last executing test programs: 2m43.114010546s ago: executing program 2 (id=251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) 2m42.786537855s ago: executing program 2 (id=256): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x140d, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x10008000}, 0x20000011) 2m42.442747385s ago: executing program 2 (id=260): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000002000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m41.82995921s ago: executing program 2 (id=266): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x208810, &(0x7f0000000100), 0xff, 0x4c4, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x104001, 0x0, 0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m41.352016208s ago: executing program 2 (id=270): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x100000000000f7) read$watch_queue(r1, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r0) 2m40.843453857s ago: executing program 2 (id=276): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xfff, 0x4b, 0x8006}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m40.509660437s ago: executing program 32 (id=276): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xfff, 0x4b, 0x8006}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m21.414222158s ago: executing program 0 (id=377): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f00000006c0)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@lazytime}, {@noquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0xa0180, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000100)={0x8003, 0x1000, 0x2000, 0x0, 0x0, 0x0, 0x2401}) 2m20.801335044s ago: executing program 0 (id=382): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000"], 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) 2m20.1809601s ago: executing program 0 (id=387): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) 2m19.805770161s ago: executing program 0 (id=389): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file1\x00', 0x30008c0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x11, 0x301, &(0x7f0000000980)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000024c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1bd) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84026, 0x0) 2m19.196688676s ago: executing program 0 (id=394): socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r1, 0x0, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2m18.664539857s ago: executing program 0 (id=399): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) close(r0) 2m18.335822026s ago: executing program 33 (id=399): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) close(r0) 1m1.392370667s ago: executing program 1 (id=810): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) writev(r2, &(0x7f00000008c0)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1) 1m0.331785758s ago: executing program 1 (id=819): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1, 0xa0008000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x3, 0xc, 0x7, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000001c0)={r1}) 1m0.000611837s ago: executing program 1 (id=820): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 58.460391565s ago: executing program 1 (id=829): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nobh}, {@nodiscard}]}, 0x3, 0x45c, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x200810, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 57.812823993s ago: executing program 1 (id=836): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0xfffffffd, 0x1000, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x890) 57.225385367s ago: executing program 1 (id=841): futex(0x0, 0x7, 0x1, 0x0, &(0x7f00000000c0)=0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 56.754282924s ago: executing program 34 (id=841): futex(0x0, 0x7, 0x1, 0x0, &(0x7f00000000c0)=0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 30.259353953s ago: executing program 7 (id=973): r0 = memfd_create(&(0x7f0000000080)='-B\xd5\x9appp\xf0\x00\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}\x00\x10\x00\x00\x00\x00\x00\x00\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x11\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) r1 = dup(r0) r2 = fanotify_init(0x10, 0x2) fanotify_mark(r2, 0x1, 0x103a, r1, 0x0) ftruncate(r1, 0x6) sendfile(r1, r0, 0x0, 0x8001) 29.947040511s ago: executing program 7 (id=976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000b40)={@val={0x0, 0x8864}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x36, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @multicast1}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x9, 0x0, 0x4}}}}}}}, 0x3e) 29.316576948s ago: executing program 7 (id=981): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') r1 = fanotify_init(0x4, 0x1000) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000380)=""/184, 0xb8}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000740)=""/4096, 0x1000) 28.911653111s ago: executing program 7 (id=986): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x4000, &(0x7f0000000e40)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB=',fsmagic=0x0000000000000002,smackfsf^oor=smackfstrans-ute,fowner>', @ANYBLOB="d4199c3f003c5c8d6d222e24bfdda0389fe9ebc4333e5d9521a6cc631f653d174fb504401934b83a72449268d54cd62dbbb66d7ba1b35073e60bf699ea6cb1b5923e3a3d5e51423a7c1a13920aea8e6d3c7d53f4aa34acbe0b78df03569d0b620d54f96b33fd4895161524abc937b9d619a3add1c3b57ad5124502de88fe8f0e436f04aded9c4f7b60876d2ac9caa8502b7faa4fe85e7819540dabf8e44ccdd382e5292164879e30f5b039e5f2314adff12c154c627fabadc824eb6d2fc48d1bc75a9dd2589e2c3324cd33f0a8508f6d4a899b6e8b45fec164", @ANYRES64=0x0, @ANYBLOB="2c736d61636b6673747261736d7574653d001c0b235ffdce27803854a81c498e5bc58fdfc2e25738bee597df2c00"/55], 0x2, 0xc2d, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f00000002c0)='=', 0x1, 0xfecc) r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 27.54871128s ago: executing program 7 (id=991): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f0000000000)={[{@norecovery}, {@order_relaxed}, {}, {@order_relaxed}, {@nobarrier}, {@errors_continue}, {@nobarrier}, {@order_relaxed}], [], 0x2c}, 0x3, 0xeec, &(0x7f0000000f40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x40403, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) syz_mount_image$exfat(0x0, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1380443, 0x0, 0x3, 0x0, &(0x7f0000000000)) 26.15544437s ago: executing program 7 (id=995): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) 15.130501816s ago: executing program 4 (id=1037): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x141241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400006000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001042022eb"], 0x7a) 14.532563121s ago: executing program 4 (id=1043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x28, r1, 0x1, 0x70bd09, 0xa5dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x4003f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40080a4}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) 14.044617129s ago: executing program 4 (id=1046): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d825915303d6000"}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x40) pselect6(0x40, &(0x7f0000000100)={0x2, 0x8, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, &(0x7f0000000ac0)={0x1d, 0x2, 0x0, 0x0, 0x1000000802, 0x0, 0x4000000000000000, 0x6}, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 12.836377219s ago: executing program 4 (id=1051): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYRES64=r1, @ANYRES8=r3, @ANYRES16=r1, @ANYRES64=r1, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fc, &(0x7f0000002a80)="$eJzs3AuUjlXbOPB97b1vxjTpaZLDsK993TxpsE2S5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDR5pUmSkJCw/0vv+356v97v6/3W2/+z1jfXb629Zl9zP9f1XPdcs+a572eteb7rOapei/q1mxGR+LfAX7+kCCFihBDDhBDXCSECIUSl+Erxl48XUJDy7z0J+3M9nH61O2BXE88/b+P55208/7yN55+38fzzNp5/3sbzz9t4/ozlZdvnFLueV95d/P5/Xsav//+H5Jaf/NXG8jf2+h+k8PzzNp5/3sbzz9t4/nkbzz9v4/n/31frvznG88/beP6M5WVX+/1nXld3Xe3fP8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjecM5f4UWQvx9f7X7YowxxhhjjDHG2J/H57/aHTDGGGOMMcYYY+z/PxBSKKFFIPKJ/CJGFBCx4hoRJ64VBcV1IiKuF/HiBlFI3CgKiyKiqCgmEkRxUUIYgcIKEqEoKUqJqLhJlBY3i0RRRpQV5YQT5UWSuEVUELeKiuI2UUncLiqLO0QVUVVUE9XFnaKGuEvUFLVEbXG3qCPqinqivrhHNBD3iobiPtFI3C8aiwdEE/GgaCoeEs3Ew6K5eES0EI+KluIx0Uq0Fm1EW9Hut/l98/+L+S+JvuJl0U/0FyligBgoXhGDxGAxRAwVw8SrYrh4TYwQr4tUMVKMEm+I0eJNMUa8JcaKcWK8eFtMEBPFJDFZTBFTRZp4R0wT74rp4j0xQ8wUs8RskS7miLnifTFPzBcLxAdiofhQLBKLxRKxVGSIj0SmWCayxMdiufhEZIsVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLT8UOsVPsErvFHrFX7BOfif3ic3FAfCFyxJf/w/yz/ym/FwgQIEGCBg35IB/EQAzEQizEQRwUhIIQgQjEQzwUgkJQGApDUSgKCZAAJaAEICAQEJSEkhCFKJSG0pAIiVAWyoIDB0mQBBXgVqgIFaESVILKUBmqQFWoCtWhOtSAGlATakJtqA11oA7Ug3pwD9wD90JDaAiNoBE0hsbQBJpAU2gKzaAZNIfm0AJaQEtoCa2gFbSBNtAO2kF7aA8doAN0gk7QGTpDF+gCyZAMXaErdINu0B26Qw/oAT2hJ/SC3tAbXoKX4GV4GfpDHTkABsJAGASDYAgMhaHwKgyH1+A1eB1SYSSMgjfgDXgTxsAZGAvjYDyMhxpyIkyCyUByKqRBGkyDaTAdpsMMmAkzYTakwxyYC3NhHsyH+fABLIQP4UNYDIthKWRABmTCMsiCLFgOZyEbVsBKWAWrYQ2shnWwHtbBRtgEG2ELbIFtsA0+hU9hJ+yE3bAb9sJe+Aw+g8/hc0iFHMiBg3AQDsEhOAyHIRdy4QgcgaNwFI7BMTgOx+EEnIRTcBJOw2k4A2fhHJyD83AeLsALCd8031tmQ6qQl2mpZT6ZT8bIGBkrY2WcjJMFZUEZkREZL+NlIVlIFpaFZVFZVCbIBFlClpAoUZIMZUlZUkZlVJaWpWWiTJRlZVnppJNJMklWkBVkRVlRVpK3y8ryDllFVpUdXXVZXdaQnVxNWUvWlrVlHVlX1pP1ZX3ZQDaQDWVD2Ug2ko1lY9lEPiibygEwBB6WlyfTQo6ElnIUtJKtZRvZVr4Jj8v2cgx0kB1lJ/mkHAdjoYts75LlM7KrnATd5HNyMjwve8ip0FO+KHvJ3rKPfEn2lR1cP9lfzoABcqCcDYPkYDlEDpXzoK68PLF68nWZKkfKUfINuRTelGPkW3KsHCfHy7flBDlRTpKT5RQ5VabJd+Q0+a6cLt+TM+RMOUvOlulyjpwr35fz5Hy5QH4gF8oP5SK5WC6RS2WG/EhmymUyS34sl8tPZLZcIVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKbXK7/FTukDvlLrlb7pF75T75mdwvP5cH5BcyR34pD8q/yEPyK3lYfi1z5TfyiPxWHpXfyWPye3lc/iBPyJPylPxRnpY/yTPyrDwnf5bn5S/ygrwoL0kvhQIllVJaBSqfyq9iVAEVq65RcepaVVBdpyLqehWvblCF1I2qsCqiiqpiKkEVVyWUUaisIhWqkqqUiqqbVGl1s0pUZVRZVU45VV4lqVtUBXWrqqhuU5XU7aqyukNVUVVVNVVd3alqqLtUTVVL1VZ3qzqqrqqn6qt7VAN1r2qo7lON1P2qsXpANVEPqqbqIdVMPayaq0dUC/WoaqkeU61Ua9VGtVXt1OOqvXpCdVAdVSf1pOqsnlJd1NMqWT2juqpnVTf1nOqunlc91Auqp3pR9VK9VR91UV1SXvVT/VWKGqAGqlfUIDVYDVFD1TD1qhquXlMj1OsqVY1Uo9QbarR6U41Rb6mxapwar95WE9RENUlNVlPUVJWm3lHT1LtqunpPzVAz1Sw1W6WrOWrI3yot+Bfy3/0n+SN+ffZtarv6VO1QO9UutVvtUXvVPrVP7Vf71QF1QOWoHHVQHVSH1CF1WB1WuSpXHVFH1FF1VB1Tx9RxdVydUCfVz+pHdVr9pM6os+qs+lmdV+fVhb/9DIQGLbXSWgc6n86vY3QBHauv0XH6Wl1QX6cj+nodr2/QhfSNurAuoovqYjpBF9cltNGorSYd6pK6lI7qm3RpfbNO1GV0WV1OO11eJ+lb/u38P+qvnW6n2+v2uoPuoDvpTrqz7qy76C46WSfrrrqr7qa76e66u+6he+ieuqfupXvpPrqP7qv76n66n07RKXqgfkUP0oP1ED1UD9Ov6uF6uB6hR+hUnapH6VF6tB6tx+gxeqweq8fr8XqCnqAn6Ul6ip6i03Sanqan6el6up6hZ+hZepZO1+l6rp6r5+l5eoFeoBfqhXqRXqSX6CU6Q2foTJ2ps3SWXq6X62y9Qq/Qq/QqvUav0ev0Or1Bb9Cb9Ca9RW/R2Xq73q536B16l96l9+g9ep/ep/fr/fqAPqBzdI4+qA/qQ/qQPqwP61ydq4/oI/qoPqqP6WP6uD6uT+gT+pQ+pU/r0/qMPqPP6XP6vD6vL+gL+pK+dPmyL5CBDHSgg3xBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEYAIMbEBBGJQMSgXR4KagdHBzkBiUCcoG5QIXlA+SgluCCsGtQcXgtqBScHtQObgjqBJUDaoF1YM7gxrBXUHNoFZQO7g7qBPUDeoF9YN7ggbBvUHD4L6gUXB/0Dh4IGgSPBg0DR4KmgUPB82DR4IWwaNBy+CxoFXQOmgTtA3a/an1vT9T5AnXz/Q3KWaAGWheMYPMYDPEDDXDzKtmuHnNjDCvm1Qz0owyb5jR5k0zxrxlxppxZrx520wwE80kM9lMMVNNmnnHTDPvmunmPTPDzDSzzGyTbuaYueZ9M8/MNwvMB2ah+dAsMovNErPUZJiPTKZZZrLMx2a5+cRkmxVmpVllVps1Zq1ZZ9abDWaj2WQ2my1mq9lmtptPzQ6z0+wyu80es9fsM5+Z/eZzc8B8YXLMl+ag+Ys5ZL4yh83XJtd8Y46Yb81R8505Zr43x80P5oQ5aU6ZH81p85M5Y86ac+Znc978Yi6Yi+aS8Zcv7i+/vKNGjfkwH8ZgDMZiLMZhHBbEghjBCMZjPBbCQlgYC2NRLIoJmIAlsAReRkhYEktiFKNYGktjIiZiWSyLDh0mYRJWwApYEStiJayElbEyVsEqWA2r4Z14J96Fd2EtrIV3491YF+tifayPDbABNsSG2AgbYWNsjE2wCTbFptgMm2FzbI4tsAW2xJbYClthG2yD7bAdtsf22AE7YCfshJ2xM3bBLpiMydgVu2I37IbdsTv2wB7YE3tiL+yFfbAP9sW+2A/7YQqm4EAciINwEA7BITgMh+FwHI4jcASmYiqOwlE4GkfjGByDY3Ecjse3cQJOxEk4GafgVEzDNJyG03A6TscZOANn4SxMx3Sci3NxHs7DBbgAF+JCXISLcAkuwQzMwEzMxCzMwuW4HLMxG1fiSlyNq3EtrsX1uB434kbcjJtxK27F7bgdd+AO3IW7cA/uwX24D/fjfjyABzAHc/AgHsRDeAgP42HMxVw8gkfwKB7FY3gMj+NxPIEn8BSewtN4Gs/gGTyH5/A8/oIX8CJeQo8xVopYe42Ns9fagvY6G2ML2N/GRW0xm2CL2xLW2MK2yD/EaK1NtGVsWVvOOlveJtlbfhdXsVVtNVvd3mlr2Ltszd/FDey9tqG9zzay99v69p5/iBvbB2wT+6htah+zzWxr29y2tS3so7alfcy2sq1tG9vWdrZP2S72aZtsn7Fd7bO/izPtMrvebrAb7Sa7335uz9mf7VH7nT1vf7H9bH87zL5qh9vX7Aj7uk21I38Xj7dv2wl2op1kJ9spdurv4ll2tk23c+xc+76dZ+f/Ls6wH9mFNssusovtErv01/hyT1n2Y7vcfmKz7Qq70q6yq+0au9au+49eV9ktdqvdZvfZz+wOu9PusrvtHrv31/jyeRywX9gc+6U9Yr+1h+xX9rA9ZnPtN7/Gl8/vmP3eHrc/2BP2pD1lf7Sn7U/2jD376/lfPvcf7UV7yXorCEiSIk0B5aP8FEMFKJauoTi6lgrSdRSh6ymebqBCdCMVpiJUlIpRAhWnEmQIyRJRSCWpFEXpJipNN1MilaGyVI4clackuoUq0K1UkW6jSnQ7VaY7qApVpWpUne6kGnQX1aRaVJvupjpUl+pRfbqHGtC91JDuo0Z0PzWmB6gJPUhN6SFqRg9Tc3qEWtCj1JIeo1bUmtpQW2pHj1N7eoI6UEfqRE9SZ3qKutDTlEzPUFd6lrrRc9Sdnqce9AL1pBepF/WmPvQS9aWXqR/1pxQaQAPpFRpEg2kIDaVh9CoNp9doBL1OqTSSRtEbNJrepDH0Fo2lcTSe3qYJNJEm0WSaQlMpjd6hafQuTaf3aAbNpFk0m9JpDs2l92kezacF9AEtpA9pES2mJbSUMugjyqRllEUf03L6hLJpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpG2+lT2kE7aRftpj20l/bRZ7SfPqcD9AXl0Jd0kP5Ch+grOkxfUy59Q0foWzpK39Ex+p6O0w90gk7SKfqRTtNPdIbO0jn6mc7TL3SBLtIl8iRCCGWoQh0GYb4wfxgTFghjw2vCuPDasGB4XRgJrw/jwxvCQuGNYeGwSFg0LBYmhMXDEqEJMbQhhWFYMiwVRsObwtLhzWFiWCYsG5YLXVg+TApvCSuEt4YVw9vCSuHtYeXwjrBKWDV89P7q4Z1hjfCusGZYK6wd3h3WCeuG9cL64T1hg/DesGF4X9govD+sGD4QNgkfDJuGD4XNwofD5uEjYYvw0bBl+FjYKmwdtgnbhu3Cx8P24RNhh7Bj2Cl8MuwcPhV2CZ8Ok8Nnwq7hs394PCUcEA4MXwlfCb2/Ty2JLo1mRD+KZkaXRbOiH0eXRz+JZkdXRFdGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W9r59fOHDSKadd4PK5/C7GFXCx7hoX5651Bd11LuKud/HuBlfI3egKuyKuqCvmElxxV8IZh846cqEr6Uq5qLvJlXY3u0RXxpV15Zxz5V2Sa+vauXauvXvCdXAdXSf3pHvSPeWeck+7p90zrqt71nVzz7nu7nnXw73gXnAvul6ut+vjXnJ93cuun+vvUlyKG+gGukFukBvihrhhbpgb7oa7EW6ES3WpbpQb5Ua70W6MG+PGurFuvBvvJrgJbpKb5Ka4KS7Npblpbpqb7qa7GW6Gm+VmuXSX7ua6uW6em+cWuAVuYeJCt8gtckvcEpfhMlymy3RZLsstd8tdtst2K91Kt9qtdmvdWrferXcb3Ua32W12W91Wt91tdzvcDrfL7XJ73B63z+1z+91+d8AdcDkuxx10B90hd8gddl+7XPeNO+K+dUfdd+6Y+94ddz+4E+6kO+V+dKfdT+6MO+vOuZ/defeLu+AuukvOu7TIO5FpkXcj0yPvRWZEZkZmRWZH0iNzInMj70fmReZHFkQ+iCyMfBhZFFkcWRJZGsmIfBTJjCyLZEU+jiyPfBLJjqyIrIysiqyOrIl4X3xH6Ev6Uj7qb/Kl/c0+0ZfxZX0573x5n+Rv8RX8rb6iv81X8rf7yv4OX8VX9dX8Y76Vb+3b+La+nX/ct/dP+A6+o+/kn/Sd/VO+i3/aJ/tnfFf/rO/mn/Pd/fO+h3/B9/Qv+l6+t+/jX/J9/cu+n+/vU/wAP9C/4gf5wX6IH+qH+Vf9cP+aH+Ff96l+pB/l3/Cj/Zt+jH/Lj/Xj/Hj/tp/gJ/pJfrKf4qf6NP+On+bf9dP9e36Gn+ln+dk+3c/xc/37fp6f7xf4D/xC/6Ff5Bf7JX6pz/Af+Uy/zGf5j/1y/4nP9iv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/ef+h1+p9/ld/s9fq/f5z/z+/3n/oD/wuf4L/1B/xd/yH/lD/uvfa7/xh/x3/qj/jt/zH/vj/sf/Al/0p/yP/rT/id/xp/15/zP/rz/xV/wF/0l/p81xhhjjLF/ifqD4wP+yffk39ZlA4UQ1+4slvufa24u/Nf9YJnQOSKEeKZ/z4f/vurUSdn698dmKxGUWiyEiFzJzyeuxCtEJ/GUSBYdRYV/2t9g2fs8/b5+Sspv6kdvFyL2Nzkx4kp8pf6t/0X9x58cn1k5PBf/39RfLERiqSs5BcSV+Er9iv9F/SLt/6D/Al+lCdHhNzlx4kp8pX6SeEI8K5L/4ZGMMcYYY4wxxthfDZbVuv/R/fPl+/MEfSUnv7gS/9H9OWOMMcYYY4wxxq6+53v3efrx5OSO3XnDG97w5j82V/svE2OMMcYYY+zPduWi/2p3whhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5V3/Gx8ndrXPkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLva/l8AAAD//zG6PD0=") r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 12.247880602s ago: executing program 4 (id=1052): setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 11.195462613s ago: executing program 4 (id=1055): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a11800150006", 0x21}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x20008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff002400007110360000000000950000"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 10.932874118s ago: executing program 35 (id=995): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) 10.254629388s ago: executing program 36 (id=1055): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a11800150006", 0x21}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x20008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff002400007110360000000000950000"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 7.77638177s ago: executing program 3 (id=1068): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 7.429019331s ago: executing program 3 (id=1070): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55c, &(0x7f00000006c0)="$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") r0 = memfd_create(&(0x7f0000000540)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xe4\x034|k\xab/\x14\xa7)t\xc7YE\xe2\xc8\x95HX\xa9\xff\x00\x00\x81p\xf3%Se\xe5\xd8U\xe3<\xf1\xb3\x9eG\xd9,U\xb1\x92o\xabs\xab\xee\x9cml9]*\xe8\xf1\x03\x00\x00\x00\x00\x00\x00\x00\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x04\x00\x00\x00\x00\x00\x00\x00\xbf3S\xef}\xfd\x16\xbc\xa5^\xff\xf5\x95\xd2q/\xc6\xca\x97\x9d?\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\x04\x00\x00\x00l5\xf3\xbe\" 6\r>\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbbm/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\t\xe2\rh\x8dsx\xaa!\x19\xdc\xdc\xcf\x0f\x9a\xa2o>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\x81\xe1c\xc5\xe6\x00\x00\x009\xcc\xd458\xd6(@\xab\xa9\x00'/322, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 6.632506536s ago: executing program 3 (id=1073): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x7, 0x0, 0x7, {0x4e23, 0x0, [0x0, 0x0, 0x7e], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20000193}, 0x40000) 6.153655694s ago: executing program 3 (id=1075): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/76}, 0x20) 5.929114547s ago: executing program 3 (id=1077): open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000002c0)) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 5.496311682s ago: executing program 3 (id=1079): add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 4.606191883s ago: executing program 6 (id=1082): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@hyper}, 0x1, 0x1, 0x7ff}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@any, 0x9}, 0x0, 0x2, 0x5}) 4.372115247s ago: executing program 6 (id=1083): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) 3.80284927s ago: executing program 6 (id=1084): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_to_bridge\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x2, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14084, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 3.479458369s ago: executing program 6 (id=1085): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 2.400135751s ago: executing program 5 (id=1090): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2.23707108s ago: executing program 5 (id=1091): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r0, &(0x7f0000002800)='%', 0x1, 0x48899, 0x0, 0x0) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000009440)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000023, 0x0) 2.07424722s ago: executing program 5 (id=1092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000683f01"], 0x80}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff362}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xd312e8ef87b9c662}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) 1.532179611s ago: executing program 5 (id=1093): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) 1.277246626s ago: executing program 5 (id=1094): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x0, 0x10, 0x1000000, 0xf, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.137504774s ago: executing program 5 (id=1095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xc, 0x2}, {0xffe0, 0x9}, {0xc, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 604.773694ms ago: executing program 6 (id=1096): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000100)=0x9) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x8) 0s ago: executing program 6 (id=1097): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0800cd0000000600740033008020090008021100000108021100000050"], 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): 184.367052][ T6487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.376976][ T4915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.388117][ T4915] usb 4-1: config 0 descriptor?? [ 184.397649][ T6487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.415688][ T34] usb 6-1: USB disconnect, device number 6 [ 184.418587][ T6510] EXT4-fs error (device loop4): ext4_iget_extra_inode:4756: inode #15: comm syz.4.600: corrupted in-inode xattr [ 184.513096][ T6510] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.600: couldn't read orphan inode 15 (err -117) [ 184.537035][ T6510] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 184.608131][ T6510] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.600: Logical block already allocated [ 184.771290][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 184.861318][ T4915] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 184.902329][ T4915] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 185.432915][ T4915] libceph: connect (1)[c::]:6789 error -101 [ 185.451602][ T6528] loop6: detected capacity change from 0 to 8192 [ 185.493254][ T4915] libceph: mon0 (1)[c::]:6789 connect error [ 185.517400][ T4917] libceph: connect (1)[c::]:6789 error -101 [ 185.550481][ T4917] libceph: mon0 (1)[c::]:6789 connect error [ 185.565781][ T4917] libceph: connect (1)[c::]:6789 error -101 [ 185.574114][ T4917] libceph: mon0 (1)[c::]:6789 connect error [ 185.750365][ T4916] usb 4-1: USB disconnect, device number 8 [ 185.867875][ T4917] libceph: connect (1)[c::]:6789 error -101 [ 185.876584][ T4917] libceph: mon0 (1)[c::]:6789 connect error [ 185.883401][ T4917] libceph: connect (1)[c::]:6789 error -101 [ 185.934203][ T4917] libceph: mon0 (1)[c::]:6789 connect error [ 186.004059][ T6530] ceph: No mds server is up or the cluster is laggy [ 186.044389][ T6533] ceph: No mds server is up or the cluster is laggy [ 186.476032][ T4916] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 186.686428][ T4916] usb 5-1: config 0 has no interfaces? [ 186.710033][ T4916] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 186.773186][ T4916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.841220][ T4916] usb 5-1: Product: syz [ 186.845702][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.855728][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.871982][ T4916] usb 5-1: Manufacturer: syz [ 186.900242][ T4916] usb 5-1: SerialNumber: syz [ 186.922249][ T4916] usb 5-1: config 0 descriptor?? [ 186.935410][ T4359] wlan1: Trigger new scan to find an IBSS to join [ 187.154184][ T6578] loop5: detected capacity change from 0 to 2048 [ 187.253325][ T6579] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.383074][ T6579] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 187.400730][ T6579] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 187.422781][ T6579] Remounting filesystem read-only [ 187.429170][ T5280] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 187.567048][ T6581] loop5: detected capacity change from 0 to 4096 [ 187.586118][ T6581] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 187.624803][ T6581] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 187.665690][ T6582] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.732093][ T6581] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 187.804176][ T6581] Remounting filesystem read-only [ 187.812337][ T6581] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 524288 [ 187.824429][ T6581] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=15) [ 187.864437][ T6581] NILFS (loop5): error -5 truncating bmap (ino=15) [ 187.962661][ T5280] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 188.159475][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.226377][ T6552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.828754][ T6552] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.838186][ T6552] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.864343][ T6552] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.873471][ T6552] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.377309][ T6601] input: syz1 as /devices/virtual/input/input11 [ 189.480193][ T6608] netlink: 'syz.6.624': attribute type 1 has an invalid length. [ 189.499475][ T4331] usb 5-1: USB disconnect, device number 13 [ 189.533124][ T6608] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.624'. [ 190.275953][ T6638] loop4: detected capacity change from 0 to 512 [ 190.353781][ T6638] EXT4-fs (loop4): orphan cleanup on readonly fs [ 190.508374][ T6638] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.631: bg 0: block 248: padding at end of block bitmap is not set [ 190.642509][ T6638] Quota error (device loop4): write_blk: dquota write failed [ 190.650188][ T6638] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 190.662031][ T6638] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.631: Failed to acquire dquot type 1 [ 190.683573][ T6638] EXT4-fs (loop4): 1 truncate cleaned up [ 190.696030][ T6638] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 190.744129][ T6638] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 190.809056][ T6638] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 0 [ 190.886331][ T6653] loop5: detected capacity change from 0 to 128 [ 190.905182][ T6651] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 191.131042][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 191.159821][ T6658] loop8: detected capacity change from 0 to 7 [ 191.219246][ T6658] Dev loop8: unable to read RDB block 7 [ 191.278540][ T6658] loop8: unable to read partition table [ 191.340478][ T6658] loop8: partition table beyond EOD, truncated [ 191.389550][ T6658] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 191.896612][ T5816] wlan1: Trigger new scan to find an IBSS to join [ 192.355126][ T6698] device hsr0 entered promiscuous mode [ 192.387094][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 192.432483][ T6698] device hsr_slave_0 left promiscuous mode [ 192.456528][ T6698] device hsr_slave_1 left promiscuous mode [ 192.819563][ T6698] device hsr0 left promiscuous mode [ 192.863221][ T5403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.161891][ T6675] loop1: detected capacity change from 0 to 32768 [ 193.174859][ T6705] loop5: detected capacity change from 0 to 32768 [ 193.342847][ T6705] XFS (loop5): Mounting V5 Filesystem [ 193.399660][ T6675] XFS (loop1): Mounting V5 Filesystem [ 193.566380][ T6705] XFS (loop5): Ending clean mount [ 193.594177][ T6705] XFS (loop5): Quotacheck needed: Please wait. [ 193.666246][ T6675] XFS (loop1): Ending clean mount [ 193.704422][ T4916] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 193.743271][ T6734] loop3: detected capacity change from 0 to 1024 [ 193.769176][ T6734] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 193.783828][ T6734] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 193.794991][ T6734] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 193.801479][ T6705] XFS (loop5): Quotacheck: Done. [ 193.810888][ T6734] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 193.854098][ T6675] XFS (loop1): Quotacheck needed: Please wait. [ 193.944630][ T4916] usb 7-1: Using ep0 maxpacket: 32 [ 193.956642][ T4916] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 194.018685][ T4916] usb 7-1: config 0 has no interface number 0 [ 194.037571][ T6675] XFS (loop1): Quotacheck: Done. [ 194.047679][ T5280] XFS (loop5): Unmounting Filesystem [ 194.094763][ T4916] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.158778][ T4916] usb 7-1: config 0 interface 85 has no altsetting 0 [ 194.227263][ T4916] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 194.260369][ T6738] loop4: detected capacity change from 0 to 512 [ 194.271152][ T4916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.293076][ T6738] EXT4-fs: Ignoring removed oldalloc option [ 194.301627][ T4916] usb 7-1: Product: syz [ 194.310623][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.322359][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.345378][ T4916] usb 7-1: Manufacturer: syz [ 194.350902][ T4916] usb 7-1: SerialNumber: syz [ 194.395464][ T4916] usb 7-1: config 0 descriptor?? [ 194.426423][ T6738] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 194.495109][ T6738] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.621806][ T4279] XFS (loop1): Unmounting Filesystem [ 194.642017][ T6728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.717169][ T6728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.799510][ T6743] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.653: bg 0: block 217: padding at end of block bitmap is not set [ 194.895276][ T6743] EXT4-fs (loop4): Remounting filesystem read-only [ 195.135075][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 195.163318][ T4916] appletouch 7-1:0.85: Geyser mode initialized. [ 195.173622][ T4916] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input12 [ 195.398144][ T4483] usb 7-1: USB disconnect, device number 4 [ 195.398175][ C1] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 195.645733][ T4483] appletouch 7-1:0.85: input: appletouch disconnected [ 196.687086][ T6749] loop4: detected capacity change from 0 to 32768 [ 196.804770][ T6749] JBD2: Ignoring recovery information on journal [ 197.072011][ T6749] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 197.152608][ T6783] netlink: 'syz.5.663': attribute type 4 has an invalid length. [ 197.503930][ T6790] loop6: detected capacity change from 0 to 4096 [ 197.611681][ T4271] ocfs2: Unmounting device (7,4) on (node local) [ 197.654627][ T6795] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.683867][ T6797] loop3: detected capacity change from 0 to 512 [ 197.833411][ T6797] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 197.894554][ T4276] Bluetooth: hci5: command 0x1003 tx timeout [ 197.904674][ T4269] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 197.914596][ T6797] UDF-fs: Scanning with blocksize 512 failed [ 198.128426][ T6797] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 198.264140][ T6797] UDF-fs: Scanning with blocksize 1024 failed [ 198.360413][ T6797] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 198.395246][ T6797] UDF-fs: Scanning with blocksize 2048 failed [ 198.456632][ T6797] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 198.524311][ T4483] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 198.555130][ T6797] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.740208][ T4483] usb 6-1: Using ep0 maxpacket: 32 [ 198.750529][ T4483] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 198.794015][ T4483] usb 6-1: config 0 has no interface number 0 [ 198.818969][ T4483] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.871505][ T4483] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 198.895969][ T4483] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.922013][ T4483] usb 6-1: Product: syz [ 198.933582][ T4483] usb 6-1: Manufacturer: syz [ 198.948395][ T4483] usb 6-1: SerialNumber: syz [ 198.976642][ T4483] usb 6-1: config 0 descriptor?? [ 199.014337][ T4483] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 199.046118][ T4483] em28xx 6-1:0.132: Video interface 132 found: [ 199.433185][ T4483] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 199.845296][ T4483] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 199.884312][ T4483] em28xx 6-1:0.132: board has no eeprom [ 200.124557][ T4483] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 200.142796][ T4483] em28xx 6-1:0.132: analog set to bulk mode. [ 200.192858][ T4483] usb 6-1: USB disconnect, device number 7 [ 200.214971][ T4483] em28xx 6-1:0.132: Disconnecting em28xx [ 200.231830][ T4331] em28xx 6-1:0.132: Registering V4L2 extension [ 200.254487][ T4484] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 200.476802][ T6852] loop4: detected capacity change from 0 to 256 [ 200.484372][ T4484] usb 2-1: Using ep0 maxpacket: 16 [ 200.492466][ T4484] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 200.523293][ T4484] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 200.552116][ T6852] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.575471][ T4484] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.584792][ T34] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 200.614524][ T6852] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 200.656994][ T4484] usb 2-1: config 1 interface 0 has no altsetting 0 [ 200.687564][ T6855] loop6: detected capacity change from 0 to 512 [ 200.697983][ T4484] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 200.723234][ T6852] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 200.768428][ T4484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.811045][ T4484] usb 2-1: Product: syz [ 200.841513][ T4484] usb 2-1: Manufacturer: syz [ 200.851657][ T4484] usb 2-1: SerialNumber: syz [ 200.858256][ T6855] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 200.925793][ T34] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 200.938586][ T6855] EXT4-fs (loop6): SIPHASH is not a valid default hash value [ 200.957267][ T34] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.999769][ T34] usb 4-1: Product: syz [ 201.004149][ T34] usb 4-1: Manufacturer: syz [ 201.084332][ T34] usb 4-1: SerialNumber: syz [ 201.139993][ T34] usb 4-1: config 0 descriptor?? [ 201.140410][ T4484] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 201.353843][ T4331] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 201.395509][ T4331] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 201.402767][ T4331] em28xx 6-1:0.132: No AC97 audio processor [ 201.494338][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 201.501489][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 201.508437][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 201.523292][ T4314] usb 2-1: USB disconnect, device number 10 [ 201.523398][ T6838] usblp0:failed reading printer status (-71) [ 201.555507][ T4331] usb 6-1: Decoder not found [ 201.560827][ T4331] em28xx 6-1:0.132: failed to create media graph [ 201.567696][ T4331] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 201.583950][ T4331] em28xx 6-1:0.132: Remote control support is not available for this card. [ 201.593734][ T4483] em28xx 6-1:0.132: Closing input extension [ 201.609159][ T4314] usblp0: removed [ 201.638335][ T4483] em28xx 6-1:0.132: Freeing device [ 201.700399][ T6871] netlink: 'syz.5.689': attribute type 3 has an invalid length. [ 202.275490][ T34] usb 4-1: non-Atmel transceiver xxxx00c4 [ 202.480487][ T34] usb 4-1: Firmware version (0.0) predates our first public release. [ 202.501368][ T34] usb 4-1: Please update to version 0.2 or newer [ 202.522272][ T34] usb 4-1: atusb_probe: initialization failed, error = -19 [ 202.565450][ T34] usb 4-1: USB disconnect, device number 9 [ 202.580421][ T6889] loop6: detected capacity change from 0 to 4096 [ 202.600495][ T6889] EXT4-fs: inline encryption not supported [ 202.624322][ T6889] EXT4-fs (loop6): Test dummy encryption mode enabled [ 202.661360][ T6889] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 202.680401][ T6889] System zones: 0-5 [ 202.713602][ T6889] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 202.998520][ T5733] EXT4-fs (loop6): unmounting filesystem. [ 203.389257][ T6886] loop4: detected capacity change from 0 to 32768 [ 203.584962][ T6886] XFS (loop4): Mounting V5 Filesystem [ 203.627905][ T6914] loop5: detected capacity change from 0 to 512 [ 203.730321][ T6914] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 203.757820][ T6886] XFS (loop4): Ending clean mount [ 203.816680][ T6914] EXT4-fs (loop5): invalid journal inode [ 203.823047][ T6914] EXT4-fs (loop5): can't get journal size [ 203.870978][ T6886] XFS (loop4): Quotacheck needed: Please wait. [ 203.911400][ T6914] EXT4-fs (loop5): 1 truncate cleaned up [ 203.944397][ T6914] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 204.112564][ T6886] XFS (loop4): Quotacheck: Done. [ 204.129762][ T6914] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 3 (only 1 groups) [ 204.345202][ T4271] XFS (loop4): Unmounting Filesystem [ 204.516266][ T5280] EXT4-fs (loop5): unmounting filesystem. [ 204.793369][ T6948] loop1: detected capacity change from 0 to 2048 [ 204.927336][ T6948] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 205.009160][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 205.549762][ T6964] input: syz0 as /devices/virtual/input/input13 [ 205.603609][ T6940] loop3: detected capacity change from 0 to 32768 [ 205.835765][ T6940] XFS (loop3): Mounting V5 Filesystem [ 205.988526][ T6940] XFS (loop3): Ending clean mount [ 206.018702][ T6940] XFS (loop3): Quotacheck needed: Please wait. [ 206.209453][ T6940] XFS (loop3): Quotacheck: Done. [ 206.256816][ T26] audit: type=1800 audit(1770732275.400:106): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.708" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 206.333425][ T6962] loop6: detected capacity change from 0 to 32768 [ 206.422203][ T6962] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.716 (6962) [ 206.530625][ T6962] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.576772][ T6962] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 206.627176][ T6962] BTRFS info (device loop6): using free space tree [ 206.687371][ T6959] loop1: detected capacity change from 0 to 40427 [ 206.719207][ T6959] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 206.729662][ T6959] F2FS-fs (loop1): invalid crc value [ 206.752920][ T6959] F2FS-fs (loop1): Found nat_bits in checkpoint [ 206.916371][ T6959] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 207.010336][ T4275] XFS (loop3): Unmounting Filesystem [ 207.036374][ T6962] BTRFS info (device loop6): enabling ssd optimizations [ 207.137315][ T26] audit: type=1800 audit(1770732276.280:107): pid=6962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.716" name="bus" dev="loop6" ino=263 res=0 errno=0 [ 207.326704][ T6959] syz.1.715: attempt to access beyond end of device [ 207.326704][ T6959] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 207.450108][ T7021] loop4: detected capacity change from 0 to 4096 [ 207.538131][ T5733] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.582780][ T4279] syz-executor: attempt to access beyond end of device [ 207.582780][ T4279] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 207.587799][ T7024] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.620084][ T26] audit: type=1800 audit(1770732276.760:108): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.724" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 207.992208][ T7021] syz.4.724 (7021) used greatest stack depth: 19192 bytes left [ 208.548413][ T7029] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.646703][ T7029] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 209.048000][ T7046] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.732'. [ 209.329610][ T7054] loop1: detected capacity change from 0 to 4096 [ 209.364716][ T7054] EXT4-fs: inline encryption not supported [ 209.396834][ T7057] IPVS: set_ctl: invalid protocol: 58 172.20.20.35:20003 [ 209.454503][ T7054] EXT4-fs (loop1): Test dummy encryption mode enabled [ 209.488512][ T7054] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 209.508564][ T7054] System zones: 0-5 [ 209.527140][ T7054] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 209.879757][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 210.242066][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 210.280206][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.314064][ T7078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.342705][ T7078] device bridge_slave_0 left promiscuous mode [ 210.358646][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.412923][ T7078] device bridge_slave_1 left promiscuous mode [ 210.427901][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.460706][ T7078] bond0: (slave bond_slave_0): Releasing backup interface [ 210.481652][ T7064] loop5: detected capacity change from 0 to 32768 [ 210.539416][ T7064] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.738 (7064) [ 210.579787][ T7078] bond0: (slave bond_slave_1): Releasing backup interface [ 210.620616][ T7064] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.678562][ T7064] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 210.733769][ T7064] BTRFS info (device loop5): force clearing of disk cache [ 210.794292][ T7064] BTRFS info (device loop5): enabling auto defrag [ 210.801009][ T7064] BTRFS info (device loop5): enabling ssd optimizations [ 210.869860][ T7064] BTRFS info (device loop5): setting nodatacow, compression disabled [ 210.903796][ T7064] BTRFS info (device loop5): enabling disk space caching [ 210.928797][ T7064] BTRFS info (device loop5): disk space caching is enabled [ 210.995429][ T7078] team0: Port device team_slave_0 removed [ 211.071849][ T7078] team0: Port device team_slave_1 removed [ 211.080417][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.092033][ T7078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.118545][ T7078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.194355][ T7078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.386732][ T7064] BTRFS info (device loop5): rebuilding free space tree [ 211.406329][ T4485] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 211.596947][ T7117] input: syz0 as /devices/virtual/input/input14 [ 211.619764][ T4485] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.654067][ T4485] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.676595][ T7064] BTRFS info (device loop5): disabling free space tree [ 211.686020][ T7064] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 211.707451][ T7064] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 211.719480][ T4485] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 211.729820][ T4485] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 211.764601][ T4485] usb 7-1: Manufacturer: syz [ 211.787753][ T4485] usb 7-1: config 0 descriptor?? [ 211.800084][ T7064] BTRFS info (device loop5): checking UUID tree [ 212.064562][ T4645] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 212.117263][ T7127] loop3: detected capacity change from 0 to 128 [ 212.166311][ T7127] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 212.245348][ T7127] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.266027][ T4645] usb 2-1: Using ep0 maxpacket: 32 [ 212.279799][ T4645] usb 2-1: config 0 has an invalid interface number: 148 but max is 0 [ 212.297086][ T4645] usb 2-1: config 0 has no interface number 0 [ 212.320286][ T4645] usb 2-1: config 0 interface 148 has no altsetting 0 [ 212.349100][ T4645] usb 2-1: New USB device found, idVendor=041e, idProduct=3f02, bcdDevice=5a.98 [ 212.395842][ T4645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.440481][ T4645] usb 2-1: Product: syz [ 212.454523][ T4645] usb 2-1: Manufacturer: syz [ 212.459597][ T4645] usb 2-1: SerialNumber: syz [ 212.486995][ T4645] usb 2-1: config 0 descriptor?? [ 212.625816][ T4485] uclogic 0003:256C:006D.000A: interface is invalid, ignoring [ 212.666066][ T4485] usb 7-1: USB disconnect, device number 5 [ 212.711196][ T4645] usb 2-1: unknown interface protocol 0x4, assuming v1 [ 212.755460][ T4645] usb 2-1: cannot find UAC_HEADER [ 212.851361][ T4645] snd-usb-audio: probe of 2-1:0.148 failed with error -22 [ 212.913458][ T4645] usb 2-1: USB disconnect, device number 11 [ 212.994007][ T6513] udevd[6513]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.045563][ T29] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 213.090826][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 213.137957][ T7143] netlink: 'syz.4.753': attribute type 6 has an invalid length. [ 213.159679][ T7144] mmap: syz.3.752 (7144) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 213.195777][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 213.316754][ T7143] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.326411][ T7143] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.335492][ T7143] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.344326][ T7143] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.489439][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 213.513101][ T7143] netlink: 'syz.4.753': attribute type 6 has an invalid length. [ 213.554386][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 213.642486][ T7154] loop1: detected capacity change from 0 to 4096 [ 213.807505][ T7158] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.871917][ T26] audit: type=1800 audit(1770732283.010:109): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.755" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 214.424608][ T4645] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 214.465208][ T5280] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.653073][ T4645] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 214.687487][ T4645] usb 5-1: config 0 has no interface number 0 [ 214.712045][ T4645] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 214.765907][ T4645] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 214.842222][ T4645] usb 5-1: config 0 interface 255 has no altsetting 0 [ 214.874135][ T4645] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 214.889440][ T4645] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.910190][ T4645] usb 5-1: config 0 descriptor?? [ 214.959353][ T4645] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 215.325233][ T34] usb 5-1: USB disconnect, device number 14 [ 216.355766][ T4485] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 216.560605][ T4485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.597534][ T4485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.637049][ T4485] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.665196][ T4485] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.706183][ T4485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.771482][ T4485] usb 5-1: config 0 descriptor?? [ 216.804424][ T7209] loop5: detected capacity change from 0 to 32768 [ 216.909865][ T7209] XFS (loop5): Mounting V5 Filesystem [ 216.935007][ T4276] Bluetooth: hci0: command 0x0405 tx timeout [ 217.053013][ T7209] XFS (loop5): Ending clean mount [ 217.114248][ T7209] XFS (loop5): Quotacheck needed: Please wait. [ 217.263363][ T4485] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 217.366535][ T4485] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 217.585376][ T7209] XFS (loop5): Quotacheck: Done. [ 218.197357][ T5280] XFS (loop5): Unmounting Filesystem [ 218.563114][ T7243] loop1: detected capacity change from 0 to 32768 [ 218.714763][ T7243] XFS (loop1): Mounting V5 Filesystem [ 218.847498][ T7243] XFS (loop1): Ending clean mount [ 218.919974][ T7243] XFS (loop1): Quotacheck needed: Please wait. [ 219.278898][ T7243] XFS (loop1): Quotacheck: Done. [ 219.379174][ T7198] usb 5-1: USB disconnect, device number 15 [ 219.632127][ T7291] binder: 7287:7291 ioctl c0306201 200000000480 returned -14 [ 219.656788][ T4279] XFS (loop1): Unmounting Filesystem [ 220.630625][ T7316] loop5: detected capacity change from 0 to 256 [ 221.128255][ T7326] loop5: detected capacity change from 0 to 2048 [ 221.235723][ T7326] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=3932051, location=3932051 [ 221.301737][ T7330] loop4: detected capacity change from 0 to 1024 [ 221.313201][ T7326] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.504947][ T7330] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 221.604876][ T7330] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 221.682283][ T7330] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 221.723676][ T7330] EXT4-fs (loop4): This should not happen!! Data will be lost [ 221.723676][ T7330] [ 221.739945][ T7027] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 221.764608][ T7330] EXT4-fs (loop4): Total free blocks count 0 [ 221.784434][ T7330] EXT4-fs (loop4): Free/Dirty block details [ 221.802916][ T7330] EXT4-fs (loop4): free_blocks=20480 [ 221.813629][ T7330] EXT4-fs (loop4): dirty_blocks=16 [ 221.822375][ T7330] EXT4-fs (loop4): Block reservation details [ 221.832380][ T7330] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 221.865366][ T4485] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 221.907429][ T7345] loop5: detected capacity change from 0 to 256 [ 221.934333][ T7027] usb 7-1: Using ep0 maxpacket: 16 [ 221.967419][ T7027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.994311][ T4645] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 222.043639][ T7027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.058249][ T4485] usb 2-1: Using ep0 maxpacket: 16 [ 222.070411][ T4485] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 222.102819][ T4485] usb 2-1: config 0 has no interface number 0 [ 222.144512][ T7027] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 222.158611][ T4485] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.176938][ T7027] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 222.189913][ T4485] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.203868][ T4645] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.224257][ T4645] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 222.235669][ T7027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.254352][ T4485] usb 2-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 222.266687][ T4645] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 222.284610][ T4485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.303496][ T7027] usb 7-1: config 0 descriptor?? [ 222.325027][ T4645] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 222.353644][ T4485] usb 2-1: config 0 descriptor?? [ 222.372990][ T4645] usb 5-1: SerialNumber: syz [ 222.534304][ T7192] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 222.592006][ T26] audit: type=1326 audit(1770732291.730:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7352 comm="syz.3.805" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc140b9bf79 code=0x0 [ 222.645290][ T7199] usb 5-1: USB disconnect, device number 16 [ 222.744559][ T7027] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.000C/input/input16 [ 222.750966][ T7192] usb 6-1: config 1 has an invalid descriptor of length 170, skipping remainder of the config [ 222.773967][ T7192] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.813095][ T7192] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.828327][ T4485] uclogic 0003:28BD:1903.000D: interface is invalid, ignoring [ 222.836063][ T7192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.836103][ T7192] usb 6-1: Product: syz [ 222.836119][ T7192] usb 6-1: Manufacturer: syz [ 222.838332][ T7192] usb 6-1: SerialNumber: syz [ 222.847433][ T7027] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 222.923549][ T7027] usb 7-1: USB disconnect, device number 6 [ 223.041147][ T7199] usb 2-1: USB disconnect, device number 12 [ 223.084029][ T7192] usb 6-1: 0:2 : does not exist [ 223.106875][ T7192] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 223.155730][ T7192] usb 6-1: USB disconnect, device number 8 [ 223.260255][ T7357] fido_id[7357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 223.288718][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 223.395862][ T6513] udevd[6513]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.185926][ T7389] loop5: detected capacity change from 0 to 64 [ 224.212919][ T7389] hfs: request for non-existent node 24 in B*Tree [ 224.224389][ T7199] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 224.249571][ T7389] hfs: request for non-existent node 24 in B*Tree [ 224.285013][ T7393] hfs: request for non-existent node 25 in B*Tree [ 224.314159][ T7393] hfs: request for non-existent node 25 in B*Tree [ 224.341347][ T7389] hfs: request for non-existent node 26 in B*Tree [ 224.349062][ T7389] hfs: request for non-existent node 26 in B*Tree [ 224.360480][ T7389] hfs: request for non-existent node 27 in B*Tree [ 224.368427][ T7389] hfs: request for non-existent node 27 in B*Tree [ 224.424509][ T7199] usb 4-1: Using ep0 maxpacket: 8 [ 224.434167][ T7199] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 224.443092][ T7199] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 224.452256][ T7199] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 224.462872][ T7199] usb 4-1: config 250 has no interface number 0 [ 224.469701][ T7199] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 224.482864][ T7199] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 224.494867][ T7199] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 224.512792][ T7199] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 224.541623][ T7199] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 224.556131][ T7199] usb 4-1: config 250 interface 228 has no altsetting 0 [ 224.575465][ T7199] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 224.632749][ T7199] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 224.683927][ T7199] usb 4-1: Product: syz [ 224.689106][ T7199] usb 4-1: SerialNumber: syz [ 224.723694][ T7199] hub 4-1:250.228: bad descriptor, ignoring hub [ 224.741405][ T7399] loop5: detected capacity change from 0 to 256 [ 224.744639][ T7199] hub: probe of 4-1:250.228 failed with error -5 [ 224.797196][ T7399] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.818331][ T7399] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 224.841954][ T7399] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 224.930697][ T7199] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 225.446519][ T4485] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 225.602715][ T7382] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 225.644854][ T4485] usb 2-1: Using ep0 maxpacket: 8 [ 225.652301][ T4485] usb 2-1: config 0 has no interfaces? [ 225.655323][ T7414] loop4: detected capacity change from 0 to 128 [ 225.670228][ T4485] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.684827][ T7027] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 225.699465][ T4485] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.723437][ T4485] usb 2-1: Product: syz [ 225.728780][ T4485] usb 2-1: Manufacturer: syz [ 225.734967][ T4485] usb 2-1: SerialNumber: syz [ 225.753476][ T4485] usb 2-1: config 0 descriptor?? [ 225.779852][ T7414] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 225.809112][ T7414] hpfs: filesystem error: improperly stopped [ 225.819697][ T7414] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 225.829011][ T7414] hpfs: You really don't want any checks? You are crazy... [ 225.837147][ T7414] hpfs: hpfs_map_sector(): read error [ 225.847602][ T7414] hpfs: code page support is disabled [ 225.861738][ T7414] hpfs: hpfs_map_4sectors(): unaligned read [ 225.868723][ T7414] hpfs: hpfs_map_4sectors(): unaligned read [ 225.876048][ T7414] hpfs: filesystem error: unable to find root dir [ 225.895096][ T7027] usb 7-1: Using ep0 maxpacket: 16 [ 225.905990][ T7027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.944264][ T7027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.960153][ T7027] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 225.971171][ T7027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.005616][ T7027] usb 7-1: config 0 descriptor?? [ 226.016899][ T4307] usb 2-1: USB disconnect, device number 13 [ 226.474784][ T7192] usb 4-1: USB disconnect, device number 10 [ 226.507763][ T7192] usblp0: removed [ 226.642854][ T7027] usb 7-1: language id specifier not provided by device, defaulting to English [ 226.692155][ T7426] loop1: detected capacity change from 0 to 512 [ 226.739276][ T7426] EXT4-fs: Ignoring removed nobh option [ 226.762425][ T7426] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 226.879726][ T7426] EXT4-fs (loop1): 1 truncate cleaned up [ 226.904544][ T7426] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 227.055099][ T7027] letsketch 0003:6161:4D15.000E: Device info: è‚¿ [ 227.283042][ T4279] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 227.310329][ T7027] usb 7-1: Max retries (5) exceeded reading string descriptor 201 [ 227.324399][ T7027] letsketch: probe of 0003:6161:4D15.000E failed with error -71 [ 227.374523][ T7027] usb 7-1: USB disconnect, device number 7 [ 227.474430][ T7192] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 227.704822][ T7192] usb 6-1: Using ep0 maxpacket: 8 [ 227.727791][ T7192] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 227.744547][ T7192] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.764906][ T7192] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.776137][ T7192] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.795226][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 227.840255][ T7192] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.894978][ T7192] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 227.916774][ T7192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.169091][ T7192] usb 6-1: usb_control_msg returned -32 [ 228.175704][ T7192] usbtmc 6-1:16.0: can't read capabilities [ 228.264502][ T4916] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 228.486532][ T4916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.517254][ T4916] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 228.551125][ T4916] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 228.588175][ T4916] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.621644][ T4916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.647150][ T4916] usb 5-1: Product: syz [ 228.661834][ T4916] usb 5-1: Manufacturer: syz [ 228.684060][ T4916] usb 5-1: SerialNumber: syz [ 228.773463][ T7192] usb 6-1: USB disconnect, device number 9 [ 229.102149][ T4269] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.116621][ T4269] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.128105][ T4269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.140467][ T4269] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.152661][ T4269] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.160636][ T4269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.644353][ T7192] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 229.756799][ T4916] cdc_ncm 5-1:1.0: bind() failure [ 229.799725][ T4916] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 229.815292][ T4916] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 229.827929][ T4916] usbtest: probe of 5-1:1.1 failed with error -71 [ 229.857007][ T7192] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.877819][ T4916] usb 5-1: USB disconnect, device number 17 [ 229.884323][ T7192] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 229.894122][ T7192] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.973769][ T7192] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 230.001150][ T7192] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.020776][ T7192] usb 7-1: Product: syz [ 230.029564][ T7192] usb 7-1: Manufacturer: syz [ 230.044278][ T7192] usb 7-1: SerialNumber: syz [ 230.063713][ T7192] usblp0: Disabling reads from problematic bidirectional printer [ 230.312752][ T7192] usblp 7-1:4.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 230.558604][ T7192] usb 7-1: USB disconnect, device number 8 [ 230.652403][ T7508] usblp0: removed [ 230.848831][ T7476] chnl_net:caif_netlink_parms(): no params data found [ 231.028655][ T7496] loop3: detected capacity change from 0 to 40427 [ 231.072666][ T7496] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 231.126918][ T7496] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 231.154492][ T7496] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 231.169133][ T7496] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 231.221088][ T7519] loop4: detected capacity change from 0 to 128 [ 231.228022][ T7496] F2FS-fs (loop3): invalid crc value [ 231.255415][ T4269] Bluetooth: hci4: command 0x0409 tx timeout [ 231.319945][ T7476] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.350483][ T7496] F2FS-fs (loop3): Found nat_bits in checkpoint [ 231.373807][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.434803][ T7476] device bridge_slave_0 entered promiscuous mode [ 231.531395][ T7496] F2FS-fs (loop3): Start checkpoint disabled! [ 231.573216][ T7496] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 231.584896][ T7496] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 231.654377][ T7192] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 231.721428][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.753143][ T7476] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.768271][ T7496] F2FS-fs (loop3) : inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x9f7/0x19a0 [ 231.830101][ T7476] device bridge_slave_1 entered promiscuous mode [ 231.864468][ T7192] usb 7-1: Using ep0 maxpacket: 32 [ 231.872840][ T7192] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.904801][ T7496] syz.3.852: attempt to access beyond end of device [ 231.904801][ T7496] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 231.940813][ T7534] loop5: detected capacity change from 0 to 512 [ 231.949034][ T7192] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.007709][ T7192] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 232.031137][ T7534] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 232.060095][ T7192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.108548][ T7192] usb 7-1: config 0 descriptor?? [ 232.116957][ T7534] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.859: inode has both inline data and extents flags [ 232.210291][ T56] device hsr_slave_0 left promiscuous mode [ 232.228208][ T4359] kworker/u4:7: attempt to access beyond end of device [ 232.228208][ T4359] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 232.243945][ T7534] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.859: couldn't read orphan inode 15 (err -117) [ 232.257503][ T56] device hsr_slave_1 left promiscuous mode [ 232.259638][ T7534] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 232.307874][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.351488][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.389965][ T56] device bridge_slave_1 left promiscuous mode [ 232.408316][ T29] kworker/u4:2: attempt to access beyond end of device [ 232.408316][ T29] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 232.424507][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.532301][ T7192] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 232.545510][ T56] device bridge_slave_0 left promiscuous mode [ 232.552249][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.751181][ T5280] EXT4-fs (loop5): unmounting filesystem. [ 232.838264][ T7192] usb 7-1: USB disconnect, device number 9 [ 232.916982][ T7542] fido_id[7542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 233.039678][ T7548] loop4: detected capacity change from 0 to 1024 [ 233.058076][ T7548] EXT4-fs: Ignoring removed nobh option [ 233.063800][ T7548] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.161159][ T7548] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 233.334427][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 233.544523][ T7560] loop6: detected capacity change from 0 to 128 [ 233.881125][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 233.979436][ T4348] kworker/u4:5: attempt to access beyond end of device [ 233.979436][ T4348] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 234.076398][ T7570] loop4: detected capacity change from 0 to 2048 [ 234.084900][ T7570] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 234.110185][ T7570] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.414324][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 235.498531][ T7582] loop6: detected capacity change from 0 to 512 [ 235.645679][ T7582] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 235.677284][ T7582] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.696290][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.043065][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.060653][ T5733] EXT4-fs (loop6): unmounting filesystem. [ 236.191206][ T56] team0 (unregistering): Port device team_slave_1 removed [ 236.303694][ T7590] netlink: 104 bytes leftover after parsing attributes in process `syz.4.876'. [ 236.421234][ T56] team0 (unregistering): Port device team_slave_0 removed [ 236.554085][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.678454][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.815624][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.515896][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 237.732490][ T56] bond0 (unregistering): Released all slaves [ 237.813836][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.091194][ T7476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.165464][ T7476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.366049][ T7476] team0: Port device team_slave_0 added [ 238.393256][ T7476] team0: Port device team_slave_1 added [ 238.641558][ T7476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.672263][ T7476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.777167][ T7476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.815403][ T7476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.900749][ T7476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.934056][ T7632] netlink: 24 bytes leftover after parsing attributes in process `syz.5.889'. [ 239.004236][ T7476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.156773][ T26] audit: type=1326 audit(1770732308.290:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.6.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed999bf79 code=0x7ffc0000 [ 239.253722][ T26] audit: type=1326 audit(1770732308.290:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.6.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed999bf79 code=0x7ffc0000 [ 239.282764][ T7476] device hsr_slave_0 entered promiscuous mode [ 239.306317][ T7476] device hsr_slave_1 entered promiscuous mode [ 239.328922][ T7476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.348532][ T7637] loop6: detected capacity change from 0 to 4096 [ 239.358006][ T7476] Cannot create hsr debugfs directory [ 239.461498][ T7637] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 239.541854][ T26] audit: type=1326 audit(1770732308.680:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.6.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faed999bf79 code=0x7ffc0000 [ 239.714005][ T26] audit: type=1326 audit(1770732308.820:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.6.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed999bf79 code=0x7ffc0000 [ 239.853361][ T26] audit: type=1326 audit(1770732308.820:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.6.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed999bf79 code=0x7ffc0000 [ 239.878717][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.937795][ T5733] EXT4-fs (loop6): unmounting filesystem. [ 240.461225][ T7476] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 240.487968][ T7476] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 240.528054][ T7476] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 240.578192][ T7476] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 241.027826][ T7476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.061011][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.076585][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.098787][ T7476] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.120765][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.138053][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.165890][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.174467][ T5816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.229382][ T7027] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 241.256003][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.274975][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.288083][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.297791][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.306329][ T5816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.333622][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.400116][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.426505][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.454458][ T7027] usb 4-1: Using ep0 maxpacket: 8 [ 241.462185][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.475318][ T7027] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.539886][ T7476] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.557380][ T7027] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 241.584927][ T7027] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.625371][ T7476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.651587][ T7027] usb 4-1: config 0 descriptor?? [ 241.700245][ T7027] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 241.716186][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.726844][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.766639][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.823086][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.856297][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.896715][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.919887][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.960183][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.944442][ T7027] gspca_vc032x: reg_w err -71 [ 242.949291][ T7027] vc032x: probe of 4-1:0.0 failed with error -71 [ 242.975913][ T7027] usb 4-1: USB disconnect, device number 11 [ 243.000151][ T7706] loop4: detected capacity change from 0 to 40427 [ 243.011003][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.033675][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.078114][ T7706] F2FS-fs (loop4): invalid crc value [ 243.107555][ T7476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.131703][ T7706] F2FS-fs (loop4): Found nat_bits in checkpoint [ 243.325179][ T7706] F2FS-fs (loop4): Start checkpoint disabled! [ 243.396059][ T7706] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 244.353605][ T26] audit: type=1326 audit(1770732313.490:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.5.917" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f019c19bf79 code=0x0 [ 244.748395][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.800454][ T7764] loop3: detected capacity change from 0 to 32768 [ 244.814303][ T7764] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.918 (7764) [ 244.843106][ T7764] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 244.845651][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.855993][ T7764] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 244.875490][ T7764] BTRFS info (device loop3): using free space tree [ 245.018702][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.058917][ T5816] kworker/u4:9: attempt to access beyond end of device [ 245.058917][ T5816] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 245.073722][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.094391][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.102906][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.120609][ T7476] device veth0_vlan entered promiscuous mode [ 245.216661][ T7764] BTRFS info (device loop3): enabling ssd optimizations [ 245.222090][ T7476] device veth1_vlan entered promiscuous mode [ 245.471502][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.482556][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.582181][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.654931][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.694637][ T7476] device veth0_macvtap entered promiscuous mode [ 245.744951][ T4275] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 245.758581][ T7476] device veth1_macvtap entered promiscuous mode [ 245.776737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.795854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.859798][ T7476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.954420][ T7476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.014277][ T7476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.074267][ T7476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.094280][ T7476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.134750][ T7476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.186623][ T7476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.247549][ T7476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.281827][ T7476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.329045][ T7476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.365938][ T7476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.406347][ T7476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.435432][ T7476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.467999][ T7476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.477191][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.509617][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.526018][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.570167][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.866646][ T7476] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.901924][ T7476] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.926017][ T7476] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.961226][ T7476] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.317707][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.371204][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.436835][ T5816] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.490863][ T5816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.542185][ T5816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.558173][ T7829] loop6: detected capacity change from 0 to 512 [ 247.568341][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.584612][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 247.614414][ T7199] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 247.770369][ T7829] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.836972][ T7199] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 247.889259][ T7199] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 247.917872][ T7829] EXT4-fs (loop6): Test dummy encryption mode enabled [ 247.944623][ T7199] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.001784][ T7199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.013066][ T7829] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 248.094691][ T7823] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 248.129892][ T7829] EXT4-fs (loop6): 1 truncate cleaned up [ 248.143986][ T7829] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 248.273873][ T7829] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 248.449570][ T4645] usb 4-1: USB disconnect, device number 12 [ 248.465294][ T5733] EXT4-fs (loop6): unmounting filesystem. [ 248.564466][ T14] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 248.754367][ T14] usb 6-1: Using ep0 maxpacket: 32 [ 248.766983][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.812793][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.829917][ T4494] udevd[4494]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.899462][ T14] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 248.933278][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.976969][ T14] usb 6-1: config 0 descriptor?? [ 249.000652][ T7866] loop4: detected capacity change from 0 to 128 [ 249.017472][ T7866] EXT4-fs: Ignoring removed orlov option [ 249.074891][ T7866] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.102786][ T7866] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.166625][ T7866] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 249.284081][ T7866] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.438525][ T14] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 249.482671][ T14] ft260 0003:0403:6030.0010: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 249.505655][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.7.940'. [ 249.572743][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.7.940'. [ 249.636328][ T14] ft260 0003:0403:6030.0010: chip code: 6424 8183 [ 249.773602][ T7883] netlink: 'syz.3.944': attribute type 12 has an invalid length. [ 249.880922][ T7886] input: syz1 as /devices/virtual/input/input17 [ 249.888766][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 250.250955][ T14] ft260 0003:0403:6030.0010: failed to reset I2C controller: -71 [ 250.368580][ T14] usb 6-1: USB disconnect, device number 10 [ 250.602130][ T7873] loop6: detected capacity change from 0 to 32768 [ 250.704024][ T7873] XFS (loop6): Mounting V5 Filesystem [ 250.812795][ T7900] fido_id[7900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 250.899664][ T7873] XFS (loop6): Ending clean mount [ 251.340876][ T5733] XFS (loop6): Unmounting Filesystem [ 252.223554][ T7945] loop4: detected capacity change from 0 to 1024 [ 252.275439][ T7945] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 252.427152][ T7945] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 252.497430][ T7945] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3852: comm syz.4.960: Allocating blocks 497-513 which overlap fs metadata [ 252.523696][ T7945] EXT4-fs (loop4): pa ffff8880559260e0: logic 256, phys. 385, len 8 [ 252.535938][ T7945] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 253.113444][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 253.513796][ T7941] loop5: detected capacity change from 0 to 32768 [ 253.517430][ T7975] loop3: detected capacity change from 0 to 256 [ 253.585602][ T7975] exfat: Deprecated parameter 'namecase' [ 253.607573][ T7941] XFS: attr2 mount option is deprecated. [ 253.638941][ T7975] exfat: Deprecated parameter 'namecase' [ 253.774533][ T7975] exFAT-fs (loop3): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 253.819982][ T7941] XFS (loop5): Mounting V5 Filesystem [ 254.001496][ T7941] XFS (loop5): Ending clean mount [ 254.026476][ T7941] XFS (loop5): Quotacheck needed: Please wait. [ 254.260713][ T7941] XFS (loop5): Quotacheck: Done. [ 254.523942][ T5280] XFS (loop5): Unmounting Filesystem [ 255.080863][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.974'. [ 255.186903][ T8008] loop4: detected capacity change from 0 to 512 [ 255.224978][ T8008] FAT-fs (loop4): Unrecognized mount option "Šÿÿ" or missing value [ 255.407669][ T8013] netlink: 104 bytes leftover after parsing attributes in process `syz.3.977'. [ 255.737798][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.744626][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.164585][ T34] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 256.324150][ T8039] loop7: detected capacity change from 0 to 2048 [ 256.379202][ T34] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 256.403256][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 256.417348][ T8039] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=3932051, location=3932051 [ 256.450083][ T8042] loop5: detected capacity change from 0 to 512 [ 256.457943][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 256.493472][ T8039] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.547416][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.572284][ T8047] loop3: detected capacity change from 0 to 2048 [ 256.622738][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.688897][ T8047] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.698469][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.738390][ T34] usb 7-1: config 0 descriptor?? [ 256.762952][ T8026] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 257.242118][ T34] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd [ 257.290321][ T34] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 257.309615][ T8054] loop5: detected capacity change from 0 to 1024 [ 257.340922][ T34] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 257.607361][ T34] usb 7-1: USB disconnect, device number 10 [ 257.704652][ T8058] hfsplus: xattr search failed [ 257.754344][ T14] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 257.797243][ T8036] loop4: detected capacity change from 0 to 40427 [ 257.825325][ T8057] fido_id[8057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 257.865354][ T8036] F2FS-fs (loop4): invalid crc value [ 257.921121][ T8036] F2FS-fs (loop4): Found nat_bits in checkpoint [ 257.964326][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 257.991330][ T8061] loop7: detected capacity change from 0 to 4096 [ 258.003688][ T14] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 258.067887][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.140300][ T8061] NILFS error (device loop7): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 258.146139][ T14] usb 4-1: Product: syz [ 258.164324][ T8068] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.176975][ T8036] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 258.234297][ T14] usb 4-1: Manufacturer: syz [ 258.254621][ T8061] NILFS (loop7): mounting fs with errors [ 258.255988][ T14] usb 4-1: SerialNumber: syz [ 258.365440][ T8036] syz.4.985: attempt to access beyond end of device [ 258.365440][ T8036] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 258.474479][ T8061] loop7: detected capacity change from 4096 to 0 [ 258.515400][ C1] I/O error, dev loop7, sector 56 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 258.539426][ T14] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 258.564990][ C1] I/O error, dev loop7, sector 224 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.577142][ T8077] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=0) [ 258.604391][ T14] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 258.647833][ T14] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 258.688986][ T14] usb 4-1: media controller created [ 258.769497][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.870472][ T4271] syz-executor: attempt to access beyond end of device [ 258.870472][ T4271] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 258.894326][ T14] zl10353_read_register: readreg error (reg=127, ret==-71) [ 258.990027][ T14] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 258.996660][ C1] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.049665][ T14] usb 4-1: USB disconnect, device number 13 [ 259.058823][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 259.118071][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.128988][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 259.187967][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 259.220083][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.235651][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 259.268628][ C1] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.280072][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 259.314635][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 259.343174][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.353114][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 259.380548][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.396499][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 259.426247][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 259.457145][ C1] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.504403][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 259.554423][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.566883][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 259.620077][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 259.645146][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 259.715217][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 259.754382][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 259.793712][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 259.823582][ T8075] loop6: detected capacity change from 0 to 32768 [ 259.845043][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 259.894838][ T8075] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.993 (8075) [ 259.914318][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 259.964610][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 260.004669][ T8075] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 260.030632][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 260.064425][ T8075] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 260.093059][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 260.142065][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 260.151953][ T8075] BTRFS info (device loop6): using free space tree [ 260.191058][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 260.234421][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 260.318269][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 260.385340][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 260.400062][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 260.415882][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 260.460440][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 260.474914][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 260.501739][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 260.554911][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 260.565715][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 260.577525][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 260.591226][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 260.686817][ T8075] BTRFS info (device loop6): enabling ssd optimizations [ 260.704732][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 260.759183][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 260.795566][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 260.818962][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 260.895321][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 260.967026][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 261.031756][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 261.082136][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 261.149917][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 261.198673][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 261.249296][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 261.305113][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 261.335426][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 261.352261][ T8075] BTRFS error (device loop6): target device is invalid! [ 261.390913][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 261.466872][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 261.554623][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 261.568197][ T5733] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 261.675662][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 261.772186][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 261.783245][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 261.817649][ T8135] loop3: detected capacity change from 0 to 16 [ 261.838954][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 261.871898][ T8135] erofs: (device loop3): mounted with root inode @ nid 36. [ 261.886832][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 261.946976][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 261.965990][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 262.018133][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 262.064802][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 262.124575][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 262.802057][ T8141] loop4: detected capacity change from 0 to 131072 [ 262.874486][ T8141] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 262.881382][ T8141] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 262.893627][ T8141] F2FS-fs (loop4): invalid crc value [ 262.900175][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 262.918203][ T8141] F2FS-fs (loop4): Found nat_bits in checkpoint [ 262.957688][ T8141] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 262.965384][ T8141] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 262.994360][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 263.023326][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 263.056094][ T26] audit: type=1800 audit(1770732332.200:117): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1004" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 263.056476][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 263.134413][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 263.254659][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 263.277681][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 263.301014][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 263.329971][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 263.380576][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 263.400747][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 263.439997][ T8068] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=0) [ 263.469720][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 263.492189][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 263.508430][ T5143] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop6 scanned by udevd (5143) [ 263.522564][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 263.548859][ C1] blk_print_req_error: 43 callbacks suppressed [ 263.548882][ C1] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.567909][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 263.578923][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.588598][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 263.665929][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 263.679173][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.724252][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 263.734037][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.779113][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 263.844556][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 263.895470][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.905178][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 263.956854][ C1] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.968688][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 264.011563][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 264.080713][ C1] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.091463][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 264.131734][ C1] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.144602][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 264.194694][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 264.209360][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.254458][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 264.314552][ C1] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.333838][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 264.386038][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 264.426393][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 264.470872][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 264.517842][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 264.569096][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 264.611359][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 264.675055][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 264.725526][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 264.766519][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 264.824375][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 264.869803][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 264.932823][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 264.955083][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1012'. [ 265.003138][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 265.070549][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 265.092962][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1012'. [ 265.115163][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 265.136325][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 265.171966][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 265.271164][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 265.340671][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 265.376940][ T9] Bluetooth: (null): Invalid header checksum [ 265.390521][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 265.399899][ T9] Bluetooth: (null): Invalid header checksum [ 265.446779][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 265.476368][ T9] Bluetooth: (null): Invalid header checksum [ 265.489590][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 265.527214][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 265.565624][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 265.578358][ T8184] loop5: detected capacity change from 0 to 512 [ 265.588895][ T9] Bluetooth: (null): Invalid header checksum [ 265.604416][ T34] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 265.606594][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 265.684288][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 265.706764][ T56] Bluetooth: (null): Invalid header checksum [ 265.728334][ T8184] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1014: bg 0: block 5: invalid block bitmap [ 265.735709][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 265.764517][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 265.809842][ T9] Bluetooth: (null): Invalid header checksum [ 265.817240][ T34] usb 4-1: Using ep0 maxpacket: 16 [ 265.824068][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 265.866996][ T34] usb 4-1: unable to get BOS descriptor or descriptor too short [ 265.909310][ T34] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 265.911375][ T8184] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 265.935933][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 265.964375][ T34] usb 4-1: can't read configurations, error -71 [ 265.981963][ T8184] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1014: invalid indirect mapped block 3 (level 2) [ 266.003766][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 266.053595][ T8184] EXT4-fs (loop5): 1 orphan inode deleted [ 266.064635][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 266.082246][ T8184] EXT4-fs (loop5): 1 truncate cleaned up [ 266.094901][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 266.109810][ T8184] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 266.124787][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 266.177655][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 266.222884][ T8189] loop4: detected capacity change from 0 to 4096 [ 266.224818][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 266.267631][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 266.297291][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 266.373964][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 266.391895][ T5280] EXT4-fs (loop5): unmounting filesystem. [ 266.413861][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 266.441868][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 266.525725][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 266.541666][ T8193] loop6: detected capacity change from 0 to 8192 [ 266.574627][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 266.609237][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 266.641267][ T8193] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 266.658645][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 266.682083][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 266.740955][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 266.774414][ T8193] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 266.836192][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 266.855903][ T8193] REISERFS (device loop6): using ordered data mode [ 266.883397][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 266.902915][ T8193] reiserfs: using flush barriers [ 266.922892][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 266.952978][ T8193] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 266.981732][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 267.015642][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 267.040814][ T8193] REISERFS (device loop6): checking transaction log (loop6) [ 267.053387][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 267.092807][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 267.103533][ T8193] REISERFS (device loop6): Using r5 hash to sort names [ 267.132739][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 267.140941][ T4271] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 267.141029][ T4271] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 267.158689][ T8193] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 267.202342][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 267.236952][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 267.281460][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 267.334143][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 267.365822][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 267.410227][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 267.449965][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 267.482805][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 267.523226][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 267.604293][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 267.639513][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 267.664819][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 267.673239][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 267.737250][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 267.772263][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 267.801740][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 267.871315][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 267.899977][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 267.970001][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 268.024625][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 268.081082][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 268.130811][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 268.183240][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 268.219476][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 268.274282][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 268.286161][ T8228] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 268.301052][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 268.311838][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 268.359091][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 268.384255][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 268.393136][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 268.480868][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 268.526712][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 268.564292][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 268.573092][ C1] blk_print_req_error: 58 callbacks suppressed [ 268.573111][ C1] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.613683][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 268.654934][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.665038][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 268.673894][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 268.706860][ C1] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.716834][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 268.762499][ C1] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.772307][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 268.788936][ T26] audit: type=1326 audit(1770732337.930:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.4.1029" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0ecf9bf79 code=0x0 [ 268.814475][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 268.868326][ C1] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.878110][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 268.910292][ C1] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.920541][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 268.961352][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 268.987170][ C1] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.998908][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.028810][ C1] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.038557][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.074428][ T26] audit: type=1326 audit(1770732338.220:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.3.1031" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc140b9bf79 code=0x0 [ 269.084806][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 269.161371][ C1] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.171204][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.191112][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.202160][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.228847][ T8250] loop6: detected capacity change from 0 to 1024 [ 269.236791][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 269.267176][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.338932][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.385647][ T8250] hfsplus: xattr search failed [ 269.392960][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 269.421918][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.458705][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.470716][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 269.482772][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.499499][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.510938][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 269.526883][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.540088][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.568066][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 269.611405][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.642661][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.671981][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 269.694975][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.755013][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.794070][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 269.834136][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.882248][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 269.934341][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 269.957501][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.024763][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.044149][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 270.071893][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.121221][ T8265] device syzkaller1 entered promiscuous mode [ 270.139978][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.164622][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 270.217294][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.274887][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.289393][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 270.316194][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.370874][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.427128][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 270.464078][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.524944][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.533748][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 270.580651][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.640263][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.674543][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 270.702843][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.744435][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.747422][ T8282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1043'. [ 270.753815][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 270.803627][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.845009][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.881522][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 270.910480][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.938452][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 270.967145][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 270.995924][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 271.036780][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 271.060570][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 271.093764][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 271.138764][ T4489] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 271.151752][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 271.191016][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 271.222819][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 271.290909][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 271.314799][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 271.350462][ T4489] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 271.364787][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 271.384304][ T4489] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 271.406281][ T4489] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 271.421471][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 271.431527][ T4489] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 271.474336][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 271.493963][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 271.515485][ T4489] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 271.533335][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1047'. [ 271.543629][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 271.561744][ T8299] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1047'. [ 271.576076][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 271.584489][ T4489] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 271.603961][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 271.617459][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1047'. [ 271.633132][ T4489] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 271.643737][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 271.658322][ T4489] usb 7-1: Product: syz [ 271.662791][ T4489] usb 7-1: Manufacturer: syz [ 271.670373][ T8299] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1047'. [ 271.696636][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 271.721241][ T4489] cdc_wdm 7-1:1.0: skipping garbage [ 271.729083][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 271.762553][ T4489] cdc_wdm 7-1:1.0: skipping garbage [ 271.793602][ T4489] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 271.801813][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 271.830390][ T4489] cdc_wdm 7-1:1.0: Unknown control protocol [ 271.852275][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 271.904798][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 271.967321][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 272.000162][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 272.036220][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 272.053005][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 272.060192][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 272.070733][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 272.077818][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 272.085222][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 272.093392][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 272.104955][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 272.111656][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 272.118191][ T4489] usb 7-1: USB disconnect, device number 11 [ 272.124572][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 272.124609][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 272.124628][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 272.137479][ T8286] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 272.167138][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 272.210963][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 272.294806][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 272.344908][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 272.353996][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 272.419749][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 272.449373][ T8310] loop4: detected capacity change from 0 to 256 [ 272.477013][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 272.504343][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 272.544828][ T8310] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 272.558241][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 272.594549][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 272.632103][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 272.671078][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 272.734297][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 272.764387][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 272.793908][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 272.825522][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 272.864262][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 272.917163][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 272.966076][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 273.009844][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 273.060248][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 273.088217][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 273.128086][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 273.208367][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 273.260025][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 273.310244][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 273.357198][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 273.420463][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 273.444988][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 273.475061][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 273.504405][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 273.533945][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 273.552548][ T8305] loop5: detected capacity change from 0 to 32768 [ 273.556603][ T8321] loop6: detected capacity change from 0 to 1024 [ 273.606850][ C0] blk_print_req_error: 70 callbacks suppressed [ 273.606882][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.623276][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 273.636553][ T8321] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 273.655598][ T8321] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.666551][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.680163][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 273.703389][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 273.728186][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.740015][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 273.765943][ T8321] EXT4-fs error (device loop6): ext4_map_blocks:745: inode #15: block 3: comm syz.6.1054: lblock 3 mapped to illegal pblock 3 (length 1) [ 273.832802][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.842814][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 273.873170][ T8305] JBD2: Ignoring recovery information on journal [ 273.874604][ T7476] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 273.921936][ T8321] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 273.944722][ T8321] EXT4-fs (loop6): This should not happen!! Data will be lost [ 273.944722][ T8321] [ 273.964316][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.973921][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=130) [ 274.054601][ T8328] EXT4-fs error (device loop6): ext4_free_blocks:6221: comm syz.6.1054: Freeing blocks not in datazone - block = 3, count = 1 [ 274.078717][ T8305] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 274.164779][ T8324] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 274.191300][ T8330] EXT4-fs error (device loop6): ext4_map_blocks:745: inode #15: comm syz.6.1054: lblock 0 mapped to illegal pblock 0 (length 1) [ 274.310113][ T8330] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 274.352409][ T8335] OCFS2: ERROR (device loop5): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 274.352586][ T8335] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 274.436927][ T8330] EXT4-fs (loop6): This should not happen!! Data will be lost [ 274.436927][ T8330] [ 274.534353][ T8335] OCFS2: File system is now read-only. [ 274.710243][ T5733] EXT4-fs (loop6): unmounting filesystem. [ 274.777395][ T5280] ocfs2: Unmounting device (7,5) on (node local) [ 275.391875][ C1] I/O error, dev loop7, sector 224 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.401492][ T8068] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=0) [ 275.554526][ C1] I/O error, dev loop7, sector 224 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.564379][ T8068] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=0) [ 275.680048][ C1] I/O error, dev loop7, sector 224 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.689675][ T8068] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=0) [ 275.765059][ C1] I/O error, dev loop7, sector 224 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.784608][ T8068] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=0) [ 275.854433][ C1] I/O error, dev loop7, sector 224 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.871582][ T8068] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=0) [ 275.985021][ T8349] loop6: detected capacity change from 0 to 65536 [ 276.034383][ T8068] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=0) [ 276.066303][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.092654][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.103443][ T4276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.112574][ T4276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.129796][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=0) [ 276.146865][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=0) [ 276.148781][ T8349] XFS (loop6): Mounting V5 Filesystem [ 276.156826][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.172525][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=0) [ 276.181883][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.239281][ T9] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.263446][ T7476] NILFS (loop7): I/O error reading meta-data file (ino=3, block-offset=0) [ 276.285579][ T7476] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 276.321536][ T8349] XFS (loop6): Ending clean mount [ 276.335845][ T8349] XFS (loop6): Quotacheck needed: Please wait. [ 276.347139][ T4274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.364609][ T4274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.375102][ T4274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.385350][ T4274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.393024][ T5403] loop: Write error at byte offset 9223372036856868863, length 4096. [ 276.403702][ T4274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.412742][ T4274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.476803][ C0] Buffer I/O error on dev loop7, logical block 511, lost sync page write [ 276.485610][ T7476] NILFS (loop7): unable to write superblock: err=-5 [ 276.504106][ T8356] loop3: detected capacity change from 0 to 8192 [ 276.511579][ T5403] loop: Write error at byte offset 9223372036854775807, length 4096. [ 276.576030][ C1] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 276.585440][ T7476] NILFS (loop7): unable to write superblock: err=-5 [ 276.739903][ T8349] XFS (loop6): Quotacheck: Done. [ 276.862410][ T9] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.906763][ T5733] XFS (loop6): Unmounting Filesystem [ 277.325553][ T9] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.573265][ T9] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.780413][ T8390] loop3: detected capacity change from 0 to 512 [ 277.873810][ T8390] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 278.112576][ T8390] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 278.211144][ T8355] chnl_net:caif_netlink_parms(): no params data found [ 278.218333][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 278.399623][ T8363] chnl_net:caif_netlink_parms(): no params data found [ 278.435667][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 278.479101][ T4269] Bluetooth: hci4: command 0x0409 tx timeout [ 279.096627][ T8355] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.127660][ T8355] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.223451][ T8355] device bridge_slave_0 entered promiscuous mode [ 279.401771][ T8355] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.427370][ T8355] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.462555][ T8355] device bridge_slave_1 entered promiscuous mode [ 279.606533][ T8363] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.652685][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.676729][ T8363] device bridge_slave_0 entered promiscuous mode [ 279.834319][ T8363] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.854383][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.862706][ T8363] device bridge_slave_1 entered promiscuous mode [ 279.879426][ T8355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.910666][ T8355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.044443][ T4331] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 280.070225][ T8355] team0: Port device team_slave_0 added [ 280.094125][ T8355] team0: Port device team_slave_1 added [ 280.152935][ T8363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.188726][ T8355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.196346][ T8355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.231559][ T8355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.272242][ T8363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.283401][ T4331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 280.298385][ T4269] Bluetooth: hci1: command 0x041b tx timeout [ 280.313298][ T4331] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 280.325240][ T8355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.333279][ T8355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.360975][ T4331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.371953][ T4331] usb 6-1: config 0 descriptor?? [ 280.378781][ T8434] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 280.393502][ T8355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.544500][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 280.621966][ T8363] team0: Port device team_slave_0 added [ 280.634901][ T8363] team0: Port device team_slave_1 added [ 280.835808][ T4331] elan 0003:04F3:0755.0012: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 281.000511][ T8363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.022911][ T8363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.055115][ T8363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.164617][ T8363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.172124][ T8363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.201463][ T8363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.228972][ T8355] device hsr_slave_0 entered promiscuous mode [ 281.244362][ T8355] device hsr_slave_1 entered promiscuous mode [ 281.252021][ T8355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.269223][ T8355] Cannot create hsr debugfs directory [ 281.398003][ T4489] usb 6-1: USB disconnect, device number 11 [ 281.467784][ T8448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 281.479170][ T8448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.487364][ T8448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.498407][ T8448] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 281.654731][ T9] device hsr_slave_0 left promiscuous mode [ 281.666916][ T9] device hsr_slave_1 left promiscuous mode [ 281.682986][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.691862][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.709064][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.721399][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.746598][ T9] device bridge_slave_1 left promiscuous mode [ 281.761560][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.772624][ T9] device bridge_slave_0 left promiscuous mode [ 281.792559][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.902461][ T9] device veth1_macvtap left promiscuous mode [ 281.913881][ T9] device veth0_macvtap left promiscuous mode [ 281.929113][ T9] device veth1_vlan left promiscuous mode [ 281.943233][ T9] device veth0_vlan left promiscuous mode [ 282.357610][ T8459] syz.5.1087[8459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.357790][ T8459] syz.5.1087[8459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.384404][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 282.613027][ T8465] syz.5.1089 sent an empty control message without MSG_MORE. [ 282.624282][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 282.682212][ T8451] loop6: detected capacity change from 0 to 40427 [ 282.781671][ T8451] F2FS-fs (loop6): invalid crc value [ 282.848064][ T8451] F2FS-fs (loop6): Found nat_bits in checkpoint [ 282.988883][ T8451] F2FS-fs (loop6): Start checkpoint disabled! [ 283.077402][ T8451] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 284.462725][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 284.561464][ T4348] kworker/u4:5: attempt to access beyond end of device [ 284.561464][ T4348] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 284.715340][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 284.758940][ T9] team0 (unregistering): Port device team_slave_1 removed [ 284.921146][ T9] team0 (unregistering): Port device team_slave_0 removed [ 285.024893][ T8497] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 285.040036][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.171382][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.861382][ T9] bond0 (unregistering): Released all slaves [ 286.003491][ T8363] device hsr_slave_0 entered promiscuous mode [ 286.010779][ T8363] device hsr_slave_1 entered promiscuous mode [ 286.017844][ T8363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.026795][ T8363] Cannot create hsr debugfs directory [ 286.062318][ T11] ------------[ cut here ]------------ [ 286.068803][ T11] WARNING: CPU: 1 PID: 11 at net/mac80211/ibss.c:500 ieee80211_ibss_csa_beacon+0x5aa/0x690 [ 286.079939][ T11] Modules linked in: [ 286.084040][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 286.091649][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 286.101865][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 286.108348][ T11] RIP: 0010:ieee80211_ibss_csa_beacon+0x5aa/0x690 [ 286.114958][ T11] Code: f7 c6 05 be bc 65 04 01 48 c7 c7 50 69 a6 8b be fd 01 00 00 48 c7 c2 e0 69 a6 8b e8 70 4f bf f7 e9 60 fe ff ff e8 a6 d2 dc f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 95 d2 dc f7 0f 0b e9 be fa [ 286.135414][ T11] RSP: 0018:ffffc90000107388 EFLAGS: 00010287 [ 286.141664][ T11] RAX: ffffffff89a5a10a RBX: ffff88807caf0760 RCX: 0000000000100000 [ 286.150114][ T11] RDX: ffffc9001a608000 RSI: 000000000000042f RDI: 0000000000000430 [ 286.158269][ T11] RBP: 1ffff11005bff2b5 R08: ffffffff90af4307 R09: 1ffffffff215e860 [ 286.166455][ T11] R10: dffffc0000000000 R11: fffffbfff215e861 R12: ffff88802dff95a8 [ 286.174651][ T11] R13: ffff88802dff9ac8 R14: ffff88802dff8c80 R15: dffffc0000000000 [ 286.182909][ T11] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 286.192349][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.199113][ T11] CR2: 00007faad71f7d48 CR3: 000000006810b000 CR4: 00000000003506e0 [ 286.207448][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.215759][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.223992][ T11] Call Trace: [ 286.227416][ T11] [ 286.230429][ T11] ? ieee80211_recalc_dtim+0x230/0x230 [ 286.236067][ T11] ieee80211_set_csa_beacon+0x78a/0xa80 [ 286.241794][ T11] ieee80211_channel_switch+0x7dd/0xce0 [ 286.247511][ T11] ? ieee80211_csa_finalize+0xd70/0xd70 [ 286.253255][ T11] ieee80211_ibss_process_chanswitch+0xa8f/0xce0 [ 286.259761][ T11] ? trace_drv_return_int+0x240/0x240 [ 286.265580][ T11] ? mutex_lock_nested+0x10/0x10 [ 286.270627][ T11] ieee80211_ibss_rx_queued_mgmt+0x1027/0x2cd0 [ 286.276945][ T11] ? verify_lock_unused+0x140/0x140 [ 286.282339][ T11] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 286.288228][ T11] ? mark_lock+0x94/0x320 [ 286.292833][ T11] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 286.298973][ T11] ? lock_chain_count+0x20/0x20 [ 286.303890][ T11] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 286.309935][ T11] ? kcov_remote_start+0x4c7/0x7e0 [ 286.315276][ T11] ? lockdep_hardirqs_on+0x94/0x140 [ 286.320636][ T11] ? kcov_remote_start+0x8b/0x7e0 [ 286.325945][ T11] ieee80211_iface_work+0x726/0xc80 [ 286.331342][ T11] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.336723][ T11] cfg80211_wiphy_work+0x221/0x260 [ 286.341945][ T11] ? process_one_work+0x7b0/0x1160 [ 286.347283][ T11] process_one_work+0x8a2/0x1160 [ 286.352527][ T11] ? worker_detach_from_pool+0x240/0x240 [ 286.358326][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 286.363542][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 286.369228][ T11] ? kthread_data+0x4b/0xc0 [ 286.374010][ T11] worker_thread+0xaa2/0x1270 [ 286.378947][ T11] kthread+0x29d/0x330 [ 286.383191][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 286.388526][ T11] ? kthread_blkcg+0xd0/0xd0 [ 286.393294][ T11] ret_from_fork+0x1f/0x30 [ 286.397877][ T11] [ 286.400961][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 286.408383][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 286.415796][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 286.425983][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 286.432371][ T11] Call Trace: [ 286.435700][ T11] [ 286.438690][ T11] dump_stack_lvl+0x188/0x24e [ 286.443432][ T11] ? memcpy+0x3c/0x60 [ 286.447521][ T11] ? show_regs_print_info+0x12/0x12 [ 286.453123][ T11] ? load_image+0x400/0x400 [ 286.457721][ T11] panic+0x2e5/0x730 [ 286.461962][ T11] ? bpf_jit_dump+0xd0/0xd0 [ 286.466519][ T11] ? ret_from_fork+0x1f/0x30 [ 286.471161][ T11] __warn+0x2f8/0x4f0 [ 286.475182][ T11] ? ieee80211_ibss_csa_beacon+0x5aa/0x690 [ 286.481068][ T11] ? ieee80211_ibss_csa_beacon+0x5aa/0x690 [ 286.486958][ T11] report_bug+0x2ba/0x4f0 [ 286.491378][ T11] ? ieee80211_ibss_csa_beacon+0x5aa/0x690 [ 286.497267][ T11] handle_bug+0x3a/0x70 [ 286.501591][ T11] exc_invalid_op+0x16/0x40 [ 286.506191][ T11] asm_exc_invalid_op+0x16/0x20 [ 286.511093][ T11] RIP: 0010:ieee80211_ibss_csa_beacon+0x5aa/0x690 [ 286.517722][ T11] Code: f7 c6 05 be bc 65 04 01 48 c7 c7 50 69 a6 8b be fd 01 00 00 48 c7 c2 e0 69 a6 8b e8 70 4f bf f7 e9 60 fe ff ff e8 a6 d2 dc f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 95 d2 dc f7 0f 0b e9 be fa [ 286.537645][ T11] RSP: 0018:ffffc90000107388 EFLAGS: 00010287 [ 286.543849][ T11] RAX: ffffffff89a5a10a RBX: ffff88807caf0760 RCX: 0000000000100000 [ 286.552001][ T11] RDX: ffffc9001a608000 RSI: 000000000000042f RDI: 0000000000000430 [ 286.560061][ T11] RBP: 1ffff11005bff2b5 R08: ffffffff90af4307 R09: 1ffffffff215e860 [ 286.568112][ T11] R10: dffffc0000000000 R11: fffffbfff215e861 R12: ffff88802dff95a8 [ 286.576506][ T11] R13: ffff88802dff9ac8 R14: ffff88802dff8c80 R15: dffffc0000000000 [ 286.584550][ T11] ? ieee80211_ibss_csa_beacon+0x5aa/0x690 [ 286.590438][ T11] ? ieee80211_ibss_csa_beacon+0x5aa/0x690 [ 286.596310][ T11] ? ieee80211_recalc_dtim+0x230/0x230 [ 286.601951][ T11] ieee80211_set_csa_beacon+0x78a/0xa80 [ 286.607672][ T11] ieee80211_channel_switch+0x7dd/0xce0 [ 286.613326][ T11] ? ieee80211_csa_finalize+0xd70/0xd70 [ 286.618971][ T11] ieee80211_ibss_process_chanswitch+0xa8f/0xce0 [ 286.625373][ T11] ? trace_drv_return_int+0x240/0x240 [ 286.631090][ T11] ? mutex_lock_nested+0x10/0x10 [ 286.636108][ T11] ieee80211_ibss_rx_queued_mgmt+0x1027/0x2cd0 [ 286.642326][ T11] ? verify_lock_unused+0x140/0x140 [ 286.647710][ T11] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 286.653500][ T11] ? mark_lock+0x94/0x320 [ 286.657924][ T11] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 286.663951][ T11] ? lock_chain_count+0x20/0x20 [ 286.668841][ T11] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 286.674776][ T11] ? kcov_remote_start+0x4c7/0x7e0 [ 286.679956][ T11] ? lockdep_hardirqs_on+0x94/0x140 [ 286.685310][ T11] ? kcov_remote_start+0x8b/0x7e0 [ 286.690390][ T11] ieee80211_iface_work+0x726/0xc80 [ 286.695733][ T11] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.700993][ T11] cfg80211_wiphy_work+0x221/0x260 [ 286.706161][ T11] ? process_one_work+0x7b0/0x1160 [ 286.711315][ T11] process_one_work+0x8a2/0x1160 [ 286.716321][ T11] ? worker_detach_from_pool+0x240/0x240 [ 286.722003][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 286.727092][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 286.732795][ T11] ? kthread_data+0x4b/0xc0 [ 286.737362][ T11] worker_thread+0xaa2/0x1270 [ 286.742135][ T11] kthread+0x29d/0x330 [ 286.746284][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 286.751571][ T11] ? kthread_blkcg+0xd0/0xd0 [ 286.756233][ T11] ret_from_fork+0x1f/0x30 [ 286.761028][ T11] [ 286.764834][ T11] Kernel Offset: disabled [ 286.769385][ T11] Rebooting in 86400 seconds..