938993s ago: executing program 6 (id=1770): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x3}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.449235143s ago: executing program 5 (id=1773): r0 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300), 0x10) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) recvmmsg$unix(r0, &(0x7f0000000100)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100000}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0, 0x10}], 0x1}}], 0x3ffffffffffffd2, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x2710, @hyper}, 0x10) 3.350555653s ago: executing program 2 (id=1775): r0 = openat(0xffffffffffffff9c, 0x0, 0x600100, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x29) recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3.331316803s ago: executing program 6 (id=1777): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001b40)=ANY=[@ANYBLOB="02c9200c0008000200"], 0x11) 3.231961362s ago: executing program 5 (id=1779): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x61d2, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.195922892s ago: executing program 0 (id=1780): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1900000004000000080000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x2000, 0x2, @local, 0x4}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 3.069797891s ago: executing program 2 (id=1782): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x4, 0x0, 0x0, {{{@in6=@loopback, @in6=@mcast1}, {@in=@broadcast}, @in=@dev={0xac, 0x14, 0x14, 0x12}, {}, {0x0, 0x48a9, 0x0, 0x1000000000001}}, 0x0, 0x81}, [@XFRMA_IF_ID={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x28101, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb92f"], 0xfdef) 760.905753ms ago: executing program 0 (id=1783): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x0) 757.998193ms ago: executing program 5 (id=1784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x8}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/107, 0x65}, {0x0, 0x35}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000780)=""/255, 0xfb}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000480)=""/78, 0xfffffffffffffefa}, {&(0x7f00000001c0)=""/182, 0xb6}, {&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f00000006c0)=""/174, 0xae}, {&(0x7f0000000940)=""/245, 0xf5}], 0x7}, 0xee8a}], 0x4, 0x40000002, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000880), 0x28802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0xfdffffffd, 0x6930, 0x4, 0x80000003}) 710.133463ms ago: executing program 0 (id=1785): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r0, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='{'}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x170c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x240008d4) 695.310803ms ago: executing program 2 (id=1786): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd"], 0x0) 688.628693ms ago: executing program 1 (id=1787): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x2000000, 0x0, {{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffff1}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0xe6}}, 0x0, 0x1a0b1}}, 0xf8}}, 0x20000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000"], 0x120}}, 0x0) 547.819372ms ago: executing program 2 (id=1788): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x300, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc8}]}, 0x2c}}, 0x0) 507.085342ms ago: executing program 0 (id=1789): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, 0x0) syz_emit_vhci(&(0x7f00000048c0)=ANY=[@ANYBLOB="043e0b06c9000800"], 0xe) 506.717082ms ago: executing program 1 (id=1790): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x3}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 506.030192ms ago: executing program 6 (id=1791): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x590}}], 0x1, 0x28048825) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 360.023291ms ago: executing program 0 (id=1792): r0 = openat(0xffffffffffffff9c, 0x0, 0x600100, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$eJzs3V1sXGdaB/DnnWMndsqyU9qmXbpIsxSxaZoE56OtUVrkbIy1K0VtVMcLNyCP40kY1R67trNKK1gFCbgBQVCRVsAFuUHigovcIKEVQhE3iwRIEajSIpAItI1WQoBXsLBiJYzOzDv22BvXbr6cNL/fbvKfc+Y9M++Z9jlzpprnTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEV/46RNDh9NOzwIAuJ9eG39j6Kj3fwB4pJzx+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK2lKOKtSPHe2HKabC93DJxqti5cnBgdu/VmgylSVKJojy//DBw+cvTYiy+9PNzNj97+bvtMvD5+5kTt5Nzs/EJjcbExXZtoNc/OTTe2/Qh3uv1G+9svQG32zQvT584t1o4cOrru7ovVm7sf21s9Pvzsgee7YydGx8bGe8b09d/2s3+fdPceik+QXVHEFyPFNw5+K9UjohJ3XgtbHDvutcHoK+uvvRMTo2PtHZlp1ltL5Z2pkkf1RVR7Nhrp1sh9qMU7MhJxqfznVE54f7l74/P1hfrUTKN2ur6w1FxqzrVSpTPbcn+qUYnhFDEfEcvFTk+eB01/FPFqpLj5veU0FRFFtw5eeG38jaGjm2/Ydx8nucnTV4uI6/EQ1Cw8oHZHEb8dKd6dHIqzua7aZfNBxOfLfCXirTKvpbicl1N5gBiO+Lb3E3io9UURfxMp5tJymu7Wfvu88tSXa19qnZvrGds9r3zoPx/cT85NeIANRBFT7TP+5XT7/7ELAAAAAAAAAAAAALg/ivh6pLg6uy/NR29PabN1vnamPjXT+VZw97v/tbzVysrKSjV1spZzKOdIztM5J3PO57yU83LOKzmv5ryW83rOGzmXc0YlP3/OWs6hnCM5T+eczDmf81LOyzmvdLLb0bhyLa+/nvNGzuWcoe8JAAAAAAAAAAAAAAAAAACAu2wwiviNSPHvv/+V9u9KR/t36T99fPjkqU/1/mb8M1s8Tjn2UER8Pbb3m7y78m+Np0r5v7u/X8DWBqKIr+bf//vlnZ4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQKhEEb8SKb72neUUKSJGIiajkzeKnZ4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDanYp4NVL87O+OrK7ri4jU/n/HvvKvYzFS5HyizFdi5HA7KyMnyhyIOLQD8wdu3+Lb77xZn5lpLLjhhhturN7Y6SMTAAAAAAAAAAAAAAAAADzCUhF/Hyl+8veWUzUiLlZv7n5sb/X48LMHni+iaF8EIPWOf338zInaybnZ+YXG4mJjujbRap6dm25s9+kGTjVbFy5OjI7dk53Z0uA9nv/gwMm5+bcXmud/YemW9+8ZODG1uLRQP3vru2Mw+iKGetfsb094YnSsPemZZr3V3jRVNplgX0RtuzvDI29PKuJ/I8V7B78Zj+d1+fof/Z2lter/w19cW/rhvvW5+q9j+/jx6ePDJ/c8t53babsT3d8uvLIQxsZ7VvflWf5Qz7pqnte2HxseUWX9vxApfv6PitStoVz/P9BZKlbH/s9X12rq+IZctUP1/0TPuuP5qNXfFzGwNDvf/3TEwOLb7xxsztbPN843WseOvPzS8LGXXzz2Uv+uiIFzzZnG0Nqtbb92AAAAAAAAAAAAAAAAAHCv9KcivhApfunv/nK1bzz3/32qs7TW/9fb/7tvw+P0Xjdgs9u37PXboq+vV/mcKRXxVKR49s+eac83xR4973Cb9qQivlvW0/QX0+fyulz/ubP/1vV/aUOu2qH+38d71l3Kx4n/iBSP/8Ez8bme48TG7t5y3F9Eiqkf+WweF7vKcd3H6/REdxqDy7FfiRTvn14/tts3/cTa2MPb3S3YSWX9z0aKf/itv40fzevWX//j1vW/Z0Ou2qH6f7J3nyJi8e133qzPzDQWFrf9UsAjp6z/X48Uf/0n34zn8rqPuv5P9zo/+55bn4PdQTtU/0/1rKvmef3Yx3wtAAAAAAAAAAAA4GGxJxXxT5Hiz//0QDqY123n+7/TG3LVDn3/7+meddPrvv97725s+0UGAIAHRH8q4icixR9Pf5C6vbGb9v++stb/M7rxxL19Tv+D7T7/j3Wu/zH6/8vnTKmI/8t9vUNb9PX+eKT4tZ86kMelveW4ke50238PvDbXOnhiZmbubH2pPjXTqI3P1882ym33R4p//bfP5m0r7T7fbn90pzd4rSf4dyLFz33YHdvpCe72Uj65NvZwOfZgpPju++vHdvuunlobe6Qc+5uRYuy/bz1279rYo+XYf4wU//lurTt2Tzm2+3nu6bWxh87OzXzfRzYAAAAAAAAAAAAAAAAAAAB2Xn8qIkWKaz9zZbU3fv31v7rXAVh//a+N7tXv/1fvzm4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMhRRH/FSneG1tON4pyuWPgVLN14eLE6NitNxtMkaISRXt8+Wfg8JGjx1586eXhbn709nfbZ+L18TMnaifnZucXGouLjenaRKt5dm66se1HuL3ti03v2d9+AWqzb16YPndusXbk0NF1d1+s3tz92N7q8eFnDzzfHTsxOjY23jOmr3/bs99SunsPxSfIrijiryLFNw5+K/1zEVGJ266FVVscO+61wegr66+9ExOjY+0dmWnWW0vlnamSR/VFVHs2GunWyH2oxTsyEnEpIirlhPeXuzc+X1+oT800aqfrC0vNpeZcK1U6sy33pxqVGE4R8xGxvPnRikdUfxRxLVLc/N5y+pei84bWroMXXht/Y+jo5hv23cdJbvL01SLiejwENQsPqN1RxJOR4t3JoXi/6NRVu2w+iPh8ma9EvFXmtRSX83IqDxDDEd/2fgIPtb4o4nSkmEvL6YMi1377vPLUl2tfap2b6xnbPa986D8f3E/OTXiADUQRH7bP+JfTh97PAQAAAAAAAAAAAOABV8SrkeLq7L7U7g9d7Sltts7XztSnZjpf6+9+97+Wt1pZWVmppk7Wcg7lHMl5Oudkzvmcl3Jeznkl59Wc13Jez3mjnbvbjYnlclTy8+es5RzKOZLzdM7JnPM5L+W8nPNKzqs5r+W8nvNGzuWcH9H1DwAAAAAAAAAAAAAAAAAAd6QSRfxqpPjad5bTStH5fdnJ6OSN9X2uu3ZqjsC98f8BAAD//3zgG/w=") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x29) recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 359.828892ms ago: executing program 2 (id=1793): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f00000000c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05x\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4;\xe9u\x11\xb2(\x90\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xa8C\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4', 0x0) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2000005, 0x12, r1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f000030e000/0x1000)=nil, 0x1000}}) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) 359.040771ms ago: executing program 1 (id=1794): move_pages(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 244.022631ms ago: executing program 1 (id=1795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x0) 238.274381ms ago: executing program 6 (id=1796): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x4, 0x0, 0x0, {{{@in6=@loopback, @in6=@mcast1}, {@in=@broadcast}, @in=@dev={0xac, 0x14, 0x14, 0x12}, {}, {0x0, 0x48a9, 0x0, 0x1000000000001}}, 0x0, 0x81}, [@XFRMA_IF_ID={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x28101, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb92f"], 0xfdef) 234.517951ms ago: executing program 5 (id=1797): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) 165.810241ms ago: executing program 1 (id=1798): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd"], 0x0) 102.59808ms ago: executing program 2 (id=1799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090800000000fddbdf25021f00cb", @ANYRES32=r2, @ANYBLOB="08000100ac14144108000200ff"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 101.379831ms ago: executing program 0 (id=1800): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = openat$vnet(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) connect$inet6(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000002500)={0xa, 0xfffd, 0x92, @loopback, 0x2}, 0x1c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x0, 0x4, 0x75}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) 54.23735ms ago: executing program 1 (id=1801): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x2000000, 0x0, {{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffff1}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0xe6}}, 0x0, 0x1a0b1}}, 0xf8}}, 0x20000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028"], 0x120}}, 0x0) 943.851µs ago: executing program 5 (id=1802): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x300, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc8}]}, 0x2c}}, 0x0) 0s ago: executing program 6 (id=1803): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, 0x0) syz_emit_vhci(&(0x7f00000048c0)=ANY=[@ANYBLOB="043e0b06c9000800"], 0xe) kernel console output (not intermixed with test programs): [ 117.806677][ T6088] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 117.824459][ T6088] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 117.947521][ T4297] EXT4-fs (loop1): unmounting filesystem. [ 117.983481][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.995336][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.201703][ T6112] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 118.208603][ T6113] loop2: detected capacity change from 0 to 256 [ 118.221616][ T6113] exfat: Deprecated parameter 'utf8' [ 118.222802][ T6113] exfat: Deprecated parameter 'namecase' [ 118.224057][ T6113] exfat: Deprecated parameter 'utf8' [ 118.241592][ T6113] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 118.277114][ T6113] exFAT-fs (loop2): hint_cluster is invalid (1) [ 118.288660][ T6113] syz.2.526: attempt to access beyond end of device [ 118.288660][ T6113] loop2: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 118.372595][ T6121] device sit1 entered promiscuous mode [ 118.458056][ T6128] loop2: detected capacity change from 0 to 164 [ 118.526078][ T6131] loop1: detected capacity change from 0 to 2048 [ 118.534338][ T6131] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.536935][ T6131] EXT4-fs: Ignoring removed bh option [ 118.664160][ T6131] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.178773][ T6131] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 119.182105][ T6131] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 120.130406][ T4297] EXT4-fs (loop1): unmounting filesystem. [ 120.343504][ T6151] netlink: 88 bytes leftover after parsing attributes in process `syz.1.539'. [ 120.349623][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'. [ 120.351042][ T4294] EXT4-fs (loop3): unmounting filesystem. [ 120.353371][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 120.357643][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 120.438953][ T6154] loop2: detected capacity change from 0 to 256 [ 120.469888][ T6150] loop4: detected capacity change from 0 to 4096 [ 120.480756][ T6154] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 120.487918][ T6157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.489823][ T6157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.504062][ T6150] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 120.532471][ T6150] overlayfs: missing 'workdir' [ 120.575730][ T4307] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 120.579795][ T4307] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 120.584002][ T4307] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 120.759237][ T6169] loop3: detected capacity change from 0 to 512 [ 122.508291][ T6169] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 122.510741][ T6169] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 122.512589][ T6169] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.544: Failed to acquire dquot type 0 [ 122.570697][ T6176] loop4: detected capacity change from 0 to 2048 [ 122.603220][ T6169] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 122.605707][ T6169] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 122.607722][ T6169] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.544: Failed to acquire dquot type 0 [ 122.633044][ T6169] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 122.635491][ T6169] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 122.637745][ T6169] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.544: Failed to acquire dquot type 0 [ 122.645429][ T6169] EXT4-fs (loop3): 1 orphan inode deleted [ 122.646766][ T6169] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 122.694209][ T6169] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 122.696670][ T6169] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 122.939186][ T6176] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18881, location=18881 [ 123.251874][ T6184] loop1: detected capacity change from 0 to 2048 [ 123.274292][ T6184] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.280866][ T6184] EXT4-fs: Ignoring removed bh option [ 123.339455][ T6184] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 123.350884][ T6184] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 123.352724][ T6184] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 123.396335][ T4294] EXT4-fs (loop3): unmounting filesystem. [ 123.623504][ T4297] EXT4-fs (loop1): unmounting filesystem. [ 124.543255][ T6215] loop2: detected capacity change from 0 to 8 [ 124.564532][ T6213] loop0: detected capacity change from 0 to 256 [ 124.613740][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.625002][ T6207] loop1: detected capacity change from 0 to 4096 [ 124.630858][ T6207] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 124.635082][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.685599][ T6207] overlayfs: missing 'workdir' [ 124.720478][ T6222] loop0: detected capacity change from 0 to 2048 [ 124.735305][ T6222] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18881, location=18881 [ 124.738978][ T4297] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 124.740322][ T4297] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 124.741769][ T4297] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 124.762732][ T6225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.770380][ T6225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.895880][ T6231] loop0: detected capacity change from 0 to 2048 [ 124.897855][ T6231] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.899164][ T6231] EXT4-fs: Ignoring removed bh option [ 124.941910][ T6231] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.974946][ T6231] overlayfs: missing 'workdir' [ 125.046610][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 125.132230][ T6239] input: syz0 as /devices/virtual/input/input2 [ 125.145039][ T6239] input: failed to attach handler leds to device input2, error: -6 [ 125.403625][ T6250] binder: 6247:6250 tried to acquire reference to desc 0, got 1 instead [ 125.414269][ T4342] binder: undelivered TRANSACTION_COMPLETE [ 125.449284][ T4342] binder: undelivered transaction 5, process died. [ 125.514570][ T6220] loop3: detected capacity change from 0 to 65536 [ 125.558929][ T6254] loop1: detected capacity change from 0 to 2048 [ 125.571344][ T6254] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18881, location=18881 [ 125.599990][ T6220] XFS (loop3): Mounting V5 Filesystem [ 125.636833][ T4517] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.645559][ T6264] loop2: detected capacity change from 0 to 2048 [ 125.647250][ T6264] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.648722][ T6264] EXT4-fs: Ignoring removed bh option [ 125.679879][ T6220] XFS (loop3): Ending clean mount [ 125.686109][ T6220] XFS (loop3): Quotacheck needed: Please wait. [ 125.706303][ T6264] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.719963][ T6220] XFS (loop3): Quotacheck: Done. [ 125.720384][ T24] kernel write not supported for file /snd/seq (pid: 24 comm: kworker/1:1) [ 125.728804][ T6264] overlayfs: missing 'workdir' [ 125.791548][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 125.843903][ T4517] usb 1-1: Using ep0 maxpacket: 8 [ 125.854206][ T4517] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 125.854266][ T4294] XFS (loop3): Unmounting Filesystem [ 125.874307][ T4517] usb 1-1: config 179 has no interface number 0 [ 125.876487][ T4517] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 125.878889][ T4517] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 125.881409][ T4517] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 125.898663][ T4517] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 125.901051][ T4517] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 125.920584][ T4517] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 125.923033][ T4517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.935548][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.936943][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.964233][ T6249] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.977640][ T6285] af_packet: tpacket_rcv: packet too big, clamped from 3953 to 3952. macoff=96 [ 126.144220][ T6295] loop4: detected capacity change from 0 to 128 [ 126.162255][ T6295] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 126.189254][ T4517] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input3 [ 126.225100][ T6295] syz.4.590: attempt to access beyond end of device [ 126.225100][ T6295] loop4: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 126.392285][ T4517] usb 1-1: USB disconnect, device number 2 [ 126.395663][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 126.404721][ T4517] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 126.447430][ T6303] loop4: detected capacity change from 0 to 2048 [ 126.449126][ T6303] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.452595][ T6303] EXT4-fs: Ignoring removed bh option [ 126.523145][ T6303] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 126.536489][ T6303] overlayfs: missing 'workdir' [ 126.597580][ T6312] loop3: detected capacity change from 0 to 1764 [ 126.633874][ T6060] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.656393][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 126.809626][ T6317] device syzkaller0 entered promiscuous mode [ 127.159917][ T6301] loop2: detected capacity change from 0 to 65536 [ 127.219281][ T6301] XFS (loop2): Mounting V5 Filesystem [ 127.246526][ T6301] XFS (loop2): Ending clean mount [ 127.249251][ T6301] XFS (loop2): Quotacheck needed: Please wait. [ 127.269954][ T6301] XFS (loop2): Quotacheck: Done. [ 127.314658][ T6301] overlayfs: failed to resolve './file4': -2 [ 127.325329][ T6342] loop3: detected capacity change from 0 to 2048 [ 127.334717][ T6342] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.336356][ T6342] EXT4-fs: Ignoring removed bh option [ 127.364282][ T6342] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 127.374730][ T4296] XFS (loop2): Unmounting Filesystem [ 127.414685][ T4294] EXT4-fs (loop3): unmounting filesystem. [ 139.039407][ T6372] usb usb4: usbfs: process 6372 (syz.1.616) did not claim interface 0 before use [ 139.189539][ T6377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.618'. [ 139.277802][ T6382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.621'. [ 139.294627][ T6380] loop0: detected capacity change from 0 to 4096 [ 139.317535][ T6380] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 140.233775][ T4295] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 140.235206][ T4295] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 140.236654][ T4295] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 140.503048][ T6407] loop3: detected capacity change from 0 to 256 [ 140.709920][ T6419] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 140.781531][ T6420] loop3: detected capacity change from 0 to 4096 [ 140.794019][ T6420] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 140.926293][ T4294] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 140.928057][ T4294] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 140.929453][ T4294] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 140.986378][ T6374] loop1: detected capacity change from 0 to 65536 [ 141.027176][ T6374] XFS (loop1): Mounting V5 Filesystem [ 141.033172][ T6438] loop3: detected capacity change from 0 to 64 [ 141.073473][ T6438] overlayfs: unrecognized mount option "/" or missing value [ 141.079280][ T6374] XFS (loop1): Ending clean mount [ 141.082545][ T6374] XFS (loop1): Quotacheck needed: Please wait. [ 141.127861][ T6374] XFS (loop1): Quotacheck: Done. [ 141.154187][ T6374] overlayfs: failed to resolve './file4': -2 [ 141.248231][ T4297] XFS (loop1): Unmounting Filesystem [ 141.303163][ T6452] loop0: detected capacity change from 0 to 2048 [ 141.305283][ T6452] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.306536][ T6452] EXT4-fs: Ignoring removed bh option [ 141.355848][ T6452] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 141.418229][ T6460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.420628][ T6460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.493195][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 141.610987][ T6474] loop0: detected capacity change from 0 to 64 [ 141.631013][ T6474] overlayfs: unrecognized mount option "/" or missing value [ 141.834196][ T6485] binder: Bad value for 'stats' [ 142.005813][ T6493] loop2: detected capacity change from 0 to 512 [ 142.043583][ T6493] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 142.139268][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 142.303252][ T6508] loop2: detected capacity change from 0 to 64 [ 142.327013][ T6506] device wg2 entered promiscuous mode [ 142.372492][ T4296] Trying to free block not in datazone [ 142.463142][ T6510] loop3: detected capacity change from 0 to 1024 [ 142.590913][ T6518] netlink: 'syz.4.677': attribute type 16 has an invalid length. [ 142.592363][ T6518] netlink: 'syz.4.677': attribute type 17 has an invalid length. [ 142.610643][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.612271][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.618079][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.619740][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.621030][ T6517] loop2: detected capacity change from 0 to 256 [ 142.655572][ T6517] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.686103][ T6480] loop0: detected capacity change from 0 to 65536 [ 142.745893][ T6523] loop1: detected capacity change from 0 to 1024 [ 142.775545][ T6523] EXT4-fs (loop1): Test dummy encryption mode enabled [ 142.783152][ T6480] XFS (loop0): Mounting V5 Filesystem [ 142.788862][ T6523] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 142.868268][ T6523] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 142.889804][ T6537] loop3: detected capacity change from 0 to 64 [ 142.900061][ T6480] XFS (loop0): Ending clean mount [ 142.903043][ T6480] XFS (loop0): Quotacheck needed: Please wait. [ 142.969564][ T6480] XFS (loop0): Quotacheck: Done. [ 142.995823][ T6480] overlayfs: failed to resolve './file4': -2 [ 143.001077][ T4294] Trying to free block not in datazone [ 143.052401][ T4295] XFS (loop0): Unmounting Filesystem [ 143.079531][ T4297] EXT4-fs (loop1): unmounting filesystem. [ 143.343767][ T6561] 9pnet_fd: Insufficient options for proto=fd [ 143.447741][ T6565] loop1: detected capacity change from 0 to 64 [ 143.484305][ T6567] loop2: detected capacity change from 0 to 512 [ 143.759369][ T6567] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 143.761664][ T6567] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 143.763694][ T6567] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.691: Failed to acquire dquot type 0 [ 143.771868][ T6567] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 143.774109][ T6567] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 143.776203][ T6567] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.691: Failed to acquire dquot type 0 [ 143.785195][ T6567] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 143.787430][ T6567] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 143.789406][ T6567] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.691: Failed to acquire dquot type 0 [ 143.795935][ T6567] EXT4-fs (loop2): 1 orphan inode deleted [ 143.797351][ T6567] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 144.350218][ T4297] Trying to free block not in datazone [ 144.557930][ T6582] loop4: detected capacity change from 0 to 512 [ 144.602527][ T6582] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 144.638916][ T6582] EXT4-fs (loop4): invalid journal inode [ 144.640216][ T6582] EXT4-fs (loop4): can't get journal size [ 144.650135][ T6582] EXT4-fs (loop4): 1 truncate cleaned up [ 144.651313][ T6582] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 144.734570][ T6585] capability: warning: `syz.3.702' uses deprecated v2 capabilities in a way that may be insecure [ 145.346953][ T6594] device syzkaller0 entered promiscuous mode [ 145.537658][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 145.749221][ T6602] printk: syz.2.709 (6602): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 145.772002][ T6603] 9pnet_fd: Insufficient options for proto=fd [ 145.978577][ T6610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.996059][ T6610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.221210][ T6578] loop1: detected capacity change from 0 to 65536 [ 146.312087][ T6578] XFS (loop1): Mounting V5 Filesystem [ 146.387990][ T6578] XFS (loop1): Ending clean mount [ 146.390891][ T6578] XFS (loop1): Quotacheck needed: Please wait. [ 146.425046][ T6578] XFS (loop1): Quotacheck: Done. [ 146.534500][ T6634] loop0: detected capacity change from 0 to 512 [ 146.701695][ T6634] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 146.704197][ T6634] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 146.706282][ T6634] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.717: Failed to acquire dquot type 0 [ 146.729678][ T6634] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 146.731871][ T6634] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 146.733929][ T6634] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.717: Failed to acquire dquot type 0 [ 146.743674][ T6634] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.717: Failed to acquire dquot type 0 [ 146.750225][ T6634] EXT4-fs (loop0): 1 orphan inode deleted [ 146.751489][ T6634] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 147.379391][ T4297] XFS (loop1): Unmounting Filesystem [ 147.420694][ T6642] device syzkaller0 entered promiscuous mode [ 147.599072][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 148.334874][ T6664] 9pnet_fd: Insufficient options for proto=fd [ 148.596905][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 148.912413][ T6689] device syzkaller0 entered promiscuous mode [ 149.544867][ T4517] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.724940][ T4517] usb 1-1: Using ep0 maxpacket: 16 [ 149.728596][ T4517] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 149.730521][ T4517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.745861][ T4517] usb 1-1: config 0 descriptor?? [ 149.773674][ T4517] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 149.852967][ T6774] 9pnet_fd: Insufficient options for proto=fd [ 149.954711][ T4517] usb 1-1: Detected FT232B [ 150.108684][ T6670] loop4: detected capacity change from 0 to 65536 [ 150.139475][ T6783] loop2: detected capacity change from 0 to 1024 [ 150.154471][ T6670] XFS (loop4): Mounting V5 Filesystem [ 150.164525][ T4517] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 150.167305][ T4517] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 150.173871][ T4517] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 150.197870][ T4517] usb 1-1: USB disconnect, device number 3 [ 150.208836][ T4517] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 150.211300][ T4517] ftdi_sio 1-1:0.0: device disconnected [ 150.222406][ T6795] device syzkaller0 entered promiscuous mode [ 150.230503][ T6670] XFS (loop4): Ending clean mount [ 150.232636][ T6670] XFS (loop4): Quotacheck needed: Please wait. [ 150.322608][ T6670] XFS (loop4): Quotacheck: Done. [ 150.379022][ T4307] XFS (loop4): Unmounting Filesystem [ 150.478575][ T6799] loop1: detected capacity change from 0 to 512 [ 150.485301][ T6799] ext4: Unknown parameter 'noacl' [ 150.535729][ T6368] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 150.749316][ T6807] 9pnet_fd: Insufficient options for proto=fd [ 150.984211][ T6757] hfsplus: b-tree write err: -5, ino 4 [ 151.094987][ T6660] Set syz1 is full, maxelem 65536 reached [ 151.101022][ T6818] device syzkaller0 entered promiscuous mode [ 151.195246][ T6823] loop3: detected capacity change from 0 to 512 [ 151.200793][ T6823] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 151.272323][ T4294] EXT4-fs (loop3): unmounting filesystem. [ 151.353820][ T6831] 9pnet_fd: Insufficient options for proto=fd [ 151.882652][ T6851] loop2: detected capacity change from 0 to 512 [ 151.896161][ T6849] loop1: detected capacity change from 0 to 8192 [ 151.898518][ T6851] EXT4-fs: inline encryption not supported [ 151.908215][ T6851] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.910160][ T6851] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 151.933180][ T6817] loop0: detected capacity change from 0 to 65536 [ 151.933362][ T6849] process 'syz.1.771' launched './file1' with NULL argv: empty string added [ 151.959390][ T6851] __quota_error: 2 callbacks suppressed [ 151.959407][ T6851] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 151.964901][ T6817] XFS (loop0): Mounting V5 Filesystem [ 151.975170][ T6851] EXT4-fs warning (device loop2): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 151.983037][ T6851] EXT4-fs (loop2): mount failed [ 152.041666][ T6817] XFS (loop0): Ending clean mount [ 152.054286][ T6817] XFS (loop0): Quotacheck needed: Please wait. [ 152.141325][ T6817] XFS (loop0): Quotacheck: Done. [ 152.204047][ T6869] device syzkaller0 entered promiscuous mode [ 152.244010][ T4295] XFS (loop0): Unmounting Filesystem [ 152.452096][ T6882] loop4: detected capacity change from 0 to 512 [ 152.598083][ T6882] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 152.600418][ T6882] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 152.602423][ T6882] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.777: Failed to acquire dquot type 0 [ 152.614680][ T6882] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 152.617014][ T6882] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 152.619091][ T6882] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.777: Failed to acquire dquot type 0 [ 152.649049][ T6882] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 152.651354][ T6882] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 152.653338][ T6882] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.777: Failed to acquire dquot type 0 [ 152.661168][ T6882] EXT4-fs (loop4): 1 orphan inode deleted [ 152.662462][ T6882] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 153.351980][ T27] audit: type=1326 audit(153.320:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fd52ba8 code=0x50000 [ 153.370065][ T27] audit: type=1326 audit(153.340:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fd52ba8 code=0x50000 [ 153.392834][ T27] audit: type=1326 audit(153.350:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.1.780" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fd52ba8 code=0x50000 [ 154.120805][ T6907] fuse: Bad value for 'fd' [ 154.420374][ T4304] Bluetooth: hci0: command 0x0401 tx timeout [ 154.517529][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 154.607834][ T6914] device syzkaller0 entered promiscuous mode [ 155.121547][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.126214][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.395695][ T6905] loop2: detected capacity change from 0 to 65536 [ 155.438978][ T6905] XFS (loop2): Mounting V5 Filesystem [ 155.513357][ T6905] XFS (loop2): Ending clean mount [ 155.520631][ T6905] XFS (loop2): Quotacheck needed: Please wait. [ 155.560087][ T6905] XFS (loop2): Quotacheck: Done. [ 155.664908][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 155.687877][ T4296] XFS (loop2): Unmounting Filesystem [ 155.806107][ T6743] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.847525][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 155.850204][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.852419][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.858650][ T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 155.860428][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.892071][ T14] usb 1-1: config 0 descriptor?? [ 155.966827][ T6743] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.983126][ T6954] loop4: detected capacity change from 0 to 1024 [ 155.987065][ T6954] ext4: Unknown parameter 'noacl' [ 156.002635][ T4304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.015074][ T4304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.017855][ T4304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.021081][ T4304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.023322][ T4304] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.025503][ T4306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.030479][ T6368] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 156.111401][ T6743] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.237184][ T6743] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.468554][ T6969] device syzkaller0 entered promiscuous mode [ 156.661800][ T6979] loop4: detected capacity change from 0 to 128 [ 156.662083][ T6955] chnl_net:caif_netlink_parms(): no params data found [ 156.683631][ T6979] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.855799][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 157.115139][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.116691][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.118970][ T6955] device bridge_slave_0 entered promiscuous mode [ 157.167087][ T6955] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.168722][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.170684][ T6955] device bridge_slave_1 entered promiscuous mode [ 157.279984][ T6955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.303066][ T6955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.363080][ T4412] kernel write not supported for file /408/net/rt_cache (pid: 4412 comm: kworker/1:9) [ 157.435794][ T6955] team0: Port device team_slave_0 added [ 157.439715][ T6955] team0: Port device team_slave_1 added [ 157.516858][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.525128][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.544019][ T6977] loop1: detected capacity change from 0 to 65536 [ 157.553767][ T6955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.613655][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.622139][ T6977] XFS (loop1): Mounting V5 Filesystem [ 157.623417][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.634995][ T6955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.643817][ T7022] device syzkaller0 entered promiscuous mode [ 157.707651][ T6977] XFS (loop1): Ending clean mount [ 157.711069][ T6977] XFS (loop1): Quotacheck needed: Please wait. [ 157.784960][ T6977] XFS (loop1): Quotacheck: Done. [ 157.884814][ T4297] XFS (loop1): Unmounting Filesystem [ 157.977327][ T6955] device hsr_slave_0 entered promiscuous mode [ 158.014621][ T7051] loop4: detected capacity change from 0 to 512 [ 158.018675][ T7051] ext4: Unknown parameter 'noacl' [ 158.027139][ T6955] device hsr_slave_1 entered promiscuous mode [ 158.036503][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.038722][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.065097][ T6955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.066849][ T6955] Cannot create hsr debugfs directory [ 158.074364][ T6368] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.095060][ T4304] Bluetooth: hci0: command 0x0409 tx timeout [ 158.241736][ T7060] loop4: detected capacity change from 0 to 256 [ 158.252636][ T7060] exFAT-fs (loop4): bogus sectors bits per cluster : 193 [ 158.259942][ T7060] exFAT-fs (loop4): failed to read boot sector [ 158.261289][ T7060] exFAT-fs (loop4): failed to recognize exfat type [ 158.301867][ T6468] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.446996][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 158.448278][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 158.455799][ T14] usb 1-1: USB disconnect, device number 4 [ 158.648890][ T7075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.650771][ T7075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.682427][ T7080] loop2: detected capacity change from 0 to 512 [ 158.701275][ T7081] device syzkaller0 entered promiscuous mode [ 158.734946][ T4304] Bluetooth: hci1: command 0x0406 tx timeout [ 158.736470][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 158.736565][ T4306] Bluetooth: hci2: command 0x0406 tx timeout [ 158.737900][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 158.759931][ T7080] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 158.780559][ T7080] fs-verity (loop2, inode 15): Unrecognized descriptor size: 0 bytes [ 158.811647][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 158.862395][ T7093] loop2: detected capacity change from 0 to 512 [ 158.864713][ T7093] ext4: Unknown parameter 'noacl' [ 159.063353][ T7104] loop2: detected capacity change from 0 to 256 [ 159.065642][ T7104] exfat: Deprecated parameter 'utf8' [ 159.066851][ T7104] exfat: Deprecated parameter 'namecase' [ 159.067995][ T7104] exfat: Deprecated parameter 'utf8' [ 159.073581][ T7104] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 159.113316][ T6955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.164824][ T6955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.196921][ T6955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.262963][ T7111] binder: 7110:7111 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 159.297103][ T6743] device hsr_slave_0 left promiscuous mode [ 159.328576][ T6743] device hsr_slave_1 left promiscuous mode [ 159.395910][ T6743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.397634][ T6743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.400579][ T6743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.402071][ T6743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.403923][ T7118] loop0: detected capacity change from 0 to 128 [ 159.407516][ T6743] device bridge_slave_1 left promiscuous mode [ 159.410080][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.426507][ T7118] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 159.437326][ T6743] device bridge_slave_0 left promiscuous mode [ 159.438671][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.493283][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 159.551840][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 159.605427][ T6743] device veth1_macvtap left promiscuous mode [ 159.607073][ T6743] device veth0_macvtap left promiscuous mode [ 159.608922][ T6743] device veth1_vlan left promiscuous mode [ 159.610298][ T6743] device veth0_vlan left promiscuous mode [ 160.245143][ T4310] Bluetooth: hci0: command 0x041b tx timeout [ 160.553498][ T7140] loop4: detected capacity change from 0 to 512 [ 160.714604][ T7140] __quota_error: 3948 callbacks suppressed [ 160.714620][ T7140] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 160.718059][ T7140] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 160.719899][ T7140] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.857: Failed to acquire dquot type 0 [ 160.722656][ T7140] EXT4-fs (loop4): Remounting filesystem read-only [ 160.724145][ T7140] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 160.726395][ T7140] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 160.728178][ T7140] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.857: Failed to acquire dquot type 0 [ 160.731023][ T7140] EXT4-fs (loop4): Remounting filesystem read-only [ 160.732982][ T7140] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #16: comm syz.4.857: corrupted xattr block 8 [ 160.742410][ T7140] EXT4-fs (loop4): Remounting filesystem read-only [ 160.743803][ T7140] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 160.745759][ T7140] EXT4-fs (loop4): 1 orphan inode deleted [ 160.746994][ T7140] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 162.265588][ T4304] Bluetooth: hci0: command 0x040f tx timeout [ 162.270479][ T6743] team0 (unregistering): Port device team_slave_1 removed [ 162.447756][ T6743] team0 (unregistering): Port device team_slave_0 removed [ 162.626382][ T6743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.826523][ T6743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.335031][ T4304] Bluetooth: hci0: command 0x0419 tx timeout [ 165.200799][ T6743] bond0 (unregistering): Released all slaves [ 165.443247][ T6955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 165.504458][ T7121] device syzkaller0 entered promiscuous mode [ 165.612658][ T7150] loop0: detected capacity change from 0 to 512 [ 165.623661][ T7150] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 165.634643][ T7150] EXT2-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 165.637505][ T7150] EXT2-fs (loop0): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 165.701142][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 165.881014][ T6955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.894501][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.900415][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.907349][ T6955] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.934958][ T4731] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 165.935301][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.938753][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.955728][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.957262][ T6733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.963582][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.970368][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.982123][ T6733] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.983813][ T6733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.990402][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.004008][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.010604][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.013023][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.024473][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.030630][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.033363][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.049606][ T6955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.052032][ T6955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.058794][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.064713][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.071476][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.074241][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.092306][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.103374][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.117265][ T4731] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 166.119521][ T4731] usb 1-1: config 0 has no interface number 0 [ 166.120746][ T4731] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 166.122904][ T4731] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 166.124688][ T4731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.146320][ T4731] usb 1-1: config 0 descriptor?? [ 166.150992][ T4731] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input5 [ 166.425692][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.427788][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.431336][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.447223][ T6955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.467002][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.818961][ T7207] device syzkaller0 entered promiscuous mode [ 166.828878][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.831578][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.936742][ T4731] usb 1-1: USB disconnect, device number 5 [ 166.941083][ T6955] device veth0_vlan entered promiscuous mode [ 166.943230][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.945533][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.947652][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.959711][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.972573][ T6955] device veth1_vlan entered promiscuous mode [ 167.070517][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.072791][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.074900][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.081143][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.084216][ T6955] device veth0_macvtap entered promiscuous mode [ 167.106200][ T6955] device veth1_macvtap entered promiscuous mode [ 167.113734][ T7220] loop4: detected capacity change from 0 to 512 [ 167.137944][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.138093][ T7220] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.148484][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.150659][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.152733][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.165497][ T7220] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 167.181804][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.184218][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.210301][ T7220] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.876: inode #15: comm syz.4.876: iget: illegal inode # [ 167.213283][ T7220] EXT4-fs (loop4): Remounting filesystem read-only [ 167.214603][ T7220] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.876: couldn't read orphan inode 15 (err -117) [ 167.228326][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.230495][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.233688][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.240255][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.262428][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.264542][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.278091][ T7220] EXT4-fs (loop4): Remounting filesystem read-only [ 167.279505][ T7220] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 167.287734][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.289823][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.291874][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.293780][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.348088][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.359285][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.360956][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.363207][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.365844][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.370128][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.372898][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.380056][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.397729][ T6955] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.399574][ T6955] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.401419][ T6955] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.403175][ T6955] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.514333][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 167.599232][ T7243] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 167.600920][ T7243] vhci_hcd: invalid port number 110 [ 167.601969][ T7243] vhci_hcd: default hub control req: 672f v7973 i006e l29487 [ 167.618227][ T7242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.628170][ T6751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.629918][ T6751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.640153][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.686417][ T6743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.688291][ T6743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.692155][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.821219][ T7248] loop4: detected capacity change from 0 to 1024 [ 167.822751][ T7248] tmpfs: Unknown parameter 'errors' [ 168.092523][ T7269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.100115][ T7269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.274391][ T7279] netlink: 'syz.0.891': attribute type 3 has an invalid length. [ 168.339040][ T7223] loop1: detected capacity change from 0 to 65536 [ 168.425638][ T7223] XFS (loop1): Mounting V5 Filesystem [ 168.519873][ T7223] XFS (loop1): Ending clean mount [ 168.529696][ T7223] XFS (loop1): Quotacheck needed: Please wait. [ 168.565437][ T7223] XFS (loop1): Quotacheck: Done. [ 168.594801][ T7223] overlayfs: missing 'lowerdir' [ 168.655896][ T4342] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 168.692034][ T4297] XFS (loop1): Unmounting Filesystem [ 168.761872][ T7307] binder: 7305:7307 tried to acquire reference to desc 0, got 1 instead [ 168.763744][ T7307] binder: 7305:7307 got transaction with invalid offsets ptr [ 168.768139][ T7307] binder: 7305:7307 transaction async to 7305:0 failed 11/29201/-14, size 0-88 line 3278 [ 168.772763][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 168.851607][ T4342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.853901][ T4342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.860178][ T4342] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 168.867964][ T4342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.878201][ T4342] usb 1-1: config 0 descriptor?? [ 168.981997][ T7323] binder: 7321:7323 tried to acquire reference to desc 0, got 1 instead [ 168.992345][ T7323] binder: 7321:7323 got transaction with invalid handle, 3 [ 168.993983][ T7323] binder: 7323:7321 translate handle failed [ 169.001114][ T7323] binder: 7321:7323 transaction call to 7321:0 failed 16/29201/-22, size 72-24 line 3402 [ 169.011268][ T4413] binder: undelivered TRANSACTION_ERROR: 29201 [ 169.111205][ T7331] loop5: detected capacity change from 0 to 512 [ 169.188610][ T7331] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 169.383988][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 169.510721][ T4342] hid-led: probe of 0003:27B8:01ED.0001 failed with error -71 [ 169.521912][ T4342] usb 1-1: USB disconnect, device number 6 [ 169.670180][ T7362] loop1: detected capacity change from 0 to 128 [ 169.680605][ T7362] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 169.684621][ T7362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.136913][ T7392] Zero length message leads to an empty skb [ 171.269426][ T7410] loop4: detected capacity change from 0 to 164 [ 171.456749][ T7418] loop4: detected capacity change from 0 to 512 [ 171.471671][ T7418] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.926: casefold flag without casefold feature [ 171.489727][ T7418] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.926: couldn't read orphan inode 15 (err -117) [ 171.532799][ T7418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.563100][ T7356] loop5: detected capacity change from 0 to 65536 [ 171.634190][ T7356] XFS (loop5): Mounting V5 Filesystem [ 171.637882][ T7430] loop0: detected capacity change from 0 to 8 [ 171.674435][ T7430] SQUASHFS error: zlib decompression failed, data probably corrupt [ 171.679156][ T7430] SQUASHFS error: Failed to read block 0x9b: -5 [ 171.680196][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 171.680839][ T7430] SQUASHFS error: Unable to read metadata cache entry [99] [ 171.683771][ T7430] SQUASHFS error: Unable to read inode 0x127 [ 171.731435][ T7356] XFS (loop5): Ending clean mount [ 171.733696][ T7356] XFS (loop5): Quotacheck needed: Please wait. [ 171.768485][ T7430] loop0: detected capacity change from 0 to 128 [ 171.784610][ T7430] EXT4-fs (loop0): Test dummy encryption mode enabled [ 171.799898][ T7356] XFS (loop5): Quotacheck: Done. [ 171.809945][ T7356] overlayfs: missing 'lowerdir' [ 171.812980][ T7430] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 171.823826][ T7430] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 171.848803][ T6955] XFS (loop5): Unmounting Filesystem [ 171.911502][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 172.050239][ T7454] loop0: detected capacity change from 0 to 256 [ 172.079365][ T7454] FAT-fs (loop0): Directory bread(block 1285) failed [ 172.086374][ T7454] FAT-fs (loop0): Directory bread(block 1285) failed [ 172.090265][ T7454] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 172.601289][ T7476] loop1: detected capacity change from 0 to 4096 [ 172.633397][ T7476] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 172.814281][ T4297] EXT4-fs (loop1): unmounting filesystem. [ 173.042119][ T7514] loop1: detected capacity change from 0 to 256 [ 173.936213][ T7527] loop0: detected capacity change from 0 to 128 [ 173.945504][ T7527] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 173.967521][ T7527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.322992][ T7607] loop1: detected capacity change from 0 to 512 [ 187.111485][ T7607] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 187.311818][ T4297] EXT4-fs (loop1): unmounting filesystem. [ 187.453959][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.455400][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.593137][ T7633] loop0: detected capacity change from 0 to 2048 [ 187.595099][ T7633] UDF-fs: bad mount option "" or missing value [ 188.959567][ T7550] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 189.009258][ T7630] loop0: detected capacity change from 0 to 1764 [ 189.269764][ T7550] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 189.296765][ T7661] loop4: detected capacity change from 0 to 1024 [ 190.141160][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 190.572052][ T7693] loop2: detected capacity change from 0 to 256 [ 190.584468][ T7693] FAT-fs (loop2): Unrecognized mount option "iocharset" or missing value [ 192.032101][ T7715] binder: 7715:7712 cannot find target node [ 192.033324][ T7715] binder: 7712:7715 transaction async to 0:0 failed 19/29189/-22, size 0-0 line 3054 [ 192.044085][ T7714] loop0: detected capacity change from 0 to 512 [ 192.114024][ T7714] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 192.123721][ T7714] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 192.125970][ T7714] System zones: 0-2, 18-18, 34-35 [ 192.128815][ T7714] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 192.210616][ T7716] loop5: detected capacity change from 0 to 512 [ 192.361079][ T7723] Bluetooth: MGMT ver 1.22 [ 192.365287][ T7716] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 192.391123][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 192.492809][ T7716] EXT4-fs (loop5): 1 truncate cleaned up [ 192.494208][ T7716] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 192.747921][ T7706] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.1009: corrupted in-inode xattr [ 192.756822][ T7739] loop2: detected capacity change from 0 to 256 [ 192.809985][ T7706] EXT4-fs (loop5): Remounting filesystem read-only [ 192.811441][ T7706] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1723: inode #15: comm syz.5.1009: unable to update i_inline_off [ 192.814022][ T7706] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.1009: corrupted in-inode xattr [ 192.854225][ T7706] EXT4-fs (loop5): Remounting filesystem read-only [ 192.987511][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 193.044874][ T4735] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 193.236532][ T4735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.239000][ T4735] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.241496][ T4735] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.246604][ T4735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.268783][ T4735] usb 1-1: config 0 descriptor?? [ 193.564012][ T7782] loop2: detected capacity change from 0 to 1024 [ 193.578746][ T7782] EXT4-fs: Ignoring removed nobh option [ 193.579894][ T7782] ext4: Unknown parameter 'noacl' [ 193.652096][ T7720] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 193.692337][ T4735] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 193.728742][ T4735] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 193.855851][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.857876][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.899032][ T7788] loop1: detected capacity change from 0 to 256 [ 193.901022][ T7788] exfat: Bad value for 'uid' [ 193.938477][ T7802] 9pnet_fd: Insufficient options for proto=fd [ 193.978670][ T4735] usb 1-1: USB disconnect, device number 7 [ 194.091950][ T7811] loop5: detected capacity change from 0 to 128 [ 194.105168][ T7812] loop2: detected capacity change from 0 to 512 [ 194.133249][ T7812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 194.149230][ T7812] netlink: 'syz.2.1039': attribute type 32 has an invalid length. [ 194.159331][ T7811] 9pnet: p9_errstr2errno: server reported unknown error '?)mrXv/ƻ1F´hȘLDԓWCxE"x)T̤I [ 194.171271][ T7812] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1039'. [ 194.577546][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 195.083214][ T7859] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 195.170755][ T7866] 9pnet_fd: Insufficient options for proto=fd [ 195.562477][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.578246][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.378715][ T7868] loop1: detected capacity change from 0 to 65536 [ 196.488600][ T7868] XFS (loop1): Mounting V5 Filesystem [ 196.580012][ T7926] 9pnet_fd: Insufficient options for proto=fd [ 196.580604][ T7868] XFS (loop1): Ending clean mount [ 196.583418][ T7868] XFS (loop1): Quotacheck needed: Please wait. [ 196.649194][ T7868] XFS (loop1): Quotacheck: Done. [ 196.669177][ T7868] overlayfs: missing 'workdir' [ 196.745423][ T4297] XFS (loop1): Unmounting Filesystem [ 197.205035][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'. [ 197.398994][ T5985] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.537713][ T5985] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.658293][ T5985] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.753609][ T4310] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.758250][ T4310] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.767106][ T4310] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.770069][ T4310] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.772037][ T4310] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 197.784824][ T4310] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.842518][ T5985] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.092651][ T8005] loop1: detected capacity change from 0 to 1024 [ 198.110524][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.113104][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.129527][ T8005] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 198.362580][ T8016] fuse: blksize only supported for fuseblk [ 198.385635][ T8006] device bridge_slave_1 left promiscuous mode [ 198.388809][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.450570][ T8006] device bridge_slave_0 left promiscuous mode [ 198.452010][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.626284][ T7976] loop2: detected capacity change from 0 to 65536 [ 198.656241][ T7976] XFS (loop2): Mounting V5 Filesystem [ 198.697560][ T7976] XFS (loop2): Ending clean mount [ 198.721866][ T7976] XFS (loop2): Quotacheck needed: Please wait. [ 198.784484][ T7976] XFS (loop2): Quotacheck: Done. [ 198.822242][ T7976] overlayfs: missing 'workdir' [ 198.952943][ T4296] XFS (loop2): Unmounting Filesystem [ 199.271166][ T7987] chnl_net:caif_netlink_parms(): no params data found [ 199.716054][ T7987] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.717544][ T7987] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.719555][ T7987] device bridge_slave_0 entered promiscuous mode [ 199.722617][ T7987] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.724012][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.726500][ T7987] device bridge_slave_1 entered promiscuous mode [ 199.797264][ T7987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.801176][ T7987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.865078][ T4310] Bluetooth: hci4: command 0x0409 tx timeout [ 199.911317][ T7987] team0: Port device team_slave_0 added [ 199.915240][ T7987] team0: Port device team_slave_1 added [ 199.930765][ T8088] kernel profiling enabled (shift: 9) [ 200.048705][ T7987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.050228][ T7987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.056095][ T7987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.062211][ T7987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.063745][ T7987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.069680][ T8090] input: syz0 as /devices/virtual/input/input7 [ 200.070975][ T8090] input: failed to attach handler leds to device input7, error: -6 [ 200.087519][ T7987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.236788][ T7987] device hsr_slave_0 entered promiscuous mode [ 200.265204][ T7987] device hsr_slave_1 entered promiscuous mode [ 200.294869][ T7987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.302900][ T7987] Cannot create hsr debugfs directory [ 200.921749][ T8083] loop5: detected capacity change from 0 to 65536 [ 201.036608][ T8083] XFS (loop5): Mounting V5 Filesystem [ 201.069600][ T8122] loop1: detected capacity change from 0 to 512 [ 201.112177][ T8083] XFS (loop5): Ending clean mount [ 201.114199][ T8083] XFS (loop5): Quotacheck needed: Please wait. [ 201.120597][ T8122] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 201.122729][ T8122] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 201.124547][ T8122] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1114: Failed to acquire dquot type 0 [ 201.127516][ T8122] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 201.129566][ T8122] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 201.131406][ T8122] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1114: Failed to acquire dquot type 0 [ 201.146616][ T8122] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 201.148965][ T8122] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 201.150865][ T8122] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1114: Failed to acquire dquot type 0 [ 201.153509][ T8122] EXT4-fs (loop1): 1 orphan inode deleted [ 201.154599][ T8122] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 201.243250][ T8083] XFS (loop5): Quotacheck: Done. [ 201.268899][ T8083] overlayfs: missing 'workdir' [ 201.353598][ T6955] XFS (loop5): Unmounting Filesystem [ 201.404631][ T8122] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 201.406837][ T8122] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 201.491784][ T5985] device hsr_slave_0 left promiscuous mode [ 201.526240][ T5985] device hsr_slave_1 left promiscuous mode [ 201.596528][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.598008][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.607548][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.608963][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.625565][ T5985] device bridge_slave_1 left promiscuous mode [ 201.627015][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.667805][ T5985] device bridge_slave_0 left promiscuous mode [ 201.669164][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.803540][ T4297] EXT4-fs (loop1): unmounting filesystem. [ 201.816177][ T5985] device veth1_macvtap left promiscuous mode [ 201.817528][ T5985] device veth0_macvtap left promiscuous mode [ 201.818810][ T5985] device veth1_vlan left promiscuous mode [ 201.820105][ T5985] device veth0_vlan left promiscuous mode [ 201.934883][ T4310] Bluetooth: hci4: command 0x041b tx timeout [ 202.192790][ T8164] binder: 8163:8164 BC_INCREFS_DONE u0000000000000001 no match [ 202.194440][ T8164] binder: 8163:8164 BC_ACQUIRE_DONE u0000000000000000 no match [ 202.526408][ T4735] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 202.642565][ T8193] loop1: detected capacity change from 0 to 512 [ 202.678441][ T8193] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 202.680780][ T8193] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 202.682766][ T8193] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1133: Failed to acquire dquot type 0 [ 202.686737][ T8193] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 202.688898][ T8193] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 202.690831][ T8193] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1133: Failed to acquire dquot type 0 [ 202.695579][ T8193] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.1133: Failed to acquire dquot type 0 [ 202.698411][ T8193] EXT4-fs (loop1): 1 orphan inode deleted [ 202.699632][ T8193] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 202.724969][ T4735] usb 1-1: Using ep0 maxpacket: 8 [ 202.728748][ T4735] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 202.730669][ T4735] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 202.732818][ T4735] usb 1-1: config 179 has no interface number 0 [ 202.734292][ T4735] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 202.742073][ T4735] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 202.744646][ T4735] usb 1-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 202.748620][ T4735] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 202.750520][ T4735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.755252][ T8171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.977298][ T8171] loop0: detected capacity change from 0 to 256 [ 203.019628][ T4735] usb 1-1: USB disconnect, device number 8 [ 203.846440][ T8200] binder: 8197:8200 got transaction to context manager from process owning it [ 203.848553][ T8200] binder: 8197:8200 transaction call to 8197:0 failed 21/29201/-22, size 0-0 line 3043 [ 204.036102][ T4304] Bluetooth: hci4: command 0x040f tx timeout [ 204.447288][ T4735] binder: undelivered TRANSACTION_ERROR: 29201 [ 204.568565][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 204.697402][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 204.766022][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 204.769623][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'. [ 204.771300][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'. [ 204.866592][ T8214] 9pnet_fd: Insufficient options for proto=fd [ 204.966578][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.235883][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.484898][ T4452] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 205.673158][ T4452] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 205.675337][ T4452] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.681690][ T4452] usb 1-1: config 0 descriptor?? [ 205.685848][ T4452] cp210x 1-1:0.0: cp210x converter detected [ 206.092961][ T4452] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 206.095064][ T4310] Bluetooth: hci4: command 0x0419 tx timeout [ 206.106824][ T4452] usb 1-1: cp210x converter now attached to ttyUSB0 [ 206.300005][ T4342] usb 1-1: USB disconnect, device number 9 [ 206.312764][ T4342] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 206.324569][ T4342] cp210x 1-1:0.0: device disconnected [ 207.114958][ T4452] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 207.296609][ T4452] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.298952][ T4452] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.300921][ T4452] usb 1-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice= 0.00 [ 207.303043][ T4452] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.310811][ T4452] usb 1-1: config 0 descriptor?? [ 207.606606][ T5985] bond0 (unregistering): Released all slaves [ 207.722149][ T4452] apple 0003:05AC:0216.0003: hidraw0: USB HID v0.80 Device [HID 05ac:0216] on usb-dummy_hcd.0-1/input0 [ 207.840982][ T8183] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 207.843319][ T8183] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 207.882549][ T7987] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 207.922590][ T4606] usb 1-1: USB disconnect, device number 10 [ 207.922812][ T4297] EXT4-fs (loop1): unmounting filesystem. [ 207.941351][ T7987] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 207.979187][ T8237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.981116][ T8237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.996887][ T7987] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 208.024215][ T8240] loop1: detected capacity change from 0 to 256 [ 208.052830][ T8240] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.055365][ T8240] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 208.066278][ T8240] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 208.151949][ T8246] loop1: detected capacity change from 0 to 128 [ 208.154507][ T8246] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 208.164534][ T8246] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 208.190495][ T8246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1152'. [ 208.190516][ T7987] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 208.220492][ T4297] EXT4-fs (loop1): unmounting filesystem. [ 208.235972][ T8241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.308002][ T8250] device syzkaller0 entered promiscuous mode [ 208.387510][ T7987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.394443][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.396554][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.404273][ T7987] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.418563][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.421014][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.423042][ T6757] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.424476][ T6757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.428063][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.430333][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.432476][ T6757] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.433882][ T6757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.441865][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.461499][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.463950][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.466692][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.484092][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.503935][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.531791][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.555822][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.557959][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.562498][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.572492][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.574691][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.583659][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.771768][ T8264] loop2: detected capacity change from 0 to 1764 [ 208.958749][ T8285] loop5: detected capacity change from 0 to 512 [ 209.013831][ T8285] __quota_error: 10 callbacks suppressed [ 209.013847][ T8285] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 209.017375][ T8285] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 209.019372][ T8285] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1158: Failed to acquire dquot type 0 [ 209.022377][ T8285] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 209.024404][ T8285] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 209.026316][ T8285] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1158: Failed to acquire dquot type 0 [ 209.032402][ T8285] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 209.034857][ T8285] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 209.036793][ T8285] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1158: Failed to acquire dquot type 0 [ 209.047377][ T8285] EXT4-fs (loop5): 1 orphan inode deleted [ 209.048656][ T8285] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 209.407677][ T8294] loop1: detected capacity change from 0 to 256 [ 209.409971][ T8294] exfat: Deprecated parameter 'namecase' [ 209.422401][ T8294] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 212.111250][ T6755] wlan1: Trigger new scan to find an IBSS to join [ 215.139773][ T5983] wlan1: Trigger new scan to find an IBSS to join [ 216.105906][ T6757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.410612][ T7987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.425290][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.428790][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.430465][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.443194][ T8285] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 220.445456][ T8285] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 220.488256][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 220.562701][ T8320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.581615][ T8320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.591016][ T8323] loop0: detected capacity change from 0 to 164 [ 220.770822][ T8334] loop0: detected capacity change from 0 to 1024 [ 220.829351][ T8334] EXT4-fs (loop0): Test dummy encryption mode enabled [ 220.857128][ T8334] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 220.889292][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.891485][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.970358][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.972617][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.980880][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.982977][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.001337][ T7987] device veth0_vlan entered promiscuous mode [ 221.026690][ T7987] device veth1_vlan entered promiscuous mode [ 221.068888][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 221.069761][ T8354] fuse: Bad value for 'fd' [ 221.090508][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.092678][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.094654][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.100174][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.133716][ T7987] device veth0_macvtap entered promiscuous mode [ 221.147333][ T7987] device veth1_macvtap entered promiscuous mode [ 221.181138][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.183434][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.193854][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.202711][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.219646][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.227658][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.229775][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.239709][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.252044][ T7987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.253757][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.256054][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.258005][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.260076][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.281081][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.283337][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.303719][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.306328][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.308390][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.310466][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.312961][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.343821][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.349958][ T7987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.352294][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.354513][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.366934][ T7987] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.368794][ T7987] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.370641][ T7987] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.372318][ T7987] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.411794][ T8367] loop0: detected capacity change from 0 to 512 [ 221.520514][ T8367] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 221.622192][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 221.663489][ T6751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.665592][ T6751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.670182][ T6757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.744101][ T6757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.747975][ T6757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.785624][ T6751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 222.143813][ T4413] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 222.907376][ T4413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.909695][ T4413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.911699][ T4413] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 222.913510][ T4413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.936560][ T4413] usb 1-1: config 0 descriptor?? [ 223.304722][ T8438] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 223.383405][ T4413] isku 0003:1E7D:319C.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 223.575796][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1200'. [ 223.581753][ T4413] isku 0003:1E7D:319C.0004: couldn't init struct isku_device [ 223.583364][ T4413] isku 0003:1E7D:319C.0004: couldn't install keyboard [ 223.588254][ T4413] isku: probe of 0003:1E7D:319C.0004 failed with error -71 [ 223.591265][ T4413] usb 1-1: USB disconnect, device number 11 [ 223.793210][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.819908][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.724139][ T8484] loop0: detected capacity change from 0 to 164 [ 224.938519][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 225.234400][ T8511] loop5: detected capacity change from 0 to 2048 [ 225.274242][ T8511] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.284003][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.310892][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.437764][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'. [ 225.573947][ T8542] loop0: detected capacity change from 0 to 512 [ 225.657659][ T8542] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 225.659866][ T8542] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 225.661775][ T8542] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1227: Failed to acquire dquot type 0 [ 225.664528][ T8542] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 225.666996][ T8542] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 225.668950][ T8542] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1227: Failed to acquire dquot type 0 [ 225.686884][ T8542] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 225.689164][ T8542] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 225.691071][ T8542] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1227: Failed to acquire dquot type 0 [ 225.693870][ T8542] EXT4-fs (loop0): 1 orphan inode deleted [ 225.695137][ T8542] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 226.194079][ T8542] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 226.196292][ T8542] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 227.335464][ T8593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.337354][ T8593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.343909][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 227.381306][ T8603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.383129][ T8603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.519159][ T8612] loop6: detected capacity change from 0 to 1024 [ 227.594635][ T8612] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz.6.1252: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 227.604264][ T8612] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1252: couldn't read orphan inode 11 (err -117) [ 227.612647][ T8612] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 227.662390][ T8612] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.1252: Invalid block bitmap block 0 in block_group 0 [ 227.700316][ T8612] Quota error (device loop6): write_blk: dquota write failed [ 227.702034][ T8612] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 227.704073][ T8612] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1252: Failed to acquire dquot type 0 [ 228.082781][ T8655] loop0: detected capacity change from 0 to 512 [ 228.137301][ T8655] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 228.139555][ T8655] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 228.141445][ T8655] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1260: Failed to acquire dquot type 0 [ 228.144416][ T8655] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1260: Failed to acquire dquot type 0 [ 228.155143][ T8655] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1260: Failed to acquire dquot type 0 [ 228.219369][ T8655] EXT4-fs (loop0): 1 orphan inode deleted [ 228.220719][ T8655] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 228.226314][ T8655] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 228.228435][ T8655] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 228.982114][ T4413] kernel write not supported for file /input/event0 (pid: 4413 comm: kworker/1:10) [ 229.406380][ T7987] EXT4-fs (loop6): unmounting filesystem. [ 229.643796][ T8706] loop5: detected capacity change from 0 to 512 [ 229.670699][ T8706] EXT4-fs: Ignoring removed nobh option [ 229.682893][ T8706] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 229.734357][ T8706] EXT4-fs (loop5): 1 truncate cleaned up [ 229.735842][ T8706] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 229.861837][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 229.949181][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 230.197496][ T8741] loop6: detected capacity change from 0 to 256 [ 230.201277][ T8741] exFAT-fs (loop6): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119abd1) [ 230.205024][ T8741] exFAT-fs (loop6): invalid boot region [ 230.206200][ T8741] exFAT-fs (loop6): failed to recognize exfat type [ 230.382572][ T8760] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 230.384636][ T8760] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 230.420791][ T8750] loop2: detected capacity change from 0 to 512 [ 230.422585][ T8750] ext4: Unknown parameter 'fsname' [ 230.624206][ T8777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.633563][ T8777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.826999][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 230.827013][ T27] audit: type=1326 audit(230.800:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8786 comm="syz.6.1301" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91952ba8 code=0x7ffc0000 [ 230.832645][ T27] audit: type=1326 audit(230.800:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8786 comm="syz.6.1301" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=158 compat=0 ip=0xffff91952ba8 code=0x7ffc0000 [ 230.859583][ T27] audit: type=1326 audit(230.800:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8786 comm="syz.6.1301" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91952ba8 code=0x7ffc0000 [ 231.080448][ T8800] loop6: detected capacity change from 0 to 256 [ 231.103134][ T8800] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 232.224512][ T8827] loop2: detected capacity change from 0 to 2048 [ 232.279861][ T8827] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 232.281808][ T8827] UDF-fs: Scanning with blocksize 512 failed [ 232.314912][ T8827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.381307][ T8841] loop6: detected capacity change from 0 to 512 [ 232.464720][ T8841] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 232.466953][ T8841] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 232.468922][ T8841] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1317: Failed to acquire dquot type 0 [ 232.471719][ T8841] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 232.474428][ T8841] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 232.477829][ T8841] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1317: Failed to acquire dquot type 0 [ 232.486202][ T8841] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 232.488485][ T8841] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 232.490323][ T8841] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1317: Failed to acquire dquot type 0 [ 232.493005][ T8841] EXT4-fs (loop6): 1 orphan inode deleted [ 232.494181][ T8841] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 232.503156][ T8841] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 232.505239][ T8841] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 232.898411][ T8873] loop2: detected capacity change from 0 to 512 [ 232.907667][ T8873] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 232.923306][ T8873] EXT4-fs (loop2): 1 truncate cleaned up [ 232.925897][ T8873] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 232.963151][ T8873] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.1326: corrupted in-inode xattr [ 232.979161][ T8873] EXT4-fs (loop2): Remounting filesystem read-only [ 232.982870][ T8873] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1723: inode #15: comm syz.2.1326: unable to update i_inline_off [ 233.001328][ T8873] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.1326: corrupted in-inode xattr [ 233.013528][ T8870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.015809][ T8870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.019792][ T8873] EXT4-fs (loop2): Remounting filesystem read-only [ 233.028873][ T8870] loop5: detected capacity change from 0 to 256 [ 233.032938][ T8870] exfat: Bad value for 'uid' [ 233.079820][ T8462] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 233.154018][ T7987] EXT4-fs (loop6): unmounting filesystem. [ 233.216434][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 233.332112][ T8883] loop6: detected capacity change from 0 to 256 [ 233.358985][ T8882] loop0: detected capacity change from 0 to 2048 [ 233.363083][ T8882] EXT4-fs: Ignoring removed nobh option [ 233.382840][ T8883] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 233.385146][ T8883] FAT-fs (loop6): Filesystem has been set read-only [ 233.389283][ T8883] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 233.390108][ T8882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 233.420580][ T8882] EXT4-fs (loop0): shut down requested (2) [ 233.471521][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 233.604645][ T8896] loop0: detected capacity change from 0 to 16 [ 233.626677][ T8896] erofs: (device loop0): mounted with root inode @ nid 36. [ 233.657377][ T8896] syz.0.1339: attempt to access beyond end of device [ 233.657377][ T8896] loop0: rw=524288, sector=7864328, nr_sectors = 8 limit=16 [ 233.660389][ T8896] syz.0.1339: attempt to access beyond end of device [ 233.660389][ T8896] loop0: rw=0, sector=7864328, nr_sectors = 8 limit=16 [ 233.692218][ T8903] loop6: detected capacity change from 0 to 512 [ 233.761040][ T8903] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 233.763324][ T8903] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1338: Failed to acquire dquot type 0 [ 233.766205][ T8903] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1338: Failed to acquire dquot type 0 [ 233.769175][ T8903] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1338: Failed to acquire dquot type 0 [ 233.771850][ T8903] EXT4-fs (loop6): 1 orphan inode deleted [ 233.773073][ T8903] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 233.778291][ T8903] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 233.780143][ T8903] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 233.909045][ T8918] loop2: detected capacity change from 0 to 512 [ 233.910671][ T8921] loop5: detected capacity change from 0 to 256 [ 233.912286][ T8918] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 233.919784][ T8919] loop0: detected capacity change from 0 to 512 [ 233.942133][ T8919] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 233.950299][ T8918] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1344: iget: bad extended attribute block 19 [ 233.960946][ T8918] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1344: couldn't read orphan inode 15 (err -117) [ 233.966792][ T8919] EXT4-fs (loop0): 1 truncate cleaned up [ 233.967999][ T8919] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 233.982532][ T8918] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 234.041236][ T8918] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1344: bg 0: block 65: padding at end of block bitmap is not set [ 234.129150][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 234.133827][ T8913] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.1340: corrupted in-inode xattr [ 234.138500][ T8913] EXT4-fs (loop0): Remounting filesystem read-only [ 234.139942][ T8913] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1723: inode #15: comm syz.0.1340: unable to update i_inline_off [ 234.144326][ T8913] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.1340: corrupted in-inode xattr [ 234.147398][ T8913] EXT4-fs (loop0): Remounting filesystem read-only [ 234.195042][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 234.306325][ T8944] loop2: detected capacity change from 0 to 128 [ 234.312501][ T8944] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 234.394677][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 234.453014][ T8951] loop0: detected capacity change from 0 to 256 [ 234.453756][ T8952] loop2: detected capacity change from 0 to 1024 [ 234.463338][ T8952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.466543][ T8952] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 234.469093][ T8952] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 234.476286][ T8952] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 234.486931][ T8951] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 234.511714][ T4296] EXT4-fs (loop2): unmounting filesystem. [ 234.535333][ T7987] EXT4-fs (loop6): unmounting filesystem. [ 234.690962][ T8961] loop6: detected capacity change from 0 to 256 [ 234.800622][ T8963] 9pnet_fd: Insufficient options for proto=fd [ 234.827831][ T8963] loop2: detected capacity change from 0 to 256 [ 235.779795][ T8981] loop6: detected capacity change from 0 to 512 [ 235.814869][ T8981] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 235.874505][ T8981] EXT4-fs (loop6): 1 truncate cleaned up [ 235.875849][ T8981] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 235.891117][ T8981] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.1362: corrupted in-inode xattr [ 235.920958][ T8981] EXT4-fs (loop6): Remounting filesystem read-only [ 235.922205][ T8981] EXT4-fs warning (device loop6): ext4_xattr_set_entry:1723: inode #15: comm syz.6.1362: unable to update i_inline_off [ 235.949004][ T8995] loop0: detected capacity change from 0 to 512 [ 235.961537][ T8981] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.1362: corrupted in-inode xattr [ 235.978163][ T8981] EXT4-fs (loop6): Remounting filesystem read-only [ 236.018665][ T8995] __quota_error: 5 callbacks suppressed [ 236.018680][ T8995] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 236.032919][ T8995] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 236.035533][ T8995] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1366: Failed to acquire dquot type 0 [ 236.056234][ T8995] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 236.110616][ T8995] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 236.142974][ T8995] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1366: Failed to acquire dquot type 0 [ 236.177287][ T8995] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 236.209595][ T8995] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 236.229655][ T8995] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1366: Failed to acquire dquot type 0 [ 236.252171][ T8995] EXT4-fs (loop0): 1 orphan inode deleted [ 236.259878][ T8995] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 236.289441][ T7987] EXT4-fs (loop6): unmounting filesystem. [ 236.322767][ T8995] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 236.361192][ T8995] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 236.639957][ T8989] loop5: detected capacity change from 0 to 32768 [ 236.664068][ T8989] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1369 (8989) [ 236.686501][ T8989] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 236.688561][ T8989] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 236.690223][ T8989] BTRFS info (device loop5): using free space tree [ 236.930919][ T9017] loop6: detected capacity change from 0 to 32768 [ 236.984639][ T8989] BTRFS info (device loop5): enabling ssd optimizations [ 237.032900][ T9017] XFS (loop6): Mounting V5 Filesystem [ 237.122058][ T6955] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 237.274142][ T9017] XFS (loop6): Ending clean mount [ 237.293246][ T9017] XFS (loop6): Quotacheck needed: Please wait. [ 237.350787][ T9017] XFS (loop6): Quotacheck: Done. [ 237.358120][ T9061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.359932][ T9061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.431541][ T7987] XFS (loop6): Unmounting Filesystem [ 237.507141][ T9065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.510881][ T9065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.005614][ T9072] loop6: detected capacity change from 0 to 512 [ 238.025341][ T9072] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 238.040373][ T9072] EXT4-fs (loop6): 1 truncate cleaned up [ 238.041501][ T9072] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 238.056337][ T9072] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.1383: corrupted in-inode xattr [ 238.059098][ T9072] EXT4-fs (loop6): Remounting filesystem read-only [ 238.060390][ T9072] EXT4-fs warning (device loop6): ext4_xattr_set_entry:1723: inode #15: comm syz.6.1383: unable to update i_inline_off [ 238.063132][ T9072] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.1383: corrupted in-inode xattr [ 238.804421][ T9072] EXT4-fs (loop6): Remounting filesystem read-only [ 238.909861][ T7987] EXT4-fs (loop6): unmounting filesystem. [ 238.912068][ T9078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.914048][ T9078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.916867][ T9076] device syzkaller0 entered promiscuous mode [ 238.966524][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.969951][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.981114][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.984064][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.122807][ T9086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.126933][ T9086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.193240][ T9090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.202838][ T9090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.597727][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.600959][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.657488][ T9098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.670332][ T9098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.711500][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.715541][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.752976][ T9102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.758625][ T9102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.920254][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.923342][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.282504][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.290115][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.294236][ T9106] device syzkaller0 entered promiscuous mode [ 240.350418][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 240.403536][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.407380][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.441446][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.445109][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.494429][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.497168][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.805019][ T4285] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 240.936306][ T9147] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 240.938288][ T9147] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 240.947681][ T9149] device syzkaller0 entered promiscuous mode [ 240.998125][ T4285] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 241.016911][ T4285] usb 1-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 241.024361][ T4285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.034363][ T4285] usb 1-1: config 0 descriptor?? [ 241.452513][ T4285] logitech-hidpp-device 0003:046D:C090.0005: unknown main item tag 0x0 [ 241.454075][ T4285] logitech-hidpp-device 0003:046D:C090.0005: unknown main item tag 0x0 [ 241.462899][ T4285] logitech-hidpp-device 0003:046D:C090.0005: unknown main item tag 0x0 [ 241.471537][ T4285] logitech-hidpp-device 0003:046D:C090.0005: hidraw0: USB HID v0.00 Device [HID 046d:c090] on usb-dummy_hcd.0-1/input0 [ 241.652760][ T4285] usb 1-1: USB disconnect, device number 12 [ 241.869033][ T9200] device syzkaller0 entered promiscuous mode [ 241.875260][ T9204] loop5: detected capacity change from 0 to 512 [ 241.927197][ T9204] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 241.954603][ T9204] netlink: 'syz.5.1433': attribute type 32 has an invalid length. [ 241.963991][ T9204] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1433'. [ 242.038509][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 242.060615][ T9215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.064344][ T9215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.717369][ T9248] device syzkaller0 entered promiscuous mode [ 242.773241][ T9255] loop5: detected capacity change from 0 to 1024 [ 242.797661][ T9255] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.830887][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1448'. [ 242.914320][ T9252] loop6: detected capacity change from 0 to 2048 [ 242.920562][ T9259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1451'. [ 243.046364][ T9252] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 243.307001][ T9257] device hsr_slave_1 left promiscuous mode [ 243.408675][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.410559][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.470158][ T7987] EXT4-fs (loop6): unmounting filesystem. [ 243.582349][ T9289] device syzkaller0 entered promiscuous mode [ 243.627560][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.629296][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.269397][ T9323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.271251][ T9323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.497181][ T9337] device syzkaller0 entered promiscuous mode [ 245.099711][ T9379] binder: 9376:9379 BC_INCREFS_DONE node 22 has no pending increfs request [ 245.290734][ T9385] device syzkaller0 entered promiscuous mode [ 245.402744][ T9398] loop5: detected capacity change from 0 to 2048 [ 245.419464][ T9398] EXT4-fs: Ignoring removed oldalloc option [ 245.421470][ T9398] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 245.489949][ T9398] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 245.609291][ T9403] loop6: detected capacity change from 0 to 256 [ 245.614627][ T9403] exfat: Bad value for 'uid' [ 246.221844][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 248.832374][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.833742][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.427659][ T9436] device batadv_slave_1 entered promiscuous mode [ 257.453403][ T9436] device batadv_slave_0 entered promiscuous mode [ 257.455372][ T9430] device batadv_slave_0 left promiscuous mode [ 257.456970][ T9430] device batadv_slave_1 left promiscuous mode [ 257.556225][ T4304] Bluetooth: to_multiplier 9059 > 3200 [ 257.656196][ T9446] loop0: detected capacity change from 0 to 8 [ 257.834974][ T9460] mmap: syz.5.1512 (9460) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 257.886964][ T9460] binder: 9447:9460 BC_FREE_BUFFER u0000000000000000 no match [ 257.890071][ T9460] binder: 9447:9460 BC_FREE_BUFFER u0000000000000000 no match [ 257.891725][ T9460] binder: 9447:9460 BC_ACQUIRE_DONE u0000000000000001 no match [ 257.893495][ T9460] binder: 9447:9460 got reply transaction with no transaction stack [ 257.895263][ T9460] binder: 9447:9460 transaction reply to 0:0 failed 25/29201/-71, size 96-0 line 2955 [ 258.435262][ T4343] binder: undelivered TRANSACTION_ERROR: 29201 [ 258.537719][ T9465] loop6: detected capacity change from 0 to 512 [ 258.621309][ T9465] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 258.623838][ T9465] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 258.632849][ T9465] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1509: Failed to acquire dquot type 0 [ 258.683100][ T9465] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 258.700048][ T9465] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 258.731998][ T9465] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1509: Failed to acquire dquot type 0 [ 258.753975][ T9465] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 258.774235][ T9465] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 258.800930][ T9465] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.1509: Failed to acquire dquot type 0 [ 258.806688][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.809384][ T9484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.812805][ T9465] EXT4-fs (loop6): 1 orphan inode deleted [ 258.825617][ T9465] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 258.847382][ T9458] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 258.849423][ T9458] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 258.896832][ T9490] loop0: detected capacity change from 0 to 512 [ 258.900685][ T9490] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 258.943986][ T9490] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 259.150871][ T7987] EXT4-fs (loop6): unmounting filesystem. [ 259.258635][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 259.358151][ T4304] Bluetooth: to_multiplier 9059 > 3200 [ 259.375229][ T9513] usb usb4: usbfs: interface 0 claimed by hub while 'syz.1.1526' sets config #0 [ 259.545663][ T9531] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.547164][ T9531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.553292][ T27] audit: type=1326 audit(259.520:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fd52ba8 code=0x7ffc0000 [ 259.559907][ T27] audit: type=1326 audit(259.530:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=153 compat=0 ip=0xffff7fd52ba8 code=0x7ffc0000 [ 259.564464][ T27] audit: type=1326 audit(259.530:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fd52ba8 code=0x7ffc0000 [ 259.615334][ T4310] Bluetooth: hci1: command 0x2021 tx timeout [ 260.651130][ T9560] loop5: detected capacity change from 0 to 512 [ 260.726120][ T9560] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 260.728407][ T9560] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1534: Failed to acquire dquot type 0 [ 260.775335][ T9560] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1534: Failed to acquire dquot type 0 [ 260.814634][ T9560] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.1534: Failed to acquire dquot type 0 [ 260.836705][ T9560] EXT4-fs (loop5): 1 orphan inode deleted [ 260.838224][ T9560] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 260.877309][ T9560] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 260.879368][ T9560] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 260.998448][ T9593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.020363][ T9593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.191667][ T9604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.374896][ T4304] Bluetooth: hci4: command 0x2021 tx timeout [ 261.662211][ T9637] loop0: detected capacity change from 0 to 256 [ 262.245987][ T4343] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 262.426186][ T4343] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 262.427821][ T4343] usb 1-1: config 0 has no interface number 0 [ 262.429102][ T4343] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 262.430870][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.436451][ T4343] usb 1-1: config 0 descriptor?? [ 262.454032][ T4343] hub 1-1:0.3: bad descriptor, ignoring hub [ 262.459525][ T4343] hub: probe of 1-1:0.3 failed with error -5 [ 262.466012][ T4343] sierra 1-1:0.3: Sierra USB modem converter detected [ 262.642198][ T9651] loop0: detected capacity change from 0 to 8 [ 262.691111][ T9651] SQUASHFS error: Failed to read block 0x4de: -5 [ 262.693929][ T9651] SQUASHFS error: Failed to read block 0x4de: -5 [ 262.712485][ T9651] SQUASHFS error: Failed to read block 0x4de: -5 [ 262.714028][ T9651] SQUASHFS error: Failed to read block 0x4de: -5 [ 262.726257][ T9651] SQUASHFS error: Failed to read block 0x4de: -5 [ 262.727606][ T9651] SQUASHFS error: Failed to read block 0x4de: -5 [ 262.729642][ T9651] SQUASHFS error: Failed to read block 0x4de: -5 [ 262.742740][ T9651] SQUASHFS error: Failed to read block 0x4de: -5 [ 262.744162][ T9651] SQUASHFS error: Failed to read block 0x4de: -5 [ 262.752266][ T9651] SQUASHFS error: Failed to read block 0x4de: -5 [ 262.754483][ T9651] SQUASHFS error: Failed to read block 0x4de: -5 [ 262.762399][ T9651] SQUASHFS error: Failed to read block 0x4de: -5 [ 262.763773][ T9651] SQUASHFS error: Failed to read block 0x4de: -5 [ 262.771680][ T9651] SQUASHFS error: Failed to read block 0x4de: -5 [ 262.775190][ T4343] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 262.806349][ T4343] usb 1-1: USB disconnect, device number 13 [ 262.810151][ T4343] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 262.812769][ T4343] sierra 1-1:0.3: device disconnected [ 262.839126][ T4310] Bluetooth: to_multiplier 0 < 10 [ 263.125425][ T9691] loop6: detected capacity change from 0 to 512 [ 263.135546][ T9691] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 263.318061][ T9699] loop6: detected capacity change from 0 to 512 [ 263.363851][ T9699] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 263.374937][ T9602] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 263.415805][ T4304] Bluetooth: to_multiplier 0 < 10 [ 263.582910][ T7987] EXT4-fs (loop6): unmounting filesystem. [ 263.712982][ T9714] loop0: detected capacity change from 0 to 2048 [ 263.764366][ T9714] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 263.786849][ T9714] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 263.795243][ T9714] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 263.798114][ T9714] EXT4-fs (loop0): This should not happen!! Data will be lost [ 263.798114][ T9714] [ 263.800047][ T9714] EXT4-fs (loop0): Total free blocks count 0 [ 263.801229][ T9714] EXT4-fs (loop0): Free/Dirty block details [ 263.802449][ T9714] EXT4-fs (loop0): free_blocks=2415919104 [ 263.803557][ T9714] EXT4-fs (loop0): dirty_blocks=32 [ 263.840552][ T9714] EXT4-fs (loop0): Block reservation details [ 263.845163][ T9714] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 263.847691][ T9719] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 263.984089][ T9723] No such timeout policy "syz0" [ 264.199850][ T9730] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1601'. [ 264.292990][ T4310] Bluetooth: to_multiplier 0 < 10 [ 264.734725][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 264.894883][ T4304] Bluetooth: hci4: command 0x2021 tx timeout [ 266.829293][ T9752] loop0: detected capacity change from 0 to 512 [ 266.845052][ T9752] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 266.853113][ T9752] UDF-fs: Scanning with blocksize 512 failed [ 266.861127][ T9752] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 266.862921][ T9752] UDF-fs: Scanning with blocksize 1024 failed [ 266.870732][ T9752] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 266.872427][ T9752] UDF-fs: Scanning with blocksize 2048 failed [ 266.874127][ T9752] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 266.878757][ T9752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.994960][ T9756] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1612'. [ 267.037126][ T4310] Bluetooth: to_multiplier 0 < 10 [ 267.334872][ T4285] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 267.516340][ T4285] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 267.518206][ T4285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.521661][ T4285] usb 1-1: config 0 descriptor?? [ 267.524149][ T4285] cp210x 1-1:0.0: cp210x converter detected [ 267.931494][ T4285] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 268.137452][ T4285] usb 1-1: cp210x converter now attached to ttyUSB0 [ 268.341325][ T4285] usb 1-1: USB disconnect, device number 14 [ 268.348910][ T4285] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 268.353209][ T4285] cp210x 1-1:0.0: device disconnected [ 268.427356][ T4304] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 268.429468][ T4304] Bluetooth: hci1: Injecting HCI hardware error event [ 268.432433][ T4310] Bluetooth: hci1: hardware error 0x00 [ 269.193101][ T9766] loop0: detected capacity change from 0 to 512 [ 269.327493][ T9766] __quota_error: 5 callbacks suppressed [ 269.327531][ T9766] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 269.331409][ T9766] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 269.333427][ T9766] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1617: Failed to acquire dquot type 0 [ 269.393484][ T9766] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 269.436665][ T9766] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 269.438862][ T9766] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1617: Failed to acquire dquot type 0 [ 269.463994][ T9766] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 269.466265][ T9766] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 269.468167][ T9766] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.1617: Failed to acquire dquot type 0 [ 269.483291][ T9766] EXT4-fs (loop0): 1 orphan inode deleted [ 269.484578][ T9766] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 270.654930][ T4310] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 274.896888][ T9766] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 274.898799][ T9766] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 274.997753][ T9784] loop6: detected capacity change from 0 to 128 [ 275.059095][ T4295] EXT4-fs (loop0): unmounting filesystem. [ 275.154050][ T9794] loop0: detected capacity change from 0 to 256 [ 275.165886][ T9794] exfat: Deprecated parameter 'namecase' [ 275.199439][ T9794] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 275.447063][ T9796] input: syz0 as /devices/virtual/input/input9 [ 277.264909][ T9802] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1623'. [ 277.758933][ T9829] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1637'. [ 278.039607][ T9849] loop5: detected capacity change from 0 to 512 [ 278.047040][ T9848] usb usb7: usbfs: process 9848 (syz.2.1645) did not claim interface 0 before use [ 278.054967][ T9849] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 278.103294][ T9849] EXT4-fs (loop5): 1 truncate cleaned up [ 278.104480][ T9849] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 278.148160][ T9849] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.1646: corrupted in-inode xattr [ 278.151028][ T9849] EXT4-fs (loop5): Remounting filesystem read-only [ 278.152332][ T9849] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1723: inode #15: comm syz.5.1646: unable to update i_inline_off [ 278.155533][ T9849] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.1646: corrupted in-inode xattr [ 278.158508][ T9849] EXT4-fs (loop5): Remounting filesystem read-only [ 278.181758][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 278.184582][ T9859] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1651'. [ 278.387875][ T9874] netlink: 'syz.1.1658': attribute type 4 has an invalid length. [ 278.517589][ T9883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.535146][ T9883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.733889][ T9898] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1667'. [ 279.253146][ T9923] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1680'. [ 290.095697][ T9949] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1691'. [ 291.177682][ T9988] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1705'. [ 291.386055][ T9997] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 291.446969][ T9997] vhci_hcd: invalid port number 252 [ 291.448017][ T9997] vhci_hcd: default hub control req: 8013 v02fa i00fc l0 [ 292.485551][ T4310] Bluetooth: hci0: unexpected cc 0x042d length: 63 > 7 [ 292.487017][ T4310] Bluetooth: hci0: unexpected event for opcode 0x042d [ 292.511771][T10019] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1719'. [ 292.894322][T10046] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1731'. [ 293.279861][T10073] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1745'. [ 293.703995][T10097] loop5: detected capacity change from 0 to 512 [ 294.064592][T10097] loop5: detected capacity change from 0 to 2048 [ 294.113920][T10109] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1760'. [ 294.118975][T10097] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 294.139045][T10097] fs-verity: sha512 using implementation "sha512-arm64" [ 294.284206][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 294.415254][ T4310] Bluetooth: hci4: command 0x0405 tx timeout [ 295.294918][ T4304] Bluetooth: hci3: command 0x2021 tx timeout [ 297.374904][ T4304] Bluetooth: hci3: command 0x2021 tx timeout [ 305.286691][T10121] IPv6: NLM_F_REPLACE set, but no existing node found! [ 305.562607][T10140] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1772'. [ 305.721026][T10150] Bluetooth: hci0: service_discovery: too big uuid_count value 33022 [ 307.621000][ T4310] Bluetooth: hci3: command 0x2021 tx timeout [ 308.364438][T10180] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1787'. [ 308.417831][T10181] loop5: detected capacity change from 0 to 512 [ 308.449770][T10181] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 308.519342][T10181] EXT4-fs (loop5): 1 truncate cleaned up [ 308.520468][T10181] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 308.537612][T10177] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.1784: corrupted in-inode xattr [ 308.561615][T10177] EXT4-fs (loop5): Remounting filesystem read-only [ 308.562980][T10177] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1723: inode #15: comm syz.5.1784: unable to update i_inline_off [ 308.590259][T10177] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.1784: corrupted in-inode xattr [ 308.600376][T10177] EXT4-fs (loop5): Remounting filesystem read-only [ 308.651789][T10191] Bluetooth: hci0: service_discovery: too big uuid_count value 33022 [ 308.800383][ T6955] EXT4-fs (loop5): unmounting filesystem. [ 308.949564][T10214] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1799'. [ 308.961415][T10214] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1799'. [ 309.005114][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 309.009474][ T6747] ------------[ cut here ]------------ [ 309.010796][ T6747] WARNING: CPU: 1 PID: 6747 at net/mac80211/ibss.c:500 ieee80211_ibss_csa_beacon+0x518/0x5b0 [ 309.012761][ T6747] Modules linked in: [ 309.013646][ T6747] CPU: 1 PID: 6747 Comm: kworker/u4:20 Not tainted 6.1.124-syzkaller #0 [ 309.015577][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 309.017513][ T6747] Workqueue: phy14 ieee80211_iface_work [ 309.018659][ T6747] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 309.020385][ T6747] pc : ieee80211_ibss_csa_beacon+0x518/0x5b0 [ 309.021673][ T6747] lr : ieee80211_ibss_csa_beacon+0x514/0x5b0 [ 309.022887][ T6747] sp : ffff8000218b7260 [ 309.023754][ T6747] x29: ffff8000218b7280 x28: 1fffe0001e6552b5 x27: dfff800000000000 [ 309.025252][ T6747] x26: ffff0000f32aaad7 x25: ffff0000dacd8760 x24: 0000000000000000 [ 309.026867][ T6747] x23: ffff0000f32a95a8 x22: ffff0000f32a9b08 x21: 0000000000000002 [ 309.028568][ T6747] x20: ffff0000f32a8c80 x19: ffff8000218b7520 x18: ffff8000218b6ea0 [ 309.030287][ T6747] x17: ffff800018b7c000 x16: ffff8000084f2fe8 x15: 0000000000000002 [ 309.031890][ T6747] x14: 0000000000000003 x13: ffff0000d5e71bc0 x12: 0000000000100000 [ 309.033492][ T6747] x11: 0000000000001048 x10: ffff800032b9a000 x9 : ffff800011be9060 [ 309.034955][ T6747] x8 : 0000000000001049 x7 : 0000000000000000 x6 : 0000000000000000 [ 309.036670][ T6747] x5 : 0000000000000020 x4 : 0000000000000000 x3 : 0000000000000000 [ 309.038275][ T6747] x2 : 0000000000000006 x1 : ffff80001248c5a0 x0 : 00000000ffffffea [ 309.039961][ T6747] Call trace: [ 309.040605][ T6747] ieee80211_ibss_csa_beacon+0x518/0x5b0 [ 309.041798][ T6747] ieee80211_channel_switch+0x125c/0x21b4 [ 309.042997][ T6747] ieee80211_ibss_process_chanswitch+0x9f4/0xd68 [ 309.044318][ T6747] ieee80211_ibss_rx_queued_mgmt+0x11ec/0x27a0 [ 309.045726][ T6747] ieee80211_iface_work+0x5c4/0xa90 [ 309.046910][ T6747] process_one_work+0x7ac/0x1404 [ 309.047923][ T6747] worker_thread+0x8e4/0xfec [ 309.048972][ T6747] kthread+0x250/0x2d8 [ 309.049900][ T6747] ret_from_fork+0x10/0x20 [ 309.050887][ T6747] irq event stamp: 1992152 [ 309.051770][ T6747] hardirqs last enabled at (1992151): [] __local_bh_enable_ip+0x230/0x470 [ 309.053885][ T6747] hardirqs last disabled at (1992152): [] el1_dbg+0x24/0x80 [ 309.055945][ T6747] softirqs last enabled at (1992150): [] cfg80211_get_bss+0x708/0xb34 [ 309.057965][ T6747] softirqs last disabled at (1992148): [] cfg80211_get_bss+0x148/0xb34 [ 309.059944][ T6747] ---[ end trace 0000000000000000 ]--- [ 309.196990][ T6747] wlan1: Trigger new scan to find an IBSS to join [ 310.155093][ T6733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.265733][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.267161][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.135043][ T4304] Bluetooth: hci4: command 0x2021 tx timeout