last executing test programs: 48.972958026s ago: executing program 1 (id=493): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) 48.541046571s ago: executing program 1 (id=499): r0 = syz_create_resource$binfmt(&(0x7f0000000600)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) 48.376046791s ago: executing program 1 (id=501): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$eJzs3MtvVFUYAPDvTh+8aUVEQdAqGomPlhZUFi7UaOJCExNd4LK2BZGBGloTIY0WY3BpSNwblyb+Be7cGHVhTNxq4tKQEG1MKK5q7gum02mZlpYpnd8vmc45c1/nu+eemXPv6b0BtK2+9E8SsT0ifo+Injw7f4a+/G12Zmrk+szUSBJzc2/9nWTzXZuZGilnLZfbVmQOVSIqnyXxYrJwuxPnL5werlbHzhX5gckzHwxMnL/wzKkzwyfHTo6dHTp27OiRweefG3p2VeJM47q27+Px/Xtfe+fyGyPHL7/707dpsfYcyKfXxnFL1xsE1EBfutf+mcvUT3t8GWW/G+yoSSedLSwIy9IREWl1dWXtvyc64mbl9cSrn7a0cMCaSn+bNi0+eXoO2MCSaHUJgNYof+jT89/ydYe6HuvC1Zciuov07MzUyOyN+DujUnzetYbb74uI49P/fZW+YrnXIQAAViDr2zzdqP9XiT3Zez7WsbMYQ+mNiHsiYldE3BsRuyPivohs3vujOx7IF57raXL7fXX5hf2fypWGZV4laf/vhZq+32xN/MVbb0eR25HF35WcOFUdO1zsk0PRtSnNDy6xje9f+e2LxabV9v/SV7r9si9YFOBKZ90FutHhyeHV2glXL0bs62wUf3JjJCA9AvZGxL7lrXpnmTj15Df7F5vp1vEvYRXGmea+jngir//pqIu/lCw9PjmwOapjhwfKo2Khn3+99GaR7K6fdlvxr4K0/rfOP/6LKReL955/k3y8tiuq1bFzE8vfxqU/Pl/0nGalx3938nY2Zv3Le/lnHw1PTp4bjOhOXs/y5Y7OPh+6uWyZL+dP4z90sHH731Usk8b/YESkB/GBiHgoIh4uyv5IRDwaEQeXiP/Hlx97f4n4k0iipfU/2vD7L4nYnCV6k9rx+hUkOk7/8N1iI+bN1f/RmM6+a3PZ998tNFvA29+DAAAAsP5VImJ7JJX+PN23PSqV/v78f/h3x9ZKdXxi8qkT4x+eHc3vEeiNrkp5paun5nroYDJdrDHPDxXXisvpR4rrxl92bMny/SPj1dEWxw7tbtv89h9l+0/91dHq0gFrzv1a0L7q23+lReUA7rxmfv+dC8DG1KD9b2lFOYA7z/k/tK9G7f+Turz+P2xMC9v/nw0eWQdsRPr/0L60f2hf2j+0pWbv4i+fp7DihwDMS5Q3C6x8PZubvsN//SX61mTNZQ2tZeG3xM1PorJqa55eB5WyzhNpi1nJ4rGz+WdhzE80eFgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXej/AAAA//+q8eIl") r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x31) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8}) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 47.859014521s ago: executing program 1 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000300)='./file0\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0xa, 0x80000, {r0}}, 0x20) 47.568770068s ago: executing program 1 (id=508): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x3}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x4b5, 0x405}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x0, 0x4, 0x30000, 0x401}) close(0x3) 47.168899791s ago: executing program 1 (id=512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) unshare(0x20040400) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 47.004272231s ago: executing program 32 (id=512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) unshare(0x20040400) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.407412619s ago: executing program 0 (id=648): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f00000006c0)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@lazytime}, {@noquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$eJzs28tvG0UYAPBv7SR9k1CVR9MCgYKIeCRNWkoPXEAgcQAJCQ7lGJK0CnUb1ASJVhEEhMoRVeKOOCLxF3CCCwJOSFzhjipVKJcWTkZr7ya2Y7tJ6tSh/v2kbWd2x5n5vDv2zI43gJ41kv6TROyPiD8iYrCarS8wUv3v1srS9D8rS9NJlMtv/51Uyt1cWZrOi+av25dn+iIKnydxpEm9C5evnJ8qlWYvZfnxxQsfjC9cvvL83IWpc7PnZi9Onj598sTEi6cmX+hInGlcN4c/nj96+PV3r705febae798l+TxN8TRISPtDj5VLne4uu46UJNO+rrYEDalWO2m0V/p/4NRjLWTNxivfdbVxgHbqlwulx9sfXi5DNzDkuh2C4DuyL/o0/lvvt2loceOcOPl6gQojftWtlWP9EUhK9PfML/tpJGIOLP879fpFttzHwIAoM4P6fjnuWbjv0LU3he6L1tDGYqI+yPiYESciohDEfFARKXsQxHx8Cbrb1wkWT/+KVzfUmAblI7/XsrWturHf/noL4aKWe5AJf7+5OxcafZ49p6MRv+uND/Rpo4fX/39y1bHasd/6ZbWn48Fs3Zc79tV/5qZqcWpO4m51o1PI4b7msWfrK4EJBFxOCKGt1jH3DPfHm117Pbxt9GBdabyNxFPV8//cjTEn0var0+O747S7PHx/KpY79ffrr7Vqv47ir8D0vO/t+n1vxr/UFK7Xruw+Tqu/vlFyznNVq//geSdun0fTS0uXpqIGEjeqDa6dv9kQ7nJtfJp/KPHsvgH6vv/wVh7J45ERHoRPxIRj0bEY1nbH4+IJyLiWJv4f37lyfe3Fv/uNn+1M9L4ZzZ1/tcSA9G4p3mieP6n7+sqHdpo/JGd/5OV1Gi2ZyOffxtp19auZgAAAPj/KUTE/kgKY6vpQmFsrPob/kOxt1CaX1h89uz8hxdnqs8IDEV/Ib/TNVhzP3Qim9bn+cmG/InsvvFXxT2V/Nj0fGmm28FDj9vXov+n/ip2u3XAtvO8FvQu/R96l/4PvUv/h55U+ZVfk/6/pwttAbqg2ff/J11oB3D3NfR/y37QQ8z/oXfp/9C79H/oSQt74vYPyUtIrEtEYUc04x5MxI5oRrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrjvwAAAP//qSDljg==") pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0xa0180, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000100)={0x8003, 0x1000, 0x2000, 0x0, 0x0, 0x0, 0x2401}) 24.814260664s ago: executing program 0 (id=651): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x2000000008, 0x0) close(r2) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 23.749480706s ago: executing program 0 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}}, 0x0) 23.456732473s ago: executing program 0 (id=659): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 22.943951593s ago: executing program 0 (id=666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x400001, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 22.291338371s ago: executing program 0 (id=669): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x3, 0x4) 21.79355735s ago: executing program 33 (id=669): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x3, 0x4) 2.618100057s ago: executing program 6 (id=799): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7, 0x400}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000003c0)={0x20, 0x0, 0x0}) 2.446217007s ago: executing program 4 (id=801): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2.354816863s ago: executing program 2 (id=803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xfffa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 2.303731326s ago: executing program 6 (id=804): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) 2.23385529s ago: executing program 3 (id=805): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) 2.213015101s ago: executing program 4 (id=806): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/99, 0x63}, 0x4}], 0x1, 0x12043, 0x0) 2.06061792s ago: executing program 6 (id=808): r0 = open(&(0x7f0000000600)='./file0\x00', 0x1e1142, 0xfb) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="f5", 0xfffffe59}, {&(0x7f00000003c0)="22517920d1f96d4ad0a9c60a90acb9e2ca476099ab8508809ad3506332bb46f99fa87a69f491ffff66257f1a940616acd3df262e74969186a9b19d29f4ad80515091dc0be9084251078b2999de8c4636e8bb736f7ee5c49b9f0ee0", 0x33}, {&(0x7f0000000100)="b33b7210d2331b9bfa0f5786829d349114ae083ae3d335451d", 0x19}], 0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendfile(r2, r0, &(0x7f0000000280)=0x4b, 0x7fff) 1.87956262s ago: executing program 5 (id=809): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r0, &(0x7f0000001780)=[{&(0x7f00000006c0)="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", 0x287}], 0x1) 1.728721079s ago: executing program 2 (id=810): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='.\x02\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5800003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file1\x00') 1.681946702s ago: executing program 5 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000340)='./file2\x00', 0x280400b, &(0x7f00000004c0)=ANY=[], 0x41, 0x230, &(0x7f00000006c0)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0xffff) 1.498055592s ago: executing program 5 (id=812): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.216678469s ago: executing program 5 (id=813): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r1, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd51}) tkill(r0, 0x7) 1.20005104s ago: executing program 6 (id=814): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1b, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}], 0x28}, 0x40e0) 1.167487592s ago: executing program 4 (id=815): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x30400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r2, &(0x7f0000000180)=""/195, 0xfffffea4, 0x9) 1.162708272s ago: executing program 2 (id=816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x6005}, @void, @eth={@multicast, @random="e222dab5a7b5", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x22, 0x1c, 0x68, 0x0, 0x9, 0x11, 0x0, @broadcast, @multicast1}, "c0ba47408eb15c7c"}}}}}, 0x2e) 1.100432166s ago: executing program 3 (id=817): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x2800) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r3, &(0x7f0000002140)=""/17, 0x11, 0x0) 948.798315ms ago: executing program 4 (id=818): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000001c0)=0x0) ftruncate(r0, 0x81fe) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 827.297602ms ago: executing program 3 (id=819): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) 780.148274ms ago: executing program 5 (id=820): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xdb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x41}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 588.827586ms ago: executing program 6 (id=821): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000000)='./cgroup\x00', 0x800080, &(0x7f00000000c0)={[{@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@errors_remount}]}, 0x3, 0x47d, &(0x7f0000000d80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./cgroup\x00', 0xa00008, 0x0, 0xec, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x59) 557.492427ms ago: executing program 2 (id=822): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) r3 = dup2(r1, r0) close_range(r3, 0xffffffffffffffff, 0x0) 551.106788ms ago: executing program 3 (id=823): sendmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="601b388f451e6e3db3357c973cdc27df3c094f4960", 0x15}], 0x1}}], 0x1, 0x24000003) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 513.91242ms ago: executing program 5 (id=824): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 399.140826ms ago: executing program 4 (id=825): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c69dacbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000000fc0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0xdb0078e63af1c4e7, 0xdd2, 0x6, 0xb, 0x20000800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x78, 0x0, 0x1, {0x8, 0xffffffff, 0x0, {0x7, 0x80000000, 0x7, 0x80000001, 0x26, 0xffffffffffffff0c, 0x2, 0x35741060, 0x9, 0x8000, 0x9ea, 0xffffffffffffffff, 0xee01, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000004200)='./file0\x00', 0x0) 364.530919ms ago: executing program 3 (id=826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x0, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x4}}]}, 0x90}}, 0x0) 318.915171ms ago: executing program 2 (id=827): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1080}], 0x1}, 0x4000010) 131.714092ms ago: executing program 2 (id=828): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = inotify_init1(0x800) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x4, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) inotify_add_watch(r0, &(0x7f00000003c0)='./file0\x00', 0x600037c) umount2(&(0x7f0000000080)='./file0\x00', 0xb) 84.898445ms ago: executing program 6 (id=829): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') r1 = epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1510d0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x1020, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0) 29.228178ms ago: executing program 3 (id=830): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x20) 0s ago: executing program 4 (id=831): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54010000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000002f01330080200900080211000001080211"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 69.313876][ T4567] loop0: detected capacity change from 0 to 1024 [ 69.343120][ T4318] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 69.344444][ T4545] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 69.368318][ T4545] F2FS-fs (loop3): invalid crc value [ 69.385362][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.395339][ T4567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.412364][ T4547] XFS (loop1): Mounting V5 Filesystem [ 69.415454][ T4564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.427158][ T4567] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.474277][ T4545] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.481797][ T4567] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 69.600222][ T4567] System zones: 0-1, 3-36 [ 69.605270][ T26] audit: type=1800 audit(1771011164.504:3): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.65" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 69.609790][ T4318] usb 3-1: usb_control_msg returned -32 [ 69.637511][ T4318] usbtmc 3-1:16.0: can't read capabilities [ 69.673009][ T4567] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.692573][ T26] audit: type=1800 audit(1771011164.534:4): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.65" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 69.725694][ T4547] XFS (loop1): Ending clean mount [ 69.742883][ T4545] F2FS-fs (loop3): Start checkpoint disabled! [ 69.768912][ T4547] XFS (loop1): Quotacheck needed: Please wait. [ 69.824844][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 69.851279][ T4547] XFS (loop1): Quotacheck: Done. [ 69.858179][ T4545] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 69.880749][ T4545] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 70.004138][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 70.125995][ T4545] syz.3.56: attempt to access beyond end of device [ 70.125995][ T4545] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 70.206238][ T4545] syz.3.56: attempt to access beyond end of device [ 70.206238][ T4545] loop3: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 70.253198][ T4267] XFS (loop1): Unmounting Filesystem [ 70.259404][ T4545] syz.3.56: attempt to access beyond end of device [ 70.259404][ T4545] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 70.281358][ T4585] usbtmc 3-1:16.0: INITIATE_CLEAR returned 0 [ 70.294763][ T4589] set_capacity_and_notify: 1 callbacks suppressed [ 70.294778][ T4589] loop7: detected capacity change from 0 to 7 [ 70.345761][ T4589] Dev loop7: unable to read RDB block 7 [ 70.352253][ T4589] loop7: AHDI p1 p2 p3 [ 70.362463][ T4589] loop7: partition table partially beyond EOD, truncated [ 70.387339][ T4589] loop7: p1 start 1702000233 is beyond EOD, truncated [ 70.399503][ T4589] loop7: p2 size 10240 extends beyond EOD, truncated [ 70.489329][ T4485] usb 3-1: USB disconnect, device number 2 [ 70.532174][ T11] kworker/u4:1: attempt to access beyond end of device [ 70.532174][ T11] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 70.552342][ T4257] udevd[4257]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 70.582559][ T4591] netlink: 20 bytes leftover after parsing attributes in process `syz.4.72'. [ 70.953969][ T4603] device pim6reg1 entered promiscuous mode [ 71.154375][ T4485] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.219675][ T4614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 71.358816][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.359616][ T4485] usb 5-1: Using ep0 maxpacket: 16 [ 71.365500][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.385917][ T4485] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 71.410296][ T4485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.423297][ T4485] usb 5-1: Product: syz [ 71.431797][ T4485] usb 5-1: Manufacturer: syz [ 71.437072][ T4485] usb 5-1: SerialNumber: syz [ 71.460999][ T4485] usb 5-1: config 0 descriptor?? [ 71.800716][ T4631] loop1: detected capacity change from 0 to 512 [ 71.877891][ T4631] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 71.879237][ T4485] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 71.913531][ T4485] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 71.931530][ T4485] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 71.933710][ T4631] System zones: [ 71.939922][ T4485] usb 5-1: media controller created [ 71.952336][ T4485] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.983958][ T4631] 0-2, 18-18, 34-35 [ 72.062480][ T4631] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 72.082278][ T4485] zl10353_read_register: readreg error (reg=127, ret==0) [ 72.094304][ T4485] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 72.102246][ T4485] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 72.124695][ T4631] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.181074][ T4485] usb 5-1: USB disconnect, device number 2 [ 72.287759][ T4485] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 72.428966][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 72.477324][ T4628] loop2: detected capacity change from 0 to 40427 [ 72.510355][ T4628] F2FS-fs (loop2): invalid crc value [ 72.561122][ T4628] F2FS-fs (loop2): Found nat_bits in checkpoint [ 72.714885][ T4628] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 73.178104][ T4660] loop3: detected capacity change from 0 to 164 [ 73.371758][ T4272] syz-executor: attempt to access beyond end of device [ 73.371758][ T4272] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.388413][ T26] audit: type=1326 audit(1771011168.284:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b79bf79 code=0x7ffc0000 [ 73.464317][ T26] audit: type=1326 audit(1771011168.304:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b79bf79 code=0x7ffc0000 [ 73.494508][ T4319] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.514502][ T4662] loop1: detected capacity change from 0 to 2048 [ 73.550864][ T26] audit: type=1326 audit(1771011168.314:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b79bf79 code=0x7ffc0000 [ 73.584659][ T26] audit: type=1326 audit(1771011168.314:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f520b79bf79 code=0x7ffc0000 [ 73.609974][ T4662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.620994][ T26] audit: type=1326 audit(1771011168.314:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f520b79bf79 code=0x7ffc0000 [ 73.684461][ T4319] usb 4-1: Using ep0 maxpacket: 16 [ 73.691330][ T26] audit: type=1326 audit(1771011168.314:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f520b79bce2 code=0x7ffc0000 [ 73.691540][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 73.789263][ T26] audit: type=1326 audit(1771011168.344:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f520b75c84e code=0x7ffc0000 [ 73.855702][ T4319] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 73.873647][ T26] audit: type=1326 audit(1771011168.354:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f520b79bda7 code=0x7ffc0000 [ 73.884316][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.962825][ T4319] usb 4-1: config 0 descriptor?? [ 73.973395][ T26] audit: type=1326 audit(1771011168.354:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f520b75c84e code=0x7ffc0000 [ 74.033822][ T26] audit: type=1326 audit(1771011168.354:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.1.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f520b79bc0b code=0x7ffc0000 [ 74.195399][ T4319] usb 4-1: string descriptor 0 read error: -71 [ 74.211047][ T4319] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 74.245625][ T3623] bcm5974 4-1:0.0: could not read from device [ 74.263991][ T3623] bcm5974 4-1:0.0: could not read from device [ 74.292245][ T3623] bcm5974 4-1:0.0: could not read from device [ 74.320876][ T3623] bcm5974 4-1:0.0: could not read from device [ 74.322177][ T4319] usb 4-1: USB disconnect, device number 2 [ 74.601488][ T4680] loop2: detected capacity change from 0 to 1024 [ 74.632517][ T4680] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.655565][ T4680] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.720562][ T4680] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 74.737540][ T4680] System zones: 0-1, 3-36 [ 74.745207][ T4680] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 74.774366][ T4680] capability: warning: `syz.2.105' uses deprecated v2 capabilities in a way that may be insecure [ 74.847290][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 75.446117][ T4691] loop1: detected capacity change from 0 to 32768 [ 75.599550][ T129] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.784461][ T129] usb 3-1: Using ep0 maxpacket: 32 [ 75.795823][ T129] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.830512][ T129] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 75.852862][ T4704] loop3: detected capacity change from 0 to 128 [ 75.855110][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.879263][ T129] usb 3-1: Product: syz [ 75.883472][ T129] usb 3-1: Manufacturer: syz [ 75.887289][ T4704] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 75.924765][ T129] usb 3-1: SerialNumber: syz [ 75.960764][ T129] usb 3-1: config 0 descriptor?? [ 75.961617][ T4704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.981327][ T129] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 76.478200][ T14] cfg80211: failed to load regulatory.db [ 76.485260][ T4717] loop3: detected capacity change from 0 to 16 [ 76.529154][ T4717] erofs: (device loop3): mounted with root inode @ nid 36. [ 76.679618][ T4720] loop4: detected capacity change from 0 to 128 [ 76.788376][ T129] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 76.798103][ T4720] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 76.934974][ T4720] hpfs: filesystem error: improperly stopped [ 76.951389][ T4720] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 76.976923][ T4720] hpfs: You really don't want any checks? You are crazy... [ 77.044539][ T4489] usb 3-1: USB disconnect, device number 3 [ 77.069425][ T4720] hpfs: hpfs_map_sector(): read error [ 77.092194][ T4720] hpfs: code page support is disabled [ 77.124420][ T4720] hpfs: hpfs_map_4sectors(): unaligned read [ 77.133300][ T4720] hpfs: hpfs_map_4sectors(): unaligned read [ 77.154072][ T4720] hpfs: filesystem error: unable to find root dir [ 77.474472][ T4737] netlink: 'syz.4.129': attribute type 11 has an invalid length. [ 77.729018][ T4739] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.737906][ T4739] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.295676][ T4758] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.139'. [ 78.831081][ T4773] device dummy0 entered promiscuous mode [ 78.865439][ T4773] device netdevsim0 entered promiscuous mode [ 78.893848][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 79.044108][ T4759] loop3: detected capacity change from 0 to 32768 [ 79.080964][ T4759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.141 (4759) [ 79.142946][ T4759] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 79.150944][ T4763] loop4: detected capacity change from 0 to 32768 [ 79.188989][ T4759] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 79.221703][ T4763] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.142 (4763) [ 79.221762][ T4759] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 79.277667][ T4763] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 79.307384][ T4759] BTRFS info (device loop3): force zstd compression, level 3 [ 79.323547][ T4763] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 79.341171][ T4759] BTRFS info (device loop3): turning on sync discard [ 79.371587][ T4759] BTRFS info (device loop3): force clearing of disk cache [ 79.374410][ T4763] BTRFS info (device loop4): setting nodatacow, compression disabled [ 79.401988][ T4759] BTRFS info (device loop3): enabling disk space caching [ 79.427832][ T4763] BTRFS info (device loop4): force clearing of disk cache [ 79.434921][ T4759] BTRFS info (device loop3): turning off discard [ 79.454790][ T4763] BTRFS info (device loop4): enabling ssd optimizations [ 79.469310][ T4759] BTRFS info (device loop3): disk space caching is enabled [ 79.476767][ T4763] BTRFS info (device loop4): using spread ssd allocation scheme [ 79.494322][ T4763] BTRFS info (device loop4): turning off barriers [ 79.523918][ T4763] BTRFS info (device loop4): disabling free space tree [ 79.534011][ T4763] BTRFS info (device loop4): not using ssd optimizations [ 79.580409][ T4763] BTRFS info (device loop4): not using spread ssd allocation scheme [ 79.733207][ T4759] BTRFS info (device loop3): enabling ssd optimizations [ 79.756758][ T4759] BTRFS info (device loop3): rebuilding free space tree [ 79.822087][ T4759] BTRFS info (device loop3): disabling free space tree [ 79.854443][ T4759] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 79.876167][ T4759] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 79.895787][ T4763] BTRFS info (device loop4): rebuilding free space tree [ 79.929821][ T4775] loop1: detected capacity change from 0 to 40427 [ 80.015025][ T4763] BTRFS info (device loop4): disabling free space tree [ 80.021973][ T4763] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.047676][ T4775] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 80.074577][ T4779] loop2: detected capacity change from 0 to 32768 [ 80.086750][ T4775] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 80.098335][ T4779] XFS: noikeep mount option is deprecated. [ 80.104421][ T4763] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 80.142405][ T4779] XFS: ikeep mount option is deprecated. [ 80.191382][ T4775] F2FS-fs (loop1): Found nat_bits in checkpoint [ 80.251153][ T56] BTRFS info (device loop4): cannot satisfy tickets, dumping space info [ 80.260061][ T56] BTRFS info (device loop4): space_info DATA+METADATA (sub-group id 0) has 10502144 free, is full [ 80.270921][ T56] BTRFS info (device loop4): space_info total=11534336, used=49152, pinned=0, reserved=0, may_use=983040, readonly=0 zone_unusable=0 [ 80.284635][ T56] BTRFS info (device loop4): failing ticket with 33558528 bytes [ 80.294265][ T4763] BTRFS info (device loop4): space_info DATA+METADATA (sub-group id 0) has 10502144 free, is full [ 80.305340][ T4763] BTRFS info (device loop4): space_info total=11534336, used=49152, pinned=0, reserved=0, may_use=983040, readonly=0 zone_unusable=0 [ 80.319482][ T4763] BTRFS info (device loop4): global_block_rsv: size 983040 reserved 983040 [ 80.328851][ T4763] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 80.336548][ T4763] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 80.344197][ T4763] BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 [ 80.352107][ T4763] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 [ 80.412429][ T4779] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 80.412448][ T4775] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 80.444392][ T4775] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 80.452661][ T4779] XFS (loop2): Mounting V5 Filesystem [ 80.453211][ T4268] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.837203][ T4779] XFS (loop2): Ending clean mount [ 80.883273][ T4779] XFS (loop2): Quotacheck needed: Please wait. [ 81.027455][ T4779] XFS (loop2): Quotacheck: Done. [ 81.229787][ T4269] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.266147][ T4779] XFS (loop2): User initiated shutdown received. [ 81.302651][ T4779] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 81.494325][ T4779] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 81.644447][ T4850] loop3: detected capacity change from 0 to 512 [ 81.704144][ T4272] XFS (loop2): Unmounting Filesystem [ 82.580851][ T4880] loop3: detected capacity change from 0 to 64 [ 82.664565][ T4882] 9pnet: p9_errstr2errno: server reported unknown error @c [ 82.710038][ T4880] tipc: Started in network mode [ 82.730784][ T4880] tipc: Node identity 5f27ec2804d0df6e, cluster identity 4711 [ 82.784560][ T4880] tipc: Enabling of bearer rejected, failed to enable media [ 82.967597][ T4893] loop0: detected capacity change from 0 to 128 [ 83.051791][ T4893] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 83.120665][ T4893] hpfs: filesystem error: improperly stopped [ 83.132207][ T4893] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 83.143092][ T4893] hpfs: You really don't want any checks? You are crazy... [ 83.208413][ T4893] hpfs: hpfs_map_sector(): read error [ 83.213835][ T4893] hpfs: code page support is disabled [ 83.230148][ T4893] hpfs: hpfs_map_4sectors(): unaligned read [ 83.237087][ T4893] hpfs: hpfs_map_4sectors(): unaligned read [ 83.243103][ T4893] hpfs: filesystem error: unable to find root dir [ 83.302579][ T4893] hpfs: hpfs_map_4sectors(): unaligned read [ 83.320073][ T4893] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 83.711064][ T4886] loop1: detected capacity change from 0 to 32768 [ 83.752726][ T4886] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.171 (4886) [ 83.830376][ T4886] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 83.870532][ T4886] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 83.907406][ T4886] BTRFS info (device loop1): using free space tree [ 84.128346][ T4931] loop0: detected capacity change from 0 to 512 [ 84.151256][ T4934] loop2: detected capacity change from 0 to 64 [ 84.167855][ T4931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.208485][ T4886] BTRFS info (device loop1): enabling ssd optimizations [ 84.269839][ T4931] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 84.326941][ T4931] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.511857][ T4267] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 84.778035][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 85.200477][ T4964] loop1: detected capacity change from 0 to 512 [ 85.300531][ T4964] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 85.311928][ T4964] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.328855][ T4834] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.382012][ T4834] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 85.612257][ T4974] loop0: detected capacity change from 0 to 256 [ 85.635644][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 85.655230][ T4974] exfat: Deprecated parameter 'utf8' [ 85.674523][ T4974] exfat: Deprecated parameter 'utf8' [ 85.737505][ T4972] fido_id[4972]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.813024][ T4974] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 86.444394][ T4846] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.642452][ T4846] usb 4-1: Using ep0 maxpacket: 32 [ 86.653545][ T4846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.686447][ T4846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.699470][ T4846] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 86.734428][ T4846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.756534][ T4846] usb 4-1: config 0 descriptor?? [ 86.810666][ T5004] loop0: detected capacity change from 0 to 4096 [ 86.831298][ T5004] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 87.058909][ T5008] loop4: detected capacity change from 0 to 2048 [ 87.169975][ T5008] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.253007][ T5017] loop1: detected capacity change from 0 to 2048 [ 87.276977][ T4846] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 87.360446][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 87.629599][ T4341] usb 4-1: USB disconnect, device number 3 [ 87.747489][ T5018] fido_id[5018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 88.402554][ T5022] loop4: detected capacity change from 0 to 131072 [ 88.424566][ T5022] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 88.433930][ T5022] F2FS-fs (loop4): invalid crc value [ 88.453134][ T5022] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 88.503684][ T5022] F2FS-fs (loop4): recover fsync data on readonly fs [ 88.512193][ T5022] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 88.641620][ T5022] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=ba0003, run fsck to fix. [ 88.776234][ T5035] block nbd0: Unsupported socket: should be TCP or UNIX. [ 88.809200][ T5029] loop1: detected capacity change from 0 to 8192 [ 88.893221][ T5029] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 88.931913][ T5029] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 88.941604][ T5029] REISERFS (device loop1): using ordered data mode [ 88.948241][ T5029] reiserfs: using flush barriers [ 88.955322][ T5029] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.972292][ T5029] REISERFS (device loop1): checking transaction log (loop1) [ 89.209572][ T5029] REISERFS (device loop1): Using tea hash to sort names [ 89.236780][ T5029] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 89.331523][ T5029] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 89.519740][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 89.519754][ T26] audit: type=1800 audit(1771011184.414:57): pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.220" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 89.573198][ T26] audit: type=1800 audit(1771011184.454:58): pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.220" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 90.180193][ T5041] loop3: detected capacity change from 0 to 40427 [ 90.261252][ T5041] F2FS-fs (loop3): invalid crc value [ 90.325990][ T5041] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.398049][ T5060] netlink: 100 bytes leftover after parsing attributes in process `syz.1.231'. [ 90.567743][ T5041] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.724460][ T5041] F2FS-fs (loop3): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 90.854487][ T5064] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 90.870060][ T5064] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 91.039948][ T5081] loop2: detected capacity change from 0 to 1024 [ 91.314083][ T46] hfsplus: b-tree write err: -5, ino 4 [ 91.446027][ T5094] loop2: detected capacity change from 0 to 512 [ 91.493196][ T5094] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.539312][ T5094] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.568867][ T5075] Process accounting resumed [ 91.627685][ T5094] EXT4-fs (loop2): 1 truncate cleaned up [ 91.672752][ T5094] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.690205][ T5104] loop1: detected capacity change from 0 to 128 [ 91.719348][ T5102] netlink: 'syz.0.249': attribute type 12 has an invalid length. [ 91.786867][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 91.793081][ T5102] netlink: 'syz.0.249': attribute type 29 has an invalid length. [ 91.804578][ T5102] netlink: 148 bytes leftover after parsing attributes in process `syz.0.249'. [ 91.840248][ T5104] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 91.850736][ T5102] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 91.869084][ T5104] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.884013][ T5102] netlink: 'syz.0.249': attribute type 2 has an invalid length. [ 92.246370][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 92.526672][ T5122] loop3: detected capacity change from 0 to 256 [ 92.533894][ T5122] exfat: Deprecated parameter 'utf8' [ 92.621427][ T5122] exfat: Deprecated parameter 'namecase' [ 92.659805][ T5122] exfat: Deprecated parameter 'utf8' [ 92.680672][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 92.692646][ T5122] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 92.729349][ T5124] netlink: 56 bytes leftover after parsing attributes in process `syz.1.259'. [ 92.762256][ T5122] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 92.833655][ T5122] exFAT-fs (loop3): hint_cluster is invalid (1) [ 92.916163][ T5122] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 92.931687][ T5113] loop0: detected capacity change from 0 to 32768 [ 92.935443][ T5122] exFAT-fs (loop3): error, failed to bmap (inode : ffff8880548107e0 iblock : 9, err : -5) [ 92.970984][ T5122] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 93.011088][ T5122] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 93.032846][ T5113] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 93.051836][ T5113] XFS (loop0): Mounting V5 Filesystem [ 93.187509][ T5113] XFS (loop0): Ending clean mount [ 93.203754][ T11] kworker/u4:1: attempt to access beyond end of device [ 93.203754][ T11] loop3: rw=1, sector=34359738488, nr_sectors = 8 limit=256 [ 93.241182][ T5113] XFS (loop0): Quotacheck needed: Please wait. [ 93.300302][ T5113] XFS (loop0): Quotacheck: Done. [ 93.508429][ T4276] XFS (loop0): Unmounting Filesystem [ 93.801486][ T5096] Zero length message leads to an empty skb [ 93.985636][ T5147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 94.014657][ T5147] netlink: 'syz.2.266': attribute type 30 has an invalid length. [ 94.039455][ T5147] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.048964][ T5147] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.057752][ T5147] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.066513][ T5147] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.144493][ T5147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 94.194380][ T5147] netlink: 'syz.2.266': attribute type 30 has an invalid length. [ 94.582278][ T5170] loop0: detected capacity change from 0 to 256 [ 94.596019][ T4341] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.614069][ T5170] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.677130][ T5170] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 94.711752][ T5170] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 94.744346][ T33] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.786505][ T4341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.798165][ T4341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.813208][ T4341] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.827868][ T4341] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.837658][ T4341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.860009][ T4341] usb 4-1: config 0 descriptor?? [ 94.944592][ T33] usb 3-1: Using ep0 maxpacket: 8 [ 94.968708][ T33] usb 3-1: unable to get BOS descriptor or descriptor too short [ 94.978151][ T33] usb 3-1: config 7 has an invalid interface number: 213 but max is 0 [ 94.986639][ T4846] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.994464][ T33] usb 3-1: config 7 has no interface number 0 [ 95.008440][ T33] usb 3-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 95.029294][ T33] usb 3-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 95.048024][ T33] usb 3-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 95.062411][ T33] usb 3-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 95.078177][ T33] usb 3-1: config 7 interface 213 has no altsetting 0 [ 95.090101][ T33] usb 3-1: language id specifier not provided by device, defaulting to English [ 95.110258][ T33] usb 3-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 95.124086][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.132661][ T33] usb 3-1: Product: syz [ 95.143575][ T33] usb 3-1: Manufacturer: syz [ 95.149798][ T33] usb 3-1: SerialNumber: syz [ 95.168024][ T5161] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 95.206174][ T4846] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.223733][ T4846] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.242692][ T4846] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 95.258077][ T4846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 95.267201][ T4846] usb 2-1: SerialNumber: syz [ 95.291939][ T4341] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 95.321560][ T4341] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 95.402935][ T33] pegasus: probe of 3-1:7.213 failed with error -71 [ 95.431675][ T33] usb 3-1: USB disconnect, device number 4 [ 95.502449][ T4846] usb 2-1: 0:2 : does not exist [ 95.608382][ T4846] usb 2-1: USB disconnect, device number 2 [ 95.615015][ T4341] usb 4-1: USB disconnect, device number 4 [ 95.812433][ T5192] loop4: detected capacity change from 0 to 2048 [ 95.835425][ T4257] udevd[4257]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.881271][ T5192] Alternate GPT is invalid, using primary GPT. [ 95.887621][ T5192] loop4: p1 p2 p3 [ 96.223204][ T4257] udevd[4257]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 96.238790][ T4260] udevd[4260]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 96.253748][ T4580] udevd[4580]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 96.312723][ T5200] netlink: 182 bytes leftover after parsing attributes in process `syz.1.289'. [ 96.337910][ T4257] udevd[4257]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 96.351272][ T4260] udevd[4260]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 96.365863][ T4580] udevd[4580]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 96.415332][ T4340] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.601663][ T5194] loop0: detected capacity change from 0 to 40427 [ 96.633080][ T4340] usb 5-1: Using ep0 maxpacket: 32 [ 96.646433][ T4340] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 96.654367][ T126] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.666964][ T4340] usb 5-1: config 0 has no interface number 0 [ 96.673105][ T4340] usb 5-1: config 0 interface 119 has no altsetting 0 [ 96.679262][ T5194] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 96.721265][ T5194] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 96.726420][ T4340] usb 5-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 96.763153][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.782762][ T4340] usb 5-1: Product: syz [ 96.792889][ T4340] usb 5-1: Manufacturer: syz [ 96.803822][ T4340] usb 5-1: SerialNumber: syz [ 96.811143][ T4340] usb 5-1: config 0 descriptor?? [ 96.824984][ T5194] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.876112][ T126] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 96.894664][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 96.921652][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 96.953702][ T5194] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 96.963481][ T126] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.968220][ T5194] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.984811][ T126] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.999870][ T5218] loop3: detected capacity change from 0 to 64 [ 97.018877][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.072501][ T126] usb 3-1: config 0 descriptor?? [ 97.093475][ T5204] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 97.401329][ T5220] loop1: detected capacity change from 0 to 4096 [ 97.443924][ T4340] mos7840 5-1:0.119: required endpoints missing [ 97.481644][ T5220] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 97.502024][ T4340] usb 5-1: USB disconnect, device number 3 [ 97.560117][ T126] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 97.590728][ T126] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 97.616827][ T5220] ntfs3: loop1: Failed to load $Extend. [ 97.891828][ T126] usb 3-1: USB disconnect, device number 5 [ 98.270778][ T5247] loop3: detected capacity change from 0 to 64 [ 98.424368][ T4341] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.632417][ T4341] usb 1-1: Using ep0 maxpacket: 32 [ 98.651591][ T4341] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 98.690439][ T4341] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 98.711208][ T4341] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 98.743957][ T4341] usb 1-1: Product: syz [ 98.755526][ T4341] usb 1-1: Manufacturer: syz [ 98.760250][ T4341] usb 1-1: SerialNumber: syz [ 98.780905][ T4341] usb 1-1: config 0 descriptor?? [ 98.788207][ T5241] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.818276][ T4341] hub 1-1:0.0: bad descriptor, ignoring hub [ 98.848069][ T4341] hub: probe of 1-1:0.0 failed with error -5 [ 99.069809][ T5269] device macvtap1 entered promiscuous mode [ 99.120622][ T5269] device macvtap2 entered promiscuous mode [ 99.185235][ T4845] usb 1-1: USB disconnect, device number 2 [ 99.847563][ T5299] IPVS: fo: FWM 3 0x00000003 - no destination available [ 99.864302][ T4340] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.871998][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 99.875111][ T4341] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 99.924439][ T126] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.989710][ T5302] loop0: detected capacity change from 0 to 512 [ 100.051732][ T5302] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 100.066918][ T4340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.076064][ T4341] usb 4-1: config 0 interface 0 altsetting 247 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 100.090201][ T4341] usb 4-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 100.102602][ T4340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.103940][ T4341] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.120003][ T4341] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 100.123358][ T5302] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.129230][ T4341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.149710][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.150137][ T4340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.161296][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.185373][ T4341] usb 4-1: config 0 descriptor?? [ 100.191273][ T5294] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.204367][ T126] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 100.213665][ T126] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 100.238204][ T126] usb 5-1: Manufacturer: syz [ 100.241653][ T4340] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.262538][ T4340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.272127][ T126] usb 5-1: config 0 descriptor?? [ 100.306468][ T4340] usb 3-1: config 0 descriptor?? [ 100.468572][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 100.653304][ T5311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.332'. [ 100.746877][ T4340] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 100.763817][ T4340] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 100.810050][ T4341] usb 4-1: string descriptor 0 read error: -71 [ 100.822205][ T4341] uclogic 0003:5543:006E.0005: failed retrieving string descriptor #200: -71 [ 100.842487][ T4341] uclogic 0003:5543:006E.0005: failed retrieving pen parameters: -71 [ 100.864383][ T4341] uclogic 0003:5543:006E.0005: failed probing pen v2 parameters: -71 [ 100.864670][ T4845] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.872550][ T4341] uclogic 0003:5543:006E.0005: failed probing parameters: -71 [ 100.914757][ T4341] uclogic: probe of 0003:5543:006E.0005 failed with error -71 [ 100.954856][ T4341] usb 4-1: USB disconnect, device number 5 [ 101.064468][ T4845] usb 1-1: Using ep0 maxpacket: 16 [ 101.078876][ T4340] usb 3-1: USB disconnect, device number 6 [ 101.088521][ T4845] usb 1-1: config 0 has no interfaces? [ 101.130049][ T4845] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 101.143582][ T4845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.157797][ T4845] usb 1-1: Product: syz [ 101.162084][ T4845] usb 1-1: Manufacturer: syz [ 101.167595][ T4845] usb 1-1: SerialNumber: syz [ 101.180862][ T4845] r8152-cfgselector 1-1: config 0 descriptor?? [ 101.325779][ T126] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71 [ 101.345846][ T126] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 101.361518][ T126] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71 [ 101.369952][ T126] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 101.377736][ T126] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 101.391513][ T4845] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 101.410346][ T4350] usb 1-1: config 0 descriptor?? [ 101.424730][ T126] usb 5-1: USB disconnect, device number 4 [ 101.581455][ T26] audit: type=1326 audit(1771011196.474:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5325 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc1b9bf79 code=0x7ffc0000 [ 101.609094][ T4350] usb 1-1: can't set config #0, error -71 [ 101.614442][ T4340] usb 1-1: USB disconnect, device number 3 [ 101.654343][ T26] audit: type=1326 audit(1771011196.474:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5325 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc1b9bf79 code=0x7ffc0000 [ 101.677182][ T26] audit: type=1326 audit(1771011196.524:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5325 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc1b9bf79 code=0x7ffc0000 [ 101.705062][ T26] audit: type=1326 audit(1771011196.524:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5325 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc1b9bf79 code=0x7ffc0000 [ 101.729686][ T26] audit: type=1326 audit(1771011196.524:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5325 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2fc1b9bf79 code=0x7ffc0000 [ 101.765940][ T26] audit: type=1326 audit(1771011196.524:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5325 comm="syz.3.338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fc1b9bf79 code=0x0 [ 101.787798][ T26] audit: type=1326 audit(1771011196.594:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5325 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc1b9bf79 code=0x7ffc0000 [ 101.810466][ T26] audit: type=1326 audit(1771011196.594:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5325 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc1b9bf79 code=0x7ffc0000 [ 101.833566][ T26] audit: type=1326 audit(1771011196.654:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5325 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc1b9bf79 code=0x7ffc0000 [ 101.856530][ T26] audit: type=1326 audit(1771011196.654:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5325 comm="syz.3.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2fc1b9bce2 code=0x7ffc0000 [ 102.365141][ T5344] loop0: detected capacity change from 0 to 128 [ 102.403954][ T5344] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 102.491699][ T5344] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.531416][ T5348] overlayfs: failed to resolve './bus': -2 [ 102.839558][ T5342] loop1: detected capacity change from 0 to 32768 [ 102.914322][ T5342] XFS (loop1): Mounting V5 Filesystem [ 102.969908][ T5342] XFS (loop1): Ending clean mount [ 103.290630][ T4267] XFS (loop1): Unmounting Filesystem [ 103.575104][ T5363] netlink: 'syz.4.351': attribute type 4 has an invalid length. [ 103.829568][ T5368] loop4: detected capacity change from 0 to 256 [ 103.935066][ T5368] exFAT-fs (loop4): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 104.060418][ T5367] loop2: detected capacity change from 0 to 8192 [ 104.126651][ T5367] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 104.274445][ T5367] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 104.313551][ T5367] REISERFS (device loop2): using ordered data mode [ 104.391933][ T5367] reiserfs: using flush barriers [ 104.425766][ T5367] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.482085][ T5367] REISERFS (device loop2): checking transaction log (loop2) [ 104.541285][ T5367] REISERFS (device loop2): Using r5 hash to sort names [ 104.558697][ T5367] REISERFS (device loop2): using 3.5.x disk format [ 104.580297][ T5367] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 104.915227][ T5386] loop2: detected capacity change from 0 to 256 [ 104.938217][ T5386] exfat: Deprecated parameter 'utf8' [ 104.960108][ T5386] exfat: Deprecated parameter 'namecase' [ 104.994416][ T5386] exfat: Deprecated parameter 'utf8' [ 105.062890][ T5386] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 105.140929][ T5386] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 105.184756][ T5386] exFAT-fs (loop2): hint_cluster is invalid (1) [ 105.202976][ T5395] process 'syz.1.363' launched './file0' with NULL argv: empty string added [ 105.247046][ T5386] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 105.266216][ T5386] exFAT-fs (loop2): error, failed to bmap (inode : ffff888054812860 iblock : 9, err : -5) [ 105.305426][ T5386] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 105.336722][ T5386] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 105.447480][ T5380] loop4: detected capacity change from 0 to 32768 [ 105.527838][ T4350] kworker/u4:6: attempt to access beyond end of device [ 105.527838][ T4350] loop2: rw=1, sector=34359738488, nr_sectors = 8 limit=256 [ 105.556177][ T5380] XFS (loop4): Mounting V5 Filesystem [ 105.652921][ T5380] XFS (loop4): Ending clean mount [ 105.694644][ T5380] XFS (loop4): Quotacheck needed: Please wait. [ 105.749915][ T5380] XFS (loop4): Quotacheck: Done. [ 105.956708][ T4269] XFS (loop4): Unmounting Filesystem [ 106.108246][ T5408] loop2: detected capacity change from 0 to 512 [ 106.183105][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 106.354475][ T4845] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.448966][ T5414] block nbd1: shutting down sockets [ 106.571108][ T5423] loop2: detected capacity change from 0 to 128 [ 106.584640][ T4845] usb 4-1: Using ep0 maxpacket: 16 [ 106.615073][ T4845] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 106.624157][ T4845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.637994][ T5425] input: syz0 as /devices/virtual/input/input9 [ 106.654506][ T4845] usb 4-1: Product: syz [ 106.661730][ T4845] usb 4-1: Manufacturer: syz [ 106.672322][ T4845] usb 4-1: SerialNumber: syz [ 106.701769][ T4845] usb 4-1: config 0 descriptor?? [ 106.734514][ T4846] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 106.944486][ T4846] usb 5-1: Using ep0 maxpacket: 32 [ 106.953229][ T4846] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 106.963327][ T4846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.008046][ T4846] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 107.124388][ T4845] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 107.140752][ T4845] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.155402][ T4845] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 107.163555][ T4845] usb 4-1: media controller created [ 107.186883][ T4845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.326689][ T4845] zl10353_read_register: readreg error (reg=127, ret==0) [ 107.349777][ T4845] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 107.368026][ T4845] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 107.412358][ T4845] usb 4-1: USB disconnect, device number 6 [ 107.516209][ T4845] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 107.984809][ T4341] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.004587][ T4846] gspca_nw80x: reg_w err -71 [ 108.020150][ T4846] nw80x: probe of 5-1:3.0 failed with error -71 [ 108.043468][ T4846] usb 5-1: USB disconnect, device number 5 [ 108.176212][ T4341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.196708][ T4341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.214400][ T4341] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 108.233984][ T4341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.254575][ T4341] usb 2-1: config 0 descriptor?? [ 108.395491][ T5476] loop2: detected capacity change from 0 to 1024 [ 108.539557][ T9] hfsplus: b-tree write err: -5, ino 4 [ 108.678211][ T4341] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 108.703924][ T4341] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 108.716604][ T5484] device batadv_slave_1 entered promiscuous mode [ 108.724429][ T4341] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 108.737815][ T5483] device batadv_slave_1 left promiscuous mode [ 108.745095][ T4341] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 108.782118][ T4341] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 108.817672][ T4341] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 108.880441][ T5488] input: syz1 as /devices/virtual/input/input10 [ 109.146370][ T5501] loop3: detected capacity change from 0 to 16 [ 109.178305][ T5501] erofs: (device loop3): mounted with root inode @ nid 36. [ 109.330396][ T4341] playstation 0003:054C:0DF2.0008: Failed to retrieve feature with reportID 5: -71 [ 109.354630][ T4341] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense calibration info: -71 [ 109.372394][ T4341] playstation 0003:054C:0DF2.0008: Failed to get calibration data from DualSense [ 109.374517][ T4845] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 109.384012][ T4341] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 109.421604][ T4341] playstation: probe of 0003:054C:0DF2.0008 failed with error -71 [ 109.461987][ T4341] usb 2-1: USB disconnect, device number 3 [ 109.619174][ T4845] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 109.644826][ T4845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.681870][ T4845] usb 3-1: Product: syz [ 109.707190][ T4845] usb 3-1: Manufacturer: syz [ 109.711834][ T4845] usb 3-1: SerialNumber: syz [ 109.738148][ T4845] usb 3-1: config 0 descriptor?? [ 109.755672][ T5512] fido_id[5512]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 109.791960][ T5520] device syzkaller1 entered promiscuous mode [ 109.990591][ T4845] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 110.167286][ T5536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 110.209310][ T5536] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.218422][ T5536] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.227426][ T5536] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.236200][ T5536] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.258568][ T5536] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.267721][ T5536] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.276767][ T5536] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.285884][ T5536] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.395301][ T4845] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 110.412353][ T4845] usb 3-1: USB disconnect, device number 7 [ 110.636663][ T5533] loop0: detected capacity change from 0 to 32768 [ 110.644416][ T4846] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 110.657358][ T5546] syz.1.428 (5546) used greatest stack depth: 18704 bytes left [ 110.798214][ T5533] XFS (loop0): Mounting V5 Filesystem [ 110.834371][ T4846] usb 4-1: Using ep0 maxpacket: 32 [ 110.845575][ T4846] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 110.870800][ T4846] usb 4-1: config 0 has no interface number 0 [ 110.932863][ T4846] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.951507][ T4846] usb 4-1: config 0 interface 85 has no altsetting 0 [ 110.973679][ T5533] XFS (loop0): Ending clean mount [ 110.980780][ T4846] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 111.002007][ T5533] XFS (loop0): Quotacheck needed: Please wait. [ 111.012679][ T4846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.024869][ T5567] loop2: detected capacity change from 0 to 24 [ 111.043003][ T4846] usb 4-1: Product: syz [ 111.056574][ T5567] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 111.058402][ T4846] usb 4-1: Manufacturer: syz [ 111.074556][ T4846] usb 4-1: SerialNumber: syz [ 111.091008][ T5567] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 111.113050][ T4846] usb 4-1: config 0 descriptor?? [ 111.155561][ T5533] XFS (loop0): Quotacheck: Done. [ 111.368467][ T4276] XFS (loop0): Unmounting Filesystem [ 111.549858][ T5573] loop1: detected capacity change from 0 to 1024 [ 111.668981][ T5578] loop2: detected capacity change from 0 to 512 [ 111.695396][ T5578] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.719873][ T4350] hfsplus: b-tree write err: -5, ino 4 [ 111.749476][ T5578] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 111.834148][ T5578] EXT4-fs (loop2): 1 truncate cleaned up [ 111.840672][ T5578] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 112.052452][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 112.084670][ T4846] appletouch 4-1:0.85: Geyser mode initialized. [ 112.092196][ T4846] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input11 [ 112.317365][ T33] usb 4-1: USB disconnect, device number 7 [ 112.336955][ T33] appletouch 4-1:0.85: input: appletouch disconnected [ 112.508416][ T126] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 112.694347][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 112.716930][ T126] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 112.736445][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.764282][ T126] usb 3-1: Product: syz [ 112.768675][ T126] usb 3-1: Manufacturer: syz [ 112.773292][ T126] usb 3-1: SerialNumber: syz [ 112.801361][ T126] usb 3-1: config 0 descriptor?? [ 113.248908][ T126] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 113.288894][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.323280][ T126] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 113.347972][ T126] usb 3-1: media controller created [ 113.402718][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.484626][ T126] zl10353_read_register: readreg error (reg=127, ret==0) [ 113.509250][ T126] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 113.536233][ T126] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 113.564915][ T126] usb 3-1: USB disconnect, device number 8 [ 113.644756][ T126] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 114.340982][ T5619] loop2: detected capacity change from 0 to 8192 [ 114.386848][ T5619] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 114.503661][ T5619] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 114.546989][ T5627] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 114.546989][ T5627] Q&|x [ 114.576900][ T5619] REISERFS (device loop2): using ordered data mode [ 114.591426][ T5619] reiserfs: using flush barriers [ 114.619497][ T5619] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.746026][ T5619] REISERFS (device loop2): checking transaction log (loop2) [ 114.963487][ T5619] REISERFS (device loop2): Using tea hash to sort names [ 114.989049][ T5619] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 115.039639][ T5622] loop3: detected capacity change from 0 to 32768 [ 115.551243][ T5649] loop2: detected capacity change from 0 to 256 [ 115.590953][ T5649] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 116.134313][ T33] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 116.316633][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.334297][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.374176][ T33] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.398173][ T33] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.424311][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.434781][ T33] usb 3-1: config 0 descriptor?? [ 116.654813][ T5689] block nbd4: shutting down sockets [ 116.875078][ T33] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 116.889917][ T33] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 116.930407][ T33] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 117.124167][ T5687] loop0: detected capacity change from 0 to 32768 [ 117.152168][ T33] usb 3-1: USB disconnect, device number 9 [ 117.224393][ T5687] XFS (loop0): Mounting V5 Filesystem [ 117.249091][ T5706] loop3: detected capacity change from 0 to 22 [ 117.322755][ T5687] XFS (loop0): Ending clean mount [ 117.362976][ T5706] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 117.428229][ T5706] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 117.502165][ T26] kauditd_printk_skb: 327 callbacks suppressed [ 117.502189][ T26] audit: type=1804 audit(1771011212.394:396): pid=5687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.483" name="/newroot/86/file1/file1" dev="loop0" ino=6150 res=1 errno=0 [ 117.575872][ T5714] loop4: detected capacity change from 0 to 64 [ 117.654091][ T4276] XFS (loop0): Unmounting Filesystem [ 118.087605][ T5725] loop2: detected capacity change from 0 to 2048 [ 118.177203][ T5725] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 118.221546][ T5725] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.298283][ T5738] loop1: detected capacity change from 0 to 512 [ 118.356453][ T5738] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.501: inode has both inline data and extents flags [ 118.391434][ T5738] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.501: couldn't read orphan inode 15 (err -117) [ 118.402675][ T5725] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 118.418875][ T5725] EXT4-fs (loop2): This should not happen!! Data will be lost [ 118.418875][ T5725] [ 118.429365][ T5725] EXT4-fs (loop2): Total free blocks count 0 [ 118.435725][ T5725] EXT4-fs (loop2): Free/Dirty block details [ 118.441828][ T5725] EXT4-fs (loop2): free_blocks=2415919104 [ 118.448521][ T5725] EXT4-fs (loop2): dirty_blocks=64 [ 118.453780][ T5725] EXT4-fs (loop2): Block reservation details [ 118.456832][ T5738] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 118.460236][ T5725] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 118.477685][ T5741] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 118.563910][ T5744] input: syz0 as /devices/virtual/input/input13 [ 118.595334][ T56] Bluetooth: hci5: Frame reassembly failed (-84) [ 118.612408][ T4350] Bluetooth: hci5: Frame reassembly failed (-84) [ 118.632739][ T4350] Bluetooth: hci5: Frame reassembly failed (-84) [ 118.745563][ T5735] loop4: detected capacity change from 0 to 32768 [ 118.782865][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 119.483657][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.587478][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.705291][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.775731][ T5766] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.816977][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.177392][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.192438][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.203297][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.235296][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.245060][ T126] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 120.263674][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 120.274125][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.448550][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 120.461780][ T126] usb 3-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 120.497728][ T126] usb 3-1: config 0 has an invalid interface number: 150 but max is 64 [ 120.524379][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.555789][ T126] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 120.575394][ T126] usb 3-1: config 0 has no interface number 0 [ 120.583258][ T5790] loop3: detected capacity change from 0 to 8 [ 120.593126][ T126] usb 3-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.620757][ T126] usb 3-1: config 0 interface 150 has no altsetting 0 [ 120.629599][ T4277] Bluetooth: hci5: command 0x1003 tx timeout [ 120.636538][ T4285] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 120.661185][ T126] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 120.671020][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.686806][ T126] usb 3-1: config 0 descriptor?? [ 120.818177][ T5790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.519'. [ 120.977514][ T5774] loop2: detected capacity change from 0 to 256 [ 121.214173][ T126] usb 3-1: USB disconnect, device number 10 [ 121.290820][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 121.429635][ T4340] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.624401][ T4340] usb 1-1: Using ep0 maxpacket: 32 [ 121.631626][ T4340] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 121.640795][ T4340] usb 1-1: config 0 has no interface number 0 [ 121.647143][ T4340] usb 1-1: config 0 interface 184 has no altsetting 0 [ 121.656939][ T4340] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 121.666768][ T4340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.674982][ T4340] usb 1-1: Product: syz [ 121.703348][ T4340] usb 1-1: Manufacturer: syz [ 121.714787][ T4340] usb 1-1: SerialNumber: syz [ 121.732582][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.733243][ T4340] usb 1-1: config 0 descriptor?? [ 121.756360][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.772793][ T4340] smsc75xx v1.0.0 [ 121.782453][ T5776] device bridge_slave_0 entered promiscuous mode [ 121.796357][ T4340] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 121.807864][ T4340] smsc75xx: probe of 1-1:0.184 failed with error -22 [ 121.819579][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.833308][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.859518][ T5776] device bridge_slave_1 entered promiscuous mode [ 121.967274][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'. [ 121.983382][ T4846] usb 1-1: USB disconnect, device number 4 [ 122.114558][ T4340] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.143684][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.202553][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.308101][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 122.324354][ T4340] usb 4-1: Using ep0 maxpacket: 16 [ 122.365495][ T4340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.385140][ T4340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.419707][ T5776] team0: Port device team_slave_0 added [ 122.460658][ T4340] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.479507][ T4340] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.495866][ T4340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.529120][ T4340] usb 4-1: config 0 descriptor?? [ 122.568205][ T5776] team0: Port device team_slave_1 added [ 122.612476][ T56] device hsr_slave_0 left promiscuous mode [ 122.662466][ T56] device hsr_slave_1 left promiscuous mode [ 122.684718][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.701164][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.739173][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.762018][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.784048][ T56] device bridge_slave_1 left promiscuous mode [ 122.811208][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.854533][ T56] device bridge_slave_0 left promiscuous mode [ 122.892034][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.949082][ T4340] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 122.966939][ T4340] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 122.991910][ T4340] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 123.007465][ T4340] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 123.026579][ T4340] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 123.027044][ T56] device veth1_macvtap left promiscuous mode [ 123.042003][ T4340] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 123.050816][ T56] device veth0_macvtap left promiscuous mode [ 123.060704][ T56] device veth1_vlan left promiscuous mode [ 123.064051][ T4340] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 123.073570][ T56] device veth0_vlan left promiscuous mode [ 123.085672][ T4340] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 123.093465][ T4340] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 123.104406][ T4340] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 123.130913][ T5853] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 123.155241][ T4340] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000A/input/input14 [ 123.200560][ T5853] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 123.224838][ T5853] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 123.263392][ T4340] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 123.306868][ T4340] usb 4-1: USB disconnect, device number 8 [ 123.523953][ T5855] fido_id[5855]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 124.194389][ T4256] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.309170][ T56] team0 (unregistering): Port device team_slave_1 removed [ 124.359969][ T56] team0 (unregistering): Port device team_slave_0 removed [ 124.374452][ T4256] usb 5-1: Using ep0 maxpacket: 16 [ 124.381921][ T4256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.393125][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 124.399289][ T4256] usb 5-1: New USB device found, idVendor=0eef, idProduct=72fa, bcdDevice= 0.00 [ 124.409156][ T4256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.419611][ T4256] usb 5-1: config 0 descriptor?? [ 124.440235][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.493998][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.841030][ T5866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.854827][ T5866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.882230][ T4256] usbhid 5-1:0.0: can't add hid device: -71 [ 124.892388][ T4256] usbhid: probe of 5-1:0.0 failed with error -71 [ 124.917599][ T4256] usb 5-1: USB disconnect, device number 6 [ 124.941609][ T56] bond0 (unregistering): Released all slaves [ 125.045669][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.063290][ T5850] netlink: 104 bytes leftover after parsing attributes in process `syz.2.534'. [ 125.073303][ T5850] netlink: 104 bytes leftover after parsing attributes in process `syz.2.534'. [ 125.084295][ T5850] netlink: 104 bytes leftover after parsing attributes in process `syz.2.534'. [ 125.142977][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.185481][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.262516][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.291778][ T5875] input: syz0 as /devices/virtual/input/input15 [ 125.334846][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.373353][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.427349][ T5878] loop0: detected capacity change from 0 to 128 [ 125.455489][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.652422][ T5878] syz.0.545: attempt to access beyond end of device [ 125.652422][ T5878] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 125.681609][ T5776] device hsr_slave_0 entered promiscuous mode [ 125.712775][ T5776] device hsr_slave_1 entered promiscuous mode [ 125.740399][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.764326][ T5776] Cannot create hsr debugfs directory [ 126.302276][ T5776] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.351091][ T5776] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.404045][ T5776] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.449982][ T5776] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.464359][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 126.835923][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.917375][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.935737][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.972418][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.993513][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.020271][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.056551][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.065247][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.106474][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.135803][ T5937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.562'. [ 127.147935][ T4340] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 127.171453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.199614][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.210087][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.217262][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.230655][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.257832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.296426][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.329754][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.343635][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.358291][ T4340] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.380278][ T4340] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.393143][ T5945] loop2: detected capacity change from 0 to 256 [ 127.409261][ T4340] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.427376][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.447550][ T5945] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.459059][ T4340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.483854][ T4340] usb 1-1: Product: syz [ 127.499109][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.499436][ T5945] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 127.509023][ T4340] usb 1-1: Manufacturer: syz [ 127.544593][ T4340] usb 1-1: SerialNumber: syz [ 127.551838][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.570780][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.590135][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.600122][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.600364][ T5945] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 127.621740][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.972831][ T4340] usb 1-1: 0:2 : does not exist [ 128.073236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.084677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.105378][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.272134][ T5974] loop2: detected capacity change from 0 to 256 [ 128.452242][ T4311] usb 1-1: USB disconnect, device number 5 [ 128.551302][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 128.594379][ T126] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 128.627625][ T5984] loop3: detected capacity change from 0 to 4096 [ 128.650029][ T5984] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 128.798995][ T126] usb 3-1: config 1 has an invalid descriptor of length 170, skipping remainder of the config [ 128.823319][ T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.865695][ T32] wlan1: Trigger new scan to find an IBSS to join [ 128.879149][ T126] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.908636][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.934118][ T126] usb 3-1: Product: syz [ 128.958417][ T126] usb 3-1: Manufacturer: syz [ 128.983413][ T126] usb 3-1: SerialNumber: syz [ 129.241022][ T126] usb 3-1: 0:2 : does not exist [ 129.264910][ T126] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 129.374482][ T126] usb 3-1: USB disconnect, device number 11 [ 129.456650][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.482447][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.544346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.552793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.572636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.600160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.632436][ T5988] loop4: detected capacity change from 0 to 32768 [ 129.640531][ T5776] device veth0_vlan entered promiscuous mode [ 129.698014][ T5988] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.571 (5988) [ 129.746664][ T5776] device veth1_vlan entered promiscuous mode [ 129.755121][ T5988] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.772571][ T6009] 9pnet: p9_errstr2errno: server reported unknown error @L O00000000000000000005 [ 129.813320][ T5988] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 129.854022][ T5988] BTRFS info (device loop4): setting nodatasum [ 129.862162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.873894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.888433][ T5988] BTRFS info (device loop4): force zlib compression, level 3 [ 129.899212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.935327][ T5988] BTRFS info (device loop4): metadata ratio 1 [ 129.965646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.974473][ T5988] BTRFS info (device loop4): enabling ssd optimizations [ 130.013745][ T5988] BTRFS info (device loop4): allowing degraded mounts [ 130.014337][ T5776] device veth0_macvtap entered promiscuous mode [ 130.038023][ T6011] loop0: detected capacity change from 0 to 2048 [ 130.054339][ T5988] BTRFS info (device loop4): using free space tree [ 130.073610][ T5776] device veth1_macvtap entered promiscuous mode [ 130.163689][ T6011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 130.255580][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.341080][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.422197][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.487511][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.543260][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.607627][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.650871][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.689647][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.747791][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.794506][ T6023] netlink: 'syz.2.579': attribute type 4 has an invalid length. [ 130.865503][ T4269] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.930547][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.945041][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.976338][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.995534][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.017404][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.091030][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.110388][ T46] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.145438][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.210326][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.232686][ T46] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1216 with error 28 [ 131.282389][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.309839][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.335328][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.356440][ T46] EXT4-fs (loop0): This should not happen!! Data will be lost [ 131.356440][ T46] [ 131.366021][ T6018] loop3: detected capacity change from 0 to 32768 [ 131.389727][ T6018] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.580 (6018) [ 131.399427][ T46] EXT4-fs (loop0): Total free blocks count 0 [ 131.408111][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.453015][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.466091][ T6018] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 131.488146][ T46] EXT4-fs (loop0): Free/Dirty block details [ 131.501339][ T46] EXT4-fs (loop0): free_blocks=2415919104 [ 131.505369][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.529120][ T46] EXT4-fs (loop0): dirty_blocks=1216 [ 131.537696][ T46] EXT4-fs (loop0): Block reservation details [ 131.538636][ T6018] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 131.543815][ T46] EXT4-fs (loop0): i_reserved_data_blocks=76 [ 131.563362][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.592538][ T6059] input: syz0 as /devices/virtual/input/input16 [ 131.592620][ T5776] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.619626][ T6018] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 131.654416][ T5776] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.658526][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 131.663291][ T5776] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.678057][ T5776] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.679484][ T6018] BTRFS info (device loop3): use lzo compression, level 0 [ 131.747015][ T6018] BTRFS info (device loop3): using free space tree [ 132.111166][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.149972][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.215830][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.253936][ T6018] BTRFS info (device loop3): enabling ssd optimizations [ 132.327999][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.362260][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.443095][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.654927][ T6067] loop0: detected capacity change from 0 to 131072 [ 132.677020][ T6067] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 132.683763][ T6067] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 132.693083][ T6067] F2FS-fs (loop0): invalid crc value [ 132.759631][ T6067] F2FS-fs (loop0): Found nat_bits in checkpoint [ 132.796631][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.802965][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.839527][ T6067] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 132.847078][ T6067] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 132.959626][ T26] audit: type=1800 audit(1771011227.854:397): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.583" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 133.412698][ T4268] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 133.588088][ T4341] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.667497][ T6120] "syz.0.589" (6120) uses obsolete ecb(arc4) skcipher [ 133.804349][ T4341] usb 5-1: Using ep0 maxpacket: 32 [ 133.811133][ T4341] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 133.834564][ T46] wlan1: Trigger new scan to find an IBSS to join [ 133.859181][ T4341] usb 5-1: config 0 has no interface number 0 [ 133.874416][ T4341] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.928619][ T4341] usb 5-1: config 0 interface 85 has no altsetting 0 [ 133.958656][ T4341] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 133.995615][ T4341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.030253][ T4341] usb 5-1: Product: syz [ 134.080640][ T4341] usb 5-1: Manufacturer: syz [ 134.095532][ T4341] usb 5-1: SerialNumber: syz [ 134.131260][ T4341] usb 5-1: config 0 descriptor?? [ 134.569091][ T6116] loop2: detected capacity change from 0 to 32768 [ 134.664714][ T6116] XFS (loop2): Mounting V5 Filesystem [ 134.794058][ T6116] XFS (loop2): Ending clean mount [ 134.827756][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.130811][ T4341] appletouch 5-1:0.85: Geyser mode initialized. [ 135.159861][ T4341] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input17 [ 135.193767][ T4272] XFS (loop2): Unmounting Filesystem [ 135.406549][ T4341] usb 5-1: USB disconnect, device number 7 [ 135.475384][ T4341] appletouch 5-1:0.85: input: appletouch disconnected [ 135.576321][ T4833] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 135.774468][ T4833] usb 6-1: Using ep0 maxpacket: 16 [ 135.781550][ T4833] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.804765][ T4833] usb 6-1: config 0 interface 0 has no altsetting 0 [ 135.812964][ T6164] loop0: detected capacity change from 0 to 32768 [ 135.819278][ T4833] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 135.839008][ T4833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.879642][ T4833] usb 6-1: config 0 descriptor?? [ 135.892988][ T6164] loop0: p1 p2 p3 < p5 p6 p7 > [ 135.912710][ T6164] loop0: p2 size 16775168 extends beyond EOD, truncated [ 135.940078][ T6164] loop0: p5 start 4294970168 is beyond EOD, truncated [ 136.001752][ T4845] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 136.224469][ T4845] usb 4-1: Using ep0 maxpacket: 16 [ 136.232981][ T4845] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 136.294327][ T4845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.313649][ T4833] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 136.342011][ T4845] usb 4-1: config 0 has no interface number 0 [ 136.377376][ T4845] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 136.394342][ T4845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.420697][ T4845] usb 4-1: Product: syz [ 136.437786][ T4261] udevd[4261]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 136.451063][ T4580] udevd[4580]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 136.454612][ T4845] usb 4-1: Manufacturer: syz [ 136.464078][ T5225] udevd[5225]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 136.478159][ T4259] udevd[4259]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 136.488242][ T4257] udevd[4257]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 136.501634][ T4845] usb 4-1: SerialNumber: syz [ 136.553497][ T4845] usb 4-1: config 0 descriptor?? [ 136.726205][ T33] usb 6-1: USB disconnect, device number 2 [ 136.815993][ T4845] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 136.839329][ T4845] usb 4-1: No valid video chain found. [ 136.861615][ T6195] fido_id[6195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 136.862121][ T6203] bond0: option arp_all_targets: invalid value (55) [ 136.899537][ T4845] usb 4-1: USB disconnect, device number 9 [ 137.002621][ T6199] loop4: detected capacity change from 0 to 8192 [ 137.456862][ T6217] loop2: detected capacity change from 0 to 256 [ 137.814647][ T6214] loop4: detected capacity change from 8192 to 0 [ 138.116061][ T6239] loop3: detected capacity change from 0 to 8 [ 138.231969][ T6239] SQUASHFS error: Unable to read inode 0x127 [ 139.657546][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.631'. [ 140.884094][ T6364] loop3: detected capacity change from 0 to 4096 [ 141.085082][ T33] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.095872][ T4845] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 141.275402][ T6376] loop0: detected capacity change from 0 to 512 [ 141.294410][ T33] usb 5-1: Using ep0 maxpacket: 32 [ 141.300101][ T4845] usb 3-1: Using ep0 maxpacket: 8 [ 141.308294][ T33] usb 5-1: config 0 has an invalid interface number: 182 but max is 0 [ 141.318741][ T4845] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.332015][ T6376] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.336238][ T33] usb 5-1: config 0 has no interface number 0 [ 141.359433][ T6378] loop3: detected capacity change from 0 to 512 [ 141.367788][ T4845] usb 3-1: config 4 interface 0 has no altsetting 0 [ 141.379421][ T33] usb 5-1: config 0 interface 182 has no altsetting 0 [ 141.390128][ T4845] usb 3-1: string descriptor 0 read error: -22 [ 141.402791][ T4845] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 141.413065][ T6378] EXT4-fs: Ignoring removed oldalloc option [ 141.419235][ T33] usb 5-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 141.430383][ T4845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.431003][ T6380] loop5: detected capacity change from 0 to 1024 [ 141.438921][ T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.451485][ T6376] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.457629][ T33] usb 5-1: Product: syz [ 141.471309][ T4845] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 141.482674][ T33] usb 5-1: Manufacturer: syz [ 141.488662][ T33] usb 5-1: SerialNumber: syz [ 141.495469][ T4845] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 141.507568][ T33] usb 5-1: config 0 descriptor?? [ 141.513006][ T4845] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 141.514641][ T6378] EXT4-fs (loop3): 1 truncate cleaned up [ 141.521295][ T33] hub 5-1:0.182: bad descriptor, ignoring hub [ 141.532567][ T4845] usb 3-1: media controller created [ 141.542675][ T33] hub: probe of 5-1:0.182 failed with error -5 [ 141.562068][ T4845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.594828][ T6378] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.647454][ T6376] EXT4-fs (loop0): 1 truncate cleaned up [ 141.654124][ T6376] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 141.689717][ T6380] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 141.738961][ T6380] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 141.766420][ T33] kaweth 5-1:0.182: Firmware present in device. [ 141.779830][ T6380] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.650: Failed to acquire dquot type 0 [ 141.816290][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 141.881947][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 141.934097][ T6380] EXT4-fs error (device loop5): mb_free_blocks:1826: group 0, inode 13: [ 141.934287][ T33] kaweth 5-1:0.182: Statistics collection: 0 [ 141.949402][ T6380] block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 141.952382][ T33] kaweth 5-1:0.182: Multicast filter limit: 0 [ 141.974107][ T33] kaweth 5-1:0.182: MTU: 0 [ 141.984740][ T33] kaweth 5-1:0.182: Read MAC address 00:00:00:00:00:00 [ 142.005599][ T6380] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #13: comm syz.5.650: corrupted inode contents [ 142.028687][ T6380] EXT4-fs error (device loop5): ext4_dirty_inode:6137: inode #13: comm syz.5.650: mark_inode_dirty error [ 142.040806][ T6380] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #13: comm syz.5.650: corrupted inode contents [ 142.064212][ T6380] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #13: comm syz.5.650: mark_inode_dirty error [ 142.097035][ T6380] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #13: comm syz.5.650: corrupted inode contents [ 142.127891][ T6380] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 142.140456][ T6380] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #13: comm syz.5.650: corrupted inode contents [ 142.157616][ T6380] EXT4-fs error (device loop5): ext4_truncate:4318: inode #13: comm syz.5.650: mark_inode_dirty error [ 142.176144][ T6380] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 142.196868][ T6380] EXT4-fs (loop5): 1 truncate cleaned up [ 142.202883][ T6380] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 142.256637][ T6380] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 142.311156][ T5776] EXT4-fs (loop5): unmounting filesystem. [ 142.483430][ T6396] loop3: detected capacity change from 0 to 32768 [ 142.622334][ T33] kaweth 5-1:0.182: kaweth interface created at eth5 [ 142.792315][ T4845] usb 3-1: USB disconnect, device number 12 [ 143.098795][ T4376] usb 5-1: USB disconnect, device number 8 [ 143.137343][ T6412] loop0: detected capacity change from 0 to 256 [ 143.210760][ T6412] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 143.414608][ T6412] loop0: detected capacity change from 256 to 0 [ 143.438212][ T6285] loop: Write error at byte offset 9223372036854845439, length 512. [ 143.488082][ C1] I/O error, dev loop0, sector 136 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 143.497770][ C1] Buffer I/O error on dev loop0, logical block 136, lost sync page write [ 143.523660][ T6285] loop: Write error at byte offset 9223372036854882303, length 512. [ 143.545866][ C1] I/O error, dev loop0, sector 208 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 143.682457][ C1] I/O error, dev loop0, sector 160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.704673][ C1] I/O error, dev loop0, sector 161 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.714448][ C1] I/O error, dev loop0, sector 162 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.719800][ T6422] loop3: detected capacity change from 0 to 4096 [ 143.724115][ C1] I/O error, dev loop0, sector 163 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.740181][ C1] I/O error, dev loop0, sector 164 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.750024][ C1] I/O error, dev loop0, sector 165 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.759763][ C1] I/O error, dev loop0, sector 166 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.765397][ T6422] EXT4-fs: inline encryption not supported [ 143.769536][ C1] I/O error, dev loop0, sector 167 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.807322][ T6427] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000004 [ 143.872978][ T6302] loop: Write error at byte offset 9223372036854775807, length 512. [ 143.910663][ C0] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 143.981528][ T6433] loop4: detected capacity change from 0 to 256 [ 144.062672][ T6433] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 144.121062][ T6438] loop2: detected capacity change from 0 to 512 [ 144.190983][ T6438] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 144.211408][ T6438] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.236979][ T6438] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 1597403241 (only 1 groups) [ 144.245835][ T26] audit: type=1800 audit(1771011239.144:398): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.667" name="file1" dev="loop4" ino=1048621 res=0 errno=0 [ 144.251362][ T6422] EXT4-fs (loop3): Test dummy encryption mode enabled [ 144.381433][ T6422] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 144.421186][ T6422] System zones: 0-5 [ 144.435268][ T6422] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 144.456204][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 144.576179][ T6422] EXT4-fs (loop3): unmounting filesystem. [ 144.651392][ T6288] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.737897][ T6449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.670'. [ 144.975574][ T6288] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.093339][ T6288] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.154570][ T6054] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 145.251665][ T6288] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.285117][ T126] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 145.362347][ T6470] block nbd2: NBD_DISCONNECT [ 145.384483][ T6054] usb 6-1: Using ep0 maxpacket: 8 [ 145.391419][ T6054] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 145.412970][ T6470] block nbd2: Send disconnect failed -32 [ 145.429846][ T6054] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.444340][ T6469] block nbd2: Disconnected due to user request. [ 145.450637][ T6469] block nbd2: shutting down sockets [ 145.470745][ T6054] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.480646][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 145.492625][ T126] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 145.514339][ T126] usb 5-1: config 0 has no interface number 0 [ 145.520631][ T6054] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.542031][ T126] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.562049][ T6054] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.587747][ T126] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.609901][ T6054] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.623885][ T126] usb 5-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 145.636420][ T6054] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.652542][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.692480][ T126] usb 5-1: config 0 descriptor?? [ 145.710619][ T4270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.722325][ T4270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.744691][ T4270] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.765229][ T4270] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.786372][ T4270] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.793872][ T4270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.891993][ T6054] usb 6-1: usb_control_msg returned -32 [ 145.898287][ T6054] usbtmc 6-1:16.0: can't read capabilities [ 145.942140][ T6485] loop3: detected capacity change from 0 to 512 [ 146.007345][ T6485] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 146.055045][ T6485] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 146.092780][ T6485] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.680: iget: bad i_size value: 12154757448730 [ 146.110737][ T126] uclogic 0003:28BD:1903.000C: interface is invalid, ignoring [ 146.136890][ T6485] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.680: couldn't read orphan inode 13 (err -117) [ 146.197201][ T6485] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 146.254564][ T6485] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 146.311897][ T126] usb 5-1: USB disconnect, device number 9 [ 146.389195][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 146.664150][ T6506] usbtmc 6-1:16.0: CHECK_CLEAR_STATUS returned 7 [ 146.775673][ T6478] chnl_net:caif_netlink_parms(): no params data found [ 146.802871][ T6054] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 146.879681][ T4376] usb 6-1: USB disconnect, device number 3 [ 147.001396][ T6478] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.025031][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.040668][ T6478] device bridge_slave_0 entered promiscuous mode [ 147.047176][ T6054] usb 4-1: Using ep0 maxpacket: 16 [ 147.056801][ T6054] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.070415][ T6054] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.077488][ T6054] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 147.087944][ T6054] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.108646][ T6054] usb 4-1: config 0 descriptor?? [ 147.196959][ T6478] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.204172][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.230061][ T6478] device bridge_slave_1 entered promiscuous mode [ 147.307860][ T6478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.536342][ T6478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.551950][ T6054] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 147.685619][ T6478] team0: Port device team_slave_0 added [ 147.981266][ T6478] team0: Port device team_slave_1 added [ 148.059054][ T6478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.081518][ T6478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.122224][ T6478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.163383][ T6478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.183523][ T6478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.244444][ T6478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.324462][ T6478] device hsr_slave_0 entered promiscuous mode [ 148.332240][ T6478] device hsr_slave_1 entered promiscuous mode [ 148.347765][ T6478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.392265][ T6478] Cannot create hsr debugfs directory [ 148.632722][ T6551] loop5: detected capacity change from 0 to 131072 [ 148.645071][ T4270] Bluetooth: hci4: command 0x0409 tx timeout [ 148.652619][ T6551] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 148.660319][ T6551] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 148.674442][ T6551] F2FS-fs (loop5): invalid crc value [ 148.780217][ T6551] F2FS-fs (loop5): Found nat_bits in checkpoint [ 148.842997][ T6551] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 148.850207][ T6551] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 148.905153][ T6288] device hsr_slave_0 left promiscuous mode [ 148.954619][ T6288] device hsr_slave_1 left promiscuous mode [ 149.012405][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.085732][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.094412][ T26] audit: type=1800 audit(1771011243.944:399): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.697" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 149.162743][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.179420][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.189146][ T6288] device bridge_slave_1 left promiscuous mode [ 149.207737][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.249312][ T6288] device bridge_slave_0 left promiscuous mode [ 149.269773][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.432955][ T6288] device veth1_macvtap left promiscuous mode [ 149.453617][ T6288] device veth0_macvtap left promiscuous mode [ 149.473534][ T6288] device veth1_vlan left promiscuous mode [ 149.494436][ T6288] device veth0_vlan left promiscuous mode [ 149.639170][ T4845] usb 4-1: USB disconnect, device number 10 [ 149.960398][ T6288] bond1 (unregistering): Released all slaves [ 150.147884][ T6589] IPVS: Scheduler module ip_vs_sip not found [ 150.209398][ T4845] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 150.397064][ T4845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.421990][ T4845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.443344][ T4845] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 150.467755][ T4845] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 150.481181][ T4845] usb 4-1: Manufacturer: syz [ 150.489668][ T4845] usb 4-1: config 0 descriptor?? [ 150.704685][ T4270] Bluetooth: hci4: command 0x041b tx timeout [ 150.877588][ T6288] team0 (unregistering): Port device team_slave_1 removed [ 150.923680][ T4845] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 150.931341][ T4845] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 150.938601][ T4845] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 150.946226][ T4845] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 150.953090][ T4845] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 150.960148][ T4845] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 150.960931][ T6288] team0 (unregistering): Port device team_slave_0 removed [ 150.967333][ T4845] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 150.984041][ T4845] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 151.051761][ T6288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.113778][ T6288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.525118][ T4845] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device [ 151.540190][ T4845] pyra 0003:1E7D:2CF6.000E: couldn't install mouse [ 151.559282][ T4845] pyra: probe of 0003:1E7D:2CF6.000E failed with error -71 [ 151.583646][ T4845] usb 4-1: USB disconnect, device number 11 [ 151.609633][ T6288] bond0 (unregistering): Released all slaves [ 151.698841][ T6601] fido_id[6601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 151.928362][ T6478] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 151.947331][ T6478] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 151.997854][ T6478] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 152.013252][ T6478] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 152.196258][ T6478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.804591][ T4270] Bluetooth: hci4: command 0x040f tx timeout [ 153.081232][ T6614] loop3: detected capacity change from 0 to 131072 [ 153.101924][ T6478] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.124839][ T6614] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 153.131603][ T6614] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 153.148629][ T6614] F2FS-fs (loop3): invalid crc value [ 153.161239][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.178309][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.229801][ T6614] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.270426][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.281588][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.289708][ T6614] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 153.297271][ T6614] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 153.308883][ T6285] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.316068][ T6285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.326595][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.335747][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.344810][ T6285] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.352053][ T6285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.399888][ T26] audit: type=1800 audit(1771011248.294:400): pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.711" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 153.460328][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.506213][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.520763][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.556138][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.602671][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.630388][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.649700][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.686247][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.706182][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.738935][ T6478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.814494][ T6478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.834472][ T6656] loop4: detected capacity change from 0 to 64 [ 153.851534][ T6651] bridge0: port 3(gretap0) entered blocking state [ 153.878058][ T6651] bridge0: port 3(gretap0) entered disabled state [ 153.938792][ T6651] device gretap0 entered promiscuous mode [ 153.990106][ T6651] bridge0: port 3(gretap0) entered blocking state [ 153.997453][ T6651] bridge0: port 3(gretap0) entered forwarding state [ 154.076963][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.103995][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.140453][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.187785][ T6653] device gretap0 left promiscuous mode [ 154.201959][ T6653] bridge0: port 3(gretap0) entered disabled state [ 154.864829][ T4845] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 154.872859][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 154.998076][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.024950][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.058844][ T6478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.074497][ T4845] usb 4-1: Using ep0 maxpacket: 8 [ 155.083529][ T4845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.121496][ T4845] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.142779][ T4845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.198429][ T4845] usb 4-1: config 0 descriptor?? [ 155.240760][ T6703] device wg2 entered promiscuous mode [ 155.442528][ T4845] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 155.507190][ T6710] loop4: detected capacity change from 0 to 2048 [ 155.558134][ T6710] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 155.697721][ T6714] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.711924][ T6054] usb 4-1: USB disconnect, device number 12 [ 155.717921][ C0] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 156.185921][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.207386][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.275473][ T6478] device veth0_vlan entered promiscuous mode [ 156.292480][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.302470][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.338461][ T6478] device veth1_vlan entered promiscuous mode [ 156.372203][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.385919][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.405175][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.442891][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.456534][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.486734][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.526043][ T6478] device veth0_macvtap entered promiscuous mode [ 156.536598][ T6478] device veth1_macvtap entered promiscuous mode [ 156.633135][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.664701][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.694586][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.740655][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.767257][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.794283][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.804143][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.819700][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.831774][ T6478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.843652][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.863811][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.887321][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.908073][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.924851][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.940285][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.974332][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.014339][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.039557][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.074886][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.108416][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.138519][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.169006][ T6478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.191734][ T6296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.219172][ T6296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.249159][ T6478] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.284325][ T6478] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.304385][ T126] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 157.314531][ T6478] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.325113][ T6478] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.508327][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 157.519808][ T6302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.522642][ T126] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.534277][ T6302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.594369][ T126] usb 5-1: config 0 interface 0 has no altsetting 0 [ 157.602760][ T126] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 157.614323][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.629766][ T6296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.647114][ T126] usb 5-1: config 0 descriptor?? [ 157.647468][ T6304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.677724][ T6304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.700319][ T6296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.104782][ T126] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 158.285443][ T6797] device syzkaller1 entered promiscuous mode [ 158.602640][ T4256] usb 5-1: USB disconnect, device number 10 [ 159.321829][ T6814] loop6: detected capacity change from 0 to 131072 [ 159.333673][ T6814] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 159.340524][ T6814] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 159.382244][ T6814] F2FS-fs (loop6): invalid crc value [ 159.456624][ T6814] F2FS-fs (loop6): Found nat_bits in checkpoint [ 159.545460][ T6814] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 159.552588][ T6814] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 159.622894][ T26] audit: type=1800 audit(1771011254.514:401): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.758" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 160.742340][ T6824] loop4: detected capacity change from 0 to 32768 [ 160.877865][ T6824] XFS (loop4): Mounting V5 Filesystem [ 160.961424][ T6837] loop3: detected capacity change from 0 to 32768 [ 160.989839][ T6824] XFS (loop4): Ending clean mount [ 161.002337][ T6873] loop6: detected capacity change from 0 to 256 [ 161.020265][ T6837] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.764 (6837) [ 161.039533][ T6837] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 161.050011][ T6837] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 161.060148][ T6837] BTRFS info (device loop3): max_inline at 93 [ 161.074886][ T26] audit: type=1800 audit(1771011255.974:402): pid=6824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.762" name="file1" dev="loop4" ino=7430 res=0 errno=0 [ 161.119176][ T6837] BTRFS info (device loop3): using free space tree [ 161.552511][ T6837] BTRFS info (device loop3): enabling ssd optimizations [ 161.630142][ T4269] XFS (loop4): Unmounting Filesystem [ 162.221008][ T4268] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 162.724807][ T6930] device batadv_slave_1 entered promiscuous mode [ 162.755944][ T6930] device veth1_virt_wifi entered promiscuous mode [ 162.807729][ T6929] device veth1_virt_wifi left promiscuous mode [ 162.814060][ T6929] device batadv_slave_1 left promiscuous mode [ 163.283769][ T6948] loop6: detected capacity change from 0 to 2048 [ 163.341359][ T6948] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.442283][ T6953] loop3: detected capacity change from 0 to 1024 [ 163.492900][ T6953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.641396][ T6953] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 163.769304][ T6953] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 163.832794][ T6968] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 164.060799][ T6968] EXT4-fs (loop3): This should not happen!! Data will be lost [ 164.060799][ T6968] [ 164.113763][ T6968] EXT4-fs (loop3): Total free blocks count 0 [ 164.159103][ T6968] EXT4-fs (loop3): Free/Dirty block details [ 164.207540][ T6968] EXT4-fs (loop3): free_blocks=20480 [ 164.212912][ T6968] EXT4-fs (loop3): dirty_blocks=48 [ 164.243041][ T6968] EXT4-fs (loop3): Block reservation details [ 164.250796][ T6968] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 164.381366][ T6288] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 4 with error 28 [ 165.003819][ T7019] loop5: detected capacity change from 0 to 16 [ 165.027930][ T7019] erofs: (device loop5): mounted with root inode @ nid 36. [ 165.048692][ T26] audit: type=1800 audit(1771011259.944:403): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.811" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 165.810599][ T7044] loop4: detected capacity change from 0 to 2048 [ 165.857465][ T7044] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.132797][ T7056] loop6: detected capacity change from 0 to 512 [ 166.251131][ T7056] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 166.324340][ T7056] EXT4-fs (loop6): SIPHASH is not a valid default hash value [ 166.431921][ T7067] netlink: 96 bytes leftover after parsing attributes in process `syz.3.826'. [ 166.627630][ T7076] overlayfs: failed to clone lowerpath [ 166.748021][ T6288] ------------[ cut here ]------------ [ 166.754394][ T6288] WARNING: CPU: 0 PID: 6288 at net/mac80211/ibss.c:500 ieee80211_ibss_csa_beacon+0x5aa/0x690 [ 166.764735][ T6288] Modules linked in: [ 166.768678][ T6288] CPU: 0 PID: 6288 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 166.776503][ T6288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 166.787214][ T6288] Workqueue: events_unbound cfg80211_wiphy_work [ 166.793525][ T6288] RIP: 0010:ieee80211_ibss_csa_beacon+0x5aa/0x690 [ 166.800054][ T6288] Code: f7 c6 05 6e b5 65 04 01 48 c7 c7 10 6a a6 8b be fd 01 00 00 48 c7 c2 a0 6a a6 8b e8 60 47 bf f7 e9 60 fe ff ff e8 96 ca dc f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 85 ca dc f7 0f 0b e9 be fa [ 166.820045][ T6288] RSP: 0018:ffffc90003497388 EFLAGS: 00010283 [ 166.826244][ T6288] RAX: ffffffff89a5a91a RBX: ffff88807a880760 RCX: 0000000000100000 [ 166.834587][ T6288] RDX: ffffc9001b45b000 RSI: 0000000000000979 RDI: 000000000000097a [ 166.842696][ T6288] RBP: 1ffff1100f7a6ab5 R08: ffffffff90af5307 R09: 1ffffffff215ea60 [ 166.851408][ T6288] R10: dffffc0000000000 R11: fffffbfff215ea61 R12: ffff88807bd355a8 [ 166.859457][ T6288] R13: ffff88807bd35ac8 R14: ffff88807bd34c80 R15: dffffc0000000000 [ 166.867650][ T6288] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 166.876821][ T6288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.883460][ T6288] CR2: 0000001b2fc1cff8 CR3: 000000001b342000 CR4: 00000000003506f0 [ 166.891530][ T6288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 166.899771][ T6288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 166.907809][ T6288] Call Trace: [ 166.911115][ T6288] [ 166.914105][ T6288] ? ieee80211_recalc_dtim+0x230/0x230 [ 166.919670][ T6288] ieee80211_set_csa_beacon+0x78a/0xa80 [ 166.925314][ T6288] ieee80211_channel_switch+0x7dd/0xce0 [ 166.931045][ T6288] ? ieee80211_csa_finalize+0xd70/0xd70 [ 166.936779][ T6288] ieee80211_ibss_process_chanswitch+0xa8f/0xce0 [ 166.943158][ T6288] ? trace_drv_return_int+0x240/0x240 [ 166.947640][ C1] Unknown status report in ack skb [ 166.948659][ T6288] ? mutex_lock_nested+0x10/0x10 [ 166.958690][ T6288] ieee80211_ibss_rx_queued_mgmt+0x1027/0x2cd0 [ 166.964953][ T6288] ? verify_lock_unused+0x140/0x140 [ 166.970214][ T6288] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 166.976028][ T6288] ? mark_lock+0x94/0x320 [ 166.980431][ T6288] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 166.986491][ T6288] ? lock_chain_count+0x20/0x20 [ 166.991547][ T6288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 166.997536][ T6288] ? kcov_remote_start+0x4c7/0x7e0 [ 167.002766][ T6288] ? lockdep_hardirqs_on+0x94/0x140 [ 167.008049][ T6288] ? kcov_remote_start+0x8b/0x7e0 [ 167.013149][ T6288] ieee80211_iface_work+0x726/0xc80 [ 167.018459][ T6288] ? _raw_spin_unlock_irq+0x1f/0x40 [ 167.023708][ T6288] cfg80211_wiphy_work+0x221/0x260 [ 167.028937][ T6288] ? process_one_work+0x7b0/0x1160 [ 167.034120][ T6288] process_one_work+0x8a2/0x1160 [ 167.039172][ T6288] ? worker_detach_from_pool+0x240/0x240 [ 167.044928][ T6288] ? _raw_spin_lock_irq+0xb7/0xf0 [ 167.050019][ T6288] ? _raw_spin_lock_irqsave+0x100/0x100 [ 167.055671][ T6288] ? kthread_data+0x4b/0xc0 [ 167.060234][ T6288] worker_thread+0xaa2/0x1270 [ 167.065061][ T6288] kthread+0x29d/0x330 [ 167.069185][ T6288] ? worker_clr_flags+0x1a0/0x1a0 [ 167.074388][ T6288] ? kthread_blkcg+0xd0/0xd0 [ 167.079048][ T6288] ret_from_fork+0x1f/0x30 [ 167.083520][ T6288] [ 167.086622][ T6288] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 167.094030][ T6288] CPU: 0 PID: 6288 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 167.101709][ T6288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 167.111785][ T6288] Workqueue: events_unbound cfg80211_wiphy_work [ 167.118168][ T6288] Call Trace: [ 167.121467][ T6288] [ 167.124416][ T6288] dump_stack_lvl+0x188/0x24e [ 167.129125][ T6288] ? memcpy+0x3c/0x60 [ 167.133143][ T6288] ? show_regs_print_info+0x12/0x12 [ 167.138465][ T6288] ? load_image+0x400/0x400 [ 167.143019][ T6288] panic+0x2e5/0x730 [ 167.147007][ T6288] ? bpf_jit_dump+0xd0/0xd0 [ 167.151541][ T6288] ? ret_from_fork+0x1f/0x30 [ 167.156171][ T6288] __warn+0x2f8/0x4f0 [ 167.160174][ T6288] ? ieee80211_ibss_csa_beacon+0x5aa/0x690 [ 167.166018][ T6288] ? ieee80211_ibss_csa_beacon+0x5aa/0x690 [ 167.171862][ T6288] report_bug+0x2ba/0x4f0 [ 167.176224][ T6288] ? ieee80211_ibss_csa_beacon+0x5aa/0x690 [ 167.182072][ T6288] handle_bug+0x3a/0x70 [ 167.186258][ T6288] exc_invalid_op+0x16/0x40 [ 167.190804][ T6288] asm_exc_invalid_op+0x16/0x20 [ 167.195680][ T6288] RIP: 0010:ieee80211_ibss_csa_beacon+0x5aa/0x690 [ 167.202107][ T6288] Code: f7 c6 05 6e b5 65 04 01 48 c7 c7 10 6a a6 8b be fd 01 00 00 48 c7 c2 a0 6a a6 8b e8 60 47 bf f7 e9 60 fe ff ff e8 96 ca dc f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 85 ca dc f7 0f 0b e9 be fa [ 167.221721][ T6288] RSP: 0018:ffffc90003497388 EFLAGS: 00010283 [ 167.227789][ T6288] RAX: ffffffff89a5a91a RBX: ffff88807a880760 RCX: 0000000000100000 [ 167.235853][ T6288] RDX: ffffc9001b45b000 RSI: 0000000000000979 RDI: 000000000000097a [ 167.244079][ T6288] RBP: 1ffff1100f7a6ab5 R08: ffffffff90af5307 R09: 1ffffffff215ea60 [ 167.252062][ T6288] R10: dffffc0000000000 R11: fffffbfff215ea61 R12: ffff88807bd355a8 [ 167.260039][ T6288] R13: ffff88807bd35ac8 R14: ffff88807bd34c80 R15: dffffc0000000000 [ 167.268281][ T6288] ? ieee80211_ibss_csa_beacon+0x5aa/0x690 [ 167.274100][ T6288] ? ieee80211_ibss_csa_beacon+0x5aa/0x690 [ 167.279931][ T6288] ? ieee80211_recalc_dtim+0x230/0x230 [ 167.285402][ T6288] ieee80211_set_csa_beacon+0x78a/0xa80 [ 167.290974][ T6288] ieee80211_channel_switch+0x7dd/0xce0 [ 167.296535][ T6288] ? ieee80211_csa_finalize+0xd70/0xd70 [ 167.302088][ T6288] ieee80211_ibss_process_chanswitch+0xa8f/0xce0 [ 167.308425][ T6288] ? trace_drv_return_int+0x240/0x240 [ 167.313828][ T6288] ? mutex_lock_nested+0x10/0x10 [ 167.318779][ T6288] ieee80211_ibss_rx_queued_mgmt+0x1027/0x2cd0 [ 167.324978][ T6288] ? verify_lock_unused+0x140/0x140 [ 167.330188][ T6288] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 167.335916][ T6288] ? mark_lock+0x94/0x320 [ 167.340255][ T6288] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 167.346234][ T6288] ? lock_chain_count+0x20/0x20 [ 167.351081][ T6288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 167.356977][ T6288] ? kcov_remote_start+0x4c7/0x7e0 [ 167.362094][ T6288] ? lockdep_hardirqs_on+0x94/0x140 [ 167.367386][ T6288] ? kcov_remote_start+0x8b/0x7e0 [ 167.372493][ T6288] ieee80211_iface_work+0x726/0xc80 [ 167.377694][ T6288] ? _raw_spin_unlock_irq+0x1f/0x40 [ 167.382898][ T6288] cfg80211_wiphy_work+0x221/0x260 [ 167.388014][ T6288] ? process_one_work+0x7b0/0x1160 [ 167.393121][ T6288] process_one_work+0x8a2/0x1160 [ 167.398109][ T6288] ? worker_detach_from_pool+0x240/0x240 [ 167.403741][ T6288] ? _raw_spin_lock_irq+0xb7/0xf0 [ 167.408755][ T6288] ? _raw_spin_lock_irqsave+0x100/0x100 [ 167.414292][ T6288] ? kthread_data+0x4b/0xc0 [ 167.418799][ T6288] worker_thread+0xaa2/0x1270 [ 167.423576][ T6288] kthread+0x29d/0x330 [ 167.427635][ T6288] ? worker_clr_flags+0x1a0/0x1a0 [ 167.432651][ T6288] ? kthread_blkcg+0xd0/0xd0 [ 167.437233][ T6288] ret_from_fork+0x1f/0x30 [ 167.441665][ T6288] [ 167.445140][ T6288] Kernel Offset: disabled [ 167.449544][ T6288] Rebooting in 86400 seconds..