last executing test programs: 15m38.663876684s ago: executing program 3 (id=4): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_io_uring_setup(0x400f, &(0x7f0000000480)={0x0, 0x76fc, 0x10000, 0x3, 0x267}, &(0x7f0000000240), 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0xfeffffff, 0xffffffffffffffff, 0x3, {0x3b4, 0x6d3}, 0x6}, 0x1) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) unshare(0x8000400) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000180)=0x8001, 0x8) r2 = socket(0x18, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$video4linux(&(0x7f0000000180), 0x5, 0x80042) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f00000001c0)={0x1, 0x0, {0x9, 0x40000687, 0x20000000, 0xf303}}) write$usbip_server(0xffffffffffffffff, &(0x7f0000001480)=ANY=[@ANYBLOB="000000030000000100000000000000010000008e00000004000600000000000100000000000000090000000000000000"], 0x30) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 15m22.319076963s ago: executing program 32 (id=4): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_io_uring_setup(0x400f, &(0x7f0000000480)={0x0, 0x76fc, 0x10000, 0x3, 0x267}, &(0x7f0000000240), 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0xfeffffff, 0xffffffffffffffff, 0x3, {0x3b4, 0x6d3}, 0x6}, 0x1) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) unshare(0x8000400) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000180)=0x8001, 0x8) r2 = socket(0x18, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000180)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$video4linux(&(0x7f0000000180), 0x5, 0x80042) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f00000001c0)={0x1, 0x0, {0x9, 0x40000687, 0x20000000, 0xf303}}) write$usbip_server(0xffffffffffffffff, &(0x7f0000001480)=ANY=[@ANYBLOB="000000030000000100000000000000010000008e00000004000600000000000100000000000000090000000000000000"], 0x30) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3m0.751722169s ago: executing program 0 (id=2979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) creat(0x0, 0x5) 3m0.569197668s ago: executing program 0 (id=2980): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000000)=0x90) 3m0.519706571s ago: executing program 0 (id=2982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x3, 0x7}) 3m0.149750429s ago: executing program 0 (id=2989): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m59.377946737s ago: executing program 0 (id=2992): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[], 0x0) 2m58.888823591s ago: executing program 0 (id=2995): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m58.551835058s ago: executing program 33 (id=2995): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.769372364s ago: executing program 1 (id=3756): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x122f, &(0x7f0000003700)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x7}) 6.768695364s ago: executing program 4 (id=3757): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x7, "1d0ee5d8"}, @local=@item_4={0x3, 0x2, 0x8, "4d501821"}, @global=@item_4={0x3, 0x1, 0x6, "80568cea"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.725411276s ago: executing program 2 (id=3758): syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000980)='./file0\x00', 0x800000, &(0x7f0000000640)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYRES8, @ANYRES64, @ANYBLOB="089948a78e942c0649d1fbab25958f93d2ff549ca839a37659dff7b300000000ed38bf73d9e2f63e4ee6c6fda28c4e468337bb1531913d35780fc056bfaa5a73e20253f053b1"], 0x1, 0x1f837, &(0x7f00000214c0)="$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") r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x4) landlock_restrict_self(r0, 0x0) 6.633016271s ago: executing program 6 (id=3759): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="ee04010000200010"], 0x8) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) socket(0x22, 0xa, 0x0) unshare(0x20000400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6.399935413s ago: executing program 2 (id=3762): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$eJzs3c9rI2UYwPEnbX5MWrbJQRQF6YNe9DK01bMaZBfEgEt3I+4Kwux2oiFjUmZCJCK2N6/izX9AcNnjgocF9R/oxdt68eLJXgRBFxFH5leapJMfjSmb7n4/0OZJ3veZed/84nkDeXP83pcfN+ueWbc6smKoZEREHoqUZUUSmegiLykO5eX1Px48f+3Gzbcr1erlXdUrleuv7Kjqxub3n3xWjLvdL8hR+YNjMX49evro2eN/r3/U8LThaavdUUtvtX/pWLccW/caXtNUverYlmdro+XZbtTejtrrTnt/v6dWa+/S2r5re55arZ427Z522tpxe2p9aDVaapqmXlpLG+5jzJgjp3Znd9eqzHnC23PmYdH+9n1/QrPrVqxVEbN4qqV251zHBQAAltJI/f91UiOUZaVfUGbitUA+jIeXAUH9n8Rh/R8sFk7q/7sv/NhZf/feRlz/38+n1f+v/hzlD9X/wdkXXv9/O3L9dEV04R2cpfP/qv+xHDaHX5G/nazYY0H9H7wa+iv63Pt3t8KA+h8AAAAAAAAAAAAAAAAAAAAAgIvgoe+XfN8vJZfJ38lXCOLrybVJXzTGhTPu8S/EOwr0nw94LF27cVOM8It72Q0R54turVuLLuP2pOOWlOSf8PkQizacOAwbNVCWH5yDbi0XJ6yG/ysiKo7Ysi0lKQ/lh/GVt6qXtzUS5YfnP+jWMtm1IL8ujTB/R0ryVHr+Tmp+Xl56cSDflJL8dFva4she/D6W5H++rfrmO9WR/GLYL83r5/uQAAAAAACwcKaqES+fy8Pr32j9bpqqae3BWl4G1+enPx/or6+3Utfn2dJz2Uc7dwAAAAAAnhRe/tOm5Ti26/XGBkWZ1qcQH22kKStTjhwE2Rn6DAUPwiA3qc/qwAxnPXI+/gWNWYfhej2ZecxJ8GdBUu/MZAvXoSYj/V6dMUjmP0Nn46wPgeutnH3ututtBuPRuaYzECQfG43rI1fnPfK4INk5d1rnZ7765q/5TpGJd+0dbHrtnjFlpmGQGbnlcMqT9nffD17UE8eTS3+3+G6eH5kBAAAAsCSSor/oJbe8MSVj/fwHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE2ah26SNCR71HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl8V8AAAD//1f39NU=") r0 = open(&(0x7f0000000240)='./file0\x00', 0x10507e, 0xa6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x58}}, 0x4008894) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r0}]) 6.293123598s ago: executing program 1 (id=3763): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000001580)=ANY=[@ANYRESDEC=r4, @ANYRES64=r3, @ANYRES8=r5, @ANYBLOB, @ANYBLOB="8458141fd960d81fccc41c63264321340efc56756cbf84755f7c8a7664b09b9f9b9ecef6ef6c0c862843c74a", @ANYBLOB="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"], 0xa8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x80) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_KEEPCAPS(0x8, 0x1) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 5.660046249s ago: executing program 2 (id=3765): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0xfdfd, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) fsopen(&(0x7f0000000180)='omfs\x00', 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r9 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r9, 0x0) 5.657930619s ago: executing program 4 (id=3766): socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) epoll_create1(0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000300)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.576140743s ago: executing program 6 (id=3767): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x15e6, &(0x7f0000000700)=ANY=[], 0x0) 5.251111049s ago: executing program 6 (id=3769): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="ee04010000200010"], 0x8) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) socket(0x22, 0xa, 0x0) unshare(0x20000400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5.250475389s ago: executing program 1 (id=3770): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0xa3d8, &(0x7f0000000340)=[{&(0x7f00000000c0)='\x009zL', 0x4}], 0x1, 0x0, 0x1, {0x2}}) r4 = socket(0x1d, 0x803, 0x1) getsockname$packet(r4, 0x0, &(0x7f00000000c0)) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 5.008096781s ago: executing program 4 (id=3771): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0x26000, 0xa, 0x0, 0x8, 0x28, 0x1, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x8080000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xa, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x9a, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x4, 0xff, 0x4, 0x0, 0xe, 0x1, 0x3c}, {0x0, 0x8000000, 0xd, 0x3f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x2}, {0x7000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {0xf000, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x9}, {0x80a0000}, {0x58000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 4.261116908s ago: executing program 1 (id=3772): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001100)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) 4.214864451s ago: executing program 6 (id=3773): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x246}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f00000105c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0063edcea4", @ANYBLOB="b6a7a29782938426a4c1e016eedf515af3fd5b546aaacf8d3135c386daf856ecccd471f18f3b0c0d8118f2458d7a7797a3a26a1c7303dce38f54e82d58e84a2d90cbc9d4045b09322e0d4829f9a1ed35be0efa8653195ff1650e3c448d671c5d240daa776e54b6c4374d5a1217b928f24a7dcc1d83727e1e2496be90000d0ba16bf0266e2861636b9b86443ca18e70a2c05ef9389ecbff171bb734f3e0855948dfbbc23445ca276bba463e8f60607626b18799cc5aad8e5463878d9aca519ecfdaf99a675112f906be5e7abce02645ef430ef929cc1a2e435fa67b84f2462752b3693914f369a767e1"], 0x1, 0x105c7, &(0x7f0000020c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x40) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="5dbbe70e637c0c8a"}}) symlinkat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00') 4.162474463s ago: executing program 4 (id=3774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 4.081115797s ago: executing program 1 (id=3775): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.02396139s ago: executing program 5 (id=3776): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x13, 0x15, "fee8a2ab78fc179f51f8a0e9a1af1e0b91c2f0fd967ab7f890020000000003002b78cc33a55f4c0c0000000000000000000000000000001b00", "28095397ba01177d02458dac00", "908f000e00000000000000000000001a00020000001900", [0x4, 0x80000001]}}) write$tun(r1, &(0x7f0000000780)={@void, @val={0x3, 0x0, 0x6, 0xffff, 0xa18, 0x5}, @ipv6=@gre_packet={0x5, 0x6, "d896dd", 0x1d3, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "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"}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0xd7, 0x1, 0x0, 0x3, 0x6, 0x7}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x0, {{0x8, 0x2, 0x80, 0x1, 0x0, 0x3, 0x2, 0x9}, 0x2, {0x4a84, 0x101, 0x1, 0x13, 0x1, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}, 0x205) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 3.877899357s ago: executing program 4 (id=3777): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000c80)=[@in6={0xa, 0x4e24, 0x393, @dev={0xfe, 0x80, '\x00', 0x10}, 0xb}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0xff73) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e22, 0x6, @empty, 0x1000}}}, 0x84) 3.82901121s ago: executing program 1 (id=3778): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0xa8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x80) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_KEEPCAPS(0x8, 0x1) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 3.780588772s ago: executing program 5 (id=3779): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="ee04010000200010"], 0x8) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) socket(0x22, 0xa, 0x0) unshare(0x20000400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.914218115s ago: executing program 6 (id=3780): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000f40)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x100000001, 0x800000000000000, 0x1b}) 2.756896213s ago: executing program 4 (id=3781): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000001580)=ANY=[@ANYRESDEC=r4, @ANYRES64=r3, @ANYRES8=r5, @ANYBLOB, @ANYBLOB="8458141fd960d81fccc41c63264321340efc56756cbf84755f7c8a7664b09b9f9b9ecef6ef6c0c862843c74a", @ANYBLOB="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"], 0xa8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x80) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_KEEPCAPS(0x8, 0x1) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 2.751002343s ago: executing program 5 (id=3782): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3008046, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x183042, 0x1e1) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0x8000c62) fallocate(r0, 0x0, 0x0, 0x8ffff) truncate(&(0x7f0000000040)='./file1\x00', 0x41bfc) 2.360465963s ago: executing program 5 (id=3783): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/cgroup\x00') 2.173452792s ago: executing program 2 (id=3784): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="ee04010000200010"], 0x8) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) socket(0x22, 0xa, 0x0) unshare(0x20000400) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.00926762s ago: executing program 6 (id=3785): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") syz_mount_image$exfat(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2901842, 0x0, 0x0, 0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x14bb43, 0x1f2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) unlink(&(0x7f0000000280)='./file1\x00') 1.139578773s ago: executing program 5 (id=3786): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="ee04010000200010"], 0x8) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) socket(0x22, 0xa, 0x0) unshare(0x20000400) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.060110027s ago: executing program 2 (id=3787): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0), 0x1, 0x3f7, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000000a940)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 79.765145ms ago: executing program 5 (id=3788): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES16, @ANYBLOB="080004"], 0x8c}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 0s ago: executing program 2 (id=3789): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000001f00)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x2}}, {@x25={0x805, {0x1, 0x15, 0xfb, "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"}}}}, 0x0) kernel console output (not intermixed with test programs): DF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 677.928183][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 677.928206][ T26] audit: type=1800 audit(1774374923.166:318): pid=11724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2073" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 678.201357][T11737] loop2: detected capacity change from 0 to 4096 [ 678.309764][T11740] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 681.163976][ T4280] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 681.171802][T11262] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 681.194789][ T4284] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 681.368120][T11262] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.383825][T11262] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 681.388362][ T4280] usb 3-1: Using ep0 maxpacket: 32 [ 681.403382][ T4280] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.405871][T11262] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 681.429193][T11262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 681.431702][ T4280] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.446095][T11262] usb 1-1: SerialNumber: syz [ 681.449727][ T4280] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.463348][ T4280] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 681.495042][ T4280] usb 3-1: config 0 interface 0 has no altsetting 0 [ 681.502069][ T4280] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 681.521594][ T4280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.558288][ T4280] usb 3-1: config 0 descriptor?? [ 681.695901][T11262] usb 1-1: 0:2 : does not exist [ 681.738405][T11262] usb 1-1: USB disconnect, device number 21 [ 682.074912][ T4280] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 682.105312][ T4284] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 682.107810][ T4280] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 682.145972][ T4280] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 682.201142][ T4280] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 682.230668][ T4280] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 682.298381][ T4280] hid-thrustmaster 0003:044F:B65D.0008: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 682.348595][ T4280] hid-thrustmaster 0003:044F:B65D.0008: Wrong number of endpoints? [ 682.381161][ C0] hid-thrustmaster 0003:044F:B65D.0008: Unknown packet type 0x0, unable to proceed further with wheel init [ 682.638672][T11823] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 682.653504][T11823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 683.114747][T11261] usb 3-1: USB disconnect, device number 18 [ 683.825619][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 684.807640][ T4280] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 685.021536][ T4280] usb 3-1: Using ep0 maxpacket: 32 [ 685.030763][ T4280] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 685.054214][ T4280] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 685.078592][ T4280] usb 3-1: string descriptor 0 read error: -22 [ 685.104433][ T4280] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 685.117616][ T4280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.138041][T11847] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 685.170299][ T4280] usb 3-1: MIDIStreaming interface descriptor not found [ 685.450580][ T4280] usb 3-1: USB disconnect, device number 19 [ 686.137766][T11864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 686.159390][T11864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 687.370850][ T4284] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 688.245406][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 689.083778][T11913] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 689.287127][T11913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 689.688007][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 690.078328][T11923] loop2: detected capacity change from 0 to 2048 [ 690.163282][T11923] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362 [ 690.208375][T11923] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 690.240365][T11923] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 690.274083][T11923] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 690.312886][ T26] audit: type=1800 audit(1774374934.761:319): pid=11923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2132" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 691.839148][ T4339] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 692.860145][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 692.950010][ T4339] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 693.574570][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 693.582925][T11958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 693.691061][ T4339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.704336][ T4339] usb 3-1: config 0 descriptor?? [ 693.712252][ T4339] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 693.812525][ T4284] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 694.268106][ T4284] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 694.579430][ T4339] usb 3-1: USB disconnect, device number 20 [ 695.903683][T11997] loop2: detected capacity change from 0 to 1024 [ 696.107743][ T4284] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 697.402785][T12018] loop2: detected capacity change from 0 to 4096 [ 697.646242][T12025] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 698.545634][ T4284] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 698.969330][T12042] loop2: detected capacity change from 0 to 1764 [ 700.211831][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 701.700963][ T4284] Bluetooth: hci5: command 0x0409 tx timeout [ 702.611684][T12113] loop2: detected capacity change from 0 to 1764 [ 704.236597][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 704.272284][T12130] loop2: detected capacity change from 0 to 256 [ 704.353154][T12130] exfat: Deprecated parameter 'utf8' [ 704.455683][T12130] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 705.768372][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 707.726305][T12193] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2227'. [ 708.412316][T12217] loop2: detected capacity change from 0 to 1764 [ 709.190802][ T4284] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 709.293221][T12222] loop2: detected capacity change from 0 to 1024 [ 709.557449][T12222] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 709.634302][T12222] EXT4-fs error (device loop2): ext4_get_first_dir_block:3605: inode #11: comm syz.2.2236: directory missing '..' [ 709.761786][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 710.086149][T12209] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 710.125820][T12209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 710.518245][ T4339] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 710.721501][ T4339] usb 3-1: Using ep0 maxpacket: 16 [ 710.739039][ T4339] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 710.754363][ T4339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.795007][ T4339] usb 3-1: Product: syz [ 710.799581][ T4339] usb 3-1: Manufacturer: syz [ 710.804205][ T4339] usb 3-1: SerialNumber: syz [ 711.539818][ T4284] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 711.712300][ T4339] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 711.738528][ T4339] usb 3-1: USB disconnect, device number 21 [ 711.851959][T12260] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2249'. [ 712.054073][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 714.524447][ T4284] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 714.535896][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2271'. [ 714.953012][ T4284] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 716.015479][T12338] sctp: [Deprecated]: syz.1.2278 (pid 12338) Use of int in max_burst socket option deprecated. [ 716.015479][T12338] Use struct sctp_assoc_value instead [ 716.369445][ T4284] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 716.482871][T12354] xt_NFQUEUE: number of total queues is 0 [ 716.511011][T12354] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2282'. [ 717.156505][ T4284] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 717.548722][T12371] device ipvlan2 entered promiscuous mode [ 717.584295][T12371] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 717.618693][T12371] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 718.704002][T12382] sock: sock_timestamping_bind_phc: sock not bind to device [ 718.783013][T12387] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2295'. [ 718.792896][T12387] netem: unknown loss type 13 [ 718.798253][T12387] netem: change failed [ 719.016363][ T4284] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 720.869197][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2308'. [ 721.334194][ T4284] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 722.079149][T12440] loop2: detected capacity change from 0 to 2048 [ 722.122228][T12440] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 722.143945][ T26] audit: type=1800 audit(1774374964.538:320): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2315" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 722.189006][ T4284] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 722.268709][ T26] audit: type=1800 audit(1774374964.566:321): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2315" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 723.481194][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 723.610115][T12466] xt_NFQUEUE: number of total queues is 0 [ 723.672434][T12459] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2323'. [ 723.941663][ T4284] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 724.327183][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 724.333579][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 724.632118][ T4284] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 724.721290][T12487] loop2: detected capacity change from 0 to 40427 [ 724.741681][T12487] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 724.806244][T12487] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 724.888812][T12487] F2FS-fs (loop2): Found nat_bits in checkpoint [ 725.001711][T12487] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 725.011251][T12487] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 725.192670][T12487] syz.2.2332: attempt to access beyond end of device [ 725.192670][T12487] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 725.321828][T12516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 725.329159][T11262] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 725.329827][T12516] IPv6: NLM_F_CREATE should be set when creating new route [ 725.402948][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 725.909103][T11262] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.927512][T11262] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 725.954055][T11262] usb 1-1: config 1 has no interface number 0 [ 725.999570][T11262] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 726.083222][T11262] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 726.137736][T11262] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 726.160899][T11262] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 726.186132][T11262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.215937][T11262] usb 1-1: Product: syz [ 726.220445][T11262] usb 1-1: Manufacturer: syz [ 726.225054][T11262] usb 1-1: SerialNumber: syz [ 726.294988][T12508] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 726.590266][ T9871] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 726.612359][ T4284] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 726.655674][ T4284] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 726.763703][T12508] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 726.816236][ T9871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.836117][ T9871] usb 3-1: config 0 has no interfaces? [ 726.856609][ T9871] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 726.871945][ T9871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.890938][ T9871] usb 3-1: config 0 descriptor?? [ 727.114672][ T9871] usb 3-1: USB disconnect, device number 22 [ 727.241036][T11262] cdc_ncm 1-1:1.1: bind() failure [ 727.299032][T12548] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 727.324051][T12548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 727.519574][T11262] usb 1-1: USB disconnect, device number 22 [ 727.872716][T12548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 728.415030][T12558] loop2: detected capacity change from 0 to 1764 [ 729.121463][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 729.218881][ T4314] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 729.256544][T12568] loop2: detected capacity change from 0 to 512 [ 729.331450][T12568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 729.346407][T12568] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.434184][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.470779][ T4314] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 729.523325][ T4314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.576782][ T4314] usb 1-1: config 0 descriptor?? [ 729.585219][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 729.787537][ T4284] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 730.132069][ T4314] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 730.155335][ T4314] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input9 [ 730.659588][T12599] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 730.670233][T12599] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 730.780640][T12599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 731.157294][T12601] xt_NFQUEUE: number of total queues is 0 [ 731.179376][T12601] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2372'. [ 731.205663][ T4314] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 731.515916][ T4284] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 731.655573][ T4314] usb 1-1: USB disconnect, device number 23 [ 731.797470][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 732.027801][T12616] fido_id[12616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 732.716197][ T4284] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 733.047781][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 734.722368][ T4284] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 734.745069][ T4284] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 735.578975][T12678] xt_NFQUEUE: number of total queues is 0 [ 735.606210][T12678] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2396'. [ 735.627045][ T4284] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 737.388602][T12724] xt_NFQUEUE: number of total queues is 0 [ 737.402555][ T4284] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 737.566506][T12721] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2411'. [ 739.060872][ T6293] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 739.349208][ T6293] usb 3-1: Using ep0 maxpacket: 32 [ 739.355919][ T6293] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 739.364255][ T6293] usb 3-1: config 0 has no interface number 0 [ 739.373914][ T6293] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 739.385280][ T6293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.400780][ T6293] usb 3-1: Product: syz [ 739.407687][ T6293] usb 3-1: Manufacturer: syz [ 739.414385][ T6293] usb 3-1: SerialNumber: syz [ 739.430747][ T6293] usb 3-1: config 0 descriptor?? [ 739.446057][ T6293] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 739.465804][ T6293] usb 3-1: selecting invalid altsetting 1 [ 739.490910][ T6293] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 739.532051][ T6293] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 739.558980][ T6293] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 739.582080][ T6293] usb 3-1: media controller created [ 739.639748][ T6293] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 739.947124][ T6293] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 739.973161][ T6293] zl10353_read_register: readreg error (reg=127, ret==-71) [ 739.999088][ T6293] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 740.153800][ T6293] usb 3-1: USB disconnect, device number 23 [ 740.308867][ T4284] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 740.431193][T12775] xt_NFQUEUE: number of total queues is 0 [ 740.617347][T12775] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2432'. [ 740.668733][T12795] loop2: detected capacity change from 0 to 512 [ 740.770205][T12795] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2440: inode has both inline data and extents flags [ 740.800236][T12795] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2440: couldn't read orphan inode 15 (err -117) [ 740.868567][T12795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 741.107860][T12788] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 741.118147][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 741.129971][T12788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 741.291121][T12811] mmap: syz.1.2446 (12811): VmData 37457920 exceed data ulimit 2047. Update limits or use boot option ignore_rlimit_data. [ 741.970166][T12816] loop2: detected capacity change from 0 to 4096 [ 742.158346][T12816] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 742.200077][T12816] EXT4-fs (loop2): shut down requested (1) [ 742.406267][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 743.559925][ T4284] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 744.161673][T12832] loop2: detected capacity change from 0 to 32768 [ 744.301379][T12832] XFS (loop2): Mounting V5 Filesystem [ 744.384786][T12832] XFS (loop2): Ending clean mount [ 744.464216][T12832] XFS (loop2): User initiated shutdown received. [ 744.489741][T12832] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 744.564398][T12832] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 744.797095][ T4268] XFS (loop2): Unmounting Filesystem [ 745.690195][T12873] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 745.743193][T12873] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 745.796952][T12873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 746.677738][T12904] netlink: 'syz.2.2477': attribute type 3 has an invalid length. [ 747.395580][T12922] xt_NFQUEUE: number of total queues is 0 [ 747.524139][ T9871] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 747.767618][ T9871] usb 1-1: Using ep0 maxpacket: 32 [ 747.828429][ T9871] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 747.864229][ T9871] usb 1-1: config 0 has no interface number 0 [ 747.874565][ T9871] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 747.895426][ T9871] usb 1-1: config 0 interface 85 has no altsetting 0 [ 747.913055][ T9871] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 747.928388][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 747.935951][ T9871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.965409][ T9871] usb 1-1: Product: syz [ 747.974409][ T9871] usb 1-1: Manufacturer: syz [ 747.997746][ T9871] usb 1-1: SerialNumber: syz [ 748.034842][ T9871] usb 1-1: config 0 descriptor?? [ 748.704446][ T9871] appletouch 1-1:0.85: Geyser mode initialized. [ 748.715480][ T9871] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input10 [ 748.941889][ T9871] usb 1-1: USB disconnect, device number 24 [ 748.989939][ T9871] appletouch 1-1:0.85: input: appletouch disconnected [ 749.079841][T12942] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 749.099715][T12942] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 749.117113][T12942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 749.941262][ T4284] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 750.522307][T12966] loop2: detected capacity change from 0 to 512 [ 751.650492][ T4314] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 751.948262][ T4314] usb 3-1: Using ep0 maxpacket: 8 [ 751.955771][ T4314] usb 3-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 751.978290][ T4314] usb 3-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.025780][ T4314] usb 3-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.069972][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 752.095791][ T4314] usb 3-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 752.180894][ T4314] usb 3-1: config 0 interface 0 has no altsetting 0 [ 752.214168][ T4314] usb 3-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 752.285071][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.543958][T13002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 752.898032][ T4284] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 752.922293][ T4314] usb 3-1: config 0 descriptor?? [ 753.227874][T13002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 753.368855][ T4314] wacom 0003:056A:010E.000A: unbalanced collection at end of report description [ 753.391169][ T4314] wacom 0003:056A:010E.000A: parse failed [ 753.396952][ T4314] wacom: probe of 0003:056A:010E.000A failed with error -22 [ 753.599135][ T6293] usb 3-1: USB disconnect, device number 24 [ 753.743468][ T4314] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 753.946551][ T4314] usb 1-1: Using ep0 maxpacket: 16 [ 753.953608][ T4314] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 753.981121][ T4314] usb 1-1: config 0 has no interface number 0 [ 754.002811][ T4314] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 754.042567][ T4314] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 754.089608][ T4314] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 754.113961][ T4314] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 754.133423][ T4314] usb 1-1: Product: syz [ 754.144115][ T4314] usb 1-1: SerialNumber: syz [ 754.166576][ T4314] usb 1-1: config 0 descriptor?? [ 754.204347][ T4314] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 754.249659][ T4314] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input11 [ 754.892214][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 754.902016][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 754.909465][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 754.916745][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 754.929129][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 754.940498][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 754.947736][ T4314] usb 1-1: USB disconnect, device number 25 [ 754.996732][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 755.013949][ T4314] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 755.499180][T13039] netlink: 'syz.5.2528': attribute type 10 has an invalid length. [ 755.521138][T13039] device syz_tun entered promiscuous mode [ 755.635322][T13039] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 756.326155][T13035] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 756.374136][T13035] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 756.468677][T13035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 758.776389][ T4311] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 758.985251][T13097] netlink: 'syz.1.2551': attribute type 10 has an invalid length. [ 758.995745][ T4311] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 759.017592][ T4311] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 759.049443][T13079] loop2: detected capacity change from 0 to 32768 [ 759.060589][ T4311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 759.088951][ T4311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 759.126562][ T4311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 759.168796][T13079] XFS (loop2): Mounting V5 Filesystem [ 759.180740][T13097] device syz_tun entered promiscuous mode [ 759.190307][ T4311] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 759.241989][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 759.278104][ T4311] usb 1-1: Product: syz [ 759.287310][ T4311] usb 1-1: Manufacturer: syz [ 759.323047][T13079] XFS (loop2): Ending clean mount [ 759.343494][ T4311] cdc_wdm 1-1:1.0: skipping garbage [ 759.364213][ T4311] cdc_wdm 1-1:1.0: skipping garbage [ 759.393677][ T4311] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 759.410454][ T4311] cdc_wdm 1-1:1.0: Unknown control protocol [ 759.444028][T13097] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 759.489257][T13079] XFS (loop2): Quotacheck needed: Please wait. [ 759.791502][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 759.847161][ T4311] usb 1-1: USB disconnect, device number 26 [ 760.193601][T13079] XFS (loop2): Quotacheck: Done. [ 760.539459][ T4268] XFS (loop2): Unmounting Filesystem [ 760.930263][T13133] 9pnet_fd: Insufficient options for proto=fd [ 761.319957][ T4284] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 762.376274][ T4284] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 763.564399][T13162] 9pnet_fd: Insufficient options for proto=fd [ 764.022670][T13163] loop2: detected capacity change from 0 to 32768 [ 764.049447][T13163] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.2573 (13163) [ 764.061977][ T22] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 764.115036][T13163] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 764.136314][T13163] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 764.180501][T13163] BTRFS info (device loop2): enabling ssd optimizations [ 764.200948][T13163] BTRFS info (device loop2): turning on async discard [ 764.218913][T13163] BTRFS info (device loop2): using free space tree [ 764.422179][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 764.433715][ T22] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 764.537031][ T4284] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 765.028589][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.047403][ T22] usb 1-1: config 0 descriptor?? [ 765.278005][ T22] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 765.292618][T13197] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2579'. [ 765.304669][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 765.315134][ T22] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 765.326296][ T22] usb 1-1: media controller created [ 765.352620][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 765.377773][ T4268] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 765.493860][ T22] az6027: usb out operation failed. (-71) [ 765.519655][ T22] az6027: usb out operation failed. (-71) [ 765.525514][ T22] stb0899_attach: Driver disabled by Kconfig [ 765.549170][ T22] az6027: no front-end attached [ 765.549170][ T22] [ 765.575566][ T22] az6027: usb out operation failed. (-71) [ 765.581349][ T22] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 765.593280][ T22] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 765.613705][ T22] dvb-usb: schedule remote query interval to 400 msecs. [ 765.621369][ T22] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 765.637791][ T22] usb 1-1: USB disconnect, device number 27 [ 765.981768][ T4284] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 766.068486][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 766.305798][ T22] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 766.431595][T13208] loop2: detected capacity change from 0 to 512 [ 766.455977][T13208] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 766.511017][T13208] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 766.554259][T13208] System zones: 0-1, 15-15, 18-18, 34-34 [ 766.561064][T13208] EXT4-fs (loop2): orphan cleanup on readonly fs [ 766.567781][T13208] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 766.578536][T13208] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 766.624077][T13208] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 766.634998][T13208] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2581: bg 0: block 40: padding at end of block bitmap is not set [ 766.654282][T13208] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 766.666009][T13208] EXT4-fs (loop2): 1 truncate cleaned up [ 766.671760][T13208] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 766.742953][T13208] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.2581: bad symlink. [ 766.852767][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 766.975358][T13228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2593'. [ 767.186363][ T4269] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 767.207781][ T4280] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 767.412946][ T4280] usb 3-1: Using ep0 maxpacket: 8 [ 767.428034][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 767.441762][ T4280] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 767.464153][ T4269] usb 1-1: Using ep0 maxpacket: 16 [ 767.468164][ T4280] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 767.471060][ T4269] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.482164][ T4280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.503080][ T4280] usb 3-1: Product: syz [ 767.507395][ T4280] usb 3-1: Manufacturer: syz [ 767.512132][ T4280] usb 3-1: SerialNumber: syz [ 767.526329][ T4280] usb 3-1: config 0 descriptor?? [ 767.535032][ T4269] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.540811][ T4280] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 767.562242][ T4280] usb 3-1: setting power ON [ 767.567730][ T4280] dvb-usb: bulk message failed: -22 (2/0) [ 767.589883][ T4280] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 767.597581][ T4269] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 767.612580][ T4280] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 767.621282][ T4280] usb 3-1: media controller created [ 767.646065][ T4280] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 767.655852][ T4269] usb 1-1: config 0 interface 0 has no altsetting 0 [ 767.673379][ T4269] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 767.691594][ T4280] usb 3-1: selecting invalid altsetting 6 [ 767.700060][ T4280] usb 3-1: digital interface selection failed (-22) [ 767.700065][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.713664][ T4269] usb 1-1: config 0 descriptor?? [ 767.714876][ T4280] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 767.729845][ T4280] usb 3-1: setting power OFF [ 767.739891][ T4280] dvb-usb: bulk message failed: -22 (2/0) [ 767.747918][ T4280] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 767.754439][T13224] dvb-usb: bulk message failed: -22 (3/0) [ 767.772071][ T4280] (NULL device *): no alternate interface [ 767.779911][T13224] dvb-usb: bulk message failed: -22 (4/0) [ 767.827568][T13224] dvb-usb: bulk message failed: -22 (3/0) [ 767.858007][ T4280] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 767.879648][ T4280] usb 3-1: USB disconnect, device number 25 [ 768.432202][ T4269] usb 1-1: USB disconnect, device number 28 [ 769.059370][ T4284] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 769.334618][ T4284] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 769.451976][ T4314] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 769.686992][ T4314] usb 3-1: Using ep0 maxpacket: 16 [ 769.704336][ T4314] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 769.910921][ T4314] usb 3-1: config 0 has no interface number 0 [ 769.917692][ T4314] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.936281][ T4314] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.948923][ T4314] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 769.964899][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.987296][ T4314] usb 3-1: config 0 descriptor?? [ 770.437294][ T4314] hid (null): unknown global tag 0xe [ 770.449995][ T4314] hid (null): unknown global tag 0xd [ 770.665787][T13315] device syz_tun left promiscuous mode [ 770.672435][T13315] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 770.687291][ T6039] usb 3-1: USB disconnect, device number 26 [ 770.693501][T13315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 771.044475][ T4314] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 771.074200][ T4284] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 771.289842][ T4314] usb 1-1: Using ep0 maxpacket: 32 [ 771.315733][ T4314] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 771.399851][ T4314] usb 1-1: config 0 has no interface number 0 [ 771.457347][ T4314] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 771.559851][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.640883][ T4314] usb 1-1: Product: syz [ 771.681074][ T4314] usb 1-1: Manufacturer: syz [ 771.732480][ T4314] usb 1-1: SerialNumber: syz [ 771.787049][ T4314] usb 1-1: config 0 descriptor?? [ 771.891717][ T4314] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 771.946916][ T4314] usb 1-1: selecting invalid altsetting 1 [ 771.966858][ T4314] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 772.009138][ T4314] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 772.087515][ T4314] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 772.108853][ T4314] usb 1-1: media controller created [ 772.170950][ T4314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 772.373743][ T4314] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 772.390735][ T4314] zl10353_read_register: readreg error (reg=127, ret==-71) [ 772.441436][ T4314] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 772.531986][T13371] xt_NFQUEUE: number of total queues is 0 [ 772.537937][ T4314] usb 1-1: USB disconnect, device number 29 [ 772.570101][T13371] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2653'. [ 772.871771][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 774.581490][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 775.213588][T13400] loop2: detected capacity change from 0 to 32768 [ 775.259658][T13400] [ 775.259658][T13400] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 775.259658][T13400] [ 775.391719][ T5380] ERROR: (device loop2): diWrite: ixpxd invalid [ 775.391719][ T5380] [ 775.429509][ T5380] ERROR: (device loop2): txCommit: [ 775.429509][ T5380] [ 775.446996][ T5380] jfs_write_inode: jfs_commit_inode failed! [ 775.464524][ T4268] [ 775.464524][ T4268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 775.464524][ T4268] [ 775.487369][ T4268] [ 775.487369][ T4268] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 775.487369][ T4268] [ 776.126195][T13431] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2680'. [ 776.162659][T13431] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2680'. [ 776.204377][T13432] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2680'. [ 776.248447][T13431] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2680'. [ 776.540500][T13429] loop2: detected capacity change from 0 to 32768 [ 777.640351][T13460] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 777.808595][ T4284] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 780.114784][T13503] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 780.124976][T13503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 781.088037][T13525] 9pnet_fd: Insufficient options for proto=fd [ 781.569778][T13527] loop2: detected capacity change from 0 to 32768 [ 781.593720][T13527] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2711 (13527) [ 782.966271][T13527] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 783.040052][T13527] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 783.082244][T13527] BTRFS info (device loop2): using free space tree [ 783.512110][ T4284] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 784.819058][ T4284] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 784.827716][ T4284] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 785.455575][T13527] BTRFS error (device loop2): open_ctree failed: -22 [ 785.494035][ T4280] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 785.595335][T13589] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 785.737380][ T4280] usb 1-1: Using ep0 maxpacket: 8 [ 785.746575][ T4280] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 785.755774][ T4280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.769177][ T4280] pvrusb2: Hardware description: Terratec Grabster AV400 [ 785.778315][ T4280] pvrusb2: ********** [ 785.782407][ T4280] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 785.792708][ T4280] pvrusb2: Important functionality might not be entirely working. [ 785.800516][ T4280] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 785.813388][ T4280] pvrusb2: ********** [ 785.987531][ T2305] pvrusb2: Invalid write control endpoint [ 786.044406][ T2305] pvrusb2: Invalid write control endpoint [ 786.050811][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 786.063218][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 786.070997][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 786.083580][ T2305] pvrusb2: Device being rendered inoperable [ 786.089548][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 786.096748][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 786.105321][ T2305] pvrusb2: Attached sub-driver cx25840 [ 786.110811][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 786.121014][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 786.216480][T13594] pvrusb2: Attempted to execute control transfer when device not ok [ 786.233564][ T4508] usb 1-1: USB disconnect, device number 30 [ 786.702403][T13625] loop2: detected capacity change from 0 to 4096 [ 786.718685][T13625] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 788.109657][T13589] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 789.559014][T13670] loop2: detected capacity change from 0 to 256 [ 789.615298][T13670] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 789.989751][T13680] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 790.001890][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 790.001973][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 790.207620][ T4277] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 790.214630][T13589] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 792.109271][T13710] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 792.187091][T13710] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 792.262601][T13710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 792.853952][T13728] loop2: detected capacity change from 0 to 128 [ 792.889215][T13727] xt_NFQUEUE: number of total queues is 0 [ 792.901679][T13727] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2773'. [ 794.154838][T13739] loop2: detected capacity change from 0 to 32768 [ 794.686081][T13774] input: syz1 as /devices/virtual/input/input13 [ 795.679915][T13589] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 795.695588][T13779] loop2: detected capacity change from 0 to 131072 [ 795.739921][T13779] F2FS-fs (loop2): invalid crc value [ 795.771118][T13787] xt_NFQUEUE: number of total queues is 0 [ 795.791361][T13787] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2798'. [ 795.865574][T13779] F2FS-fs (loop2): Found nat_bits in checkpoint [ 795.975697][T13779] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 796.808059][ T4314] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 797.044925][ T4314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.081982][ T4314] usb 1-1: config 0 has no interfaces? [ 797.095126][ T4314] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 797.137458][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.176216][ T4314] usb 1-1: Product: syz [ 797.180647][ T4314] usb 1-1: Manufacturer: syz [ 797.200302][ T4314] usb 1-1: SerialNumber: syz [ 797.209521][ T4314] usb 1-1: config 0 descriptor?? [ 797.455165][ T4314] usb 1-1: USB disconnect, device number 31 [ 798.569120][T13838] device syz_tun left promiscuous mode [ 798.575322][T13838] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 798.590994][T13838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 798.626691][T13832] xt_NFQUEUE: number of total queues is 0 [ 798.764508][T13832] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2815'. [ 798.814368][T13842] loop2: detected capacity change from 0 to 4096 [ 798.857335][T13842] ntfs: volume version 3.1. [ 800.242737][T13867] xt_NFQUEUE: number of total queues is 0 [ 800.252458][T13867] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2823'. [ 800.649070][T13880] loop8: detected capacity change from 0 to 8 [ 800.670895][T11373] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 800.680487][T11373] loop8: partition table partially beyond EOD, truncated [ 800.689588][T11373] loop8: p1 size 1204205415 extends beyond EOD, truncated [ 800.837074][T13880] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 800.853103][T13880] loop8: partition table partially beyond EOD, truncated [ 800.860499][T13880] loop8: p1 size 1204205415 extends beyond EOD, truncated [ 800.880320][T13885] xt_NFQUEUE: number of total queues is 0 [ 800.899909][T13885] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2830'. [ 801.007392][T11373] udevd[11373]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 801.020415][T13889] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 801.043018][T13889] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 801.053457][T11373] udevd[11373]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 801.066341][T13889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 803.876461][T13918] loop2: detected capacity change from 0 to 256 [ 803.977418][T13918] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 804.254581][T13925] loop2: detected capacity change from 0 to 512 [ 804.279767][T13925] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 804.315936][T13925] EXT4-fs (loop2): orphan cleanup on readonly fs [ 804.342995][T13925] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.2844: Block bitmap for bg 0 marked uninitialized [ 804.386999][T13925] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 804.410348][T13925] EXT4-fs (loop2): 1 orphan inode deleted [ 804.422669][T13925] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 804.449100][T13925] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 804.523232][T13925] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 804.566382][T13925] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.2844: Block bitmap for bg 0 marked uninitialized [ 804.589083][T13925] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.2844: Block bitmap for bg 0 marked uninitialized [ 804.603111][T13925] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.2844: Block bitmap for bg 0 marked uninitialized [ 804.673860][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 805.121197][T13950] loop2: detected capacity change from 0 to 16 [ 805.184857][T13950] erofs: (device loop2): mounted with root inode @ nid 36. [ 805.246634][ T26] audit: type=1800 audit(1774375042.312:322): pid=13950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2854" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 805.414638][T13954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 805.445191][T13954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 807.423393][T14002] overlayfs: failed to clone upperpath [ 807.651286][T14016] overlayfs: failed to clone upperpath [ 808.679577][T13589] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 809.207565][T14030] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 809.215880][T14030] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 809.234334][T14030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 809.674071][T11262] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 810.519973][T11262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.534164][T11262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.546251][T11262] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 810.569074][T11262] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 810.599322][T11262] usb 1-1: Manufacturer: syz [ 810.746461][T11262] usb 1-1: config 0 descriptor?? [ 811.370756][ C1] hrtimer: interrupt took 20605 ns [ 811.970921][T14078] xt_NFQUEUE: number of total queues is 0 [ 811.996522][T14076] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2896'. [ 812.752403][T11262] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000D/input/input14 [ 812.840127][T14079] xt_NFQUEUE: number of total queues is 0 [ 812.850100][T11262] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000D/input/input15 [ 812.919241][T11262] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000D/input/input16 [ 812.938532][T14085] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2897'. [ 812.983555][T11262] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000D/input/input17 [ 813.188312][T11262] uclogic 0003:256C:006D.000D: input,hiddev0,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 813.346495][T11262] usb 1-1: USB disconnect, device number 32 [ 814.218107][T14099] fido_id[14099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 815.336439][ T26] audit: type=1326 audit(1774375051.745:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39e19c799 code=0x7ffc0000 [ 815.344656][T14087] loop2: detected capacity change from 0 to 32768 [ 815.363035][ T26] audit: type=1326 audit(1774375051.783:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39e19c799 code=0x7ffc0000 [ 815.455216][ T26] audit: type=1326 audit(1774375051.783:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39e19c799 code=0x7ffc0000 [ 815.559433][ T26] audit: type=1326 audit(1774375051.783:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb39e19c799 code=0x7ffc0000 [ 815.624435][T14087] XFS (loop2): Mounting V5 Filesystem [ 815.684075][ T26] audit: type=1326 audit(1774375051.783:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.1.2911" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb39e19c799 code=0x0 [ 815.706663][ T26] audit: type=1326 audit(1774375051.829:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39e19c799 code=0x7ffc0000 [ 815.730827][ T26] audit: type=1326 audit(1774375051.829:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39e19c799 code=0x7ffc0000 [ 815.759514][ T26] audit: type=1326 audit(1774375051.886:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39e19c799 code=0x7ffc0000 [ 815.782553][ T26] audit: type=1326 audit(1774375051.886:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb39e19c502 code=0x7ffc0000 [ 815.805806][ T26] audit: type=1326 audit(1774375051.886:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14123 comm="syz.1.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb39e19c597 code=0x7ffc0000 [ 815.837718][T14087] XFS (loop2): Ending clean mount [ 815.932609][T14087] XFS (loop2): Quotacheck needed: Please wait. [ 816.156053][T13589] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 816.623859][T14087] XFS (loop2): Quotacheck: Done. [ 816.685478][ T4268] XFS (loop2): Unmounting Filesystem [ 817.898881][T14180] xt_NFQUEUE: number of total queues is 0 [ 818.856366][T14180] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2928'. [ 819.330043][T13589] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 819.764894][T14197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2934'. [ 821.599639][ T9871] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 821.803455][ T9871] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 821.817405][ T9871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 821.849584][ T9871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 821.899196][ T9871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 821.913974][ T9871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 821.924123][ T9871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 821.935316][ T9871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 821.969645][ T9871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.636617][ T9871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.652065][ T9871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 822.668769][ T9871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.677827][ T9871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.689838][ T9871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 822.719293][ T9871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.750227][ T9871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.769206][ T9871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 822.796519][ T9871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.805459][ T9871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.821750][ T9871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 822.833301][T14256] xt_NFQUEUE: number of total queues is 0 [ 822.849949][ T9871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.858856][ T9871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.896821][ T9871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 822.906125][ T9871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.923294][ T9871] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.954362][ T9871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 822.961335][T14256] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2959'. [ 822.980538][ T9871] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 822.996190][ T9871] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 823.017955][ T9871] usb 3-1: Product: syz [ 823.029031][ T9871] usb 3-1: Manufacturer: syz [ 823.291338][ T9871] usb 3-1: SerialNumber: syz [ 823.356093][ T9871] usb 3-1: config 0 descriptor?? [ 823.471024][ T9871] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 823.696918][ T9871] usb 3-1: USB disconnect, device number 27 [ 823.712643][ T9871] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 826.337681][T14338] overlayfs: failed to clone upperpath [ 827.064079][ T4523] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.263137][ T4523] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.399183][ T4523] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.611562][ T4523] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.932362][ T4523] tipc: Left network mode [ 827.999856][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 828.010579][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 828.019299][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 828.029066][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 828.036871][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 828.048517][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 828.207845][T14374] lo speed is unknown, defaulting to 1000 [ 828.414357][T14391] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3010'. [ 828.812494][T14374] chnl_net:caif_netlink_parms(): no params data found [ 828.932088][T14415] loop2: detected capacity change from 0 to 256 [ 829.091337][T14420] 9pnet_fd: Insufficient options for proto=fd [ 829.349729][T14374] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.381995][T14374] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.428236][T14374] device bridge_slave_0 entered promiscuous mode [ 829.508255][T14374] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.526367][T14374] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.538183][T14374] device bridge_slave_1 entered promiscuous mode [ 829.652468][T14374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.699221][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3028'. [ 830.017923][T14438] loop2: detected capacity change from 0 to 32768 [ 830.069959][T14438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3025 (14438) [ 830.088594][T14374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.331902][T13589] Bluetooth: hci2: command 0x0409 tx timeout [ 830.686498][T14438] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 830.779079][T14438] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 830.916042][T14438] BTRFS info (device loop2): using free space tree [ 830.970378][T14374] team0: Port device team_slave_0 added [ 831.052883][T14374] team0: Port device team_slave_1 added [ 831.165568][ T4523] device hsr_slave_0 left promiscuous mode [ 831.181691][ T4523] device hsr_slave_1 left promiscuous mode [ 831.214758][ T4523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.259916][T14438] BTRFS info (device loop2): enabling ssd optimizations [ 831.288642][ T4523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.317588][ T4523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.362665][ T4523] device bridge_slave_1 left promiscuous mode [ 831.381841][ T4523] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.400039][ T4523] device bridge_slave_0 left promiscuous mode [ 831.413432][ T4523] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.413472][ T4268] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 831.479125][ T4523] device veth1_macvtap left promiscuous mode [ 831.485787][ T4523] device veth0_macvtap left promiscuous mode [ 831.492038][ T4523] device veth1_vlan left promiscuous mode [ 831.498822][ T4523] device veth0_vlan left promiscuous mode [ 832.333254][ T4523] team0 (unregistering): Port device team_slave_1 removed [ 832.381623][ T4523] team0 (unregistering): Port device team_slave_0 removed [ 832.435713][ T4523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.486107][ T4523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.556300][T13589] Bluetooth: hci2: command 0x041b tx timeout [ 832.846312][ T4523] bond0 (unregistering): Released all slaves [ 832.976242][T14499] netlink: 16146 bytes leftover after parsing attributes in process `syz.2.3039'. [ 832.986445][T14374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.064172][T14374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.105983][T14503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3040'. [ 833.129888][T14374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.196631][T14374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.203710][T14374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.258839][T14374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.294250][T14374] device hsr_slave_0 entered promiscuous mode [ 833.301643][T14374] device hsr_slave_1 entered promiscuous mode [ 834.273526][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3047'. [ 834.288780][T14522] netlink: 'syz.2.3047': attribute type 5 has an invalid length. [ 834.327621][T14522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3047'. [ 834.367689][T14522] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 834.389484][T14522] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 834.399727][T14522] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 834.408926][T14522] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 834.418841][T14522] device geneve2 entered promiscuous mode [ 834.681406][T14541] loop2: detected capacity change from 0 to 512 [ 834.775592][T13589] Bluetooth: hci2: command 0x040f tx timeout [ 834.801605][T14374] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 834.818416][T14541] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3054: inode has both inline data and extents flags [ 834.833293][T14541] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3054: couldn't read orphan inode 15 (err -117) [ 834.854268][T14374] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 834.861204][T14541] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 834.878536][T14374] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 834.920896][T14374] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 835.079350][T14374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.403628][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 835.411648][T13589] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 835.674208][T13589] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 835.724556][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 835.791596][T14374] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.882357][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 835.901687][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 835.910392][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.917117][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 835.917670][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.066405][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 836.116922][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 836.144594][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 836.181993][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.189198][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.326918][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 836.365667][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 836.424320][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 836.492028][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 836.534719][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 836.567932][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 836.589704][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 836.642692][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 836.698829][T14374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 836.741228][T14374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 837.084189][T13589] Bluetooth: hci2: command 0x0419 tx timeout [ 837.334653][T14580] netlink: 'syz.2.3065': attribute type 4 has an invalid length. [ 837.405240][T14585] netlink: 'syz.1.3066': attribute type 4 has an invalid length. [ 837.485028][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 837.527015][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 837.554979][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 837.626943][ T41] lo speed is unknown, defaulting to 1000 [ 837.687438][T14599] kvm [14598]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x7fffffff [ 838.008067][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 838.142445][T13589] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 838.579354][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 838.606974][T14374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.140960][T14635] loop2: detected capacity change from 0 to 4096 [ 839.224645][T14641] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 839.332738][T14635] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 840.015340][T13589] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 840.560558][T14672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 841.001204][T13589] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 841.033242][T14672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 841.279980][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 841.293206][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 841.354485][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 841.387032][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 841.414314][T14374] device veth0_vlan entered promiscuous mode [ 841.430905][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 841.455099][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 841.471565][T14374] device veth1_vlan entered promiscuous mode [ 841.517255][T14374] device veth0_macvtap entered promiscuous mode [ 841.525618][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 841.553707][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 841.567908][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 841.582402][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 841.598550][T14374] device veth1_macvtap entered promiscuous mode [ 841.610964][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 841.621295][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 841.688593][T14374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.699597][T14374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.716465][T14374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.733388][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 841.743395][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 841.757610][T14374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.768551][T14374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.783736][T14374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.816925][T14374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.834498][T14374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.852827][T14374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.864018][T14374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.878031][T14374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.890148][T14374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.902063][T14374] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.913298][T14374] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.926685][T14374] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.946913][T14374] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.966224][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 841.986206][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 842.137012][ T5452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.163771][ T5452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.189993][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 842.216830][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.239110][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.261015][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 842.898845][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 842.910816][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 842.935507][T14729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 843.181955][T14729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 843.206024][ T41] lo speed is unknown, defaulting to 1000 [ 843.404759][T14734] loop2: detected capacity change from 0 to 512 [ 843.484108][T14734] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 843.511884][T14734] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 843.776416][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 844.779413][T14758] loop2: detected capacity change from 0 to 32768 [ 844.823437][T14758] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3108 (14758) [ 844.922344][T14758] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 844.980818][T14758] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 844.989600][T14758] BTRFS info (device loop2): enabling auto defrag [ 845.036348][T14758] BTRFS info (device loop2): use no compression [ 845.042683][T14758] BTRFS info (device loop2): max_inline at 4096 [ 845.093440][T14758] BTRFS info (device loop2): using free space tree [ 845.537068][T14815] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 845.549092][T14815] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 846.170039][T14815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 846.178617][T14758] BTRFS info (device loop2): enabling ssd optimizations [ 846.444107][ T4268] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 846.743273][T14786] loop6: detected capacity change from 0 to 32768 [ 846.881575][T14786] XFS (loop6): Mounting V5 Filesystem [ 847.012334][T14786] XFS (loop6): Ending clean mount [ 847.050347][T14786] XFS (loop6): Quotacheck needed: Please wait. [ 847.223690][T14786] XFS (loop6): Quotacheck: Done. [ 847.422367][T14374] XFS (loop6): Unmounting Filesystem [ 848.750800][T14882] netlink: 'syz.2.3139': attribute type 4 has an invalid length. [ 849.902404][T14894] loop6: detected capacity change from 0 to 64 [ 850.454217][T14911] loop6: detected capacity change from 0 to 4096 [ 850.708690][ T4995] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 850.943630][ T4995] usb 3-1: Using ep0 maxpacket: 32 [ 850.992035][ T4995] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 851.080857][ T4995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.294219][ T4995] usb 3-1: config 0 descriptor?? [ 851.536319][ T4995] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 851.570983][ T4995] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 851.600092][ T4995] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 851.621926][ T4995] usb 3-1: media controller created [ 851.665503][ T4995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 851.785278][T14374] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 851.805444][T14374] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 851.819304][ T4995] az6027: usb out operation failed. (-71) [ 851.827673][ T4995] az6027: usb out operation failed. (-71) [ 851.839184][ T4995] stb0899_attach: Driver disabled by Kconfig [ 851.846772][ T4995] az6027: no front-end attached [ 851.846772][ T4995] [ 851.856375][ T4995] az6027: usb out operation failed. (-71) [ 851.863464][ T4995] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 851.889940][T13589] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 851.938685][ T4995] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 852.010726][ T4995] dvb-usb: schedule remote query interval to 400 msecs. [ 852.041384][ T4995] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 852.239396][ T4995] usb 3-1: USB disconnect, device number 28 [ 852.551758][ T4995] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 852.761918][T14958] 9pnet_fd: Insufficient options for proto=fd [ 852.868287][T14964] loop6: detected capacity change from 0 to 128 [ 853.409972][T13589] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 854.653436][T13589] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 855.383555][ T41] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 855.641073][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 855.652206][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 855.716311][T13589] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 856.256232][ T41] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 856.297183][ T41] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 856.427471][ T41] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 856.448887][ T41] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 856.493508][ T41] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 856.633884][T15026] loop6: detected capacity change from 0 to 512 [ 856.710605][ T41] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 856.720537][ T41] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 856.728678][ T41] usb 3-1: Product: syz [ 856.733351][ T41] usb 3-1: Manufacturer: syz [ 856.806463][ T41] cdc_wdm 3-1:1.0: skipping garbage [ 856.918382][ T41] cdc_wdm 3-1:1.0: skipping garbage [ 856.960321][T13589] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 857.025953][ T41] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 857.032275][ T41] cdc_wdm 3-1:1.0: Unknown control protocol [ 857.225063][T15026] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 857.255368][T15026] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 857.468912][T14374] EXT4-fs (loop6): unmounting filesystem. [ 858.107225][T13589] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 858.816790][ T4314] usb 3-1: USB disconnect, device number 29 [ 859.825421][T13589] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 859.867129][T15058] xt_NFQUEUE: number of total queues is 0 [ 859.898786][T15058] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3189'. [ 861.622840][ T4435] tipc: Subscription rejected, illegal request [ 862.894387][T15115] xt_NFQUEUE: number of total queues is 0 [ 862.904912][T15129] tipc: Started in network mode [ 862.909831][T15129] tipc: Node identity ac14140f, cluster identity 4711 [ 862.969332][T15129] tipc: New replicast peer: 255.255.255.255 [ 863.009911][T15129] tipc: Enabled bearer , priority 10 [ 863.078408][T15130] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3205'. [ 863.820249][T13589] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 864.098210][ T4280] tipc: Node number set to 2886997007 [ 864.311516][T15157] fuse: Bad value for 'fd' [ 865.350066][T15175] overlayfs: failed to clone upperpath [ 865.716756][T15195] lo speed is unknown, defaulting to 1000 [ 866.283394][T15226] xt_NFQUEUE: number of total queues is 0 [ 866.298087][T15226] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3234'. [ 867.326577][T15238] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 867.335739][T15238] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 867.347344][T15238] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 867.355518][T15238] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 867.745980][T15238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 868.069670][T13589] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 868.879692][T15258] loop6: detected capacity change from 0 to 16 [ 868.916040][T15258] erofs: (device loop6): mounted with root inode @ nid 36. [ 869.055268][T15258] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 869.095474][T15258] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 869.120083][T15258] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 869.230788][T15265] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3244'. [ 869.352796][T15254] xt_NFQUEUE: number of total queues is 0 [ 869.447268][T15269] loop6: detected capacity change from 0 to 2048 [ 869.480605][T15269] EXT4-fs: Ignoring removed i_version option [ 869.487592][T15259] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3241'. [ 869.553170][T15273] lo speed is unknown, defaulting to 1000 [ 869.559383][T15269] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 869.593115][T15269] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.478532][T15269] support for the xor transformation has been removed. [ 870.664991][T15290] netlink: 'syz.5.3250': attribute type 39 has an invalid length. [ 870.865768][T14374] EXT4-fs (loop6): unmounting filesystem. [ 871.050178][T15305] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 871.062396][T15305] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 871.090825][T15305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 872.243066][T15331] xt_NFQUEUE: number of total queues is 0 [ 872.255883][T15332] xt_NFQUEUE: number of total queues is 0 [ 872.966081][T15331] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3261'. [ 873.038391][T15332] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3262'. [ 874.722264][T15395] xt_NFQUEUE: number of total queues is 0 [ 875.010329][T15395] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3278'. [ 875.251854][T13589] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 876.183995][ T4314] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 876.280592][T15424] lo speed is unknown, defaulting to 1000 [ 876.420713][ T4314] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 876.433983][ T4314] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 876.452831][ T4314] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 876.599049][ T4314] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 876.610057][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 876.625965][ T4314] usb 3-1: Product: syz [ 876.634985][T13589] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 876.651725][ T4314] usb 3-1: Manufacturer: syz [ 876.658036][ T4314] usb 3-1: SerialNumber: syz [ 877.010603][T15427] xt_NFQUEUE: number of total queues is 0 [ 877.075417][T15437] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3285'. [ 877.258566][ T4314] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 877.565471][ T4314] usb 3-1: USB disconnect, device number 30 [ 877.581909][ T4314] usblp0: removed [ 877.680480][T13589] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 878.626326][T15462] device macvtap1 entered promiscuous mode [ 878.659055][T15462] device macvtap2 entered promiscuous mode [ 878.874341][T15471] xt_NFQUEUE: number of total queues is 0 [ 878.930668][T15473] device syzkaller1 entered promiscuous mode [ 879.039824][T15471] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3297'. [ 879.087345][T15480] netlink: 'syz.5.3300': attribute type 1 has an invalid length. [ 880.641528][T13589] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 881.642785][T13589] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 882.858918][T15536] loop6: detected capacity change from 0 to 8 [ 883.653962][T13589] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 883.985169][T13589] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 886.347333][T15597] loop6: detected capacity change from 0 to 164 [ 886.405033][T13589] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 886.481485][T15597] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 886.946093][T15613] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 887.567597][T15613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 887.949896][T13589] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 888.697662][T13589] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 889.258019][T15637] loop6: detected capacity change from 0 to 512 [ 889.369855][T15637] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.3340: invalid indirect mapped block 256 (level 2) [ 889.460247][T15637] EXT4-fs (loop6): 2 truncates cleaned up [ 889.499045][T15637] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 889.739774][T14374] EXT4-fs (loop6): unmounting filesystem. [ 889.856515][T15663] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 889.869923][T15663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 889.990371][T11262] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 890.427225][T15663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 890.437271][T11262] usb 3-1: Using ep0 maxpacket: 16 [ 890.451014][T11262] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.480847][T11262] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.530250][T11262] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 890.594979][T11262] usb 3-1: config 0 interface 0 has no altsetting 0 [ 890.652877][T11262] usb 3-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 890.705389][T11262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.766853][T11262] usb 3-1: config 0 descriptor?? [ 890.826849][T13589] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 891.221339][T13589] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 891.454672][T13589] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 891.754943][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 891.761879][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 891.862096][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 891.869035][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 891.999272][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.006218][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.042258][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.049231][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.080219][T15695] device macvlan0 entered promiscuous mode [ 892.090475][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.109667][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.116618][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x2 [ 892.192799][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.199855][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.226863][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.233814][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.256566][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.263532][ T26] kauditd_printk_skb: 259 callbacks suppressed [ 892.263544][ T26] audit: type=1326 audit(1774375123.736:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15697 comm="syz.1.3359" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb39e19c799 code=0x0 [ 892.297911][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.305074][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.341487][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.348504][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.391753][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.407300][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.426773][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.447464][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.474315][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.499321][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.519611][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.540560][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.707143][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.714926][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.722596][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.730362][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.737535][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.744435][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.751660][T11262] wacom 0003:056A:002A.000E: unknown main item tag 0x0 [ 892.759575][T11262] wacom 0003:056A:002A.000E: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 893.124352][T11262] wacom 0003:056A:002A.000E: hidraw0: USB HID v0.0b Device [HID 056a:002a] on usb-dummy_hcd.2-1/input0 [ 893.442062][T11262] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:002A.000E/input/input19 [ 893.486623][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 893.500235][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 893.508803][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 893.560270][T11262] usb 3-1: USB disconnect, device number 31 [ 893.609723][T15723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 893.805494][T13589] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 894.626719][T15728] fido_id[15728]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 894.917044][T13589] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 895.547210][T13589] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 895.793935][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3376'. [ 896.242790][T15778] xt_NFQUEUE: number of total queues is 0 [ 896.962893][T15784] xt_NFQUEUE: number of total queues is 0 [ 896.984959][T15786] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3379'. [ 897.009206][T15777] loop6: detected capacity change from 0 to 32768 [ 897.109283][T15784] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3384'. [ 898.379104][T13589] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 898.625342][T13589] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 899.511962][T15818] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 899.519540][T15818] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 899.668357][T15818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 901.167245][T15841] xt_NFQUEUE: number of total queues is 0 [ 901.734795][T13589] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 901.741991][T13589] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 901.869586][T15841] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3399'. [ 902.134433][T15852] overlayfs: failed to clone upperpath [ 902.632287][ T4277] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 903.227273][T15872] xt_NFQUEUE: number of total queues is 0 [ 903.267706][T15872] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3407'. [ 903.382256][T15876] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 903.438433][T15878] 9pnet_fd: Insufficient options for proto=fd [ 903.832632][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 904.545582][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3415'. [ 904.752498][T15896] xt_NFQUEUE: number of total queues is 0 [ 905.057932][ T4277] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 905.275213][T15893] device hsr_slave_1 left promiscuous mode [ 905.286710][T15897] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 905.298963][T15897] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 905.306970][T15897] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 905.318137][T15897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 905.334256][T15896] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3417'. [ 905.361984][ T4277] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 905.925563][ T4277] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 906.735022][T15924] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 906.805655][T15926] xt_NFQUEUE: number of total queues is 0 [ 906.824336][T15926] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3424'. [ 907.800520][T15940] xt_NFQUEUE: number of total queues is 0 [ 907.881366][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 908.575676][T15940] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3436'. [ 908.784696][T15957] xt_NFQUEUE: number of total queues is 0 [ 908.796221][T15957] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3432'. [ 909.279008][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 910.251455][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 911.688649][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 912.331721][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 912.343520][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 912.351951][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 912.965491][T15989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 914.123367][T16002] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3444'. [ 914.162671][T16005] 9pnet_fd: Insufficient options for proto=fd [ 914.489217][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 916.367375][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 917.094134][T16037] xt_NFQUEUE: number of total queues is 0 [ 917.140075][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 917.151192][T16042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 917.192517][T16037] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3453'. [ 917.221263][T16045] netlink: 'syz.2.3456': attribute type 1 has an invalid length. [ 917.380328][T16045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 917.400399][T16047] bond1: (slave geneve3): making interface the new active one [ 917.409206][T16047] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 917.500704][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 918.046656][T16063] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 918.102079][T16066] xt_NFQUEUE: number of total queues is 0 [ 918.109510][T16066] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3461'. [ 918.580508][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 919.676342][ T4277] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 920.260865][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 920.296723][T16088] lo speed is unknown, defaulting to 1000 [ 921.300111][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 921.306477][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 921.519750][T16122] xt_NFQUEUE: number of total queues is 0 [ 921.890225][ T4277] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 921.904014][T16122] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3478'. [ 922.447453][T16125] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 922.484070][T16125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 922.541929][T16115] loop6: detected capacity change from 0 to 40427 [ 922.630764][T16115] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 922.664888][T16115] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 923.338248][T16115] F2FS-fs (loop6): invalid crc value [ 923.444621][T16115] F2FS-fs (loop6): Found nat_bits in checkpoint [ 923.611977][T16115] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 923.626771][T16115] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 923.655700][ T26] audit: type=1800 audit(1774375153.120:593): pid=16115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3477" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 923.713715][T16115] syz.6.3477: attempt to access beyond end of device [ 923.713715][T16115] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 923.772533][T16153] syz.6.3477: attempt to access beyond end of device [ 923.772533][T16153] loop6: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 923.833015][ T6293] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 923.919355][T14374] syz-executor: attempt to access beyond end of device [ 923.919355][T14374] loop6: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 924.037741][ T6293] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 924.067454][ T6293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.106352][ T6293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.153558][ T6293] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 924.233725][ T6293] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 924.270282][ T6293] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 924.303364][ T6293] usb 3-1: Manufacturer: syz [ 924.309751][ T6293] usb 3-1: config 0 descriptor?? [ 924.850305][ T4277] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 924.899983][ T6293] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 924.915592][ T6293] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 924.959919][ T6293] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 925.859082][T16190] xt_NFQUEUE: number of total queues is 0 [ 925.893958][T16190] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3492'. [ 926.619069][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 926.899950][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 927.829292][T16204] xt_NFQUEUE: number of total queues is 0 [ 928.560978][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 928.590274][T16204] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3497'. [ 928.819108][ T9871] usb 3-1: USB disconnect, device number 32 [ 929.517096][T16236] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 929.529142][T16236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 929.568327][T16236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 931.153984][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 931.163199][ T4277] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 931.241388][T13589] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 931.844068][T16274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3515'. [ 931.995885][T16276] xt_NFQUEUE: number of total queues is 0 [ 932.013209][T16276] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3511'. [ 932.148537][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 932.789768][T16288] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 932.911850][T16288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 933.593126][ T4277] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 934.705355][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 934.759675][T16306] loop6: detected capacity change from 0 to 1024 [ 934.811777][T16306] EXT4-fs: Ignoring removed i_version option [ 934.867548][T16306] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 935.000456][T16306] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 935.009163][T16306] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 935.050022][T16304] EXT4-fs error (device loop6): ext4_map_blocks:745: inode #15: comm syz.6.3523: lblock 0 mapped to illegal pblock 0 (length 1) [ 935.209764][T16304] EXT4-fs (loop6): Remounting filesystem read-only [ 935.228871][T16304] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #15: comm syz.6.3523: lblock 0 mapped to illegal pblock 0 (length 1) [ 935.278397][T16304] EXT4-fs (loop6): Remounting filesystem read-only [ 935.299425][T16304] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #15: comm syz.6.3523: lblock 0 mapped to illegal pblock 0 (length 1) [ 935.321138][T16304] EXT4-fs (loop6): Remounting filesystem read-only [ 935.373641][T16304] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #15: comm syz.6.3523: lblock 0 mapped to illegal pblock 0 (length 1) [ 935.390607][T16304] EXT4-fs (loop6): Remounting filesystem read-only [ 935.400164][T16304] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #15: comm syz.6.3523: lblock 0 mapped to illegal pblock 0 (length 1) [ 935.414677][T16304] EXT4-fs (loop6): Remounting filesystem read-only [ 935.422068][T16304] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #15: comm syz.6.3523: lblock 0 mapped to illegal pblock 0 (length 1) [ 935.445120][T16304] EXT4-fs (loop6): Remounting filesystem read-only [ 935.452420][T16304] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #15: comm syz.6.3523: lblock 0 mapped to illegal pblock 0 (length 1) [ 935.466296][T16304] EXT4-fs (loop6): Remounting filesystem read-only [ 935.475295][T16304] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #15: comm syz.6.3523: lblock 0 mapped to illegal pblock 0 (length 1) [ 935.494990][T16328] xt_NFQUEUE: number of total queues is 0 [ 935.502007][T16304] EXT4-fs (loop6): Remounting filesystem read-only [ 935.522707][T16328] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3526'. [ 935.546083][T16304] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #15: comm syz.6.3523: lblock 0 mapped to illegal pblock 0 (length 1) [ 935.564019][T16304] EXT4-fs (loop6): Remounting filesystem read-only [ 935.572722][T16304] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #15: comm syz.6.3523: lblock 0 mapped to illegal pblock 0 (length 1) [ 936.981150][T16350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 936.982633][ T4277] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 937.003851][T16350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 940.394611][T16386] xt_NFQUEUE: number of total queues is 0 [ 940.413962][T16386] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3546'. [ 941.465924][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 942.544731][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 943.418574][T16416] loop6: detected capacity change from 0 to 2048 [ 943.752242][ T4277] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 944.124211][T16416] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 944.199396][T16431] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 944.220890][T16431] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 944.282749][T16431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 944.513472][T16435] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3552: bg 0: block 234: padding at end of block bitmap is not set [ 944.580246][T16435] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 446 with error 28 [ 944.605226][T16435] EXT4-fs (loop6): This should not happen!! Data will be lost [ 944.605226][T16435] [ 944.615158][T16435] EXT4-fs (loop6): Total free blocks count 0 [ 944.627396][T16435] EXT4-fs (loop6): Free/Dirty block details [ 944.634284][T16435] EXT4-fs (loop6): free_blocks=0 [ 944.644867][T16435] EXT4-fs (loop6): dirty_blocks=448 [ 944.650728][T16435] EXT4-fs (loop6): Block reservation details [ 944.665384][T16435] EXT4-fs (loop6): i_reserved_data_blocks=28 [ 944.812110][T16444] xt_NFQUEUE: number of total queues is 0 [ 944.845181][T16444] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3556'. [ 944.888834][T14374] EXT4-fs (loop6): unmounting filesystem. [ 945.333687][ T4277] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 946.270347][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 946.910990][T16445] overlayfs: failed to resolve './file0': -2 [ 947.244440][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 947.807475][T16472] xt_NFQUEUE: number of total queues is 0 [ 947.827280][T16472] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3566'. [ 948.580647][T16492] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 948.603847][T16492] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 948.623775][T16492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 948.886029][T16477] loop6: detected capacity change from 0 to 32768 [ 949.030937][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 949.080065][ T26] audit: type=1800 audit(1774375176.904:594): pid=16477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3568" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 949.529609][ T26] audit: type=1800 audit(1774375177.279:595): pid=16498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3568" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 950.123684][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 950.988161][T16520] xt_NFQUEUE: number of total queues is 0 [ 951.762399][T16520] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3582'. [ 952.131868][T16537] xt_NFQUEUE: number of total queues is 0 [ 952.145254][T16537] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3585'. [ 952.217168][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 952.980699][T16547] netlink: 'syz.4.3587': attribute type 25 has an invalid length. [ 952.992807][T16547] netlink: 'syz.4.3587': attribute type 7 has an invalid length. [ 953.002484][T16547] netlink: 'syz.4.3587': attribute type 2 has an invalid length. [ 953.013757][T16547] netlink: 'syz.4.3587': attribute type 1 has an invalid length. [ 953.026486][T16547] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3587'. [ 953.596401][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 955.119721][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 955.416518][T16583] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 955.441135][T16583] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 955.846424][T16583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 955.958038][T16574] xt_NFQUEUE: number of total queues is 0 [ 956.012891][T16588] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3596'. [ 956.457831][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 956.929041][ T9871] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 957.195052][ T9871] usb 3-1: Using ep0 maxpacket: 16 [ 957.202491][ T9871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.251881][ T9871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.296857][ T9871] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 957.424248][ T9871] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 957.488706][ T9871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.569830][ T9871] usb 3-1: config 0 descriptor?? [ 958.082070][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 958.146919][ T9871] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0010/input/input22 [ 958.492839][ T9871] appleir 0003:05AC:8241.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 958.508392][ T9871] usb 3-1: USB disconnect, device number 33 [ 958.738599][T16617] fido_id[16617]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 959.756938][T16632] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 959.915479][ T4277] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 960.129963][T16632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 960.229077][T13589] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 960.635980][T13589] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 961.518653][T16657] xt_NFQUEUE: number of total queues is 0 [ 961.530380][T16657] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3616'. [ 961.848352][T13589] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 962.069469][T13589] Bluetooth: hci2: command 0x0406 tx timeout [ 962.693012][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 963.605072][T16686] xt_NFQUEUE: number of total queues is 0 [ 963.613868][T16686] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3625'. [ 963.778135][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 964.530034][ T26] audit: type=1326 audit(1774375191.372:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.3628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb39e19c799 code=0x0 [ 966.030674][T16709] loop6: detected capacity change from 0 to 1024 [ 966.492003][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 967.314827][ T4277] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 967.823324][ T4435] hfsplus: b-tree write err: -5, ino 3 [ 968.127015][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 968.597594][T16731] xt_NFQUEUE: number of total queues is 0 [ 968.605010][T16731] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3640'. [ 968.716621][T16739] Invalid argument reading file caps for ./file0 [ 968.877845][T16740] xt_NFQUEUE: number of total queues is 0 [ 968.889151][T16740] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3644'. [ 969.222534][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 969.933770][T16759] loop6: detected capacity change from 0 to 128 [ 969.980862][T16759] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 969.994715][T16759] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 970.031457][T16759] fscrypt (loop6, inode 12): Unsupported encryption flags (0x10) [ 970.120110][T14374] EXT4-fs (loop6): unmounting filesystem. [ 970.886774][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 971.605416][T16784] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 971.760323][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 972.673289][T16802] loop6: detected capacity change from 0 to 512 [ 972.699399][T16802] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3663: inode has both inline data and extents flags [ 972.713728][T16802] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3663: couldn't read orphan inode 15 (err -117) [ 972.726863][T16802] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 972.796118][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 973.384900][T16804] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3661'. [ 973.524561][T16802] EXT4-fs error (device loop6): ext4_check_dx_root:2266: inode #2: comm syz.6.3663: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 973.626837][T14374] EXT4-fs (loop6): unmounting filesystem. [ 973.770883][T16818] xt_NFQUEUE: number of total queues is 0 [ 973.779145][T16818] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3665'. [ 974.651712][ T4277] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 974.772174][T16824] loop6: detected capacity change from 0 to 512 [ 974.859834][T16824] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 974.901789][T16824] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 974.981800][ T26] audit: type=1800 audit(1774375201.151:597): pid=16824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3668" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 975.202491][T14374] EXT4-fs (loop6): unmounting filesystem. [ 975.598172][ T4277] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 977.251529][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 978.133681][ T9863] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 978.183175][ T26] audit: type=1326 audit(1774375204.146:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16866 comm="syz.5.3680" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f7839c799 code=0x0 [ 978.356534][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 978.363469][ T9863] usb 3-1: Using ep0 maxpacket: 32 [ 978.376294][ T9863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.387677][ T9863] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 978.398705][ T9863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.445525][ T9863] usb 3-1: config 0 descriptor?? [ 978.595597][ T9863] hub 3-1:0.0: USB hub found [ 978.771156][ T9863] hub 3-1:0.0: 1 port detected [ 979.299474][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 979.901048][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 980.063792][T16889] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3684'. [ 980.205196][ T9863] usb 3-1: USB disconnect, device number 34 [ 980.394625][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 981.004562][ T6293] usb 3-1-port1: config error [ 981.080596][T16898] xt_NFQUEUE: number of total queues is 0 [ 981.087915][T16898] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3686'. [ 982.967171][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 983.524712][ T4277] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 984.349708][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 985.071167][T16953] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3701'. [ 985.338740][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 986.958953][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.965541][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.351518][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 987.906476][T11262] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 988.107854][T16988] xt_NFQUEUE: number of total queues is 0 [ 988.131470][T16988] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3711'. [ 988.204502][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 988.847349][T11262] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 988.925454][T11262] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 988.956278][T11262] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 988.984887][T11262] usb 3-1: config 0 interface 0 has no altsetting 0 [ 989.000910][T11262] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 989.010670][T11262] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 989.021802][T11262] usb 3-1: config 0 interface 0 has no altsetting 0 [ 989.030019][T11262] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 989.081984][T11262] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 989.114088][T11262] usb 3-1: config 0 interface 0 has no altsetting 0 [ 989.226182][T11262] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 989.253000][T11262] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 989.329083][ T4277] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 989.984176][T11262] usb 3-1: config 0 interface 0 has no altsetting 0 [ 990.092905][T11262] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 990.108815][T11262] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 990.200787][T11262] usb 3-1: config 0 interface 0 has no altsetting 0 [ 990.243953][T11262] usb 3-1: unable to read config index 5 descriptor/start: -71 [ 990.425864][T11262] usb 3-1: can't read configurations, error -71 [ 991.504249][ T4277] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 991.871341][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 992.414393][T17040] loop6: detected capacity change from 0 to 256 [ 992.545216][T17040] FAT-fs (loop6): Directory bread(block 64) failed [ 992.551795][T17040] FAT-fs (loop6): Directory bread(block 65) failed [ 992.632969][T17040] FAT-fs (loop6): Directory bread(block 66) failed [ 992.651664][T17040] FAT-fs (loop6): Directory bread(block 67) failed [ 992.658352][T17040] FAT-fs (loop6): Directory bread(block 68) failed [ 992.702392][T17040] FAT-fs (loop6): Directory bread(block 69) failed [ 992.715349][T17040] FAT-fs (loop6): Directory bread(block 70) failed [ 992.815910][T17040] FAT-fs (loop6): Directory bread(block 71) failed [ 992.822916][T17040] FAT-fs (loop6): Directory bread(block 72) failed [ 992.832804][T17040] FAT-fs (loop6): Directory bread(block 73) failed [ 993.769921][T17057] xt_NFQUEUE: number of total queues is 0 [ 993.791753][T17057] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3731'. [ 995.551306][ T4277] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 996.123704][T17096] xt_NFQUEUE: number of total queues is 0 [ 996.186665][T17095] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3742'. [ 997.445397][T17119] loop6: detected capacity change from 0 to 2048 [ 997.573823][T17119] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 997.699531][T17118] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 997.757463][T17118] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 997.791031][T17118] EXT4-fs (loop6): This should not happen!! Data will be lost [ 997.791031][T17118] [ 997.812850][T17118] EXT4-fs (loop6): Total free blocks count 0 [ 997.818899][T17118] EXT4-fs (loop6): Free/Dirty block details [ 998.499156][T17118] EXT4-fs (loop6): free_blocks=4096 [ 998.742386][ T4277] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 998.815312][T17118] EXT4-fs (loop6): dirty_blocks=16 [ 998.993248][T17118] EXT4-fs (loop6): Block reservation details [ 999.020000][T17118] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 999.049993][ T4825] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 999.280405][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3760'. [ 999.643794][ T4277] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1000.171339][T17164] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3763'. [ 1000.284605][T17166] xt_NFQUEUE: number of total queues is 0 [ 1000.293990][T17166] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3764'. [ 1001.336995][T13589] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 1001.337097][ T4277] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1001.740833][T17199] netlink: 'syz.1.3775': attribute type 18 has an invalid length. [ 1001.748869][T17199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3775'. [ 1001.761714][T17199] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1001.770557][T17199] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1001.779417][T17199] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1001.788310][T17199] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1001.798733][T17199] netlink: 'syz.1.3775': attribute type 18 has an invalid length. [ 1001.809456][T17199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3775'. [ 1002.694775][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 1002.697122][T17203] loop6: detected capacity change from 0 to 131072 [ 1002.715385][T17203] F2FS-fs (loop6): invalid crc value [ 1002.736071][T17215] xt_NFQUEUE: number of total queues is 0 [ 1002.746981][T17215] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3778'. [ 1002.768224][T17203] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1002.810522][T17203] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1003.190367][T17228] loop6: detected capacity change from 0 to 512 [ 1003.269456][T17228] EXT4-fs (loop6): 1 truncate cleaned up [ 1003.303841][T17228] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1003.443680][T17234] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3781'. [ 1003.541772][T17228] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.3780: invalid indirect mapped block 4294901760 (level 0) [ 1003.590177][T17228] EXT4-fs (loop6): Remounting filesystem read-only [ 1003.619480][T17228] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.3780: invalid indirect mapped block 4294967295 (level 1) [ 1003.687165][T17228] EXT4-fs (loop6): Remounting filesystem read-only [ 1003.694359][ T26] audit: type=1326 audit(1774375228.027:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17236 comm="syz.5.3783" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f7839c799 code=0x0 [ 1003.794369][T14374] EXT4-fs (loop6): unmounting filesystem. [ 1004.676125][T17244] loop6: detected capacity change from 0 to 512 [ 1004.817190][T17244] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1004.932428][T17244] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1005.032077][ T4277] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 1005.805712][T17244] [ 1005.808093][T17244] ====================================================== [ 1005.815116][T17244] WARNING: possible circular locking dependency detected [ 1005.822165][T17244] syzkaller #0 Not tainted [ 1005.826583][T17244] ------------------------------------------------------ [ 1005.833607][T17244] syz.6.3785/17244 is trying to acquire lock: [ 1005.839737][T17244] ffff888054a24428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 1005.849017][T17244] [ 1005.849017][T17244] but task is already holding lock: [ 1005.856394][T17244] ffff888071b82aa8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x910/0x1b70 [ 1005.865951][T17244] [ 1005.865951][T17244] which lock already depends on the new lock. [ 1005.865951][T17244] [ 1005.876444][T17244] [ 1005.876444][T17244] the existing dependency chain (in reverse order) is: [ 1005.885436][T17244] [ 1005.885436][T17244] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 1005.893251][T17244] down_read+0x42/0x2d0 [ 1005.897921][T17244] ext4_map_blocks+0x323/0x1b70 [ 1005.903399][T17244] ext4_getblk+0x1cc/0x6f0 [ 1005.908514][T17244] ext4_bread+0x26/0x170 [ 1005.913340][T17244] ext4_quota_read+0x180/0x380 [ 1005.918653][T17244] find_tree_dqentry+0x1cd/0xf30 [ 1005.924124][T17244] find_tree_dqentry+0x6b0/0xf30 [ 1005.929618][T17244] find_tree_dqentry+0x6b0/0xf30 [ 1005.935097][T17244] find_tree_dqentry+0x6b0/0xf30 [ 1005.940555][T17244] qtree_read_dquot+0x57b/0x820 [ 1005.945925][T17244] v2_read_dquot+0xc0/0x110 [ 1005.950946][T17244] dquot_acquire+0x152/0x520 [ 1005.956049][T17244] ext4_acquire_dquot+0x2d9/0x4a0 [ 1005.961680][T17244] dqget+0x778/0xeb0 [ 1005.966175][T17244] __dquot_initialize+0x333/0xcd0 [ 1005.971838][T17244] ext4_process_orphan+0x54/0x300 [ 1005.977485][T17244] ext4_orphan_cleanup+0xbeb/0x1420 [ 1005.983222][T17244] ext4_fill_super+0x7829/0x7dc0 [ 1005.988694][T17244] get_tree_bdev+0x3f1/0x610 [ 1005.993809][T17244] vfs_get_tree+0x88/0x270 [ 1005.998736][T17244] do_new_mount+0x24a/0xa40 [ 1006.003787][T17244] __se_sys_mount+0x2e3/0x3d0 [ 1006.008978][T17244] do_syscall_64+0x4c/0xa0 [ 1006.013909][T17244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.020324][T17244] [ 1006.020324][T17244] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 1006.028401][T17244] down_read+0x42/0x2d0 [ 1006.033083][T17244] v2_read_dquot+0x4a/0x110 [ 1006.038094][T17244] dquot_acquire+0x152/0x520 [ 1006.043190][T17244] ext4_acquire_dquot+0x2d9/0x4a0 [ 1006.048722][T17244] dqget+0x778/0xeb0 [ 1006.053127][T17244] __dquot_initialize+0x333/0xcd0 [ 1006.058757][T17244] ext4_process_orphan+0x54/0x300 [ 1006.064298][T17244] ext4_orphan_cleanup+0xbeb/0x1420 [ 1006.070008][T17244] ext4_fill_super+0x7829/0x7dc0 [ 1006.075453][T17244] get_tree_bdev+0x3f1/0x610 [ 1006.080548][T17244] vfs_get_tree+0x88/0x270 [ 1006.085486][T17244] do_new_mount+0x24a/0xa40 [ 1006.090532][T17244] __se_sys_mount+0x2e3/0x3d0 [ 1006.095725][T17244] do_syscall_64+0x4c/0xa0 [ 1006.100741][T17244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.107170][T17244] [ 1006.107170][T17244] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 1006.114792][T17244] __lock_acquire+0x2d07/0x7d10 [ 1006.120148][T17244] lock_acquire+0x1bb/0x4a0 [ 1006.125168][T17244] __mutex_lock+0x12d/0xaf0 [ 1006.130294][T17244] dquot_commit+0x5a/0x410 [ 1006.135222][T17244] ext4_write_dquot+0x1f0/0x360 [ 1006.140580][T17244] mark_all_dquot_dirty+0xf9/0x400 [ 1006.146195][T17244] __dquot_alloc_space+0x5fc/0xe60 [ 1006.152084][T17244] ext4_mb_new_blocks+0xf8d/0x4760 [ 1006.157705][T17244] ext4_ext_map_blocks+0x195b/0x6810 [ 1006.163495][T17244] ext4_map_blocks+0x9de/0x1b70 [ 1006.168861][T17244] ext4_getblk+0x1cc/0x6f0 [ 1006.173812][T17244] ext4_bread+0x26/0x170 [ 1006.178651][T17244] ext4_append+0x2be/0x560 [ 1006.183593][T17244] ext4_add_entry+0x8eb/0xdb0 [ 1006.188804][T17244] ext4_mkdir+0x558/0xce0 [ 1006.193844][T17244] vfs_mkdir+0x387/0x570 [ 1006.198620][T17244] do_mkdirat+0x1d8/0x440 [ 1006.203493][T17244] __x64_sys_mkdirat+0x85/0x90 [ 1006.208770][T17244] do_syscall_64+0x4c/0xa0 [ 1006.213802][T17244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.220301][T17244] [ 1006.220301][T17244] other info that might help us debug this: [ 1006.220301][T17244] [ 1006.230518][T17244] Chain exists of: [ 1006.230518][T17244] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 1006.230518][T17244] [ 1006.244159][T17244] Possible unsafe locking scenario: [ 1006.244159][T17244] [ 1006.251660][T17244] CPU0 CPU1 [ 1006.257006][T17244] ---- ---- [ 1006.262348][T17244] lock(&ei->i_data_sem/2); [ 1006.266935][T17244] lock(&s->s_dquot.dqio_sem); [ 1006.274285][T17244] lock(&ei->i_data_sem/2); [ 1006.281407][T17244] lock(&dquot->dq_lock); [ 1006.285809][T17244] [ 1006.285809][T17244] *** DEADLOCK *** [ 1006.285809][T17244] [ 1006.294029][T17244] 4 locks held by syz.6.3785/17244: [ 1006.299223][T17244] #0: ffff888055d4a460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1006.308350][T17244] #1: ffff888071b82c20 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 1006.318951][T17244] #2: ffff888071b82aa8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x910/0x1b70 [ 1006.329464][T17244] #3: ffffffff8cc74a48 (dquot_srcu){....}-{0:0}, at: __dquot_alloc_space+0x173/0xe60 [ 1006.339018][T17244] [ 1006.339018][T17244] stack backtrace: [ 1006.344885][T17244] CPU: 1 PID: 17244 Comm: syz.6.3785 Not tainted syzkaller #0 [ 1006.352325][T17244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1006.362390][T17244] Call Trace: [ 1006.365672][T17244] [ 1006.368590][T17244] dump_stack_lvl+0x188/0x24e [ 1006.373279][T17244] ? load_image+0x400/0x400 [ 1006.377765][T17244] ? show_regs_print_info+0x12/0x12 [ 1006.382976][T17244] ? print_circular_bug+0x12b/0x1a0 [ 1006.388166][T17244] check_noncircular+0x296/0x330 [ 1006.393268][T17244] ? add_chain_block+0x940/0x940 [ 1006.398188][T17244] ? lockdep_lock+0xf1/0x1f0 [ 1006.402785][T17244] ? _find_first_zero_bit+0xcf/0x100 [ 1006.408057][T17244] __lock_acquire+0x2d07/0x7d10 [ 1006.412934][T17244] ? verify_lock_unused+0x140/0x140 [ 1006.418135][T17244] ? mark_lock+0x94/0x320 [ 1006.422448][T17244] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1006.428421][T17244] lock_acquire+0x1bb/0x4a0 [ 1006.432915][T17244] ? dquot_commit+0x5a/0x410 [ 1006.437579][T17244] ? __might_sleep+0xd0/0xd0 [ 1006.442151][T17244] ? read_lock_is_recursive+0x10/0x10 [ 1006.447529][T17244] __mutex_lock+0x12d/0xaf0 [ 1006.452024][T17244] ? dquot_commit+0x5a/0x410 [ 1006.456782][T17244] ? __might_sleep+0xd0/0xd0 [ 1006.461367][T17244] ? dquot_commit+0x5a/0x410 [ 1006.465945][T17244] ? __sched_text_start+0x8/0x8 [ 1006.470872][T17244] ? mutex_lock_nested+0x10/0x10 [ 1006.475796][T17244] ? ext4_journal_check_start+0x17e/0x240 [ 1006.481524][T17244] dquot_commit+0x5a/0x410 [ 1006.486109][T17244] ext4_write_dquot+0x1f0/0x360 [ 1006.491044][T17244] mark_all_dquot_dirty+0xf9/0x400 [ 1006.496346][T17244] __dquot_alloc_space+0x5fc/0xe60 [ 1006.501452][T17244] ? __dquot_alloc_space+0x173/0xe60 [ 1006.506725][T17244] ext4_mb_new_blocks+0xf8d/0x4760 [ 1006.511824][T17244] ? _raw_write_unlock+0x24/0x40 [ 1006.516833][T17244] ? __es_insert_extent+0x1790/0x1790 [ 1006.522194][T17244] ? ext4_find_extent+0x367/0xe00 [ 1006.527200][T17244] ? rcu_is_watching+0x11/0xa0 [ 1006.531949][T17244] ? ext4_ext_search_right+0x380/0x830 [ 1006.537389][T17244] ? memcpy+0x3c/0x60 [ 1006.541526][T17244] ? ext4_mb_pa_callback+0xd0/0xd0 [ 1006.546804][T17244] ? ext4_ext_check_overlap+0x401/0x560 [ 1006.552346][T17244] ? ext4_ext_find_goal+0xed/0x1d0 [ 1006.557629][T17244] ext4_ext_map_blocks+0x195b/0x6810 [ 1006.562986][T17244] ? ext4_ext_release+0x10/0x10 [ 1006.567939][T17244] ? rwsem_write_trylock+0x135/0x1c0 [ 1006.573231][T17244] ? ext4_es_lookup_extent+0x645/0xb10 [ 1006.578686][T17244] ext4_map_blocks+0x9de/0x1b70 [ 1006.583531][T17244] ? ext4_issue_zeroout+0x250/0x250 [ 1006.588732][T17244] ext4_getblk+0x1cc/0x6f0 [ 1006.593142][T17244] ? ext4_get_block_unwritten+0x100/0x100 [ 1006.598845][T17244] ? memset+0x1e/0x40 [ 1006.602803][T17244] ? fscrypt_setup_filename+0x94/0xa40 [ 1006.608245][T17244] ext4_bread+0x26/0x170 [ 1006.612519][T17244] ext4_append+0x2be/0x560 [ 1006.616917][T17244] ? ext4_init_new_dir+0x570/0x570 [ 1006.622020][T17244] ext4_add_entry+0x8eb/0xdb0 [ 1006.626684][T17244] ? ext4_inc_count+0x1b0/0x1b0 [ 1006.631520][T17244] ? ext4_init_new_dir+0x49d/0x570 [ 1006.636614][T17244] ext4_mkdir+0x558/0xce0 [ 1006.640934][T17244] ? ext4_symlink+0x970/0x970 [ 1006.645681][T17244] ? inode_permission+0xef/0x480 [ 1006.650620][T17244] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 1006.655642][T17244] ? security_inode_mkdir+0xb3/0x100 [ 1006.661094][T17244] vfs_mkdir+0x387/0x570 [ 1006.665333][T17244] do_mkdirat+0x1d8/0x440 [ 1006.669656][T17244] ? vfs_mkdir+0x570/0x570 [ 1006.674061][T17244] __x64_sys_mkdirat+0x85/0x90 [ 1006.678812][T17244] do_syscall_64+0x4c/0xa0 [ 1006.683306][T17244] ? clear_bhb_loop+0x60/0xb0 [ 1006.688083][T17244] ? clear_bhb_loop+0x60/0xb0 [ 1006.692756][T17244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.698647][T17244] RIP: 0033:0x7f1cab39b607 [ 1006.703057][T17244] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.722834][T17244] RSP: 002b:00007f1cac26fe58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1006.731277][T17244] RAX: ffffffffffffffda RBX: 00007f1cac26fee0 RCX: 00007f1cab39b607 [ 1006.739273][T17244] RDX: 00000000000001ff RSI: 0000200000000040 RDI: 00000000ffffff9c [ 1006.747321][T17244] RBP: 0000000000000000 R08: 0000200000000100 R09: 0000000000000000 [ 1006.755596][T17244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040 [ 1006.763650][T17244] R13: 00007f1cac26fea0 R14: 0000000000000000 R15: 0000000000000000 [ 1006.771669][T17244] [ 1006.774703][ C1] vkms_vblank_simulate: vblank timer overrun [ 1006.937993][T17244] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #2: comm syz.6.3785: corrupted inode contents [ 1006.950924][T17244] EXT4-fs error (device loop6): ext4_dirty_inode:6137: inode #2: comm syz.6.3785: mark_inode_dirty error [ 1006.964585][T17244] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #2: comm syz.6.3785: corrupted inode contents [ 1006.976724][T17244] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.3785: mark_inode_dirty error [ 1007.015853][T14374] EXT4-fs (loop6): unmounting filesystem.