last executing test programs: 2m25.922316802s ago: executing program 0 (id=121): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) io_uring_setup(0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x20000}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m25.718801581s ago: executing program 0 (id=122): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x40440c0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1}, 0x40008000) 2m25.647963185s ago: executing program 0 (id=123): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x2b, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x7, 0x0, 0x7, 0x0, 0x28, {[@window={0x9, 0x3}, @generic={0x4, 0x2}]}}}}}}, 0x3e) 2m25.488169066s ago: executing program 0 (id=126): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@noauto_da_alloc}, {@resuid, 0x32}]}, 0x1, 0x527, &(0x7f0000001380)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 2m25.026824585s ago: executing program 0 (id=133): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6802000000050108000000000000000001000001540201000300000006"], 0x268}, 0x1, 0x0, 0x0, 0xc000}, 0x6005c880) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 2m24.305925455s ago: executing program 0 (id=144): io_submit(0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/vm/nr_overcommit_hugepages\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 2m24.27642474s ago: executing program 32 (id=144): io_submit(0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/vm/nr_overcommit_hugepages\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1m51.679361684s ago: executing program 5 (id=475): r0 = open(&(0x7f0000000600)='./file0\x00', 0x1e1142, 0xfb) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000100)="b86ec4b25392dfc146072ab06bcf51278b", 0x11}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendfile(r2, r0, &(0x7f0000000280)=0x7, 0x3af) 1m51.550529629s ago: executing program 5 (id=477): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) 1m50.0418558s ago: executing program 5 (id=494): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2f}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48f, 0x0, 0x3}]}) 1m49.982288742s ago: executing program 5 (id=495): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x123f41, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) bind$nfc_llcp(r0, &(0x7f0000000580)={0x27, 0x0, 0x0, 0x0, 0x0, 0x49, "c46e9fd1a84b7fa00100ca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x25}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) 1m49.910324256s ago: executing program 5 (id=496): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0xc004, &(0x7f0000002280)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x5f7, &(0x7f0000000c80)="$eJzs3UFvHGcZB/D/bBxnHUTquEkbUCWsIlUIi2RtSyTlApSCLFShShw4W8RJrGzSynaR2wMExKHi1I9QhPwFEMci5UB74ACnno16ROLum9HMzqzXydZ1Yte7bn4/afZ9Zt6Zd595dnYys1Y0AZ5ZS3OZeJgiS3NvbJbz21uL3e2txXtNnORcklbSTlKUi/+W5LPkQXpTvtF0DLSP+fSj9u1PPvj4/d5cOVa7mOitXxy03eH0c5nu5Vq1xzXewtHH27eHM0lmjzweHIPdxn+Gdh/xewkAjLMiOTNs+XRyvr5gL+8DelfFvWvsU+3BqBMAAACAE/DcTnaymQujzgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOk/r5/0U9tZp4NkXz/P/Jelnq+FR7OOoEAAAAAAAAAOAYfGsnO9nMhWZ+t6j+5v9yNXOpev1a3sl6VrKWq9nMcjaykbXMJ5keGGhyc3ljY23+EFsuDN1y4WT2FwAAAAAAAAC+ov6Qpb2//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDgokjO9ppouNfF0WhNJ2kkmy/UeJP9u4tPs4agTAAAAgBPw3E52spkLzfxuUd3zv1Dd97fzTu5nI6vZSDcruVn9FtC7629tby12t7cW75XTo6NO5Mf/e6I0qhHT++1h+DtfqdaYyq2sVkuu5td5K93cTKvasnSlyWd4Xr8vcyp+WDtkZjfrttzzn9fteJiuKnK2X5FOnVtZjYsHV+IJP51H32k+rf4vP5e+hJqfr9tyf14f65ovDBx9LxxciWTmV3+6fqd7/+6dW+tz47NLT6E9pBKLA5V48ZmpRKlTVeJyf34pP8svM5fZvJm1rOY3Wc5GVjKb16touT6ey9fpgyv1o31zb35RJpP159I7iz5ZTi9X217Ian6Rt3Kz+kQ7uZ7rWcj382o6+z7hy0Pz/t1u3b2zu7ub1pN967/9nTo4m+SndTseyrpeHKjr4Dl3uuobXLJXpZnjPzdOfLMOyqPntbE7N1585F+JphLPH1yJP1cHznr3/t21O8tvH/L9XqnbsgI/6Vdiol66e+ZYduqplMfLTD+X/UdH2ff80L75qu9Sv6/1WN/lft8XfVMn62u4x0daqPpeHNrX2+7KQN+w6y0Axt75756fnPrv1L+mPpz649SdqTfar527ce6lyZz9x9kfTHTOvNJ6qfhrPsxv9+7/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAp7f+7nt3l7vdlbWnDponER11HIFgfIPmoWTjks+XH4zyrASchGsb996+tv7ue99bvbd8e+X2yv1XOzduzM/PX+9cu7XaXalfR50lAHCc9i76R50JAAAAAAAAAAAAAADweU7ivxOPeh8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICvtqW5TDxMkfnO1U45v7212C2nJt5bs52kKIO/J/kseZDelOmB4YrPe59PP2rf/uSDj9/fG6tdrf/PhePYi325tB7J6ajjLQyM95dmja8fYpRWExT9yswmmalbGLn/BwAA///m5gNq") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 1m49.861693475s ago: executing program 5 (id=497): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m34.673754028s ago: executing program 33 (id=497): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m15.125705396s ago: executing program 2 (id=804): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m15.05143454s ago: executing program 2 (id=806): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x66, 0x3, 0x9, 0x0, 0x80000001, 0xa2, 0x6, 0x1, 0xd, 0xf7, 0x1, 0x4, 0x0, 0xfffffffc, 0x4, 0x12, 0x7, 0x0, 0x4, '\x00', 0xb, 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m14.762308017s ago: executing program 2 (id=808): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) 1m14.678128814s ago: executing program 2 (id=811): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x121c040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m14.514486266s ago: executing program 2 (id=815): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$inet6(0xa, 0x80003, 0x102) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) 1m14.021883263s ago: executing program 2 (id=822): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) fstatfs(r1, 0x0) 1m13.811119245s ago: executing program 34 (id=822): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) fstatfs(r1, 0x0) 37.771192192s ago: executing program 1 (id=1149): r0 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x20000000}) close(0x4) 37.521424981s ago: executing program 1 (id=1151): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000200)='./file0/file1\x00') 36.922308729s ago: executing program 1 (id=1157): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 35.826438255s ago: executing program 1 (id=1164): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) unlink(&(0x7f0000000080)='./file1\x00') 35.156509917s ago: executing program 1 (id=1169): recvmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)=""/83, 0x53}], 0x4}}], 0x1, 0x2000, 0x0) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200fddbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="24005a8020000080140005"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 34.596785237s ago: executing program 1 (id=1171): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) readv(r0, 0x0, 0x24b0dd14386a754e) 34.391122578s ago: executing program 35 (id=1171): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) readv(r0, 0x0, 0x24b0dd14386a754e) 33.946044896s ago: executing program 4 (id=1177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000004c0)={0xbc, 0x0, 0x7}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x830, 0x5}}], 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 33.617842501s ago: executing program 4 (id=1180): bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0xfffffffc, @empty, 0xa}, 0x1c) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'ovf\x00', 0x1, 0x400, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 33.57375223s ago: executing program 4 (id=1181): r0 = shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil) r1 = shmat(r0, &(0x7f0000e3e000/0x2000)=nil, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000e0c000/0x1000)=nil, 0x7000) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x1, 0x0, 0x4, 0x0) shmdt(r1) 33.338499526s ago: executing program 4 (id=1184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 33.151660473s ago: executing program 4 (id=1188): syz_emit_ethernet(0xc1, &(0x7f0000000040)={@random="e90c610faca2", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb3, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9f, 0x0, @gue={{0x1, 0x1, 0x1, 0x8, 0x100, @void}, "ec35206b252a067bdac6bcee1ff0fd1a8c2b91c3838d468d07fd212893c9312530af94fa2b063da0634fcb9f7727a7f73eedf3f5317bf1a6ac36b982bf5fe236d062cc0d08bc63e71da0e8223d572d054a0d24861270cdca7ac2dccb3e3c3fa12ab34fd9fc5b47272289d881bd43dde8275480b11625252a05483dd34606141514d6e6f69788f64f6b19bbb48fef6b7ba23473"}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x5}]}}}}}}}, 0x0) 32.649802992s ago: executing program 4 (id=1191): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x30000, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10) 32.367501537s ago: executing program 36 (id=1191): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x30000, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10) 5.318874731s ago: executing program 3 (id=1353): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='655', 0x3) r1 = syz_open_dev$video(&(0x7f0000000e00), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000001300)={0x9b0951, 0x10}) 5.163138832s ago: executing program 3 (id=1354): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003f80)=[{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000480)="13170dc26cc97ae476ad82e216c52a1a8e7bd09b5fcee7a096dab1578ddadc3459d6a8e2465ed8980dd1c231207fae5f14cbca8a4d69ada05e33fd344e9aeba0ee2ea07fdebc826aa3774e9c1951fbfe18fe2aa56244966b8137469c2ce9f410468540b3d9b953e5f2df5c0e132d927773927af5a746eab0af17559b057b1f1d7f9a769cfd654c79d8e78d1d7e21f01c1f0be2d532560bc8", 0x98}, {&(0x7f0000000700)="c410be60cf9d7b279b2374b8fda8ab8abee238cc063ca5569feab54f5d6c7a477911424006543cb8cb644d814f7252509a4a4270", 0x34}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x1) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f0000000640)=""/171, 0xab}], 0x20}, 0x40012000) 4.922773969s ago: executing program 3 (id=1357): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00eaffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000180)=[{r0, 0x1028}], 0x1, 0xfd) close_range(r0, 0xffffffffffffffff, 0x0) 3.063585856s ago: executing program 3 (id=1367): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f0000001a00)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x61]}}, 0x0, 0x2b}, 0x28) ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801") 2.553633187s ago: executing program 3 (id=1370): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x1c1481, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0900000000000000000040000000001b00000000000000c900", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.362165914s ago: executing program 9 (id=1371): socket(0x10, 0x3, 0x0) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x2, 0x0) 2.312384304s ago: executing program 8 (id=1372): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002100010025"], 0x20}, 0x1, 0x0, 0x0, 0x40940}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 2.241598748s ago: executing program 3 (id=1373): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x0, 0x15, 0x3a, "c5e390287aa59cf9fef606dba1611312e1c26cf762a83fa0179c5f0a1b58138a475e62a27c31038329f7953af496f51451b4573ca7909ed5d79b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001180)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x82, 0x2, "8f9e"}, &(0x7f0000001200)=ANY=[], 0x0, 0x0}) 2.111603563s ago: executing program 8 (id=1374): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") unshare(0x20060400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x22180, 0x38) lseek(r1, 0xab07, 0x1) getdents64(r1, 0x0, 0x0) 1.996262586s ago: executing program 9 (id=1376): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000001540)=""/4101, 0x1005}], 0x1) write$cgroup_int(r2, &(0x7f0000000140), 0xfffffdef) 1.92422392s ago: executing program 8 (id=1377): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x38f9, 0x0) dup3(r3, r2, 0x80000) fcntl$setstatus(r2, 0x4, 0x2400) write(r0, &(0x7f0000000040), 0xffffff4a) 1.56968576s ago: executing program 6 (id=1380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aac000000060a01040000fc00000000000a0000010900010073797a310000000080000480500001800b0001007461726765740000400002802c0003007339f2f10455afb9fdd672bad09dfb78c7698474e891a0c7000000000000000000000000000000000800024000000000080001004c4544002c0001800b0001006e756d67656e00001c0002800800014000000016080003400000000108000240000000090900020073797a32"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2e, &(0x7f00000002c0)=0x10000, 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x200, 0xe8, 0xffffffff, 0x200, 0x200, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x33, 0x2, 0x14}, 0x0, 0xb0, 0xe8, 0x48, {}, [@common=@set={{0x40}, {{0x1, [0x7, 0x4, 0x1, 0x3, 0x6, 0x5], 0x3, 0x3}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @dev={0xac, 0x14, 0x14, 0x24}, @icmp_id=0x64, @port=0x4e24}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x10000, 0x6], 0x1}}, @common=@set={{0x40}, {{0x1, [0x5, 0x0, 0x4, 0x0, 0x5, 0x6], 0x3}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x11, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x64, @gre_key=0x2}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast2, @remote, @icmp_id=0x67, @gre_key=0x81}}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0xff000000, 'nicvf0\x00', 'pimreg0\x00', {}, {}, 0x29}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x608, 0x80}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 1.462038772s ago: executing program 6 (id=1381): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macvlan1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') 1.458517043s ago: executing program 7 (id=1382): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="19", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 1.312312221s ago: executing program 7 (id=1383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x5, 0x800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xffffffff, 0x2, r2, 0x8}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x8000000008000800, 0x0, 0x0, r2, 0x2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x0, r2, 0x6}) 1.089780045s ago: executing program 9 (id=1384): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee01) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x407}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x14, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.06504489s ago: executing program 7 (id=1385): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x1c1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 1.01319957s ago: executing program 6 (id=1386): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 962.76742ms ago: executing program 8 (id=1387): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x16d, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 957.918231ms ago: executing program 9 (id=1388): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c0) creat(&(0x7f0000000400)='./file1/file2\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unlink(&(0x7f0000000280)='./file1/file2\x00') creat(&(0x7f0000000180)='./file1/file2/../file0\x00', 0x102) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) 861.59849ms ago: executing program 7 (id=1389): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 753.779091ms ago: executing program 9 (id=1390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 663.546989ms ago: executing program 8 (id=1391): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e1c, 0x80000, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@rthdr={{0x28, 0x29, 0x39, {0xf35694f0ad1b52c8, 0x2, 0x2, 0x9f, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x28}, 0x1400c0c0) 656.822061ms ago: executing program 7 (id=1392): prlimit64(0x0, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) 559.74543ms ago: executing program 6 (id=1393): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002100)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) unshare(0x22020400) fcntl$lock(r0, 0x6, &(0x7f0000002080)={0x1, 0x1, 0x3, 0xdf5b}) flock(r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x229) 501.821221ms ago: executing program 8 (id=1394): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60b5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x3, "", [{{0x9, 0x4, 0x0, 0x9, 0xc, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x95, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 483.511175ms ago: executing program 7 (id=1395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) socket$kcm(0x21, 0x2, 0xa) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, 0x4}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0xa1, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000) 463.656768ms ago: executing program 9 (id=1396): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 448.901921ms ago: executing program 6 (id=1397): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000140)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe={'stripe', 0x3d, 0xb6}}, {@noinit_itable}, {@orlov}]}, 0x4, 0xbc4, &(0x7f0000002800)="$eJzs3M1rXOUaAPDnnHy2zb2TXi6X27tpLpdLC+o0raTYIthKxY0LQbdCQzopIdMPkkhNmsVE/wFR14Ib8aMoXdh1Nwpu3WjdWlwIRWKjIKKRMx9JbGby0UxyQvr7wTvnfec9M8/zzGFyzgtzEsAjayB7SCMORcT5JKJQfz6NiO5qrzeiUttvYX525Jf52ZEkFhdf+jGJJCLuz8+ONN4rqW8P1Ae9EfHVs0n8443VcSenZ8aHy+XSRH18bOrS1WOT0zNPjF0avli6WLp8/ORTQyeGTg6eGmpbrb9+d+bWz/99/vvKbx/9fuOnt99P4kz01edW1tEuAzGw9Jms1BkRw+0OlpOOej0r60w613lRus1JAQDQUrriGu5fUYiOWL54K8TnX+eaHAAAANAWix0RiwAAAMAel1j/AwAAwB7X+B3A/fnZkUbL9xcJO+ve2Yjor9W/UG+1mc6oVLe90RUR++8nsfK21qT2si0biIi73576NGuxTfchr6UyFxH/bnb8k2r9/dW7uFfXn0bEYBviDzww3mT9vVuNv179j3e3rv/MVoNvvX4AeCi3z9ZOZKvPf+nS9U80Of91Njl3PYy8z3+N67+FVdd/y/V3tLj+e3GDMa5/+O61VnNZ/U/feu6TRsviZ9stFbUJ9+Yi/tPZrP5kqf6kRf3nNxij8Me1Uqu5vOtffC/iSDSvvyFZ+/8THRsdK5cGa49NY8x9OfRxq/h5158d//0t6l/v+F/dYIxXzp272Wpu/frTH7qTl6u97vozrw1PTU0cj+hOXlj9/In6De0tNPZpvEdW/9H/rf39b1Z/FqJS/xyytcBcfZuNX38g5jM3rn+2Vv3Z2i/P43+h9fH/IOo1NTv+b24wxv+/eOtoq7mV69+sZfHvJrW1MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0pBHRF0laXOqnabEYcSAi/hn70/KVyanHRq+8evlCNhfRH13p6Fi5NBgRhdo4ycbHq/3l8YkHxk9GxMGIeKewrzoujlwpX8i7eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJYciIi+SNJiRKQRsVBI02Ix76wAAACAtuvPOwEAAABg21n/AwAAwN5n/Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA2O3j49p0kIiqn91Vbprs+15VrZsB2S/NOAMhNR94JALnpzDsBIDebXOO7XIA9KFlnvrflTE/bcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg9zpy6PadJCIqp/dVW6a7PtfV9BWHdzA7YDuleScA5KZjrcnOncsD2Hm+4vDoar7GBx4lyTrzvcv7VP4607NtOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw+/RVW5IWIyKt9tO0WIz4W0T0R1cyOlYuDUbE3yPim0JXTzbuyTtpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2m5yemZ8uFwuTeis1Vlc3BVp6OzpTrI70qh18v7LBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAHianZ8aHy+XSxGTemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5m5yeGR8ul0sTG+jc3MzOKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA//91Iw/f") syz_mount_image$exfat(0x0, &(0x7f0000000000)='./bus\x00', 0x88d80a, 0x0, 0x20, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000003400)=""/4096, 0x1000) 0s ago: executing program 6 (id=1398): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000140)) kernel console output (not intermixed with test programs): x21/0x70 [ 161.958279][ T7049] __x64_sys_unshare+0x34/0x40 [ 161.963085][ T7049] do_syscall_64+0x4c/0xa0 [ 161.967634][ T7049] ? clear_bhb_loop+0x30/0x80 [ 161.972349][ T7049] ? clear_bhb_loop+0x30/0x80 [ 161.977072][ T7049] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.983287][ T7049] RIP: 0033:0x7efd6455b159 [ 161.987746][ T7049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.004461][ T6968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.007389][ T7049] RSP: 002b:00007efd627b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 162.007422][ T7049] RAX: ffffffffffffffda RBX: 00007efd647e2fa0 RCX: 00007efd6455b159 [ 162.007437][ T7049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 162.007450][ T7049] RBP: 00007efd645f206b R08: 0000000000000000 R09: 0000000000000000 [ 162.007463][ T7049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.007475][ T7049] R13: 00007efd647e3038 R14: 00007efd647e2fa0 R15: 00007ffee84aaf88 [ 162.007507][ T7049] [ 162.096006][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.140400][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.176637][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.203970][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.227506][ T4228] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 162.357315][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 162.477318][ T4228] usb 5-1: Using ep0 maxpacket: 8 [ 162.493039][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.512523][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.545928][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.554493][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.563764][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.573267][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.583614][ T6968] device veth0_vlan entered promiscuous mode [ 162.597515][ T4228] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 162.598428][ T6968] device veth1_vlan entered promiscuous mode [ 162.617349][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.667413][ T6186] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 162.676261][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 162.687729][ T4597] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 162.689908][ T4228] pvrusb2: Hardware description: Terratec Grabster AV400 [ 162.703824][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 162.711429][ T4228] pvrusb2: ********** [ 162.715727][ T4228] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 162.736929][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.756089][ T4228] pvrusb2: Important functionality might not be entirely working. [ 162.765389][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.782534][ T4228] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 162.799689][ T6968] device veth0_macvtap entered promiscuous mode [ 162.818609][ T6968] device veth1_macvtap entered promiscuous mode [ 162.828069][ T4228] pvrusb2: ********** [ 162.854432][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.874797][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.885646][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.901428][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.903230][ T2423] pvrusb2: Invalid write control endpoint [ 162.912196][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.930862][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.937234][ T6186] usb 4-1: Using ep0 maxpacket: 16 [ 162.942817][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.959543][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.970111][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.990769][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.006576][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.018095][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.031059][ T6968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.044106][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.055674][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.066166][ T2423] pvrusb2: Invalid write control endpoint [ 163.066251][ T2423] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 163.072663][ T6186] usb 4-1: unable to get BOS descriptor or descriptor too short [ 163.092368][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.092770][ T2423] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 163.113167][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.123864][ T2423] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 163.140086][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.143748][ T4597] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.150707][ T2423] pvrusb2: Device being rendered inoperable [ 163.169734][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.182495][ T4597] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.184267][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.192938][ T6186] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 163.206745][ T2423] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 163.219048][ T6186] usb 4-1: can't read configurations, error -71 [ 163.221122][ T2423] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 163.229847][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.246152][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.253921][ T2423] pvrusb2: Attached sub-driver cx25840 [ 163.260894][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.266433][ T2423] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 163.276459][ T6968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.293527][ T2423] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 163.303090][ T6968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.313314][ T4597] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 163.323776][ T6968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.332061][ T4597] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 163.342030][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.349769][ T4597] usb 7-1: Manufacturer: syz [ 163.356748][ T4597] usb 7-1: config 0 descriptor?? [ 163.362940][ T4231] usb 5-1: USB disconnect, device number 9 [ 163.369671][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.389289][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.410678][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.423217][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.440997][ T6968] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.450746][ T6968] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.461369][ T6968] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.470325][ T6968] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.609953][ T5593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.627338][ T5593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.655730][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 163.714871][ T5584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.726534][ T5584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.741851][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 163.852202][ T7098] netlink: 16 bytes leftover after parsing attributes in process `syz.7.824'. [ 164.001216][ T7107] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 164.243921][ T7114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.437673][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 164.552466][ T7125] overlayfs: upper fs does not support tmpfile. [ 164.616184][ T4597] uclogic 0003:256C:006D.000E: v1 buttonpad probing failed: -71 [ 164.637274][ T4597] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 164.665793][ T4597] uclogic: probe of 0003:256C:006D.000E failed with error -71 [ 164.698176][ T4597] usb 7-1: USB disconnect, device number 4 [ 164.713638][ T7109] loop4: detected capacity change from 0 to 32768 [ 165.897276][ T4231] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 166.172110][ T7157] loop3: detected capacity change from 0 to 40427 [ 166.257507][ T4231] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.269124][ T4231] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.281005][ T4231] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.294745][ T4231] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.308392][ T7157] F2FS-fs (loop3): invalid crc value [ 166.326192][ T4231] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 166.344170][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.354418][ T7157] F2FS-fs (loop3): Found nat_bits in checkpoint [ 166.370216][ T4231] usb 5-1: config 0 descriptor?? [ 166.443474][ T7157] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 166.517489][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 166.530803][ T4194] attempt to access beyond end of device [ 166.530803][ T4194] loop3: rw=2049, want=45104, limit=40427 [ 166.862284][ T4231] input: HID 17ef:6047 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:17EF:6047.000F/input/input11 [ 166.966728][ T4231] lenovo 0003:17EF:6047.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 167.593994][ T7179] netlink: 24 bytes leftover after parsing attributes in process `syz.7.889'. [ 167.674443][ T6186] usb 5-1: USB disconnect, device number 10 [ 167.753271][ T7185] [ 167.825930][ T7187] loop3: detected capacity change from 0 to 128 [ 167.884127][ T7187] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985 [ 167.932613][ T7187] ; already mounted read-only [ 167.938597][ T7187] hpfs: filesystem error: improperly stopped [ 167.946026][ T7187] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 167.954352][ T7187] hpfs: You really don't want any checks? You are crazy... [ 167.963533][ T7187] hpfs: Code page index out of array [ 167.981654][ T7187] hpfs: code page support is disabled [ 168.000530][ T7187] hpfs: hpfs_map_4sectors(): unaligned read [ 168.010852][ T7187] hpfs: hpfs_map_4sectors(): unaligned read [ 168.017069][ T7187] hpfs: filesystem error: unable to find root dir [ 168.036736][ T7191] loop1: detected capacity change from 0 to 1024 [ 168.076871][ T7189] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 168.133197][ T7189] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 168.405664][ T7193] loop4: detected capacity change from 0 to 4096 [ 168.466731][ T26] audit: type=1800 audit(1791037172.842:12): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.895" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 168.530420][ T7193] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 168.681853][ T7193] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 168.783051][ T7195] device-mapper: table: 248:0: multipath: not enough path parameters [ 168.810684][ T7195] device-mapper: ioctl: error adding target to table [ 168.836260][ T5593] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 168.854270][ T4185] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 168.867094][ T4185] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 168.902077][ T4185] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 168.934446][ T5593] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 168.934677][ T4185] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 169.027625][ T4185] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 169.167223][ C0] net_ratelimit: 39 callbacks suppressed [ 169.363985][ T7187] hpfs: hpfs_map_4sectors(): unaligned read [ 169.668079][ T6186] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 170.077628][ T6186] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 170.092210][ T6186] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 170.144318][ T6186] usb 2-1: config 4 has no interface number 0 [ 170.158855][ T6186] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.387708][ T6186] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 170.408115][ T6186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.436496][ T6186] usb 2-1: Product: syz [ 170.451299][ T6186] usb 2-1: Manufacturer: syz [ 170.455986][ T6186] usb 2-1: SerialNumber: syz [ 170.776535][ T7268] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input12 [ 170.808969][ T4590] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 171.010230][ T7256] loop4: detected capacity change from 0 to 40427 [ 171.014368][ T6186] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 171.060819][ T7256] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 171.062436][ T6186] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 171.078003][ T7256] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 171.118056][ T6186] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 171.126422][ T7256] F2FS-fs (loop4): invalid crc value [ 171.147044][ T6186] usb 2-1: media controller created [ 171.156567][ T7256] F2FS-fs (loop4): Found nat_bits in checkpoint [ 171.181027][ T6186] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.229369][ T4590] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 171.257203][ T4590] usb 4-1: config 0 has no interface number 0 [ 171.269706][ T4590] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 171.308457][ T7256] F2FS-fs (loop4): recover fsync data on readonly fs [ 171.325072][ T6186] DVB: Unable to find symbol dib7000p_attach() [ 171.335111][ T7256] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 171.342654][ T6186] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 171.358295][ T7256] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 171.434967][ T4590] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 171.457469][ T6186] rc_core: IR keymap rc-dib0700-rc5 not found [ 171.464679][ T6186] Registered IR keymap rc-empty [ 171.485591][ T4590] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 171.497901][ T6186] dvb-usb: could not initialize remote control. [ 171.504164][ T6186] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 171.532572][ T4590] usb 4-1: Manufacturer: syz [ 171.547329][ T4590] usb 4-1: SerialNumber: syz [ 171.566247][ T4590] usb 4-1: config 0 descriptor?? [ 171.608624][ T6186] usb 2-1: USB disconnect, device number 9 [ 171.616460][ T26] audit: type=1800 audit(1791037175.992:13): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.930" name="zone_nr_conv" dev="configfs" ino=45540 res=0 errno=0 [ 171.814069][ T6186] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 172.128302][ T4590] usbtouchscreen: probe of 4-1:0.214 failed with error -71 [ 172.150655][ T4590] usb 4-1: USB disconnect, device number 16 [ 172.880864][ T7298] loop3: detected capacity change from 0 to 512 [ 172.967965][ T7298] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 173.112507][ T7298] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.938: bad orphan inode 13 [ 173.165068][ T7298] ext4_test_bit(bit=12, block=18) = 1 [ 173.220041][ T7298] is_bad_inode(inode)=0 [ 173.224257][ T7298] NEXT_ORPHAN(inode)=0 [ 173.288095][ T7298] max_ino=32 [ 173.308686][ T7298] i_nlink=1 [ 173.329766][ T7298] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 173.386177][ T7292] loop1: detected capacity change from 0 to 131072 [ 173.457633][ T7292] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 173.465795][ T7292] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 173.475510][ T7292] F2FS-fs (loop1): Test dummy encryption mode enabled [ 173.484176][ T7292] F2FS-fs (loop1): invalid crc value [ 173.496102][ T7292] F2FS-fs (loop1): Found nat_bits in checkpoint [ 173.533221][ T7292] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 173.548386][ T7292] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 173.561098][ T7292] F2FS-fs (loop1): Start checkpoint disabled! [ 173.572222][ T7314] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 173.598514][ T7292] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 173.605800][ T7292] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 173.743839][ T7314] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.938: bg 0: block 248: padding at end of block bitmap is not set [ 173.977914][ T7314] Quota error (device loop3): write_blk: dquota write failed [ 174.027616][ T7314] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 174.076287][ T7314] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.938: Failed to acquire dquot type 1 [ 174.253794][ T26] audit: type=1800 audit(1791037178.632:14): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.949" name="ipv4_address" dev="configfs" ino=44725 res=0 errno=0 [ 174.259186][ T7337] netlink: 36 bytes leftover after parsing attributes in process `syz.4.950'. [ 174.437194][ C1] net_ratelimit: 57 callbacks suppressed [ 174.570582][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'. [ 175.107347][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 175.377401][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 175.499460][ T23] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 175.499486][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.540395][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 175.540408][ T23] pvrusb2: ********** [ 175.540416][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 175.540430][ T23] pvrusb2: Important functionality might not be entirely working. [ 175.540441][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 175.540454][ T23] pvrusb2: ********** [ 175.617124][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.759110][ T2423] pvrusb2: Invalid write control endpoint [ 175.891880][ T7356] loop3: detected capacity change from 0 to 40427 [ 175.900047][ T2423] pvrusb2: Invalid write control endpoint [ 175.906673][ T2423] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 175.927389][ T4228] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 175.945419][ T2423] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 175.966877][ T2423] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 175.990295][ T7356] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 176.001728][ T2423] pvrusb2: Device being rendered inoperable [ 176.016938][ T7356] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 176.026952][ T4231] usb 5-1: USB disconnect, device number 11 [ 176.035413][ T2423] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 176.055396][ T2423] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 176.075727][ T7356] F2FS-fs (loop3): invalid crc value [ 176.092263][ T2423] pvrusb2: Attached sub-driver cx25840 [ 176.112676][ T2423] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 176.124497][ T2423] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 176.150009][ T7356] F2FS-fs (loop3): Found nat_bits in checkpoint [ 176.207256][ T4228] usb 8-1: Using ep0 maxpacket: 16 [ 176.255392][ T7356] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 176.270922][ T7356] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 176.337983][ T4228] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.361542][ T4228] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.548943][ T4228] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.578672][ T4228] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.617251][ T4228] usb 8-1: Product: syz [ 176.621477][ T4228] usb 8-1: Manufacturer: syz [ 176.656882][ T4228] usb 8-1: SerialNumber: syz [ 176.704403][ T4194] attempt to access beyond end of device [ 176.704403][ T4194] loop3: rw=2049, want=40968, limit=40427 [ 176.856175][ T7423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.894337][ T7417] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 176.923057][ T7417] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 177.101926][ T7431] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 177.121063][ T4228] usb 8-1: 0:2 : does not exist [ 177.161602][ T4228] usb 8-1: USB disconnect, device number 2 [ 177.408943][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.089943][ T7461] loop3: detected capacity change from 0 to 512 [ 178.171088][ T7461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 178.227333][ T7461] System zones: 1-12 [ 178.250696][ T7461] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.998: missing EA_INODE flag [ 178.305981][ T7461] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.998: error while reading EA inode 12 err=-117 [ 178.347237][ T4231] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 178.374627][ T7461] EXT4-fs (loop3): 1 orphan inode deleted [ 178.397837][ T7461] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 178.522515][ T7453] loop6: detected capacity change from 0 to 32768 [ 178.630327][ T7453] XFS (loop6): Mounting V5 Filesystem [ 178.667581][ T4231] usb 2-1: not running at top speed; connect to a high speed hub [ 178.747611][ T4231] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 14385, setting to 64 [ 178.796795][ T4231] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 178.832214][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.875633][ T7453] XFS (loop6): Ending clean mount [ 178.887733][ T7460] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.909716][ T4231] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 178.946831][ T7453] XFS (loop6): Quotacheck needed: Please wait. [ 178.961270][ T4231] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 179.109218][ T7453] XFS (loop6): Quotacheck: Done. [ 179.194617][ T7470] loop4: detected capacity change from 0 to 32768 [ 179.206712][ T4231] usb 2-1: USB disconnect, device number 10 [ 179.262857][ T4231] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 179.312330][ T7485] loop7: detected capacity change from 0 to 512 [ 179.320631][ T4231] cyberjack 2-1:1.0: device disconnected [ 179.373633][ T7489] device-mapper: table: 248:0: multipath: invalid number of paths [ 179.384855][ T7489] device-mapper: ioctl: error adding target to table [ 179.455859][ T7485] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 179.484021][ T7485] System zones: 1-12 [ 179.487195][ C0] net_ratelimit: 63 callbacks suppressed [ 179.564232][ T7485] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.1006: missing EA_INODE flag [ 179.576171][ T6360] XFS (loop6): Unmounting Filesystem [ 179.705449][ T7485] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1006: error while reading EA inode 12 err=-117 [ 179.744027][ T7485] EXT4-fs (loop7): 1 orphan inode deleted [ 179.765743][ T7485] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 179.856331][ T7500] loop1: detected capacity change from 0 to 128 [ 180.173650][ T7505] loop1: detected capacity change from 0 to 512 [ 180.237264][ T4229] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 180.283916][ T7508] loop3: detected capacity change from 0 to 512 [ 180.299722][ T7505] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1014: bg 0: block 5: invalid block bitmap [ 180.342957][ T7508] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 180.415808][ T7505] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 180.444590][ T7505] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1014: invalid indirect mapped block 3 (level 2) [ 180.475969][ T7505] EXT4-fs (loop1): 1 orphan inode deleted [ 180.503111][ T7514] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1015'. [ 180.518911][ T7508] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1016: corrupted in-inode xattr [ 180.539144][ T7505] EXT4-fs (loop1): 1 truncate cleaned up [ 180.544839][ T7505] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.601454][ T7508] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1016: couldn't read orphan inode 15 (err -117) [ 180.617897][ T4229] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 180.626415][ T4229] usb 5-1: config 127 has no interface number 0 [ 180.637670][ T7508] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 180.687573][ T4229] usb 5-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 180.901333][ T4229] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 180.923297][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.932134][ T7531] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 180.944744][ T4229] usb 5-1: Product: syz [ 180.969200][ T4229] usb 5-1: Manufacturer: syz [ 180.975223][ T4229] usb 5-1: SerialNumber: syz [ 181.017774][ T7503] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 181.175184][ T7537] loop1: detected capacity change from 0 to 2048 [ 181.310972][ T7539] loop7: detected capacity change from 0 to 4096 [ 181.361002][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'. [ 181.386636][ T7541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.414332][ T7539] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 181.459521][ T7503] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 181.481947][ T7541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.557435][ T6186] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 181.717454][ T4229] asix 5-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 181.745298][ T4229] asix: probe of 5-1:127.57 failed with error -71 [ 181.800551][ T4229] usb 5-1: USB disconnect, device number 12 [ 181.975982][ T6186] usb 2-1: config index 0 descriptor too short (expected 17742, got 18) [ 181.994893][ T6186] usb 2-1: config 231 has too many interfaces: 138, using maximum allowed: 32 [ 182.022281][ T6186] usb 2-1: config 231 has an invalid descriptor of length 212, skipping remainder of the config [ 182.055917][ T6186] usb 2-1: config 231 has 0 interfaces, different from the descriptor's value: 138 [ 182.085844][ T4590] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 182.093769][ T6186] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 182.113659][ T6186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.301511][ T7545] loop4: detected capacity change from 0 to 1024 [ 182.364508][ T7545] EXT4-fs (loop4): Ignoring removed orlov option [ 182.387299][ T4590] usb 4-1: Using ep0 maxpacket: 32 [ 182.468447][ T7545] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,nogrpid,norecovery,,errors=continue. Quota mode: none. [ 182.551419][ T7554] FAULT_INJECTION: forcing a failure. [ 182.551419][ T7554] name failslab, interval 1, probability 0, space 0, times 0 [ 182.564483][ T7554] CPU: 1 PID: 7554 Comm: syz.6.1031 Not tainted syzkaller #0 [ 182.571894][ T7554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 182.581967][ T7554] Call Trace: [ 182.585251][ T7554] [ 182.588194][ T7554] dump_stack_lvl+0x188/0x250 [ 182.588227][ T7554] ? show_regs_print_info+0x20/0x20 [ 182.592939][ T4590] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.598355][ T7554] ? load_image+0x410/0x410 [ 182.598388][ T7554] ? __might_sleep+0xf0/0xf0 [ 182.598411][ T7554] ? __lock_acquire+0x7d40/0x7d40 [ 182.598440][ T7554] should_fail+0x383/0x4b0 [ 182.598468][ T7554] should_failslab+0x5/0x20 [ 182.598489][ T7554] slab_pre_alloc_hook+0x51/0xc0 [ 182.614116][ T7554] ? __d_alloc+0x27/0x6d0 [ 182.623903][ T7554] kmem_cache_alloc+0x3d/0x280 [ 182.633008][ T7554] __d_alloc+0x27/0x6d0 [ 182.647130][ T7554] ? d_alloc_pseudo+0xe/0x70 [ 182.647166][ T7554] d_alloc_pseudo+0x19/0x70 [ 182.647184][ T7554] alloc_file_pseudo+0xe0/0x200 [ 182.647208][ T7554] ? alloc_empty_file_noaccount+0x80/0x80 [ 182.647231][ T7554] ? alloc_fd+0x59e/0x650 [ 182.656629][ T7554] sock_alloc_file+0xb3/0x240 [ 182.656659][ T7554] __sys_socket+0x11d/0x170 [ 182.656681][ T7554] __x64_sys_socket+0x76/0x80 [ 182.666455][ T7554] do_syscall_64+0x4c/0xa0 [ 182.666481][ T7554] ? clear_bhb_loop+0x30/0x80 [ 182.666501][ T7554] ? clear_bhb_loop+0x30/0x80 [ 182.666522][ T7554] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.666541][ T7554] RIP: 0033:0x7f8f96827159 [ 182.676902][ T7554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.686410][ T7554] RSP: 002b:00007f8f94a7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 182.695587][ T7554] RAX: ffffffffffffffda RBX: 00007f8f96aaefa0 RCX: 00007f8f96827159 [ 182.695615][ T7554] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000018 [ 182.695630][ T7554] RBP: 00007f8f968be06b R08: 0000000000000000 R09: 0000000000000000 [ 182.695642][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.695654][ T7554] R13: 00007f8f96aaf038 R14: 00007f8f96aaefa0 R15: 00007fff9a2e8948 [ 182.695686][ T7554] [ 182.790369][ T6186] usb 2-1: string descriptor 0 read error: -22 [ 182.815035][ T4590] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.824989][ T4590] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 182.834139][ T4590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.853732][ T4590] usb 4-1: config 0 descriptor?? [ 182.909434][ T4590] hub 4-1:0.0: USB hub found [ 182.924610][ T4269] usb 2-1: USB disconnect, device number 11 [ 183.137648][ T4590] hub 4-1:0.0: 1 port detected [ 183.266384][ T7567] loop7: detected capacity change from 0 to 1024 [ 183.848240][ T4590] hub 4-1:0.0: activate --> -90 [ 183.920716][ T7587] jffs2: notice: (7587) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 184.079151][ T7596] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 184.292445][ T6186] usb 4-1: USB disconnect, device number 17 [ 184.309580][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1055'. [ 184.319106][ T4590] usb 4-1-port1: config error [ 184.355541][ T7607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.415579][ T7607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.645049][ T7621] gadgetfs: bound to dummy_udc driver [ 184.677198][ C0] net_ratelimit: 70 callbacks suppressed [ 184.714567][ T7623] device-mapper: table: 248:1: thin-pool: target type may not be included in a read-only table [ 184.739300][ T7623] device-mapper: ioctl: error adding target to table [ 184.747444][ T4596] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 184.917294][ T6186] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 184.957208][ C0] gadgetfs: connected [ 184.965332][ T6186] gadgetfs: disconnected [ 184.990687][ T7636] input: syz0 as /devices/virtual/input/input15 [ 185.179874][ T4596] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.205597][ T4596] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 185.218561][ T4596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.227254][ C0] gadgetfs: connected [ 185.324544][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1072'. [ 185.334574][ T7647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.358476][ T6186] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 185.369145][ T4596] metro_usb 2-1:1.0: Metrologic USB to Serial converter detected [ 185.379787][ T6186] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 185.399537][ T6186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.415776][ T4596] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 185.457167][ C0] gadgetfs: configuration #1 [ 185.477518][ T7621] gadgetfs: suspended from state 3 [ 185.484066][ T7621] gadgetfs: disconnected [ 185.492719][ T4596] usb 1-1: USB disconnect, device number 2 [ 185.497363][ T4229] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 185.543769][ T7647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.699050][ T6186] usb 2-1: USB disconnect, device number 12 [ 185.722726][ T6186] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 185.760700][ T6186] metro_usb 2-1:1.0: device disconnected [ 185.802609][ T7658] FAULT_INJECTION: forcing a failure. [ 185.802609][ T7658] name failslab, interval 1, probability 0, space 0, times 0 [ 185.815800][ T7658] CPU: 0 PID: 7658 Comm: syz.7.1076 Not tainted syzkaller #0 [ 185.823205][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 185.834078][ T7658] Call Trace: [ 185.837391][ T7658] [ 185.840341][ T7658] dump_stack_lvl+0x188/0x250 [ 185.845050][ T7658] ? show_regs_print_info+0x20/0x20 [ 185.850274][ T7658] ? load_image+0x410/0x410 [ 185.854802][ T7658] ? __might_sleep+0xf0/0xf0 [ 185.854824][ T7658] ? __lock_acquire+0x7d40/0x7d40 [ 185.854853][ T7658] should_fail+0x383/0x4b0 [ 185.854881][ T7658] should_failslab+0x5/0x20 [ 185.854901][ T7658] slab_pre_alloc_hook+0x51/0xc0 [ 185.854922][ T7658] ? fcntl_setlease+0x134/0x310 [ 185.854942][ T7658] kmem_cache_alloc+0x3d/0x280 [ 185.854964][ T7658] fcntl_setlease+0x134/0x310 [ 185.854985][ T7658] ? vfs_setlease+0x100/0x100 [ 185.855018][ T7658] do_fcntl+0x11a/0x1360 [ 185.865692][ T7658] ? __context_tracking_exit+0x4c/0x80 [ 185.874830][ T7658] ? rcu_lock_release+0x20/0x20 [ 185.884802][ T7658] ? __fget_files+0x402/0x470 [ 185.894669][ T7658] ? tomoyo_file_fcntl+0x77/0x210 [ 185.903669][ T7658] ? bpf_lsm_file_fcntl+0x5/0x10 [ 185.914066][ T7658] ? security_file_fcntl+0x7c/0xa0 [ 185.929429][ T7658] __se_sys_fcntl+0xcc/0x190 [ 185.934850][ T4229] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 185.939442][ T7658] do_syscall_64+0x4c/0xa0 [ 185.939468][ T7658] ? clear_bhb_loop+0x30/0x80 [ 185.939489][ T7658] ? clear_bhb_loop+0x30/0x80 [ 185.939511][ T7658] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.939533][ T7658] RIP: 0033:0x7f5c96922159 [ 185.953288][ T7658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.962818][ T7658] RSP: 002b:00007f5c94b7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 185.962844][ T7658] RAX: ffffffffffffffda RBX: 00007f5c96ba9fa0 RCX: 00007f5c96922159 [ 185.962861][ T7658] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000003 [ 185.962874][ T7658] RBP: 00007f5c969b906b R08: 0000000000000000 R09: 0000000000000000 [ 185.973395][ T7658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.973410][ T7658] R13: 00007f5c96baa038 R14: 00007f5c96ba9fa0 R15: 00007ffc67dee0f8 [ 186.001850][ T7658] [ 186.046955][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.305291][ T7668] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1082'. [ 186.316291][ T4229] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 186.611500][ T6186] usb 4-1: USB disconnect, device number 18 [ 186.818297][ T7681] input: syz1 as /devices/virtual/input/input16 [ 187.183802][ T7666] loop7: detected capacity change from 0 to 32768 [ 187.388577][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1090'. [ 187.410775][ T7666] XFS (loop7): Mounting V5 Filesystem [ 187.535379][ T7666] XFS (loop7): Ending clean mount [ 187.692106][ T7703] loop3: detected capacity change from 0 to 512 [ 187.797435][ T7703] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 187.833883][ T7703] System zones: 1-12 [ 187.868955][ T7703] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1092: missing EA_INODE flag [ 187.937547][ T7703] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1092: error while reading EA inode 12 err=-117 [ 187.957579][ T7703] EXT4-fs (loop3): 1 orphan inode deleted [ 187.963578][ T7703] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 188.004738][ T6968] XFS (loop7): Unmounting Filesystem [ 188.339045][ T7714] loop6: detected capacity change from 0 to 512 [ 188.499845][ T7714] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 188.566197][ T7714] System zones: 1-12 [ 188.637810][ T7714] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.1096: missing EA_INODE flag [ 188.717642][ T7714] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1096: error while reading EA inode 12 err=-117 [ 188.759464][ T7714] EXT4-fs (loop6): 1 orphan inode deleted [ 188.779344][ T7714] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 189.529471][ T7742] device syzkaller1 entered promiscuous mode [ 189.537373][ T4227] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 189.717188][ C0] net_ratelimit: 65 callbacks suppressed [ 189.727006][ T7739] loop3: detected capacity change from 0 to 32768 [ 189.773312][ T7739] XFS (loop3): Mounting V5 Filesystem [ 189.813772][ T7739] XFS (loop3): Ending clean mount [ 189.821399][ T7739] XFS (loop3): Quotacheck needed: Please wait. [ 189.872625][ T7739] XFS (loop3): Quotacheck: Done. [ 189.947418][ T4227] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.985226][ T4194] XFS (loop3): Unmounting Filesystem [ 190.039377][ T4227] usb 5-1: config 13 has an invalid interface number: 248 but max is 2 [ 190.052175][ T4227] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 190.073601][ T4227] usb 5-1: config 13 has 1 interface, different from the descriptor's value: 3 [ 190.082986][ T4227] usb 5-1: config 13 has no interface number 0 [ 190.235886][ T7764] loop6: detected capacity change from 0 to 1024 [ 190.258662][ T4227] usb 5-1: New USB device found, idVendor=066b, idProduct=2202, bcdDevice=49.c7 [ 190.278631][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.287051][ T4227] usb 5-1: Product: syz [ 190.291651][ T4227] usb 5-1: Manufacturer: syz [ 190.296270][ T4227] usb 5-1: SerialNumber: syz [ 190.340562][ T7764] EXT4-fs (loop6): Ignoring removed orlov option [ 190.404253][ T7764] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,nogrpid,norecovery,,errors=continue. Quota mode: none. [ 190.578629][ T4227] kaweth 5-1:13.248: couldn't find required endpoints [ 190.596257][ T4227] pegasus 5-1:13.248: Missing or invalid endpoints [ 190.629594][ T4227] usb 5-1: USB disconnect, device number 13 [ 190.893919][ T7763] loop7: detected capacity change from 0 to 32768 [ 191.204622][ T7763] UFO tlock:0xffffc90002882090 [ 191.248765][ T7763] non-latin1 character 0x637c found in JFS file name [ 191.256454][ T7763] mount with iocharset=utf8 to access [ 191.318028][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 191.361654][ T7790] kAFS: No cell specified [ 191.397493][ T6186] Bluetooth: hci2: command 0x0406 tx timeout [ 191.397657][ T4229] Bluetooth: hci4: command 0x0406 tx timeout [ 191.421637][ T7792] loop4: detected capacity change from 0 to 1024 [ 191.435617][ T4229] Bluetooth: hci1: command 0x0406 tx timeout [ 191.543496][ T7792] EXT4-fs (loop4): Ignoring removed oldalloc option [ 191.618104][ T7792] EXT4-fs (loop4): Ignoring removed orlov option [ 191.686639][ T7792] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,oldalloc,orlov,dioread_lock,,errors=continue. Quota mode: none. [ 191.737431][ T7792] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.850008][ T7792] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm syz.4.1125: lblock 0 mapped to illegal pblock 0 (length 6) [ 191.912841][ T7802] jffs2: notice: (7802) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 191.937210][ T4229] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 192.006243][ T7792] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 192.046224][ T7792] EXT4-fs (loop4): This should not happen!! Data will be lost [ 192.046224][ T7792] [ 192.093201][ T7803] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1125: bg 0: block 112: padding at end of block bitmap is not set [ 192.172953][ T7803] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 192.192467][ T7808] loop6: detected capacity change from 0 to 128 [ 192.228355][ T7803] EXT4-fs (loop4): This should not happen!! Data will be lost [ 192.228355][ T7803] [ 192.243455][ T7803] EXT4-fs (loop4): Total free blocks count 0 [ 192.250084][ T7803] EXT4-fs (loop4): Free/Dirty block details [ 192.256435][ T7803] EXT4-fs (loop4): free_blocks=0 [ 192.268781][ T7808] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 192.302913][ T7803] EXT4-fs (loop4): dirty_blocks=48 [ 192.316964][ T7803] EXT4-fs (loop4): Block reservation details [ 192.324988][ T4229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.325280][ T7808] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.348462][ T7803] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 192.354879][ T7808] ext2 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.376837][ T4229] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 192.427385][ T4229] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.498312][ T5584] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 192.613246][ T4229] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 192.632741][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 192.688630][ T4229] usb 2-1: Product: syz [ 192.688651][ T4229] usb 2-1: Manufacturer: syz [ 192.769739][ T7795] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 192.786636][ T7829] kAFS: No cell specified [ 192.793127][ T4229] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 192.823173][ T4229] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 193.032994][ T4229] usb 2-1: USB disconnect, device number 13 [ 193.075160][ T4229] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 193.118835][ T4229] garmin_gps 2-1:1.0: device disconnected [ 193.144791][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 193.816316][ T7863] gadgetfs: bound to dummy_udc driver [ 193.887422][ T4229] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 194.137226][ T4229] usb 8-1: Using ep0 maxpacket: 32 [ 194.226591][ T7872] loop1: detected capacity change from 0 to 512 [ 194.258951][ T4229] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.278982][ T4229] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.290405][ T7872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 194.306450][ T7872] System zones: 1-12 [ 194.312278][ T4229] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 194.355704][ T7872] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1151: missing EA_INODE flag [ 194.398717][ T4229] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.419844][ T4229] usb 8-1: config 0 descriptor?? [ 194.427294][ T7872] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1151: error while reading EA inode 12 err=-117 [ 194.445211][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.445331][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.464869][ T7872] EXT4-fs (loop1): 1 orphan inode deleted [ 194.470886][ T7872] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 194.528985][ T4229] hub 8-1:0.0: USB hub found [ 194.767659][ T4229] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 194.782061][ T7879] loop6: detected capacity change from 0 to 128 [ 194.865547][ T7875] loop3: detected capacity change from 0 to 4096 [ 194.879022][ T7879] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 195.050151][ T7875] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 195.077264][ C1] net_ratelimit: 59 callbacks suppressed [ 195.212822][ T4229] hid-generic 0003:046D:C31C.0010: unknown main item tag 0x0 [ 195.233003][ T7875] ntfs: volume version 3.1. [ 195.273054][ T4229] hid-generic 0003:046D:C31C.0010: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.7-1/input0 [ 195.597246][ T4227] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 195.702787][ T7895] netlink: 'syz.3.1163': attribute type 3 has an invalid length. [ 195.719117][ T7895] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1163'. [ 195.754411][ T7895] netlink: 'syz.3.1163': attribute type 3 has an invalid length. [ 195.764453][ T7895] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1163'. [ 195.780344][ T6186] usb 8-1: USB disconnect, device number 3 [ 195.809069][ T7895] netlink: 'syz.3.1163': attribute type 3 has an invalid length. [ 195.844616][ T7895] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1163'. [ 195.905764][ T7897] loop1: detected capacity change from 0 to 2048 [ 195.929887][ T4229] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 195.964906][ T7897] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.974138][ T4227] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 195.987742][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.012739][ T4227] usb 5-1: config 0 descriptor?? [ 196.187273][ T4229] usb 7-1: Using ep0 maxpacket: 32 [ 196.307854][ T4229] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 196.326333][ T4229] usb 7-1: config 0 has no interface number 0 [ 196.507648][ T4229] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 196.533754][ T4229] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.543692][ T4187] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 196.555296][ T4229] usb 7-1: Product: syz [ 196.569703][ T4229] usb 7-1: Manufacturer: syz [ 196.577464][ T4229] usb 7-1: SerialNumber: syz [ 196.582184][ T4187] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 196.612006][ T7907] loop3: detected capacity change from 0 to 2048 [ 196.653180][ T4229] usb 7-1: config 0 descriptor?? [ 196.698612][ T4229] smsc95xx v2.0.0 [ 196.746165][ T7907] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,noload,norecovery,stripe=0x000000000004ffff,norecovery,errors=remount-ro,resgid=0x000000000000ee01,. Quota mode: none. [ 196.847729][ T26] audit: type=1804 audit(1791037201.222:15): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1168" name="/newroot/241/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 196.929829][ T4227] usb 5-1: Cannot set autoneg [ 196.937085][ T4227] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 196.980829][ T4227] usb 5-1: USB disconnect, device number 14 [ 197.147548][ T4229] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 197.161692][ T7907] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1168: bg 0: block 2: invalid block bitmap [ 197.165919][ T4229] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 197.227739][ T7907] EXT4-fs (loop3): Remounting filesystem read-only [ 197.447649][ T4229] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 197.447779][ T4229] smsc95xx: probe of 7-1:0.67 failed with error -61 [ 198.235920][ T7918] chnl_net:caif_netlink_parms(): no params data found [ 198.592474][ T7955] loop3: detected capacity change from 0 to 2048 [ 198.652128][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.715119][ T7955] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 198.722891][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.746505][ T7955] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.770348][ T7918] device bridge_slave_0 entered promiscuous mode [ 198.779736][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.787816][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.797697][ T7918] device bridge_slave_1 entered promiscuous mode [ 198.850282][ T7918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.869939][ T7918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.904649][ T23] usb 7-1: USB disconnect, device number 5 [ 198.926982][ T7955] CacheFiles: Can't set xattr on cache [20] (err 28) [ 198.979159][ T7955] CacheFiles: Failed to register: -28 [ 199.073121][ T7918] team0: Port device team_slave_0 added [ 199.100713][ T7918] team0: Port device team_slave_1 added [ 199.226029][ T7918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.233654][ T7918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.260955][ T7918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.294805][ T7918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.306024][ T7918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.432959][ T7918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.530626][ T7966] loop6: detected capacity change from 0 to 4096 [ 199.727703][ T6186] Bluetooth: hci2: command 0x0409 tx timeout [ 199.793878][ T7918] device hsr_slave_0 entered promiscuous mode [ 199.861271][ T7918] device hsr_slave_1 entered promiscuous mode [ 199.899683][ T7918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.954591][ T7918] Cannot create hsr debugfs directory [ 200.127539][ T5593] net_ratelimit: 73 callbacks suppressed [ 200.514499][ T7972] loop7: detected capacity change from 0 to 131072 [ 200.563572][ T7972] F2FS-fs (loop7): Invalid log sectorsize (67108873) [ 200.570522][ T7972] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 200.580347][ T7972] F2FS-fs (loop7): invalid crc value [ 200.599826][ T7966] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 200.610702][ T7972] F2FS-fs (loop7): Found nat_bits in checkpoint [ 200.693296][ T7972] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 200.700848][ T7972] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 200.759921][ T6360] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 200.890902][ T7972] fscrypt (loop7, inode 8): Error -61 getting encryption context [ 201.357383][ T4269] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 201.554110][ T7918] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 201.621638][ T7918] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 201.693616][ T7918] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 201.757480][ T4269] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 201.767600][ T7977] chnl_net:caif_netlink_parms(): no params data found [ 201.783130][ T4269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.815396][ T7918] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 201.829603][ T6186] Bluetooth: hci2: command 0x041b tx timeout [ 202.121288][ T4596] Bluetooth: hci1: command 0x0409 tx timeout [ 202.194451][ T4269] net1080 4-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, ca:c0:57:02:f3:19 [ 202.226668][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1204'. [ 202.237707][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1204'. [ 202.264769][ T8003] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.274477][ T8003] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.283312][ T8003] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.292124][ T8003] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.377272][ T4597] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 202.414347][ T7977] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.432665][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.446458][ T7977] device bridge_slave_0 entered promiscuous mode [ 202.456654][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1204'. [ 202.466489][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1204'. [ 202.667507][ T4597] usb 7-1: Using ep0 maxpacket: 32 [ 202.761406][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.770779][ T4229] usb 4-1: USB disconnect, device number 19 [ 202.779189][ T4229] net1080 4-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT [ 202.780070][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.806189][ T7977] device bridge_slave_1 entered promiscuous mode [ 202.837418][ T4597] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 202.846924][ T4597] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 202.856762][ T4597] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.870226][ T4597] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 202.879602][ T4597] usb 7-1: config 1 has no interface number 0 [ 202.885777][ T4597] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 202.895743][ T4597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.961190][ T4597] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 203.021879][ T7918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.056586][ T7977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.091276][ T7977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.188092][ T4597] snd_usb_pod 7-1:1.1: set_interface failed [ 203.196336][ T4597] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 203.216358][ T4597] snd_usb_pod: probe of 7-1:1.1 failed with error -71 [ 203.238838][ T4597] usb 7-1: USB disconnect, device number 6 [ 203.344326][ T7977] team0: Port device team_slave_0 added [ 203.363522][ T7977] team0: Port device team_slave_1 added [ 203.494529][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.515381][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.533037][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.557882][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.617700][ T7977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.659957][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.666925][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.785076][ T8024] gadgetfs: bound to dummy_udc driver [ 203.811841][ T7977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.861901][ T7918] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.887973][ T4596] Bluetooth: hci2: command 0x040f tx timeout [ 203.906081][ T8026] loop6: detected capacity change from 0 to 1024 [ 203.948232][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.962477][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.995290][ T8026] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 204.040006][ T4891] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.047223][ T4891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.118402][ T8026] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 204.202175][ T8026] EXT4-fs (loop6): orphan cleanup on readonly fs [ 204.209554][ T4597] Bluetooth: hci1: command 0x041b tx timeout [ 204.250945][ T8026] EXT4-fs error (device loop6): ext4_read_inode_bitmap:168: comm syz.6.1208: Inode bitmap for bg 0 marked uninitialized [ 204.279505][ T8026] EXT4-fs (loop6): Remounting filesystem read-only [ 204.286153][ T8026] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000080,errors=remount-ro,inode_readahead_blks=0x0000000000800000,lazytime,. Quota mode: writeback. [ 204.355257][ T7977] device hsr_slave_0 entered promiscuous mode [ 204.417972][ T7977] device hsr_slave_1 entered promiscuous mode [ 204.429241][ T7977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.436926][ T7977] Cannot create hsr debugfs directory [ 204.471110][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.482984][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.492451][ T8026] EXT4-fs (loop6): shut down requested (1) [ 204.527470][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.538334][ T4891] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.545464][ T4891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.643084][ T8038] loop7: detected capacity change from 0 to 512 [ 204.655537][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.663812][ T8022] loop3: detected capacity change from 0 to 32768 [ 204.754519][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.766894][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.805708][ T8038] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.817513][ T8038] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.870720][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.894707][ T8022] XFS (loop3): Mounting V5 Filesystem [ 204.909934][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.051409][ T8022] XFS (loop3): Ending clean mount [ 205.123460][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.148387][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.261978][ T4194] XFS (loop3): Unmounting Filesystem [ 205.317382][ C1] net_ratelimit: 62 callbacks suppressed [ 205.348066][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.417574][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.434106][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.474997][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.533281][ T7918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.926036][ T7977] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 205.968415][ T4596] Bluetooth: hci2: command 0x0419 tx timeout [ 206.030155][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.047530][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.076431][ T7977] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 206.110388][ T8080] loop3: detected capacity change from 0 to 2048 [ 206.132612][ T7918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.159219][ T8080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.168383][ T4596] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 206.168616][ T7977] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 206.230529][ T7977] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 206.277417][ T6186] Bluetooth: hci1: command 0x040f tx timeout [ 206.525461][ T7977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.550919][ T7977] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.563941][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.573179][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.631563][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.640434][ T4596] usb 7-1: unable to get BOS descriptor or descriptor too short [ 206.651421][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.662050][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.669350][ T5589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.678879][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.688531][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.697246][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.704683][ T5589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.713877][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.731202][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.748047][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.759558][ T4596] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.777209][ T4596] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.806497][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.831301][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.842282][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.852268][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.862953][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.880474][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.894926][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.948490][ T4596] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 206.993868][ T7977] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.006162][ T7977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.016848][ T4596] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.016877][ T4596] usb 7-1: Product: syz [ 207.016893][ T4596] usb 7-1: Manufacturer: syz [ 207.016909][ T4596] usb 7-1: SerialNumber: syz [ 207.053095][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.063212][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.073667][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.083607][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.100747][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.190622][ T4596] usb 7-1: selecting invalid altsetting 1 [ 207.196830][ T4596] usb 7-1: unit 6 not found! [ 207.229435][ T7918] device veth0_vlan entered promiscuous mode [ 207.255401][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.272644][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.312704][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.348964][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.393110][ T7918] device veth1_vlan entered promiscuous mode [ 207.481275][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.500849][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.514031][ T8100] loop3: detected capacity change from 0 to 256 [ 207.547831][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.572051][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.592826][ T7918] device veth0_macvtap entered promiscuous mode [ 207.609400][ T8103] device ip6_vti0 entered promiscuous mode [ 207.664967][ T7918] device veth1_macvtap entered promiscuous mode [ 207.685081][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.694753][ T8100] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 207.720353][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.742678][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.771035][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.813202][ T7977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.827660][ T4596] usb 7-1: cannot get ctl value: req = 0x84, wValue = 0x100, wIndex = 0x200, type = 3 [ 207.852947][ T26] audit: type=1800 audit(1791037212.232:16): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1223" name="file1" dev="loop3" ino=1048674 res=0 errno=0 [ 207.898099][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.919233][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.946023][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.987247][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.008560][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.021823][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 208.023722][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.037220][ T8100] exFAT-fs (loop3): Filesystem has been set read-only [ 208.055895][ T8100] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805fd20e60 iblock : 8, err : -5) [ 208.057700][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.080768][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.105435][ T7918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.119404][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.119726][ T4596] usb 7-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 208.139132][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.143353][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 208.163482][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.182057][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.210152][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.223317][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.233674][ T8100] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805fd20e60 iblock : 8, err : -5) [ 208.244345][ T4596] usb 7-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 208.252741][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.281554][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.302833][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 208.310024][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.323752][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.334627][ T8100] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805fd20e60 iblock : 9, err : -5) [ 208.354945][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.376115][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.387340][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 208.397841][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.426265][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.426297][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.426314][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.448220][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 208.494919][ T7918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.510168][ T8100] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805fd20e60 iblock : 10, err : -5) [ 208.525101][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.544489][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.562282][ T4596] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 208.596182][ T4596] usb 7-1: USB disconnect, device number 7 [ 208.622966][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 208.633970][ T7918] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.658619][ T8115] loop7: detected capacity change from 0 to 4096 [ 208.672867][ T7918] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.691975][ T8100] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805fd20e60 iblock : 11, err : -5) [ 208.704346][ T7918] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.713398][ T7918] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.736965][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 208.752104][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.791751][ T8100] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805fd20e60 iblock : 12, err : -5) [ 208.841138][ T8115] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 208.875387][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 208.913643][ T8100] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805fd20e60 iblock : 13, err : -5) [ 208.980464][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 208.986679][ T8100] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805fd20e60 iblock : 14, err : -5) [ 208.997619][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.004380][ T8100] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805fd20e60 iblock : 15, err : -5) [ 209.026100][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.058651][ T8115] EXT4-fs (loop7): resizing filesystem from 512 to 16 blocks [ 209.070488][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.120445][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.126492][ T8100] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805fd20e60 iblock : 16, err : -5) [ 209.143620][ T8115] EXT4-fs warning (device loop7): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 209.205975][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.234359][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.254937][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.290855][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.302594][ T7977] device veth0_vlan entered promiscuous mode [ 209.326119][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.332810][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.338997][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.345267][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.353567][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.368857][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.387789][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.404835][ T7977] device veth1_vlan entered promiscuous mode [ 209.417553][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.423807][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.513004][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.546144][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.561017][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.578277][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.592867][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.612291][ T5589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.616329][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.627691][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.633789][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.640694][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.646797][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.693279][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.703931][ T5589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.734593][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.762267][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.786095][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.825928][ T7977] device veth0_macvtap entered promiscuous mode [ 209.832488][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.873065][ T5593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.873659][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 209.892859][ T7977] device veth1_macvtap entered promiscuous mode [ 209.899435][ T5593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.941958][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.958881][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.991627][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.022175][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.028128][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.039785][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.050467][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.056605][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.063256][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.068591][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.093143][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.097626][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.124236][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.149744][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.155306][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.155793][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.178148][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.184472][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.186648][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.191224][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.207973][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.221448][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.228432][ T8135] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1233'. [ 210.244748][ T6186] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 210.245349][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.254250][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.275669][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.300956][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.311139][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.338295][ T7977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.347765][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.353918][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.376047][ T8137] loop7: detected capacity change from 0 to 8 [ 210.385591][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.393037][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.405263][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.418564][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.424886][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.443998][ T5589] net_ratelimit: 106 callbacks suppressed [ 210.454105][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.476756][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.496985][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.503234][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.525218][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.540432][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.563158][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.584212][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.590938][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.611500][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.627278][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.637491][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.671767][ T8141] loop8: detected capacity change from 0 to 64 [ 210.674844][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.690676][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.696713][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.707518][ T6186] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.713528][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.722715][ T6186] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 210.737450][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.750796][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.757307][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.763585][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.774616][ T6186] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 210.782783][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.795029][ T6186] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.808594][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.814945][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.816780][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.831878][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.838545][ T6186] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 210.841728][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.849069][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.865512][ T6186] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.875133][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.886155][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.893996][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.903170][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.910653][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.917048][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.927877][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.934978][ T7977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.935662][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.954915][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.984020][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 210.995372][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.995824][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.052893][ T7977] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.067262][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.078838][ T7977] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.111888][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.122753][ T7977] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.133739][ T8142] binder: 8136:8142 ioctl c018620c 0 returned -14 [ 211.147804][ T8137] SQUASHFS error: zlib decompression failed, data probably corrupt [ 211.167272][ T7977] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.188023][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.194302][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.209192][ T8137] SQUASHFS error: Failed to read block 0x4de: -5 [ 211.216407][ T8137] SQUASHFS error: Failed to read block 0x4e2: -5 [ 211.234006][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.258498][ T8144] loop8: detected capacity change from 0 to 16 [ 211.279065][ T8144] erofs: (device loop8): mounted with root inode @ nid 36. [ 211.296813][ T8137] SQUASHFS error: Failed to read block 0x9ca: -5 [ 211.324657][ T26] audit: type=1800 audit(1791037215.702:17): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1236" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 211.352423][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.375942][ T8137] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 211.398301][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.404399][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.412504][ T8137] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 211.430388][ T8137] SQUASHFS error: Failed to read block 0x535f2: -5 [ 211.471776][ T26] audit: type=1800 audit(1791037215.852:18): pid=8137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1234" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 211.472158][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.622355][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.652193][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.670379][ T5595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.696902][ T5595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.710849][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.731022][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.737075][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.751585][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.758124][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.764229][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.772662][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.780920][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.841487][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.856175][ T5584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.864713][ T5584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.875286][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.882966][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.898344][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.907852][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.923978][ T8149] loop7: detected capacity change from 0 to 1024 [ 211.936853][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 211.967574][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 212.027482][ T6186] gud 7-1:1.0: DVI-D-1: Failed to add properties (ret=-71) [ 212.034886][ T6186] gud 7-1:1.0: Failed to get connectors (error=-71) [ 212.057023][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 212.068664][ T8149] EXT4-fs (loop7): Ignoring removed oldalloc option [ 212.076478][ T6186] gud: probe of 7-1:1.0 failed with error -71 [ 212.087155][ T8149] EXT4-fs (loop7): Ignoring removed orlov option [ 212.094149][ T8100] exFAT-fs (loop3): error, broken FAT chain. [ 212.139383][ T6186] usb 7-1: USB disconnect, device number 8 [ 212.151341][ T26] audit: type=1800 audit(1791037216.532:19): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1223" name="file1" dev="loop3" ino=1048674 res=0 errno=0 [ 212.181386][ T8149] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,oldalloc,orlov,dioread_lock,,errors=continue. Quota mode: none. [ 212.258988][ T8149] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.276733][ T8158] loop8: detected capacity change from 0 to 256 [ 212.331721][ T8149] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: comm syz.7.1238: lblock 0 mapped to illegal pblock 0 (length 6) [ 212.347374][ T8149] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 212.373253][ T8158] exfat: Deprecated parameter 'utf8' [ 212.394028][ T8158] exfat: Deprecated parameter 'utf8' [ 212.414890][ T8149] EXT4-fs (loop7): This should not happen!! Data will be lost [ 212.414890][ T8149] [ 212.496060][ T8160] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1238: bg 0: block 112: padding at end of block bitmap is not set [ 212.515950][ T8158] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 212.613221][ T8160] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 212.645756][ T8160] EXT4-fs (loop7): This should not happen!! Data will be lost [ 212.645756][ T8160] [ 212.663741][ T8160] EXT4-fs (loop7): Total free blocks count 0 [ 212.700891][ T8160] EXT4-fs (loop7): Free/Dirty block details [ 212.706887][ T8160] EXT4-fs (loop7): free_blocks=0 [ 212.769649][ T8160] EXT4-fs (loop7): dirty_blocks=48 [ 212.774839][ T8160] EXT4-fs (loop7): Block reservation details [ 212.794226][ T8160] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 212.901595][ T5593] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 213.135432][ T8186] FAULT_INJECTION: forcing a failure. [ 213.135432][ T8186] name failslab, interval 1, probability 0, space 0, times 0 [ 213.194076][ T8186] CPU: 1 PID: 8186 Comm: syz.7.1249 Not tainted syzkaller #0 [ 213.201509][ T8186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 213.211673][ T8186] Call Trace: [ 213.214986][ T8186] [ 213.217942][ T8186] dump_stack_lvl+0x188/0x250 [ 213.222653][ T8186] ? show_regs_print_info+0x20/0x20 [ 213.227888][ T8186] ? load_image+0x410/0x410 [ 213.232423][ T8186] ? __might_sleep+0xf0/0xf0 [ 213.232574][ T8186] ? __lock_acquire+0x7d40/0x7d40 [ 213.232598][ T8186] ? mpol_shared_policy_init+0x19c/0x4b0 [ 213.248472][ T8186] ? ktime_get_coarse_real_ts64+0x2b/0x120 [ 213.248632][ T8181] loop6: detected capacity change from 0 to 4096 [ 213.254307][ T8186] should_fail+0x383/0x4b0 [ 213.254343][ T8186] should_failslab+0x5/0x20 [ 213.269695][ T8186] slab_pre_alloc_hook+0x51/0xc0 [ 213.269725][ T8186] ? __d_alloc+0x27/0x6d0 [ 213.269746][ T8186] kmem_cache_alloc+0x3d/0x280 [ 213.279094][ T8186] __d_alloc+0x27/0x6d0 [ 213.279120][ T8186] ? d_alloc_pseudo+0xe/0x70 [ 213.279147][ T8186] d_alloc_pseudo+0x19/0x70 [ 213.288056][ T8186] alloc_file_pseudo+0xe0/0x200 [ 213.288088][ T8186] ? alloc_empty_file_noaccount+0x80/0x80 [ 213.288112][ T8186] ? shmem_get_inode+0x87b/0xa40 [ 213.288144][ T8186] __shmem_file_setup+0x1cf/0x290 [ 213.288169][ T8186] newseg+0x490/0xbe0 [ 213.288211][ T8186] ? ksys_shmget+0x140/0x140 [ 213.288245][ T8186] ipcget+0x8be/0xc50 [ 213.288284][ T8186] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 213.288307][ T8186] ? __lock_acquire+0x7d40/0x7d40 [ 213.288340][ T8186] __x64_sys_shmget+0x13d/0x180 [ 213.288363][ T8186] ? lock_chain_count+0x20/0x20 [ 213.288388][ T8186] ? shm_more_checks+0x80/0x80 [ 213.288416][ T8186] ? lockdep_hardirqs_on+0x94/0x140 [ 213.288443][ T8186] do_syscall_64+0x4c/0xa0 [ 213.288463][ T8186] ? clear_bhb_loop+0x30/0x80 [ 213.288485][ T8186] ? clear_bhb_loop+0x30/0x80 [ 213.288507][ T8186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.288530][ T8186] RIP: 0033:0x7f5c96922159 [ 213.288551][ T8186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.288570][ T8186] RSP: 002b:00007f5c94b7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 213.288594][ T8186] RAX: ffffffffffffffda RBX: 00007f5c96ba9fa0 RCX: 00007f5c96922159 [ 213.288607][ T8186] RDX: 0000000000000200 RSI: 0000000000002000 RDI: 00000000798dd830 [ 213.288621][ T8186] RBP: 00007f5c969b906b R08: 0000000000000000 R09: 0000000000000000 [ 213.288635][ T8186] R10: 0000200000ffc000 R11: 0000000000000246 R12: 0000000000000000 [ 213.288650][ T8186] R13: 00007f5c96baa038 R14: 00007f5c96ba9fa0 R15: 00007ffc67dee0f8 [ 213.318292][ T8186] [ 213.775008][ T26] audit: type=1800 audit(1791037218.152:20): pid=8193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1251" name="file1" dev="loop6" ino=0 res=0 errno=0 [ 214.129202][ T8201] loop3: detected capacity change from 0 to 512 [ 214.235727][ T8206] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1260'. [ 214.400950][ T8201] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.423245][ T8201] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.762875][ T8230] loop6: detected capacity change from 0 to 128 [ 214.873100][ T8230] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 214.917446][ T8230] hpfs: filesystem error: improperly stopped [ 214.923489][ T8230] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 214.988561][ T8230] hpfs: You really don't want any checks? You are crazy... [ 214.996006][ T8230] hpfs: Code page index out of array [ 215.007854][ T8230] hpfs: code page support is disabled [ 215.013540][ T8230] hpfs: hpfs_map_4sectors(): unaligned read [ 215.067326][ T8230] hpfs: hpfs_map_4sectors(): unaligned read [ 215.073288][ T8230] hpfs: filesystem error: unable to find root dir [ 215.149834][ T8230] hpfs: hpfs_map_4sectors(): unaligned read [ 215.387804][ T8234] loop3: detected capacity change from 0 to 2048 [ 215.463452][ T8234] loop3: p4 < > [ 215.467762][ T8220] loop8: detected capacity change from 0 to 32768 [ 215.559167][ T4891] net_ratelimit: 128 callbacks suppressed [ 215.751834][ T8220] XFS (loop8): Mounting V5 Filesystem [ 215.992038][ T8220] XFS (loop8): Ending clean mount [ 216.002242][ T8220] XFS (loop8): Quotacheck needed: Please wait. [ 216.086420][ T8253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.137367][ T8220] XFS (loop8): Quotacheck: Done. [ 216.186868][ T8259] loop5: detected capacity change from 0 to 7 [ 216.208407][ T4590] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 216.287344][ T4266] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 216.292969][ T4266] loop5: partition table partially beyond EOD, truncated [ 216.325374][ T7918] XFS (loop8): Unmounting Filesystem [ 216.334216][ T4266] loop5: p1 size 618033127 extends beyond EOD, truncated [ 216.359433][ T8259] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 216.365055][ T8259] loop5: partition table partially beyond EOD, truncated [ 216.451203][ T8259] loop5: p1 size 618033127 extends beyond EOD, truncated [ 216.477358][ T4590] usb 10-1: Using ep0 maxpacket: 32 [ 216.489064][ T8261] loop6: detected capacity change from 0 to 8192 [ 216.622187][ T4590] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 216.630775][ T4590] usb 10-1: config 0 has no interface number 0 [ 216.640345][ T4590] usb 10-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 216.675521][ T8261] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 216.685986][ T4590] usb 10-1: config 0 interface 184 has no altsetting 0 [ 216.696856][ T8261] REISERFS (device loop6): using ordered data mode [ 216.710157][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 216.756261][ T8261] reiserfs: using flush barriers [ 216.789829][ T8261] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 216.813539][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 216.848973][ T4590] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 216.863323][ T8261] REISERFS (device loop6): checking transaction log (loop6) [ 216.881049][ T4590] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.904580][ T8269] netlink: 'syz.7.1281': attribute type 13 has an invalid length. [ 216.918593][ T4590] usb 10-1: Product: syz [ 216.923026][ T4590] usb 10-1: Manufacturer: syz [ 216.937243][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1281'. [ 216.947746][ T4590] usb 10-1: SerialNumber: syz [ 216.977813][ T4590] usb 10-1: config 0 descriptor?? [ 216.988236][ T8269] netlink: 'syz.7.1281': attribute type 13 has an invalid length. [ 217.008265][ T8251] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 217.017532][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1281'. [ 217.029790][ T4590] smsc75xx v1.0.0 [ 217.174905][ T8261] REISERFS (device loop6): Using tea hash to sort names [ 217.196832][ T8261] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 217.220904][ T8261] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 217.252751][ T8251] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 217.289486][ T26] audit: type=1800 audit(1791037221.672:21): pid=8261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1278" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 217.497572][ T4597] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 217.917573][ T4231] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 217.928360][ T4597] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.947153][ T4597] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.957923][ T4597] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 217.967070][ T4597] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.988457][ T4597] usb 8-1: config 0 descriptor?? [ 218.033833][ T8293] loop6: detected capacity change from 0 to 32768 [ 218.165002][ T8293] XFS (loop6): Mounting V5 Filesystem [ 218.182733][ T4231] usb 4-1: Using ep0 maxpacket: 16 [ 218.211373][ T8293] XFS (loop6): Ending clean mount [ 218.229032][ T8293] XFS (loop6): Quotacheck needed: Please wait. [ 218.302053][ T8293] XFS (loop6): Quotacheck: Done. [ 218.307894][ T4231] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 218.316093][ T4231] usb 4-1: config 0 has no interface number 0 [ 218.345323][ T4231] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 218.355711][ T4231] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 218.387477][ T4590] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 218.399185][ T4590] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 218.414266][ T6360] XFS (loop6): Unmounting Filesystem [ 218.428687][ T4590] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 218.472498][ T4590] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 218.522996][ T4590] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 218.550054][ T4231] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 218.562477][ T4590] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 218.582832][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.590940][ T4590] smsc75xx: probe of 10-1:0.184 failed with error -71 [ 218.607330][ T4231] usb 4-1: Product: syz [ 218.611528][ T4231] usb 4-1: Manufacturer: syz [ 218.611547][ T4231] usb 4-1: SerialNumber: syz [ 218.645907][ T4590] usb 10-1: USB disconnect, device number 2 [ 218.655675][ T4231] usb 4-1: config 0 descriptor?? [ 218.697397][ T8291] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 218.705520][ T8291] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 218.942964][ T4597] hid-led 0003:27B8:01ED.0011: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.7-1/input0 [ 219.001606][ T8306] "syz.9.1291" (8306) uses obsolete ecb(arc4) skcipher [ 219.019740][ T8291] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 219.026948][ T8291] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 219.050424][ T4597] hid-led 0003:27B8:01ED.0011: ThingM blink(1) initialized [ 219.292878][ T4228] usb 8-1: USB disconnect, device number 4 [ 219.941949][ T8321] gadgetfs: bound to dummy_udc driver [ 220.197478][ T4228] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 220.257496][ T4231] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 220.285340][ T4231] asix: probe of 4-1:0.34 failed with error -71 [ 220.292776][ T8327] loop7: detected capacity change from 0 to 8192 [ 220.320406][ T4231] usb 4-1: USB disconnect, device number 20 [ 220.557684][ T4228] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.593166][ T4228] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.603250][ C1] net_ratelimit: 97 callbacks suppressed [ 220.665819][ T4228] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 220.725835][ T4228] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.783508][ T4228] usb 10-1: config 0 descriptor?? [ 221.001205][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1308'. [ 221.032332][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1308'. [ 221.289830][ T4228] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x2 [ 221.330491][ T4228] pyra 0003:1E7D:2CF6.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.9-1/input0 [ 221.507560][ T4228] pyra 0003:1E7D:2CF6.0012: couldn't init struct pyra_device [ 221.515179][ T4228] pyra 0003:1E7D:2CF6.0012: couldn't install mouse [ 221.546253][ T4228] pyra: probe of 0003:1E7D:2CF6.0012 failed with error -71 [ 221.596614][ T4228] usb 10-1: USB disconnect, device number 3 [ 221.681051][ T8358] "syz.7.1313" (8358) uses obsolete ecb(arc4) skcipher [ 221.695544][ T8358] syz.7.1313 sent an empty control message without MSG_MORE. [ 221.753525][ T8354] fido_id[8354]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 222.019641][ T8345] loop3: detected capacity change from 0 to 32768 [ 222.089583][ T8345] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 222.159039][ T8345] JBD2: Ignoring recovery information on journal [ 222.184422][ T8375] loop7: detected capacity change from 0 to 256 [ 222.256522][ T8345] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 222.328779][ T8380] loop9: detected capacity change from 0 to 512 [ 222.424638][ T8380] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 222.457275][ T8380] System zones: 1-12 [ 222.519124][ T8345] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #65 has bad signature INODE01 [ 222.539773][ T8345] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 222.554318][ T8380] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.1322: missing EA_INODE flag [ 222.568758][ T8345] OCFS2: File system is now read-only. [ 222.574285][ T8345] (syz.3.1307,8345,1):ocfs2_search_one_group:1706 ERROR: status = -30 [ 222.593914][ T8345] (syz.3.1307,8345,1):ocfs2_claim_suballoc_bits:1942 ERROR: status = -30 [ 222.625738][ T8345] (syz.3.1307,8345,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 222.637347][ T8380] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.1322: error while reading EA inode 12 err=-117 [ 222.656161][ T8345] (syz.3.1307,8345,1):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 222.687601][ T8345] (syz.3.1307,8345,1):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 222.695999][ T8380] EXT4-fs (loop9): 1 orphan inode deleted [ 222.706608][ T8345] (syz.3.1307,8345,1):ocfs2_mknod_locked:641 ERROR: status = -30 [ 222.725607][ T8380] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 222.726693][ T8345] (syz.3.1307,8345,1):ocfs2_mknod:385 ERROR: status = -30 [ 222.769517][ T8345] (syz.3.1307,8345,1):ocfs2_mknod:504 ERROR: status = -30 [ 222.781971][ T8345] (syz.3.1307,8345,1):ocfs2_mkdir:661 ERROR: status = -30 [ 222.843054][ T8345] (syz.3.1307,8345,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 222.872103][ T8345] (syz.3.1307,8345,1):ocfs2_get_suballoc_slot_bit:2748 ERROR: invalid inode 2 requested [ 222.905360][ T8345] (syz.3.1307,8345,1):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -22 [ 222.927041][ T8345] (syz.3.1307,8345,1):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -22 [ 222.938250][ T4231] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 222.947335][ T8345] (syz.3.1307,8345,0):ocfs2_test_inode_bit:2896 ERROR: status = -22 [ 223.027346][ T4228] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 223.171891][ T4194] ocfs2: Unmounting device (7,3) on (node local) [ 223.187304][ T4231] usb 9-1: Using ep0 maxpacket: 16 [ 223.307769][ T4231] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.332541][ T4231] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.382604][ T4231] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 3328, setting to 1024 [ 223.397743][ T4228] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.419162][ T4228] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.453362][ T4231] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 223.474457][ T4228] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 223.505429][ T4231] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.528723][ T4228] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.648771][ T4231] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 223.668294][ T4231] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 223.676557][ T4231] usb 9-1: Manufacturer: syz [ 223.702917][ T4231] usb 9-1: config 0 descriptor?? [ 223.738056][ T4228] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 223.738085][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.795160][ T4228] usb 7-1: Product: syz [ 223.813590][ T4228] usb 7-1: Manufacturer: syz [ 223.833301][ T4228] usb 7-1: SerialNumber: syz [ 223.908901][ T4228] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 223.946357][ T4228] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 224.013162][ T4228] usbserial_generic 7-1:1.0: generic converter detected [ 224.066092][ T4228] usb 7-1: generic converter now attached to ttyUSB0 [ 224.127563][ T4231] rc_core: IR keymap rc-hauppauge not found [ 224.133524][ T4231] Registered IR keymap rc-empty [ 224.164459][ T4228] usb 7-1: USB disconnect, device number 9 [ 224.180141][ T4231] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 224.196976][ T4228] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 224.228259][ T4228] usbserial_generic 7-1:1.0: device disconnected [ 224.258340][ T4231] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 224.309946][ T4231] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 224.360929][ T4231] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input17 [ 224.457820][ T4231] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 224.497748][ T4231] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 224.537850][ T4231] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 224.577674][ T4231] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 224.617686][ T4231] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 224.657754][ T4231] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 224.697811][ T4231] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 224.759852][ T4231] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 224.932869][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1341'. [ 225.685029][ T8443] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1347'. [ 225.757253][ T8429] loop6: detected capacity change from 0 to 131072 [ 225.764521][ T4231] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 225.771607][ C1] net_ratelimit: 1644 callbacks suppressed [ 225.827882][ T4231] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 225.834574][ T8429] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 225.842998][ T8429] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 225.852431][ T8429] F2FS-fs (loop6): invalid crc value [ 225.889033][ T4231] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 225.897073][ T4231] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 225.929367][ T4231] usb 9-1: USB disconnect, device number 2 [ 225.936911][ T8429] F2FS-fs (loop6): Found nat_bits in checkpoint [ 226.018234][ T8429] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 226.026420][ T8429] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 226.054025][ T8429] F2FS-fs (loop6): inaccessible inode: 1, run fsck to repair [ 226.064202][ T8429] F2FS-fs (loop6): inaccessible inode: 1, run fsck to repair [ 226.521750][ T8437] loop9: detected capacity change from 0 to 40427 [ 226.578165][ T8437] F2FS-fs (loop9): Fix alignment : internally, start(4096) end(16896) block(12288) [ 226.598017][ T8437] F2FS-fs (loop9): invalid crc value [ 226.668174][ T8437] F2FS-fs (loop9): Found nat_bits in checkpoint [ 226.760351][ T8467] loop8: detected capacity change from 0 to 16 [ 226.819744][ T6186] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 226.851474][ T8467] erofs: (device loop8): mounted with root inode @ nid 36. [ 226.859636][ T6186] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 226.886331][ T8467] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 589823 of nid 36 [ 226.897910][ T8467] erofs: (device loop8): z_erofs_readahead: readahead error at page 143 @ nid 36 [ 226.907195][ T8467] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 585727 of nid 36 [ 226.907277][ T8467] erofs: (device loop8): z_erofs_readahead: readahead error at page 142 @ nid 36 [ 226.907297][ T8467] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 581631 of nid 36 [ 226.907316][ T8467] erofs: (device loop8): z_erofs_readahead: readahead error at page 141 @ nid 36 [ 226.907331][ T8467] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 577535 of nid 36 [ 226.907347][ T8467] erofs: (device loop8): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 226.907364][ T8467] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 573439 of nid 36 [ 226.928752][ T8467] erofs: (device loop8): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 226.947186][ T8467] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 569343 of nid 36 [ 226.947214][ T8467] erofs: (device loop8): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 226.947236][ T8467] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 565247 of nid 36 [ 226.947256][ T8467] erofs: (device loop8): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 226.947275][ T8467] erofs: (device loop8): z_erofs_map_blocks_iter: unknown type 3 @ offset 561151 of nid 36 [ 226.947295][ T8467] erofs: (device loop8): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 226.947637][ T8467] erofs: (device loop8): z_erofs_readahead: readahead error at page 111 @ nid 36 [ 226.967832][ T8467] erofs: (device loop8): z_erofs_readahead: readahead error at page 110 @ nid 36 [ 226.967859][ T8467] erofs: (device loop8): z_erofs_readahead: readahead error at page 109 @ nid 36 [ 227.006880][ T8467] erofs: (device loop8): z_erofs_readahead: readahead error at page 108 @ nid 36 [ 227.006908][ T8467] erofs: (device loop8): z_erofs_readahead: readahead error at page 107 @ nid 36 [ 227.006929][ T8467] erofs: (device loop8): z_erofs_readahead: readahead error at page 106 @ nid 36 [ 227.009142][ T8467] attempt to access beyond end of device [ 227.009142][ T8467] loop8: rw=524288, want=13478624064, limit=16 [ 227.028433][ T8467] attempt to access beyond end of device [ 227.028433][ T8467] loop8: rw=524288, want=13478624072, limit=16 [ 227.056326][ T8467] attempt to access beyond end of device [ 227.056326][ T8467] loop8: rw=524288, want=14550774184, limit=16 [ 227.074862][ T8467] attempt to access beyond end of device [ 227.074862][ T8467] loop8: rw=524288, want=14550774192, limit=16 [ 227.102974][ T8467] attempt to access beyond end of device [ 227.102974][ T8467] loop8: rw=524288, want=13716630408, limit=16 [ 227.128232][ T8467] attempt to access beyond end of device [ 227.128232][ T8467] loop8: rw=524288, want=13716630416, limit=16 [ 227.152010][ T8467] attempt to access beyond end of device [ 227.152010][ T8467] loop8: rw=524288, want=790416, limit=16 [ 227.175354][ T8467] attempt to access beyond end of device [ 227.175354][ T8467] loop8: rw=524288, want=790424, limit=16 [ 227.197878][ T8467] attempt to access beyond end of device [ 227.197878][ T8467] loop8: rw=524288, want=104, limit=16 [ 227.208936][ T8467] attempt to access beyond end of device [ 227.208936][ T8467] loop8: rw=524288, want=112, limit=16 [ 227.232685][ T8437] F2FS-fs (loop9): recover fsync data on readonly fs [ 227.349275][ T8437] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 227.578157][ T8437] F2FS-fs (loop9): Try to recover all the superblocks, ret: 0 [ 227.597469][ T4228] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 227.600278][ T8483] FAULT_INJECTION: forcing a failure. [ 227.600278][ T8483] name failslab, interval 1, probability 0, space 0, times 0 [ 227.676840][ T8483] CPU: 0 PID: 8483 Comm: syz.8.1362 Not tainted syzkaller #0 [ 227.684385][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 227.694566][ T8483] Call Trace: [ 227.697891][ T8483] [ 227.700845][ T8483] dump_stack_lvl+0x188/0x250 [ 227.705561][ T8483] ? show_regs_print_info+0x20/0x20 [ 227.710891][ T8483] ? load_image+0x410/0x410 [ 227.715716][ T8483] ? __might_sleep+0xf0/0xf0 [ 227.720542][ T8483] ? __lock_acquire+0x7d40/0x7d40 [ 227.725610][ T8483] should_fail+0x383/0x4b0 [ 227.730056][ T8483] should_failslab+0x5/0x20 [ 227.730081][ T8483] slab_pre_alloc_hook+0x51/0xc0 [ 227.730101][ T8483] ? alloc_vfsmnt+0x9d/0x450 [ 227.730124][ T8483] __kmalloc_track_caller+0x69/0x330 [ 227.730142][ T8483] ? alloc_vfsmnt+0x9d/0x450 [ 227.730170][ T8483] kstrdup_const+0x51/0x90 [ 227.730189][ T8483] alloc_vfsmnt+0x9d/0x450 [ 227.740525][ T8483] clone_mnt+0x6b/0xcd0 [ 227.740552][ T8483] ? do_raw_spin_unlock+0x11d/0x230 [ 227.740578][ T8483] copy_tree+0x3ce/0x7e0 [ 227.750920][ T8483] ? copy_mnt_ns+0x16b/0x980 [ 227.750951][ T8483] copy_mnt_ns+0x16b/0x980 [ 227.750971][ T8483] ? create_new_namespaces+0x34/0x700 [ 227.750993][ T8483] ? kmem_cache_alloc+0x189/0x280 [ 227.751017][ T8483] create_new_namespaces+0xd3/0x700 [ 227.751038][ T8483] ? bpf_lsm_capable+0x5/0x10 [ 227.760715][ T8483] ? security_capable+0x85/0xb0 [ 227.760753][ T8483] unshare_nsproxy_namespaces+0x116/0x160 [ 227.760780][ T8483] ksys_unshare+0x4f6/0x8e0 [ 227.760802][ T8483] ? __lock_acquire+0x7d40/0x7d40 [ 227.769906][ T8483] ? sighand_ctor+0x40/0x40 [ 227.769931][ T8483] ? lock_chain_count+0x20/0x20 [ 227.769958][ T8483] ? syscall_enter_from_user_mode+0x21/0x70 [ 227.779487][ T8483] __x64_sys_unshare+0x34/0x40 [ 227.779515][ T8483] do_syscall_64+0x4c/0xa0 [ 227.779535][ T8483] ? clear_bhb_loop+0x30/0x80 [ 227.779557][ T8483] ? clear_bhb_loop+0x30/0x80 [ 227.779586][ T8483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.789481][ T8483] RIP: 0033:0x7faf1d554159 [ 227.789505][ T8483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.789521][ T8483] RSP: 002b:00007faf1b7ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 227.800736][ T8483] RAX: ffffffffffffffda RBX: 00007faf1d7dbfa0 RCX: 00007faf1d554159 [ 227.800753][ T8483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 227.800767][ T8483] RBP: 00007faf1d5eb06b R08: 0000000000000000 R09: 0000000000000000 [ 227.800781][ T8483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.810642][ T8483] R13: 00007faf1d7dc038 R14: 00007faf1d7dbfa0 R15: 00007fff83082a38 [ 227.810679][ T8483] [ 227.951344][ T4231] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 228.278446][ T4228] usb 8-1: Using ep0 maxpacket: 8 [ 228.398429][ T4228] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.437388][ T4228] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 228.437417][ T4228] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.484392][ T4228] usb 8-1: config 0 descriptor?? [ 228.527963][ T4231] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 228.551044][ T4231] usb 7-1: config 0 interface 0 has no altsetting 0 [ 228.674157][ T8500] loop3: detected capacity change from 0 to 512 [ 228.727654][ T4231] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 228.753035][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 228.764193][ T8500] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 228.776627][ T4228] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 228.787270][ T4231] usb 7-1: Product: syz [ 228.788699][ T8500] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1367: corrupted in-inode xattr [ 228.791458][ T4231] usb 7-1: Manufacturer: syz [ 228.811465][ T4231] usb 7-1: SerialNumber: syz [ 228.832653][ T4231] usb 7-1: config 0 descriptor?? [ 228.852527][ T8500] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1367: couldn't read orphan inode 15 (err -117) [ 228.882597][ T4231] usb 7-1: selecting invalid altsetting 0 [ 228.905388][ T8500] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,max_dir_size_kb=0x0000000000000005,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 229.030193][ T4228] usb 8-1: USB disconnect, device number 5 [ 229.037560][ C1] iowarrior 8-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 229.212999][ T8481] usb 7-1: selecting invalid altsetting 0 [ 229.239567][ T8481] usb 7-1: 0:0: usb_set_interface failed (-22) [ 229.269427][ T4231] usb 7-1: USB disconnect, device number 10 [ 229.457721][ T8514] device syzkaller1 entered promiscuous mode [ 229.618377][ T8521] loop8: detected capacity change from 0 to 164 [ 229.747466][ T4590] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 229.802062][ T8523] loop7: detected capacity change from 0 to 8192 [ 230.140432][ T4590] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 230.161705][ T4590] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 230.269326][ T8542] bridge0: port 3(macvlan1) entered blocking state [ 230.308268][ T8542] bridge0: port 3(macvlan1) entered disabled state [ 230.354381][ T8542] device macvlan1 entered promiscuous mode [ 230.368086][ T4590] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 230.382867][ T4590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.387221][ T8542] bridge0: port 3(macvlan1) entered blocking state [ 230.398157][ T8542] bridge0: port 3(macvlan1) entered forwarding state [ 230.409725][ T4590] usb 4-1: Product: syz [ 230.414049][ T4590] usb 4-1: Manufacturer: syz [ 230.419536][ T4590] usb 4-1: SerialNumber: syz [ 230.430466][ T4590] usb 4-1: config 0 descriptor?? [ 230.455552][ T8543] device macvlan1 left promiscuous mode [ 230.462001][ T8518] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 230.467754][ T8543] bridge0: port 3(macvlan1) entered disabled state [ 230.471180][ T8518] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 230.756446][ T8518] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 230.826463][ T8518] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 230.845946][ T8563] netlink: 1355 bytes leftover after parsing attributes in process `syz.8.1387'. [ 231.077158][ C1] net_ratelimit: 122 callbacks suppressed [ 231.282672][ T8582] loop6: detected capacity change from 0 to 4096 [ 231.307544][ T4590] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 231.337027][ T8582] EXT4-fs (loop6): Test dummy encryption mode enabled [ 231.349772][ T8582] EXT4-fs (loop6): Ignoring removed orlov option [ 231.365905][ T8582] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x00000000000000b6,noinit_itable,orlov,,errors=continue. Quota mode: writeback. [ 231.457751][ T4269] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 231.502804][ T8582] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 231.517626][ T6186] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 231.607453][ T8582] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 231.698041][ T9] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 231.717257][ T4269] usb 9-1: Using ep0 maxpacket: 8 [ 231.750092][ T4590] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 231.773677][ T4590] usb 4-1: USB disconnect, device number 21 [ 231.807668][ T6186] usb 10-1: Using ep0 maxpacket: 16 [ 231.877953][ T4269] usb 9-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 231.892743][ T4269] usb 9-1: config 0 interface 0 has no altsetting 0 [ 231.901028][ T4269] usb 9-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 231.911955][ T4269] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.923345][ T4269] usb 9-1: config 0 descriptor?? [ 231.947523][ T6186] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.959710][ T6186] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.975148][ T6186] usb 10-1: config 0 interface 0 has no altsetting 0 [ 231.982046][ T6186] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 231.991516][ T6186] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.008904][ T6186] usb 10-1: config 0 descriptor?? [ 232.429774][ T4269] lenovo 0003:17EF:60B5.0014: unknown main item tag 0x0 [ 232.437071][ T4269] lenovo 0003:17EF:60B5.0014: unknown main item tag 0x0 [ 232.451366][ T4269] lenovo 0003:17EF:60B5.0014: unknown main item tag 0x0 [ 232.461274][ T4269] lenovo 0003:17EF:60B5.0014: unknown main item tag 0x0 [ 232.468508][ T4269] lenovo 0003:17EF:60B5.0014: unknown main item tag 0x0 [ 232.475483][ T4269] lenovo 0003:17EF:60B5.0014: unknown main item tag 0x0 [ 232.482700][ T4269] lenovo 0003:17EF:60B5.0014: unknown main item tag 0x6 [ 232.493569][ T6186] hid-multitouch 0003:0EEF:72C4.0015: No inputs registered, leaving [ 232.503051][ T4269] lenovo 0003:17EF:60B5.0014: collection stack underflow [ 232.516230][ T6186] hid-multitouch 0003:0EEF:72C4.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.9-1/input0 [ 232.530242][ T4269] lenovo 0003:17EF:60B5.0014: item 0 4 0 12 parsing failed [ 232.538151][ T4269] lenovo 0003:17EF:60B5.0014: hid_parse failed [ 232.544361][ T4269] lenovo: probe of 0003:17EF:60B5.0014 failed with error -22 [ 232.790659][ T4228] usb 10-1: USB disconnect, device number 4 [ 236.277222][ C1] net_ratelimit: 106 callbacks suppressed [ 241.477211][ C1] net_ratelimit: 93 callbacks suppressed