last executing test programs: 4m24.38696113s ago: executing program 3 (id=54): syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000500)='./file2\x00', 0x80408a, &(0x7f0000000540)=ANY=[], 0x11, 0x6c1, &(0x7f000000abc0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x3) 4m20.928215871s ago: executing program 3 (id=62): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) io_setup(0x1, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0xaca, &(0x7f0000005880)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) 4m20.283554844s ago: executing program 3 (id=64): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xee, 0x472, &(0x7f0000000f40)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10490e0, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200) 4m18.576578612s ago: executing program 3 (id=70): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000300)={[{@abort}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f00000001c0)='./file0\x00') mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 4m17.854712712s ago: executing program 3 (id=74): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c6c6f63616c666c6f636b732c696e6f646536342c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c6e6f61636c2c6572726f72733d636f6e74696e75652c00edc97523793b5022d016bb24c65ba594abbd38fd9c301bfa101e61d574eb5cc84215aa20846b6f33df6281eaedb4b4afaaacd321e4df0d16b4f5a8a992efe2554b52ec9c980e5544cd4b8df3e1ba594d07e0bfe3471c164430a36b7ebddc35caf2959224d8330f1807117fc520d8ff5660c5691afd66a8e397bb802ed69df198008fb799cc37"], 0x1, 0x470e, &(0x7f0000008f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1260a9, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000c40)) 4m16.066099198s ago: executing program 3 (id=81): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0xa02, 0x0) write$cgroup_int(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x700}, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, 0x0) 4m15.472845017s ago: executing program 32 (id=81): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0xa02, 0x0) write$cgroup_int(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x700}, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, 0x0, 0x0) 3m35.428210431s ago: executing program 1 (id=218): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) syz_emit_ethernet(0x1d, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x1, 0x0, @private=0xa010101, @local}}}}}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xbcc, 0x1) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000043c0)='./file0\x00', 0x8008, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,utf8=1,sys_immutable,shortname=win95,rodir,dos1xfloppy,shortname=lower,shortname=lower,utf8=1,check=strict,utf8=0,utf8=0,gid=', @ANYRESHEX=0x0, @ANYBLOB=',flush,discard,time_offset=0x000000000000002c,check=relaxed,posixacl,euid>', @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB="2c646f6e745f61707072616973652c6f626a5f757365723d5d265d2c00e92844e97f4654dab7aa9c79f97435d1752b19469c105a39468c84a3f18b62ab8254a5caef5107ceebf571e700eda2a154cc068fd2200236d51e3a3391857b052b1aa11c49291c3e482cb9d5e550cfc0a9959fb4285aa61639b5f2fcecb5e1cfb31d1f1fbccb74d41e1935aead8f6c3d9602e88d3dbb8d5424c7a6f3d9f0f8a9df69d87f12df189b01fcfdd7d97d36fd433dc513a4533df616deae6443205fbe68fd216ea8e702bd7b46461d9638fe2db93f0befee7d07063cae2e4f976d2a7e49b0d402fbafbb5956a0e4edb8a39b172ee62ed2424bbbb68e308aabf51210fad179b79e4fd2ed5abf0bf269b9a2fed96c98c9b6471440d369cd630e7f0353f58c593b08fb85db16af89910659e0b8cf0fc0a8c3690f4648a70bde922dee201316036b1a000000009ae4175a8e7557705a3cc66a8e4d71e470898251e7ec71d6fc1424341298d5687747ef4b3927f2b0ce8ec4830f72347993ec0b3985f1640acc2bec2be7d67d5219e309751e3162f34b735e699942106e871a7c169420d5f0a87b76642baf"], 0x1, 0x2ca, &(0x7f0000007840)="$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") 3m34.332254069s ago: executing program 1 (id=221): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000000)={[{@noauto_da_alloc}, {@nodioread_nolock}, {@oldalloc}]}, 0x1, 0x61b, &(0x7f0000001080)="$eJzs3U1rXNUbAPDn3rw26f+ftAhaF7Yg0oI2adJWigg2S0FKffkCsUlLadqUJIJpC01Bl+LGheDKhfVbaMGduHDrwr0UikgXVooduZM76WRekkySyUxmfj+Y5r5M7nlumifn3HPPuRNA1zqW/ZNGHImIm0nESNm+3sh3Hlt93+O/7lzKXkkUCh/+mcSdu8lK+bGS/Otw/s3/jkTyaxpxuKeq2IHF5VvXpufmZhfyDeNL12+OLy7fOnn1+vSV2SuzNybfnDx39szZcxOndn5+Fb775mky8f3vF5I4H8/y2LLzqgpyRyVnZR+Lwqon5duzn+u5HR67Xfw9Uvo9eS6p3EDbupznbV9EvBgj0VP2vzkSn7/f0uCApiokUaqjgK6T1Mn/n6c2+ssw2LR4gL1SageUru1rXQdXS5vcKgH2wqOp1Q6p1dzvi4hS/vfmfWeDxb6BocfJun6eJCJ21jO3Kivjl58ufJa9ok4/HNAcK/dKvdyV9X9SzM3RGCyuDT1O1+f/SqGQ5i2BbPsH2yy/sn9e/sPeWbkXES/l9X9/bDn/0zx3S/n/8TbLl/8AAAAAAACwex5MRcQbtcb/pWvjf/prjP8Zjojzu1D+5vf/0of5QlLx1v5dKB662qOpiLdrjv9dG+M72pOv/a84HuB2cvnq3OypiPh/RJyIvoFsfaLiuOUjhE9+cfjreuWXj//LXln5pbGA+ZEe9lZMxJ2ZXpre6XkDEY/uRbxcHP97NN+yfvxPVv8nNer/LL9vbrGMw6/dv1hv3+b5DzRL4duI4zXr/+fN7WTj53OMF9sD46VWQbVXbn/5Q73yK/O/gdCvNPBeoIas/h/aOP8HsqW15/UsNnb87CL99HJvod7+7bb/+5OPeqKsE+DT6aWlhYmI/uS96u2TjcUMnSrPh6OR50uW/yde3bj/b639X5aHByJiZQvlDW6yX/sfWifL/5nq+v/dsvp/dH393/jC5P3RH+uVf3FL9f+ZYp1+It+i/w/KVT+PY6sJ2pJwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCfSyPiYCTp2Npymo6NRQxHxAsxlM7NLy69fnn+kxsz2b6I0ehLS5/0O7K6npQ+/3+0bH2yYv10RByKiK96DhTXxy7Nz820+uQBAAAAAAAAAAAAAAAAAACgTQwX5/wXBirn/2f+6Gl1dEDT9eZf5Tt0n95tf2dhYFcDAfbc9vMf2Meya/4G8r+vmbEALVA//588LRTtaTjAHtL+h+61zfx3uwD2uYPqf+hiW+zTG2x2HEArqP8BAAAAAKCjHDr64LckIlbeOlB8ZfrzfTVuDLoJCB0kbXUAQMsYwwvdq3e+1REArWJCP5CsLf1Tc7J//Y6/pDkBAQAAAAAAAAAAAABVjh9paP4/0EE2nv9vbD90sg3m/9dKfo8LgA5S/6M/1P3Q6VzjA5vV9ub/AwAAAAAAAAAAAEAbGLx1bXpubnZhcXn/LbzTHmE0trAy3RZhNLBQuBux8XueNaf0voholx/CwmIWzV6VVXoERwtPucV/lwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDX/BQAA//927Rvw") socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = fspick(r3, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) getcwd(0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) fcntl$setflags(r5, 0x2, 0x1) 3m32.149638573s ago: executing program 1 (id=226): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) syz_emit_ethernet(0xbe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000900"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000680), 0x2000006c, r2}, 0x38) 3m31.344739042s ago: executing program 2 (id=230): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x44}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10) open(0x0, 0x6687e, 0x57) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m30.576861268s ago: executing program 2 (id=234): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) chdir(&(0x7f0000000140)='./bus\x00') mknod$loop(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m29.884828306s ago: executing program 1 (id=239): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002cc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX], 0x8, 0x2ee, &(0x7f00000029c0)="$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") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f0000000840)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000000)='./file1\x00') 3m29.617822682s ago: executing program 1 (id=240): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1) 3m28.568968935s ago: executing program 1 (id=242): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x44}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10) open(0x0, 0x6687e, 0x57) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m28.186159323s ago: executing program 33 (id=242): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x44}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10) open(0x0, 0x6687e, 0x57) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m28.170399164s ago: executing program 2 (id=245): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 3m27.824940038s ago: executing program 2 (id=247): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@shortname_win95}, {@shortname_winnt}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@errors_continue}, {@fat=@nocase}, {@utf8}, {@shortname_mixed}, {@utf8}, {}]}, 0x0, 0x2a1, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhYsvutHN0MZPEKQFMaDURtSFMLUTDRmTkomRiNju3Po5iktXCuoX6Made3FTBMFNF2KkScamNWBaW6ea/w/CnJxz3pkzOTPhnYFMtq4/vVcuBk7RrSuWNMWkdW1LmZ1S10h3GWuXx9VrXecmP7/7/+qNm5dy+fz8otlCbul81symT7168OjZ6Tf1yWvPp18mtJm5tfUp+37zn81/t74uhWuvSq4tV6t1d9n3bKUUlB2zK77nBp6VKoFXq1tPe9Gvrq42za2sTKVWa14QmFtpWtlrWr1q9VrT3DtuqWKO49hUSsMmfuCIwsbiops7lsEgChP9Kmu1nJvo21jY+B2DAgAAJ0tU+f/dUmClwCrVPfl9mP9LYf4f0wHyf2mo8/+DI/8fBjv5f6p7/u5F/g8AAAAAAAAAAAAAAAAAAAAAwJ9gu9VKt1qtdLgMXwlJSUnh+6jHiePB/A+3nh/uJSX/SaPQKHSWnfZcUSX58jQ7Jn1pHw9dnfLCxfz8rLVl9Npf68avNQpxJcL4UKZ//Fwn3nrj1zSmVO/2s0prpn98tk98ozCus2daie6WPTlK6+1tVeVrpX1c78Y/njO7cDm/L36i3Q8AAAAAgL+BY9/9cP3ebncsfGzIvvZO5e79AaV/cn9g3/X1qP4bjW6/AQAAAAAYJkHzYdn1fa82BIXw/w+OZIXRf3TJQTuPSurWvDgpczFIISbpsOHxX5vlj5L21MxEPt1HUfhwv3MGDNI5ym8lAAAAAMchTPpHoh4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDbNCHh4X9D/PssZ7NxaPZSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBk+BYAAP//lOkWvQ==") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000004d80)={0x2020}, 0x2020) 3m27.50710797s ago: executing program 2 (id=249): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x210008, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x101000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}}) 3m26.949699244s ago: executing program 2 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) madvise(&(0x7f000052f000/0x4000)=nil, 0x4000, 0x15) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1, 0x2, 0x81}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000380)={0x1, 0x3ff, 0x105, 0x0, 0xe}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, 0x0) 3m26.461202882s ago: executing program 34 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) madvise(&(0x7f000052f000/0x4000)=nil, 0x4000, 0x15) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1, 0x2, 0x81}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000380)={0x1, 0x3ff, 0x105, 0x0, 0xe}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, 0x0) 3m6.765801678s ago: executing program 5 (id=244): setreuid(0xffffffffffffffff, 0xee01) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 3m6.505923474s ago: executing program 5 (id=307): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000002060800000000000000000005000005310000"], 0x34}, 0x1, 0x0, 0x0, 0x80d1}, 0x20000080) 3m4.727964178s ago: executing program 5 (id=310): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000a1e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r2, 0x1, r1, 0x3, 0x80000}) 3m3.525007077s ago: executing program 5 (id=312): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3200046, &(0x7f00000002c0), 0xfc, 0x562, &(0x7f0000000440)="$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") 3m1.917351024s ago: executing program 5 (id=314): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000005c, &(0x7f0000000500)=ANY=[], 0x1, 0x1540, &(0x7f0000001ec0)="$eJzs3Au4TtXWOPAx5pxLm6Q3yX2OORZvcpkkSS4JuSZJkiO5JSRJkoTkllsSkpB7kntIbiG532+5J8mRJElISDL/j46O+ndO3zlf55y+5+zxe5757Dn2WmOuOdd4n/2utfZ+95ftBlasU6lcLWaG3wX/8qUrAKQAQB8AuBoAIgAomrFoxovb02rs+vsOIv617p/yR89A/JGk/qmb1D91k/qnblL/1E3qn7pJ/VM3qX/qJvUXIjXbMjXbNdJSb5Pn/6mZvP//FzlUcNSn6wpe1/6fSJH6p25S/9RN6p+6Sf1TN6l/6ib1/+9X9je2Sf1TN6m/EKnZX58Fnw8h/B94Hi3tP9v+6NefEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQojU4Wy4zADAT/2/t39C/WfnJ4QQQgghhBBCiN8vXPFHz0AIIYQQQgghhBD/fggKNBiIIA1cASmQFtLBlZAeroIMcDUk4BrICNdCJrgOMkMWyArZIDvkgJxggcABQwy5IDck4XrIAzdAXsgH+aEAeCgIheBGKAw3QRG4GYrCLVAMboXiUAJKQim4DUrD7VAGykI5uAPKQwWoCJWgMlSBO6Eq3AXV4G6oDvdADbgXasJ9UAvuh9rwJ6gDD0BdeBDqQX1oAA2h0S/zx/xj+c9CJ3gOOkMX6ArdoDs8Dz2gJ/SC3tAHXoC+8CL0g5egPwyAgfAyDIJXYDC8CkNgKAyD12A4jICRMApGwxgYC6/DOHgDxsObMAEmwiSYDFNgKkyDt2A6zICZ8DbMgndgNsyBuTAP5sO7sAAWwiJ4DxbD+7AElsIyWA4rYCWsgtWwBtbCOlgPG2AjbILNsAU+gK2wDbbDDtgJu2A3fAh74CPYCx/DPvjkn8w/8//lt0dAQIUKDRpMg2kwBVMwHabD9JgeM2AGTGACM2JGzISZMDNmxqyYFbNjdsyJOZGQkJExF+bCJCYxD+bBvJg3zU8vrEJYCAvjTVgEi2BRLIrFsBgWxxJYAkthKSyNpbEMlsFyWA7LY3msiBWxMlbGO7EqVsVqWA2rY3WsgTWwJtbEWlgLa2NtrIN1sC7WxXpYDxtgA2yEjbAxNsYm2ASbYTNsjs2xBbbAltgSW2ErbI2tsQ22wbbYFtthO2yPHbADPovP4nP4HHbB8qobdsfu2AN7YC/sjb3xBeyLL+KL+BL2xwE4EF/Gl/EVHIyncQgOxWE4DEurETgSRyGrMTgWx+I4HIfjcTxOwIk4ESfjFJyK03AaTscZOAPfxln4Dr6Dc3AOzsP5OB8X4EJchItwMZ7BJbgUl+FyXIErcQWuxjW4GtfhelyHG3EjbsbN+AF+gNtwG+7AHbgLd+GH+CF+hB9hf9yH+3A/7scDeAAP4kE8hIfwMB7GI3gEj+JRPIbH8DiewJN4Ak/hKTyNZ/AsnsVzeA7P49PZP6+9K9/a/qAuMsqoNCqNSlEpKp1Kp9Kr9CqDyqASKqEyqowqk8qkMqvMKqvKqrKr7CqnyqlIkWIVq1wql0qqpMqj8qi8Kq/Kr/Irr7wqpAqpwqqwKqKKqKLqFlVM3aqKqxKqqS+lSqnSqpkvo8qqcqqcKq8qqIqqkqqkqqgqqqqqqqqpaqq6qq5qqHtVTdUNe+H96mJl6qgBWFcNxHqqvmqgGqpX8CHVWA3GJqqpaqYeUUNxCLZQjX1L9bhqpUZia/WkGoVPqbZqDLZTz6j2qoPqqJ5VnVQT31l1UROwm+quJmMP1VP1Ur3VdKygLlasonpJ9VcD1ED1spqHr6jB6lU1RA1Vw9RrargaoUaqUWq0GqPGqtfVOPWGGq/eVBPURDVJTVZT1FQ1Tb2lpqsZaqZ6W81S76jZao6aq+ap+epdtUAtVIvUe2qxel8tUUvVMrVcrVAr1Sq1OgEAap1arzaojWqT2qy2qA/UVrVNbVc71E61S+1WH6o96iO1V32s9qlP1H71Z3VAfaoOqs/UIfW5Oqy+UEfUl+qo+kodU1+r4+qEOqm+UafUt+q0OqPOqu/UOfW9Oq9+UBdUUKBRK6210ZFOo6/QKTqtTqev1On1VTqDvlon9DU6o75WZ9LX6cw6i86qs+nsOofOqa0m7TTrWOfSuXVSX6/z6Bt0Xp1P59cFtNcFdSF9oy6sb9JF9M26qL5FF9O36uK6hC6pS+nbdGl9uy6jy+py+g5dXlfQFXUlXVlX0XfqqvouXU3fravre3QNfa+uqe/TtfT9ujYigH5A19UP6nq6vm5QGXQj/ZBurB/WTXRT3Uw/opvrR3UL/ZhuqR/XrfQTurV+UrfRT+m2+mndTj+j2+sOuqP+QV/QQXfWXXRX3U1318/rHrqn7qV76z76Bd1Xv6j76Zd0fz1AD9Qv60H6FT1Yv6qH6KF6mH5ND9cj9Eg9So/WY/RY/boep9/Q4/WbeoKeqCfpyXqKnqp7XRpp5j+Q/8bfyO/349E36y36A71Vb9Pb9Q69U+/Su/VuvUfv0Xv1Xr1P79P79X59QB/QB/VBfUgf0of1YX1EH9FH9VF9TB/Tx/UJ/Z3+Rp/S3+rT+ow+o7/T5/Q5ff7SOQCDRhltjIlMGnOFSTFpTTpzpUlvrjIZzNUmYa4xGc21JpO5zmQ2WUxWk81kNzlMTmMNGWfYxCaXyW2S5nqTx9xg8pp8Jr8pYLwpaAqZG393/v80v0amkWlsGpsmpolpZpqZ5qa5aWFamJampWllWpnWprVpY9qYtqataWfamfamveloOppOppPpbDqbrqar6W6eNz1MT9PL9DZ9zAumr+lr+pl+pr/pbwaagWaQGWQGm8FmiBlihplhZrgZbkaakWa0GW3GmrFmnBlnxpvxZoKZYCaZSWaKmWKmmWlmupluZpqZZpaZZWab2WaumWvmm/lmgVlgFplFZrFZbJaYpWapWW6Wm5VmpVltVpu1Zq1Zb9abjWajWWK2mC1mq9lqtpvtZqfZaXab3WaP2WP2mr1mn9ln9pv95oA5YA6ag+aQOWQOm8PmiDlijpqj5pg5Zo6b4+akOWlOmVPmtDltzpqz5pw5Z86b8+aCuXDxsi9SkYpMZKI0UZooJUqJ0kXpovRR+ihDlCFKRIkoY5QxyhRdF2WOskRZo2xR9ihHlDOyEUUu4iiOckW5o2R0fZQnuiHKG+WL8kcFIh8VjApFN0aFo5uiItHNUdHolqhYdGtUPCoRlYxKRbdFpaPbozJR2ahcdEdUPqoQVYwqRZWjKtGdUdXorqhadHdUPbonqhHdG9WM7otqRfdHtaM/RXWiB6K60YNRvah+1CBqGDX6l44fwuksD/vOtovtarvZ7vZ528P2tL1sb9vHvmD72hdtP/uS7W8H2IH2ZTvIvmIH21ftEDvUDrOv2eF2hB1pR9nRdowda1+34+wbdrx9006wE+0kO9lOsVPtNPuWnW5n2Jn2bTvLvmNn2zl2rp1n59t37QK70C6y79nF9n27xC61y+xyu8KutKvsarvGrrXr7Hq7wW60m+xmu8V+kGar3Wa32x12p91ld9sP7R77kd1rP7b77Cd2v/2zPWA/tQftZ/aQ/dwetl/YI/ZLe9R+ZY/Zr+1xe8KetN/YU/Zbe9qesWftd/ac/d6etz/YCzZcvLi/+PZOhgyloTSUQimUjtJRekpPGSgDJShBGSkjZaJMlJkyU1bKStkpO+WknHQRE1MuykVJSlIeykN5KS/lp/zkyVMhKkSFqTAVoSJUlIpSMSpGxak4laSSdBvdRrfT7VSWytIddAdVoApUiSpRFapCVakqVaNqVJ2qUw2qQTWpJtWiWlSbalMdqkN1qS7Vo3rUgBpQI2pEjakxNaEm1IyaUXNqTi2oBbWkltSKWlFrak1tqA21pbbUjtpRe2pPHakjdaJO1Jk6U1fqSt2pO/WgHtSLelEf6kN9qS/1o37Un/rTQBpIg2gQDabBNISG0jB6jYbTCBpJo2g0jaGxNJbG0TgaT+NpAk2gSTSJptAUmkbTaDpNp5k0k2bRLJpNs2kuzaX5NJ8W0AJaRIvA0GJaQktoGS2jFbSCVtEqWkNraB2tow20gTbRJtpCW2grbaXttJ120k7aTbtpD+2hvbSX9tE+2k/76QAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpJJ2kU3SKTtNpOktn6Rx9T+fpB7pAgVKcgnTuSpfeXeUyuKtdikvrfh5nddlcdpfD5XTWZXZZfhGTcy6vy+fyuwLGu4KukLvxp9j9FBd3JVxJV8rd5kq7212ZX8VV3J2uqrvLVXN3u0qu8i/i6u4eV8M94Gq6B10tV9/Vdg1dHfeAq+sedPVcfdfANXTN3aOuhXvMtXSPu1buiV/FC9xCt8atdevcerfHfeTOuu/cEfelO+e+d51dF9fHveD6uhddP/eS6+8G/Coe5l5zw90IN9KNcqPdmF/Fk9xkN8VNddMcwnQ342fxW+5iPN+962Y5wNlujpvr5v0YX5zTIveeW+zed0vcUrfMLXcr3Eq3yq3+61yXu41uk9vsdrsP3Va3zW13O9xOt+vH+OI69rqP3T73iTvsvnAH3KfuoDvqDrnPf4wvru+o+8odc1+74+6EO+m+cafct+60O/Pj+i+u/Rv3g7vgggNGVqzZcMRp+ApO4bScjq/k9HwVZ+CrOcHXcEa+ljPxdZyZs3BWzsbZOQfnZMvEjpljzsW5OcnXcx6+gfNyPs7PBdhzQS7EN3JhvomL8M1clG/hYnwrF+cSXJJL8W1cmm/nMlyWy/EdXJ4rcEWuxJW5Ct/JVfkursZ3c3W+h2vwvVyT7+NafD/X5j9xHX6A6/KDXI/rcwNuyI34IW7MD3MTbsrN+BFuzo9yC36MW/Lj3Iqf4Nb8JLfhp7gtP83t+Bluzx24Iz/Lnfg57sxduCt34+78PPfgntyLe3MffoH78ovcj1/i/jyAB/LLPIhf4cH8Kg/hoTyMX+PhPIJH8igezWN4LL/O4/gNHs9v8gSeyJN4Mk/hqTyN3+LpPINn8ts8i9/h2TyH5/I8ns/v8gJeyIv4PV7M7/MSXsrLeDmv4JW8ilfzGl7L63g9b+CNvIk38xb+gLfyNt7OO3gn7+Ld/CHv4Y94L3/M+/gT3s9/5gP8KR/kz/gQf86H+Qs+wl/yUf6Kj/HXfJxP6Ev36Xyaz/BZ/o7P8fd8nn/gCxwYYoxVrGMTR3Ga+Io4JU4bp4uvjNPHV8UZ4qvjRHxNnDG+Ns4UXxdnjrPEWeNscfY4R5wztjHFLuY4jnPFueNkfH2cJ74hzhvni/PHBWIfF4wLxTfGheOb4iLxzXHR+Ja4WHxrXDwuET9wd6n4trh0fHtcJi4bl4vviMvHFeKKcaW4clwlvjOuGt8VV4vvjovE98Q14nvjmvF9ca34/rh2/Ke4TvxAXDd+MK4X148bxA3jRvFDceP44bhJ3DRuFj8SN48fjVvEj8Ut44AAT/zG9sfjVvETcde4W9w9fj5+Pg7hLj03OS85P/luckFyYXJR8r3k4uT7ySXJpcllyeXJFcmVyVXJ1ck1ybVpIbk+uSG5MbkpuTkZQqUrwKNXXnvjI5/GX+FTfFqfzl/p0/urfAZ/tU/4a3xGf63P5K9rtgvAZ/XZfHafw+f01pN3nn3sc/ncPumv93n8DT6vz+fz+wLe+4K+kG/oG/lGvrF/2DfxTX0z/4h/xD/qH/WP+cf8476Vf8K39k/6Nv4p39Y/7Z/2z/j2voPv6J/1nfxzvrPv4rv6rr677+57+B6+l+/l+/g+vq/v6/v5fr6/7+8H+oF+kB/kB/vBfogf4of5YX64H+5H+pF+tB/tx/qxfpwf58f78X6Cn+An+Ul+ip/ip/lpfrqf7mf6mX5W3ll+tp/t5/q5fr6f7xf4BX6RX+QX+8V+iV/il/llfoVf4Vf5VX6NX+PX+XV+g9/gN/lNfovf4rf6rX673+53+p1+t9/t9/g9fq/f6/f5fX6/3+8P+AP+oP/MH/Kf+8P+C3/Ef+mP+q/8Mf+1P+5P+JP+G3/Kf+tP+zP+rP/On/Pf+/P+B3/BBz828XpiXOKNxPjEm4kJiYmJSYnJiSmJqYlpibcS0xMzEjMTbydmJd5JzE7MScxNzEvMT7ybWJBYmFiUeC+xOPF+YkliaWJZYnliRWJlIoQcW+OQK+QOyXB9yBNuCHlDvpA/FAg+FAyFwo2hcLgpFAk3h6LhllAs3BqKhxKhZHgw1Av1Q4PQMDQKD4XG4eHQJDQNzcIjoXl4NLQIj4WW4fHQKjwRWocnQ5vwVGgbng7twjOhfegQOoZnQ6fwXOgcuoSuoVvoHp4PPULP0Cv0Dn3CC6FveDH0Cy+F/mFAGBheDoPCK2FweDUMCUPDsPBaGB5GhJFhVBgdxoSx4fUwLrwRxoc3w4QwMUwKk8OUMDVMC2+F6WFGmBneDrPCO2F2mBPmhnlhfng3LAgLw6LwXlgc3g9LwtKwLCwPK8LKsCqsDmvC2rAurA8bwsawKQKA8EHYGraF7WFH2Bl2hd3hw7AnfBT2ho/DvvBJ2B/+HA6ET8PB8Fk4FD4Ph8MX4Uj4MhwNX4Vj4etwPJwIJ8M34VT4NpwOZ8LZ8F04F74P58MP4cJvfGZNCCGEEEJc9luf9b+o29/4nrrULuoOAFdty/bUz7cbANiQ+S/9nip78wQAPN6l3f0/tfLlu3btemnfJRqi3HMAIHE5/8dfIF+Kl0IzeBRaQlMo/Dfn11N1OMd/Hf+nW9rL4+PxEJK3AKT7WU4KXI4vj3/T3xn/oUeGLSgWn834y/mfv3TeLs4/OQcgb+7LOWnhcnx5/CJ/Z/wsjfm3z0/aT8cCNPlZTnq4HF8evxA8DE9Ay1/sKYQQQgghhBBC/EVPVbJNyX/g/jy7uZxzBVyO/6f7cyGEEEIIIYQQQvzxnurQ8bGHWrZs2uZ/30l7aahfbfrpbwR+/yF+3vnpQcS/bMCmbZ5K8+vJ/5d0dl46W/+hg6r/A0uWzr+k8wf8MBJCCCGEEEL8W12+6P8nkjriv3FGQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE6vOf+Hdif/QahRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiD/a/wsAAP//BMUp6g==") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x800, 0xa345) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4078, 0xfee}], 0x1, 0x15f, 0xfffffffe) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) socket$netlink(0x10, 0x3, 0x0) 3m0.354034548s ago: executing program 5 (id=318): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x113242, 0xf0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close_range(r5, 0xffffffffffffffff, 0x0) 2m58.869268003s ago: executing program 35 (id=318): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x113242, 0xf0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close_range(r5, 0xffffffffffffffff, 0x0) 7.386341014s ago: executing program 4 (id=942): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000dc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 6.778346444s ago: executing program 7 (id=944): setreuid(0xffffffffffffffff, 0xee01) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00", 0x53}], 0x1) 6.194034861s ago: executing program 0 (id=945): r0 = socket$inet(0x2, 0x3, 0xa) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a00000003"], 0x20}}], 0x1, 0x24000004) 5.953008085s ago: executing program 0 (id=947): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) futimesat(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x2710}, {0x77359400}}) 5.878225632s ago: executing program 7 (id=948): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x4000) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@lazytime}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r1 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./cgroup/file1\x00', 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r2, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x1e) 5.79965326s ago: executing program 0 (id=949): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x7ffffffe, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 5.602130949s ago: executing program 0 (id=950): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2616}, 0x80) prlimit64(0x0, 0x7, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) getdents64(r3, 0xfffffffffffffffe, 0x29) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") 5.542159435s ago: executing program 7 (id=951): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r1 = syz_open_dev$loop(0x0, 0x40000047ffffe, 0x1a2c42) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000100)={0x2000, 0x3, 0x5, 0x100006, 0x4, 0x2}) 5.361944853s ago: executing program 0 (id=952): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@delalloc}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xfffffffc}}, {@nodiscard}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xed29e547f9b549e2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file4\x00', 0x1004804, &(0x7f0000000580)=ANY=[@ANYBLOB="9d021e1a371969643d55ee", @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=iso8859-15,rodir,iocharset=cp1250,shortname=mixed,shortname=lower,shortname=win95,shortname=win95,shortname=winnt,rodir,shortname=lower,nonumtail=0,\x00'], 0xff, 0x356, &(0x7f0000000200)="$eJzs3U9oI9UfAPBvdrJJu7C/9vCDRUEYvQladise9NSydGExF5Xgn4MY3K5KUxcaDHYPzdaLeBQ86smbBz142LMIinjz4NUVxD940OOCiyPJTJJpk3a7QnYtfj6H8O1732/ee5mhmU6b15dXYqMWcTmNiLm5SlRXzq/EzUosRhJD12JSbUobAHA83Myy+CPLHbGkMuMpAQAzNnj/f/V0qeXtLw/Lz7z7A8CxV/z8P39YztxBHVdmMiUAYMYm7v8/tKe7tvdX/dXSXwUAAMfVsy+8+NRqI+KZNJ2L2Hyn2+w248lx/+rleD3asR5nYyFuReQXCv2HyuDxwsXG2tk0TXvx82I0+xXdZsRmr9vMrxRWk0F9Pc7FQiwW9cXVRpZlyYXPGmvn0oGIuNYbjB+blW7zZJwqxv/+VKzHcqTx/4n6iIuNteW0eILm5rC+F7E7vm/Rn/9SLMS3r8SVaMel6NcOL2saazvn0vR81thT323W5y6NXoUD74AAAAAAAAAAAAAAAAAAAAAAAMA/spSOLI72v8nG+/csLU3pH+yPk9cX+wPt5vsDZfUssuz3tx5tvpvEnv2B9u/P021W48S9XToAAAAAAAAAAAAAAAAAAAD8a3S2a9Fqt9e3OttXN8pBb6uzfSIi+i1vfP3JF/MxmXOboFqMUepKi6arG60sGSZnyZ6cIkj6gw9bPr4+mnE5pz5axdRp1A/uardPP/jjB+OWB5LhM/81zkli+gKTfdMoB5v/y6d0Jy/UKFi+Tc6NLMsOKt95abIqKhHVOz9whwdZP/jqp9fue6xz5vFBy+dZ7uFHFp678f5Hv2602v2RY3AEa1udW9lGq/h6+sl2cJCUzp9K5EGlfCZUDyvfLYL5iP6hbCXf/fb8/e99c7TRs3LLm1Nyknw5n+7vquVBJR+03DU/bayTU07+GQRnPlxpXd/54ZejVpW+SdioAwAAAAAAAAAAAAAAAAAA7orSZ8ULxYd9Tx5W9cTTs58ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANw94///Xwp2J1qOEvzZi8mu+vpWJ6J2r5cJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/3N8BAAD//zGNaeE=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000380), 0x24, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x84) 4.960802592s ago: executing program 7 (id=953): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x810412, &(0x7f0000002680)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYBLOB="15b654a99f19f751b397246870032a5801c8e4333b96ab1cb23ce23cea34d9c9984d7f2093a5a45907dba61a8a10dad320a971c149c3ae5b924272bed0bbb8259f7d1c8363d58a70e85cf54e8c3d3af34d75783a64a11574ee900d013d0751dbb1d686604f133059f40064ad82f88843d0b161aa95aea3ea3b85a600e427fb2ad2bdf623d45d62caf62a7cc3c881998b92bb782a01e939ea70684be5c5c8be63e5e5d580fb71fe083348f0fec1db3c1db7f9b12060d71bcb5235287aa74833654ce9377bfa5a53833545abae85088e166766f1a41b112e04ef4073f8086de44b3cb9781889157c849058411aba465997c8e8db", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRESHEX], 0x2, 0x1d8, &(0x7f0000002340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r0, 0xe0ffff, 0x91, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r3, 0x9, 0x0, 0x3) 4.155982151s ago: executing program 0 (id=955): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x2, 0xfffffffd, 0x2}) 3.96693138s ago: executing program 7 (id=956): setreuid(0xffffffffffffffff, 0xee01) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00", 0x53}], 0x1) 3.741506642s ago: executing program 7 (id=957): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28de, 0x1205, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000"], 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) openat$comedi(0xffffff9c, &(0x7f00000005c0)='/dev/comedi0\x00', 0x2181, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x6000210) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x1, 0xc8, 0x2}}}, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/242, 0xf2}], 0x1}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setuid(0x0) r6 = getgid() fchown(r2, 0x0, r6) syz_usb_disconnect(r0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)="9f28", 0x2}], 0x1) 2.985491346s ago: executing program 6 (id=958): r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xab47, 0x4f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24044885}, 0x8010) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.777102857s ago: executing program 6 (id=959): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x4000) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@lazytime}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r1 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./cgroup/file1\x00', 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r2, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x1e) 2.663208358s ago: executing program 4 (id=960): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x1, 0x41, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0x0, 0xfffffefc, 0x7a, 0xfffffffa, 0xc6, "84b53f5dc1d996eee7d479db86fe609ea2029b", 0x7f, 0x2}) 2.320718562s ago: executing program 6 (id=961): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x5, 0x1, 0x4}, {0x74, 0x0, 0x20}, {0x6, 0xfc, 0xfd, 0x909f}]}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x2, 0x2b0, 0xffffffff, 0x220, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x2d0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ip={@local, @empty, 0x0, 0x0, 'wlan1\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "ca0300cb54a6f53d9bcc7790fe75e5dfab93e913be79e494d8af7b27c459"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000580)={'vlan0\x00', 0x8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2d000000010001", 0x7) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x80242, 0x0) sendto$packet(r0, 0x0, 0x0, 0x44040, &(0x7f0000000040)={0xc9, 0x888e, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) 1.685083244s ago: executing program 4 (id=962): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x601, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 1.654873517s ago: executing program 4 (id=963): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x48c40, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x1010, r0, 0x6000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000200), 0xba2, 0x2) ppoll(&(0x7f0000000300)=[{r4, 0x2007}], 0x1, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 1.545940548s ago: executing program 4 (id=964): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x810412, &(0x7f0000002680)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYBLOB="15b654a99f19f751b397246870032a5801c8e4333b96ab1cb23ce23cea34d9c9984d7f2093a5a45907dba61a8a10dad320a971c149c3ae5b924272bed0bbb8259f7d1c8363d58a70e85cf54e8c3d3af34d75783a64a11574ee900d013d0751dbb1d686604f133059f40064ad82f88843d0b161aa95aea3ea3b85a600e427fb2ad2bdf623d45d62caf62a7cc3c881998b92bb782a01e939ea70684be5c5c8be63e5e5d580fb71fe083348f0fec1db3c1db7f9b12060d71bcb5235287aa74833654ce9377bfa5a53833545abae85088e166766f1a41b112e04ef4073f8086de44b3cb9781889157c849058411aba465997c8e8db", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRESHEX], 0x2, 0x1d8, &(0x7f0000002340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r0, 0xe0ffff, 0x91, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r3, 0x9, 0x0, 0x3) 1.224332179s ago: executing program 6 (id=965): setreuid(0xffffffffffffffff, 0xee01) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00", 0x53}], 0x1) 1.140274297s ago: executing program 6 (id=966): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @empty, 0x80a9}, 0x1c) r4 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) 4.861239ms ago: executing program 6 (id=967): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000880)={'pcl818\x00', [0x4f2b, 0x2, 0x3, 0xa, 0x5, 0xcc7, 0x4, 0x9, 0xffff0000, 0xffff, 0x802, 0x3, 0x1, 0x719, 0x9, 0x9, 0x8, 0x4, 0xfffffffb, 0x395, 0xfffffffd, 0x3, 0x0, 0xfffffff5, 0xfeffcad7, 0x3, 0x3c, 0x2000007, 0x4, 0x8000000, 0x81e]}) 0s ago: executing program 4 (id=968): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x511}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): bridge0: port 2(bridge_slave_1) entered disabled state [ 175.098042][ T6912] bridge_slave_1: entered allmulticast mode [ 175.121001][ T6912] bridge_slave_1: entered promiscuous mode [ 175.266400][ T6912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.425719][ T6912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.662206][ T6912] team0: Port device team_slave_0 added [ 175.675414][ T6912] team0: Port device team_slave_1 added [ 175.823091][ T7010] loop0: detected capacity change from 0 to 1024 [ 176.058418][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.112028][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.140087][ T5788] Bluetooth: hci3: command tx timeout [ 176.171256][ T6912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.393129][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.414341][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.463920][ T6912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.564273][ T6885] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.639971][ T5788] Bluetooth: hci1: command tx timeout [ 176.724180][ T6885] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.912028][ T6912] hsr_slave_0: entered promiscuous mode [ 176.928344][ T6912] hsr_slave_1: entered promiscuous mode [ 176.957434][ T6912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.969972][ T6912] Cannot create hsr debugfs directory [ 177.065671][ T6885] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.095063][ T6885] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 178.224942][ T5788] Bluetooth: hci3: command tx timeout [ 178.485017][ T7055] loop4: detected capacity change from 0 to 16 [ 178.544772][ T7055] erofs: (device loop4): mounted with root inode @ nid 36. [ 178.825691][ T37] hsr_slave_0: left promiscuous mode [ 178.831964][ T37] hsr_slave_1: left promiscuous mode [ 178.838221][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.846379][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.855135][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.864729][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.889466][ T37] bridge_slave_1: left allmulticast mode [ 178.899325][ T37] bridge_slave_1: left promiscuous mode [ 178.908081][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.920390][ T37] bridge_slave_0: left allmulticast mode [ 178.926735][ T37] bridge_slave_0: left promiscuous mode [ 178.934210][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.990964][ T37] veth1_macvtap: left promiscuous mode [ 178.996714][ T37] veth0_macvtap: left promiscuous mode [ 179.003544][ T37] veth1_vlan: left promiscuous mode [ 179.009071][ T37] veth0_vlan: left promiscuous mode [ 179.538840][ T7070] loop4: detected capacity change from 0 to 256 [ 179.568566][ T7070] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 179.869727][ T7074] loop4: detected capacity change from 0 to 1024 [ 179.895714][ T7074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 179.914228][ T7074] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.990327][ T37] team0 (unregistering): Port device team_slave_1 removed [ 180.043605][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 180.079471][ T37] team0 (unregistering): Port device team_slave_0 removed [ 180.157276][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.215194][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.629538][ T37] bond0 (unregistering): Released all slaves [ 183.874013][ T6912] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 183.971830][ T6885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.992610][ T6912] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 184.022769][ T6912] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 184.080568][ T6912] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 184.093998][ T7096] loop0: detected capacity change from 0 to 512 [ 184.118265][ T7096] EXT4-fs (loop0): unable to read superblock [ 184.215499][ T6885] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.255817][ T5931] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.283377][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.290663][ T5978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.411164][ T7096] loop0: detected capacity change from 0 to 1764 [ 184.436150][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.443410][ T5976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.645368][ T6885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.738704][ T7112] loop0: detected capacity change from 0 to 2048 [ 184.826736][ T7112] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.863994][ T6912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.910305][ T27] audit: type=1800 audit(1760840661.229:11): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.295" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 184.962936][ T7099] loop4: detected capacity change from 0 to 512 [ 184.968265][ T6912] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.000532][ T7099] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 185.034099][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.041384][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.106213][ T7099] EXT4-fs (loop4): 1 truncate cleaned up [ 185.155159][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.162438][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.166956][ T7099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.431019][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 185.550568][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.656550][ T6885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.868336][ T7141] loop4: detected capacity change from 0 to 1024 [ 185.943588][ T7141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.071534][ T6912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.248004][ T7152] loop0: detected capacity change from 0 to 1024 [ 186.366335][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.618959][ T7163] loop4: detected capacity change from 0 to 128 [ 186.667202][ T7163] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.711099][ T7163] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.753149][ T7163] netlink: 104 bytes leftover after parsing attributes in process `syz.4.300'. [ 186.884290][ T6885] veth0_vlan: entered promiscuous mode [ 186.944817][ T6885] veth1_vlan: entered promiscuous mode [ 186.968923][ T6173] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.079502][ T6885] veth0_macvtap: entered promiscuous mode [ 187.156696][ T6885] veth1_macvtap: entered promiscuous mode [ 187.211878][ T27] audit: type=1800 audit(1760840663.539:12): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.299" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 187.262059][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.305045][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.323313][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.334264][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.362393][ T6885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.388228][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.415041][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.441428][ T6885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.471620][ T6885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.497921][ T6885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.677710][ T6885] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.694168][ T6885] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.703762][ T6885] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.713137][ T6885] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.757490][ T6912] veth0_vlan: entered promiscuous mode [ 187.815689][ T6912] veth1_vlan: entered promiscuous mode [ 187.925556][ T6912] veth0_macvtap: entered promiscuous mode [ 187.957384][ T6912] veth1_macvtap: entered promiscuous mode [ 187.978911][ T5978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.004768][ T5978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.041957][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.053095][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.065059][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.075932][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.086193][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.097176][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.112039][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.170693][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.195144][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.217538][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.230251][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.240616][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.252074][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.265340][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.311037][ T6912] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.325883][ T6912] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.335302][ T6912] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.344442][ T6912] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.361705][ T5976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.374794][ T5976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.605148][ T5976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.636753][ T5976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.719173][ T5976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.735147][ T5976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.036725][ T7223] loop6: detected capacity change from 0 to 16 [ 189.061885][ T7223] erofs: (device loop6): mounted with root inode @ nid 36. [ 190.823442][ T7243] loop4: detected capacity change from 0 to 2048 [ 191.175882][ T7245] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.903640][ T7251] loop0: detected capacity change from 0 to 512 [ 192.089980][ T7254] loop5: detected capacity change from 0 to 1024 [ 192.132840][ T7251] EXT4-fs (loop0): 1 orphan inode deleted [ 192.171695][ T7251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.246396][ T7254] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.312: bad orphan inode 32767 [ 192.264140][ T7251] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.326248][ T7254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.720148][ T3467] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 192.781742][ T3467] EXT4-fs error (device loop0): ext4_release_dquot:6976: comm kworker/u4:7: Failed to release dquot type 1 [ 192.975912][ T7245] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 193.339195][ T7245] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 193.356556][ T7245] Remounting filesystem read-only [ 193.362234][ T11] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 193.376063][ T11] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 193.383769][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.397865][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.425066][ T6885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.444895][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.483433][ T11] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 193.517824][ T11] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 193.574347][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.606090][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.629878][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.638815][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.690072][ T11] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 193.696843][ T11] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 193.739970][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.748915][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.807422][ T11] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 194.273774][ T7275] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 194.328270][ T7276] loop0: detected capacity change from 0 to 512 [ 194.349232][ T7276] EXT4-fs: Ignoring removed bh option [ 194.448099][ T6173] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 194.557663][ T7276] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 194.625670][ T7276] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.315: bad orphan inode 131083 [ 194.667151][ T7276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.705426][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.710368][ T6173] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 194.713438][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.725569][ T7273] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.315: iget: bad extra_isize 1312 (inode size 256) [ 194.746271][ T6173] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 194.777519][ T6173] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 194.794647][ T6173] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 194.831209][ T6173] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 194.945495][ T5977] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.956728][ T6173] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 194.970676][ T6173] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 195.003155][ T6173] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.017475][ T6173] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.027882][ T6173] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.062235][ T6173] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 195.070590][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.086757][ T6173] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 195.131277][ T6173] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 195.150102][ T6173] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 195.157551][ T6173] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.220052][ T6173] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 195.253606][ T6173] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.303504][ T6173] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.314368][ T6173] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 195.321799][ T6173] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.535324][ T7282] loop6: detected capacity change from 0 to 2048 [ 195.687477][ T7282] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.248843][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.283146][ T7287] loop0: detected capacity change from 0 to 128 [ 196.312613][ T7288] loop4: detected capacity change from 0 to 1024 [ 196.372009][ T5977] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.421215][ T7287] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.615139][ T7287] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 196.724865][ T7287] netlink: 104 bytes leftover after parsing attributes in process `syz.0.317'. [ 196.794830][ T5977] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.864221][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.032842][ T5977] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.120340][ T27] audit: type=1800 audit(1760840673.449:13): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.313" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 197.691614][ T7309] loop4: detected capacity change from 0 to 1024 [ 197.733796][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.745788][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.755174][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.765192][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.774155][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 197.781750][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.851425][ T7309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 197.870644][ T7319] loop0: detected capacity change from 0 to 1024 [ 197.915787][ T7309] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.937348][ T27] audit: type=1800 audit(1760840674.259:14): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.325" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 198.139210][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 198.723480][ T7329] loop4: detected capacity change from 0 to 512 [ 198.735499][ T7329] EXT4-fs: Ignoring removed bh option [ 198.751393][ T7329] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 198.804799][ T7329] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.327: bad orphan inode 131083 [ 198.829079][ T7329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.862945][ T7329] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.327: iget: bad extra_isize 1312 (inode size 256) [ 199.372803][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.564690][ T7334] loop4: detected capacity change from 0 to 128 [ 199.805450][ T7340] loop6: detected capacity change from 0 to 2048 [ 199.900036][ T50] Bluetooth: hci1: command tx timeout [ 199.922133][ T7340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.934802][ T7343] loop4: detected capacity change from 0 to 128 [ 199.992640][ T7343] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.089709][ T7343] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 200.223132][ T7343] netlink: 104 bytes leftover after parsing attributes in process `syz.4.330'. [ 200.491600][ T7354] loop0: detected capacity change from 0 to 2048 [ 200.890135][ T7356] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.246772][ T7314] chnl_net:caif_netlink_parms(): no params data found [ 201.291492][ T6173] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.330737][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.988866][ T50] Bluetooth: hci1: command tx timeout [ 202.450410][ T7376] loop6: detected capacity change from 0 to 1024 [ 202.461337][ T7356] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 202.502825][ T7356] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 202.527826][ T7376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 202.544537][ T7356] Remounting filesystem read-only [ 202.551281][ T11] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 202.558302][ T11] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 202.560607][ T7376] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.594619][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 202.659933][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 202.685997][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 202.701447][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.704493][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 202.708736][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.729474][ T11] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 202.736647][ T11] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 202.739127][ T7314] bridge_slave_0: entered allmulticast mode [ 202.745781][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 202.764536][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 202.773810][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 202.783997][ T11] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 202.792608][ T11] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 202.793251][ T7314] bridge_slave_0: entered promiscuous mode [ 202.800450][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 202.800471][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 202.800486][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 202.833920][ T5785] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 202.834372][ T5785] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 202.848064][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.874730][ T5785] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 202.894579][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.894914][ T5785] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 202.920168][ T7314] bridge_slave_1: entered allmulticast mode [ 202.929767][ T7314] bridge_slave_1: entered promiscuous mode [ 202.931308][ T5785] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 202.966662][ T5785] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 202.991444][ T5977] hsr_slave_0: left promiscuous mode [ 203.008124][ T5977] hsr_slave_1: left promiscuous mode [ 203.014894][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.030037][ T7386] loop4: detected capacity change from 0 to 512 [ 203.039082][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.056320][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.085223][ T7386] EXT4-fs (loop4): #blocks per group too big: 65535 [ 203.094700][ T5785] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 203.110720][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.126908][ T5785] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 203.135526][ T5977] bridge_slave_1: left allmulticast mode [ 203.156767][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.165944][ T5977] bridge_slave_1: left promiscuous mode [ 203.196242][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.204979][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.214028][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.223314][ T5785] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 203.230187][ T5785] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 203.237521][ T5785] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 203.244925][ T5785] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 203.253200][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.262489][ T5785] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 203.269659][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.278732][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.287837][ T5785] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 203.298482][ T5785] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.298505][ T5977] bridge_slave_0: left allmulticast mode [ 203.354103][ T5977] bridge_slave_0: left promiscuous mode [ 203.374010][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.109504][ T50] Bluetooth: hci1: command tx timeout [ 204.277969][ T5977] veth1_macvtap: left promiscuous mode [ 204.320801][ T5977] veth0_macvtap: left promiscuous mode [ 204.355841][ T5977] veth1_vlan: left promiscuous mode [ 204.372880][ T5977] veth0_vlan: left promiscuous mode [ 205.852907][ T5977] team0 (unregistering): Port device team_slave_1 removed [ 205.905462][ T5977] team0 (unregistering): Port device team_slave_0 removed [ 205.953987][ T5977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.008421][ T5977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.155211][ T50] Bluetooth: hci1: command tx timeout [ 206.590745][ T5977] bond0 (unregistering): Released all slaves [ 206.696862][ T7386] netlink: 'syz.4.336': attribute type 12 has an invalid length. [ 206.908576][ T7314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.935152][ T7314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.194830][ T7314] team0: Port device team_slave_0 added [ 207.213453][ T7314] team0: Port device team_slave_1 added [ 207.379684][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.389068][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.416723][ T7314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.436799][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.447509][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.650245][ T7412] loop0: detected capacity change from 0 to 512 [ 207.754082][ T7314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.858684][ T7412] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.110810][ T7412] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 208.232299][ T7412] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.342: attempt to clear invalid blocks 2 len 1 [ 208.279066][ T7412] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 208.370642][ T7412] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.342: invalid indirect mapped block 1819239214 (level 0) [ 208.491982][ T7412] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.342: invalid indirect mapped block 1819239214 (level 1) [ 208.631568][ T7412] EXT4-fs (loop0): 1 truncate cleaned up [ 208.755082][ T7412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.094409][ T7412] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work [ 209.288616][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.301023][ T7314] hsr_slave_0: entered promiscuous mode [ 209.340614][ T7314] hsr_slave_1: entered promiscuous mode [ 209.366654][ T7314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.386118][ T7431] loop6: detected capacity change from 0 to 128 [ 209.419988][ T7314] Cannot create hsr debugfs directory [ 209.431036][ T7431] ext4: Unknown parameter 'noacl' [ 209.634066][ T7436] loop4: detected capacity change from 0 to 128 [ 209.716715][ T7436] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 209.793384][ T7436] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.827761][ T7436] ext2 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.959044][ T27] audit: type=1800 audit(1760840686.279:15): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.347" name="bus" dev="loop4" ino=13 res=0 errno=0 [ 210.047425][ T7444] loop6: detected capacity change from 0 to 256 [ 210.084939][ T7444] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.126943][ T6173] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.138592][ T7444] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 210.180298][ T7444] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 210.313474][ T27] audit: type=1800 audit(1760840686.639:16): pid=7444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.349" name="file1" dev="loop6" ino=1048632 res=0 errno=0 [ 210.354286][ T7314] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 210.367776][ T7448] loop4: detected capacity change from 0 to 128 [ 210.389078][ T7314] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 210.421985][ T7448] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.434075][ T7314] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 210.445867][ T7314] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 210.518761][ T7448] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.674873][ T6173] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.845267][ T7314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.878689][ T7461] loop4: detected capacity change from 0 to 1024 [ 210.900991][ T7461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.922229][ T7461] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.936990][ T7314] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.995880][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.003139][ T5976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.036650][ T7461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.079391][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.086674][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.154965][ T7466] loop6: detected capacity change from 0 to 2048 [ 211.236611][ T7314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.276829][ T7461] EXT4-fs error (device loop4): __ext4_new_inode:1075: comm syz.4.352: reserved inode found cleared - inode=7 [ 211.315920][ T7461] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:427: inode #2: comm syz.4.352: No space for directory leaf checksum. Please run e2fsck -D. [ 211.336988][ T7461] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 211.599372][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.970153][ T7493] loop4: detected capacity change from 0 to 128 [ 213.024655][ T7493] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.044953][ T7314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.159014][ T7493] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.423761][ T6173] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.656856][ T7512] xt_cgroup: path and classid specified [ 213.734352][ T7510] loop0: detected capacity change from 0 to 512 [ 214.137998][ T7510] EXT4-fs (loop0): Test dummy encryption mode enabled [ 214.210477][ T7510] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 214.270655][ T7510] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 214.279692][ T7510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.212954][ T7525] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 215.544961][ T7524] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 215.717628][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.925779][ T7314] veth0_vlan: entered promiscuous mode [ 215.955382][ T7314] veth1_vlan: entered promiscuous mode [ 216.017352][ T7540] loop0: detected capacity change from 0 to 2048 [ 216.064153][ T7540] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.069478][ T7314] veth0_macvtap: entered promiscuous mode [ 216.158067][ T7314] veth1_macvtap: entered promiscuous mode [ 216.179944][ T5931] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.223285][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.269895][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.279802][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.321428][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.355939][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.408446][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.451312][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.531333][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.568340][ T7552] loop4: detected capacity change from 0 to 128 [ 216.593672][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.628282][ T7554] loop0: detected capacity change from 0 to 512 [ 216.636353][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.648592][ T7552] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.670308][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.679422][ T7552] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.681209][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.702303][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.715221][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.729673][ T7314] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.740100][ T7314] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.749188][ T7314] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.759184][ T7314] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.804727][ T7552] netlink: 104 bytes leftover after parsing attributes in process `syz.4.372'. [ 216.873836][ T6173] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.011940][ T7554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.132205][ T7566] xt_cgroup: path and classid specified [ 217.349201][ T7554] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 217.703110][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.741466][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.751677][ T7568] cgroup: Invalid name [ 217.777167][ T7554] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.373: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 217.880224][ T7554] EXT4-fs (loop0): Remounting filesystem read-only [ 218.013651][ T7571] loop6: detected capacity change from 0 to 512 [ 218.063561][ T2878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.086896][ T2878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.489588][ T7571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.877502][ T7571] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.080288][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.195072][ T7581] loop4: detected capacity change from 0 to 8 [ 219.220856][ T7581] SQUASHFS error: lzo decompression failed, data probably corrupt [ 219.260086][ T7581] SQUASHFS error: Failed to read block 0x91: -5 [ 219.266420][ T7581] SQUASHFS error: Unable to read metadata cache entry [8f] [ 219.323315][ T7581] SQUASHFS error: Unable to read inode 0x11f [ 219.391387][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.619256][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 219.803278][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 219.973601][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 220.141721][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 220.166833][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 220.181028][ T7590] loop7: detected capacity change from 0 to 128 [ 220.211491][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 220.218972][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 220.261139][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 220.268655][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 220.288328][ T7590] syz.7.381: attempt to access beyond end of device [ 220.288328][ T7590] loop7: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 220.323230][ T7594] loop6: detected capacity change from 0 to 512 [ 220.324509][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 220.373972][ T7590] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000819) [ 220.375215][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 220.405580][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 220.428911][ T7594] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.379: casefold flag without casefold feature [ 220.455497][ T7590] FAT-fs (loop7): Filesystem has been set read-only [ 220.476621][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 220.548266][ T7590] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000819) [ 220.558443][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 220.584612][ T7594] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.379: couldn't read orphan inode 15 (err -117) [ 220.597528][ T7590] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000819) [ 220.632053][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 220.639553][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 220.661753][ T7594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.686532][ T5856] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 220.738152][ T5856] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 220.758130][ T7601] loop4: detected capacity change from 0 to 1024 [ 220.911325][ T7601] syz.4.382: attempt to access beyond end of device [ 220.911325][ T7601] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 221.039506][ T7602] fido_id[7602]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 221.107542][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.338576][ T7613] cgroup: Invalid name [ 221.733209][ T7624] loop6: detected capacity change from 0 to 1024 [ 221.749029][ T7619] loop0: detected capacity change from 0 to 1024 [ 221.774316][ T7619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.834812][ T7624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.076359][ T7627] loop7: detected capacity change from 0 to 16 [ 222.128819][ T7627] erofs: (device loop7): mounted with root inode @ nid 36. [ 222.323456][ T7624] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.398384][ T7619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.951193][ T7624] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 222.985869][ T7624] System zones: 0-1, 3-36 [ 223.045126][ T7624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.060498][ T7619] EXT4-fs warning (device loop0): empty_inline_dir:1846: bad inline directory (dir #12) - no `..' [ 223.234836][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.318099][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.843917][ T27] audit: type=1326 audit(1760840700.169:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.6.395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f89f8efc9 code=0x0 [ 223.908707][ T7657] Bluetooth: MGMT ver 1.22 [ 224.341515][ T7675] cgroup: Invalid name [ 226.130183][ T7701] loop6: detected capacity change from 0 to 512 [ 226.149511][ T7701] EXT4-fs: Ignoring removed bh option [ 226.203475][ T7701] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 226.370306][ T7701] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.406: bad orphan inode 131083 [ 226.389379][ T7701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.423333][ T7701] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.406: iget: bad extra_isize 1312 (inode size 256) [ 226.797328][ T7706] loop4: detected capacity change from 0 to 128 [ 226.805372][ T7706] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 226.813672][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.637279][ T7736] loop6: detected capacity change from 0 to 2048 [ 228.798085][ T7736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.435229][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.267963][ T7754] loop6: detected capacity change from 0 to 512 [ 230.371639][ T7754] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 230.459298][ T7754] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 230.498279][ T7758] loop7: detected capacity change from 0 to 16 [ 230.533164][ T7758] erofs: (device loop7): mounted with root inode @ nid 36. [ 230.578888][ T7754] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 230.606416][ T7762] loop4: detected capacity change from 0 to 512 [ 230.641556][ T7762] EXT4-fs: Ignoring removed bh option [ 230.647028][ T7762] EXT4-fs: inline encryption not supported [ 230.705679][ T7762] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 230.770901][ T7754] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 230.778965][ T7754] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 230.788411][ T7754] EXT4-fs (loop6): failed to initialize system zone (-117) [ 230.796187][ T7754] EXT4-fs (loop6): mount failed [ 230.831449][ T7762] EXT4-fs (loop4): 1 truncate cleaned up [ 230.838520][ T7762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.924866][ T7753] loop6: detected capacity change from 0 to 8 [ 231.303732][ T7775] xt_cgroup: path and classid specified [ 232.047557][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.545251][ T7794] loop7: detected capacity change from 0 to 2048 [ 232.562562][ T5856] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 232.781878][ T7794] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.999794][ T5856] usb 7-1: Using ep0 maxpacket: 8 [ 233.264944][ T5856] usb 7-1: unable to get BOS descriptor or descriptor too short [ 233.275328][ T7314] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.291400][ T5856] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 233.301205][ T5856] usb 7-1: config 1 has no interface number 1 [ 233.307387][ T5856] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 233.340369][ T5856] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.349582][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.380118][ T5856] usb 7-1: Product: syz [ 233.384462][ T5856] usb 7-1: Manufacturer: syz [ 233.389101][ T5856] usb 7-1: SerialNumber: syz [ 233.456137][ T7801] loop4: detected capacity change from 0 to 256 [ 233.516948][ T7801] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 233.618616][ T7807] loop7: detected capacity change from 0 to 16 [ 233.679129][ T7807] erofs: (device loop7): mounted with root inode @ nid 36. [ 234.340765][ T5856] usb 7-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 234.350080][ T5856] usb 7-1: 2:1 : sample bitwidth 65 in over sample bytes 0 [ 234.357465][ T5856] usb 7-1: 2:1 : unsupported sample bitwidth 65 in 0 bytes [ 234.432162][ T5856] usb 7-1: USB disconnect, device number 2 [ 234.544316][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.997978][ T7822] xt_cgroup: path and classid specified [ 237.310884][ T27] audit: type=1326 audit(1760840713.639:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.4.442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33b818efc9 code=0x0 [ 237.336591][ T7844] loop0: detected capacity change from 0 to 512 [ 237.353226][ T7844] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.408877][ T7844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.432638][ T7844] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.515385][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.550349][ T5874] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 237.614636][ T7857] loop0: detected capacity change from 0 to 128 [ 237.646515][ T7857] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.661671][ T7857] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 237.720233][ T7857] netlink: 104 bytes leftover after parsing attributes in process `syz.0.444'. [ 237.763352][ T5874] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.776968][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.786161][ T5874] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.797000][ T5874] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.811894][ T5874] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.855181][ T5874] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.885328][ T5874] usb 8-1: config 0 descriptor?? [ 238.963807][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.446'. [ 239.061643][ T5874] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x2 [ 239.069558][ T5874] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 239.077135][ T5874] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 239.087346][ T5874] plantronics 0003:047F:FFFF.0002: item 0 1 0 8 parsing failed [ 239.096070][ T5874] plantronics 0003:047F:FFFF.0002: parse failed [ 239.102779][ T5874] plantronics: probe of 0003:047F:FFFF.0002 failed with error -22 [ 239.114467][ T5874] usb 8-1: USB disconnect, device number 2 [ 239.525788][ T7882] xt_cgroup: path and classid specified [ 240.035720][ T7883] loop0: detected capacity change from 0 to 16 [ 240.139912][ T7883] erofs: (device loop0): mounted with root inode @ nid 36. [ 240.401847][ T5798] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 241.348956][ T7894] netlink: 104 bytes leftover after parsing attributes in process `syz.7.453'. [ 241.371319][ T27] audit: type=1326 audit(1760840717.689:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.4.454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33b818efc9 code=0x0 [ 241.520801][ T7903] loop6: detected capacity change from 0 to 1024 [ 242.790324][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 243.659574][ T7928] loop4: detected capacity change from 0 to 512 [ 244.309970][ T7928] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.463: casefold flag without casefold feature [ 244.407233][ T7928] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.463: couldn't read orphan inode 15 (err -117) [ 244.448828][ T7928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.543778][ T7928] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #2: comm syz.4.463: directory missing '.' [ 245.546006][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.888344][ T27] audit: type=1326 audit(1760840722.209:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7959 comm="syz.0.469" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c4558efc9 code=0x0 [ 246.780267][ T5874] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 246.887393][ T7973] loop0: detected capacity change from 0 to 256 [ 246.898377][ T7971] loop6: detected capacity change from 0 to 1024 [ 247.003298][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.045048][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.090080][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.166866][ T5874] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.203329][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.229563][ T5874] usb 5-1: config 0 descriptor?? [ 247.330296][ T7971] hfsplus: request for non-existent node 33554434 in B*Tree [ 247.364588][ T7971] hfsplus: request for non-existent node 33554434 in B*Tree [ 247.396170][ T7971] hfsplus: request for non-existent node 33554434 in B*Tree [ 247.490557][ T7971] hfsplus: request for non-existent node 33554434 in B*Tree [ 247.525391][ T11] hfsplus: b-tree write err: -5, ino 3 [ 247.591009][ T11] hfsplus: request for non-existent node 33554434 in B*Tree [ 247.598909][ T11] hfsplus: request for non-existent node 33554434 in B*Tree [ 247.715879][ T7988] loop7: detected capacity change from 0 to 512 [ 247.726016][ T7988] EXT4-fs: Ignoring removed bh option [ 247.793863][ T7988] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 247.895260][ T7988] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.475: bad orphan inode 131083 [ 247.915180][ T7988] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.964848][ T7988] EXT4-fs error (device loop7): ext4_lookup:1858: inode #15: comm syz.7.475: iget: bad extra_isize 1312 (inode size 256) [ 248.344184][ T7314] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.359404][ T5874] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 248.414141][ T5874] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 248.518953][ T7993] loop6: detected capacity change from 0 to 256 [ 248.566227][ T7993] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.642283][ T7993] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 248.675954][ T7993] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 249.905414][ T5837] usb 5-1: USB disconnect, device number 4 [ 250.311365][ T8017] loop6: detected capacity change from 0 to 512 [ 250.321288][ T8017] EXT4-fs: Ignoring removed i_version option [ 250.327348][ T8017] EXT4-fs: Ignoring removed bh option [ 250.405324][ T8017] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.446672][ T8017] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.536905][ T8025] loop4: detected capacity change from 0 to 1024 [ 250.608111][ T27] audit: type=1800 audit(1760840726.929:21): pid=8025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.485" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 250.681512][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.736447][ T8031] loop0: detected capacity change from 0 to 128 [ 250.800672][ T8031] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 250.881450][ T8031] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 250.896788][ T8031] netlink: 104 bytes leftover after parsing attributes in process `syz.0.487'. [ 250.965082][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.099910][ T6683] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 251.130986][ T5874] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 251.303613][ T6683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.334131][ T6683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.351808][ T5874] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 251.375126][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.384472][ T6683] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.409006][ T5874] usb 7-1: config 0 descriptor?? [ 251.420639][ T6683] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.442398][ T6683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.484333][ T6683] usb 5-1: config 0 descriptor?? [ 251.538982][ T8053] loop7: detected capacity change from 0 to 512 [ 251.614169][ T8053] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.493: casefold flag without casefold feature [ 251.685377][ T8053] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.493: couldn't read orphan inode 15 (err -117) [ 251.747143][ T8053] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.922054][ T6683] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 251.955332][ T7314] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.995487][ T6683] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 252.066204][ T8037] loop6: detected capacity change from 0 to 256 [ 252.108698][ T5837] usb 5-1: USB disconnect, device number 5 [ 252.147511][ T8037] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 252.200626][ T8037] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 252.344119][ T8068] fido_id[8068]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 252.530083][ T6179] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 252.749383][ T6179] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.788161][ T6179] usb 8-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 252.841812][ T6179] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.081221][ T8091] loop4: detected capacity change from 0 to 16 [ 254.387985][ T8091] erofs: (device loop4): mounted with root inode @ nid 36. [ 254.462769][ T6179] usb 8-1: config 0 descriptor?? [ 254.527491][ T5874] usb 7-1: Cannot set autoneg [ 254.544910][ T5874] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71 [ 254.608605][ T5874] usb 7-1: USB disconnect, device number 3 [ 254.913315][ T8097] loop6: detected capacity change from 0 to 2048 [ 254.971143][ T6179] logitech-djreceiver 0003:046D:C532.0005: item fetching failed at offset 3/7 [ 254.985904][ T6179] logitech-djreceiver 0003:046D:C532.0005: logi_dj_probe: parse failed [ 254.994930][ T6179] logitech-djreceiver: probe of 0003:046D:C532.0005 failed with error -22 [ 255.018901][ T8097] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.806020][ T6179] usb 8-1: USB disconnect, device number 3 [ 255.865814][ T8106] loop4: detected capacity change from 0 to 512 [ 255.873706][ T8106] ext4: Unknown parameter 'noacl' [ 256.069199][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.089867][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.352103][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.583714][ T8125] loop6: detected capacity change from 0 to 512 [ 256.634841][ T8125] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 256.740372][ T8125] EXT4-fs (loop6): invalid journal inode [ 256.746195][ T8125] EXT4-fs (loop6): can't get journal size [ 256.772578][ T8129] loop4: detected capacity change from 0 to 1024 [ 256.841239][ T8125] EXT4-fs (loop6): 1 truncate cleaned up [ 256.848493][ T8125] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.903071][ T8129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 256.930673][ T8136] loop7: detected capacity change from 0 to 1024 [ 256.935274][ T8129] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.047035][ T8136] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 257.104038][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 257.125158][ T8136] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.214319][ T8136] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 257.266061][ T8136] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2367 with max blocks 1 with error 28 [ 257.306275][ T8136] EXT4-fs (loop7): This should not happen!! Data will be lost [ 257.306275][ T8136] [ 257.312241][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.346102][ T8136] EXT4-fs (loop7): Total free blocks count 0 [ 257.362024][ T8136] EXT4-fs (loop7): Free/Dirty block details [ 257.410185][ T8136] EXT4-fs (loop7): free_blocks=4293918720 [ 257.431551][ T8136] EXT4-fs (loop7): dirty_blocks=16 [ 257.485030][ T8136] EXT4-fs (loop7): Block reservation details [ 257.505401][ T8136] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 257.558638][ T8147] loop4: detected capacity change from 0 to 8192 [ 257.660341][ T8147] loop4: p1 p3 p4 [ 257.662364][ T7314] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 257.696396][ T8147] loop4: partition table partially beyond EOD, truncated [ 257.727946][ T8147] loop4: p1 start 4294967295 is beyond EOD, truncated [ 257.786660][ T8147] loop4: p4 size 3590325120 extends beyond EOD, truncated [ 257.845130][ T8156] loop6: detected capacity change from 0 to 256 [ 257.947850][ T8156] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 257.998358][ T5785] cgroup: fork rejected by pids controller in /syz0 [ 258.077888][ T8161] loop7: detected capacity change from 0 to 512 [ 258.147257][ T8161] EXT4-fs (loop7): Test dummy encryption mode enabled [ 258.199781][ T8161] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 258.240334][ T8161] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 258.277373][ T7691] udevd[7691]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 258.301545][ T8161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.320910][ T5931] udevd[5931]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 258.461147][ T8169] capability: warning: `syz.4.519' uses 32-bit capabilities (legacy support in use) [ 258.700141][ T8172] loop6: detected capacity change from 0 to 512 [ 259.559309][ T8175] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 259.570079][ T8103] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 259.815870][ T7314] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.903456][ T8187] loop4: detected capacity change from 0 to 16 [ 259.918363][ T8187] erofs: (device loop4): mounted with root inode @ nid 36. [ 260.067886][ T8185] loop6: detected capacity change from 0 to 1024 [ 260.307402][ T8185] ext4: Unknown parameter 'func' [ 261.968113][ T8201] loop4: detected capacity change from 0 to 1024 [ 261.978876][ T8199] loop6: detected capacity change from 0 to 512 [ 262.012199][ T8201] hfsplus: failed to load root directory [ 262.046283][ T8199] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 262.200117][ T8199] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.285530][ T8199] capability: warning: `syz.6.525' uses deprecated v2 capabilities in a way that may be insecure [ 262.319098][ T3467] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.155273][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 263.213100][ T3467] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.226949][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.239213][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.248009][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.265046][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.276023][ T8214] loop4: detected capacity change from 0 to 8 [ 263.284344][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 263.293395][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.337318][ T8214] SQUASHFS error: lzo decompression failed, data probably corrupt [ 263.368513][ T8214] SQUASHFS error: Failed to read block 0x91: -5 [ 263.375578][ T8214] SQUASHFS error: Unable to read metadata cache entry [8f] [ 263.382964][ T8214] SQUASHFS error: Unable to read inode 0x11f [ 263.414469][ T8216] loop6: detected capacity change from 0 to 1024 [ 263.425179][ T8216] EXT4-fs: Ignoring removed oldalloc option [ 263.453268][ T3467] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.724630][ T8216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 264.067708][ T8216] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.203753][ T3467] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.240623][ T8216] EXT4-fs (loop6): re-mounted 00000000-0000-0006-0000-000000000000 ro. [ 264.454856][ T8226] loop7: detected capacity change from 0 to 512 [ 264.546278][ T8226] EXT4-fs (loop7): Test dummy encryption mode enabled [ 264.564450][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 264.716358][ T8226] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 264.834754][ T8226] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 264.883447][ T8226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.440184][ T8229] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 267.449193][ T50] Bluetooth: hci2: command tx timeout [ 267.972539][ T8236] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 268.248036][ T7314] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.342450][ T8246] loop6: detected capacity change from 0 to 2048 [ 268.487480][ T8246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.510047][ T8246] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.790458][ T8266] cgroup: Invalid name [ 268.974746][ T8211] chnl_net:caif_netlink_parms(): no params data found [ 269.559919][ T50] Bluetooth: hci2: command tx timeout [ 269.897950][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.195737][ T8277] loop4: detected capacity change from 0 to 512 [ 270.258201][ T8279] loop6: detected capacity change from 0 to 8 [ 270.297526][ T8279] SQUASHFS error: lzo decompression failed, data probably corrupt [ 270.327010][ T8279] SQUASHFS error: Failed to read block 0x91: -5 [ 270.356313][ T8279] SQUASHFS error: Unable to read metadata cache entry [8f] [ 270.363980][ T8277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.380441][ T8277] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.418135][ T8279] SQUASHFS error: Unable to read inode 0x11f [ 271.241723][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.320131][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.334406][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.342685][ T8211] bridge_slave_0: entered allmulticast mode [ 271.394846][ T8211] bridge_slave_0: entered promiscuous mode [ 271.436698][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.463272][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.478697][ T8211] bridge_slave_1: entered allmulticast mode [ 271.484907][ T8299] loop4: detected capacity change from 0 to 512 [ 271.496640][ T8211] bridge_slave_1: entered promiscuous mode [ 271.504404][ T8299] EXT4-fs (loop4): Test dummy encryption mode enabled [ 271.548062][ T8299] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 271.561894][ T8299] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 271.571728][ T8299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.590077][ T50] Bluetooth: hci2: command tx timeout [ 272.674070][ T8311] loop7: detected capacity change from 0 to 2048 [ 272.688954][ T8310] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 272.952824][ T8311] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.210076][ T8253] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 273.544954][ T7314] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.676961][ T50] Bluetooth: hci2: command tx timeout [ 273.733445][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.858667][ T8211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.873703][ T8325] cgroup: Invalid name [ 273.897307][ T8211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.093212][ T8211] team0: Port device team_slave_0 added [ 275.103074][ T8336] loop6: detected capacity change from 0 to 8 [ 275.157250][ T8336] SQUASHFS error: lzo decompression failed, data probably corrupt [ 275.181488][ T8336] SQUASHFS error: Failed to read block 0x91: -5 [ 275.182253][ T8211] team0: Port device team_slave_1 added [ 275.194976][ T8336] SQUASHFS error: Unable to read metadata cache entry [8f] [ 275.212813][ T8336] SQUASHFS error: Unable to read inode 0x11f [ 276.047136][ T8211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.100935][ T8211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.182782][ T8211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.196221][ T8211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.203895][ T8211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.390688][ T8352] loop7: detected capacity change from 0 to 2048 [ 276.756149][ T8352] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.002773][ T8211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.050411][ T8358] loop4: detected capacity change from 0 to 512 [ 277.088725][ T8359] binder_alloc: 8349: binder_alloc_buf, no vma [ 277.176790][ T7314] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.235828][ T8358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.313661][ T8358] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.425671][ T8366] loop6: detected capacity change from 0 to 736 [ 277.509894][ T3467] hsr_slave_0: left promiscuous mode [ 277.532332][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.547803][ T3467] hsr_slave_1: left promiscuous mode [ 277.559011][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.582713][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.635829][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.667204][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.700825][ T3467] bridge_slave_1: left allmulticast mode [ 277.730155][ T5875] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 277.736731][ T3467] bridge_slave_1: left promiscuous mode [ 277.745926][ T8373] cgroup: Invalid name [ 277.752914][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.809507][ T3467] bridge_slave_0: left allmulticast mode [ 277.819277][ T3467] bridge_slave_0: left promiscuous mode [ 277.832919][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.947587][ T3467] veth1_macvtap: left promiscuous mode [ 277.959984][ T3467] veth0_macvtap: left promiscuous mode [ 277.973666][ T3467] veth1_vlan: left promiscuous mode [ 277.993512][ T5875] usb 8-1: Using ep0 maxpacket: 32 [ 277.999741][ T3467] veth0_vlan: left promiscuous mode [ 278.009164][ T5875] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 278.019869][ T5875] usb 8-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 278.030690][ T5875] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 278.051734][ T5875] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 278.522674][ T8376] loop6: detected capacity change from 0 to 16 [ 278.573260][ T5875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.746006][ T8376] erofs: (device loop6): mounted with root inode @ nid 36. [ 278.835438][ T5875] usb 8-1: Product: syz [ 278.974171][ T5875] usb 8-1: Manufacturer: syz [ 279.092550][ T5875] usb 8-1: SerialNumber: syz [ 279.309082][ T5875] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 279.333082][ T5875] imon 8-1:155.0: unable to initialize intf0, err -19 [ 279.350301][ T5875] imon:imon_probe: failed to initialize context! [ 279.369878][ T5875] imon 8-1:155.0: unable to register, err -19 [ 279.622181][ T8389] loop4: detected capacity change from 0 to 8 [ 279.649427][ T8389] SQUASHFS error: lzo decompression failed, data probably corrupt [ 279.659430][ T8389] SQUASHFS error: Failed to read block 0x91: -5 [ 279.666195][ T8389] SQUASHFS error: Unable to read metadata cache entry [8f] [ 279.696573][ T8389] SQUASHFS error: Unable to read inode 0x11f [ 279.970195][ T5856] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 280.340101][ T5856] usb 7-1: Using ep0 maxpacket: 16 [ 280.398357][ T5856] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 280.458779][ T5856] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.469912][ T5856] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.479774][ T5856] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 280.492926][ T5856] usb 7-1: config 7 interface 0 has no altsetting 0 [ 280.499607][ T5856] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 280.509358][ T5856] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.532623][ T8395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.554018][ T8395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.565521][ T8395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.575834][ T8395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.600679][ T8395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.610405][ T8395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.798296][ T6179] usb 8-1: USB disconnect, device number 4 [ 281.882908][ T5856] input: HID 0458:5010 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.0/0003:0458:5010.0006/input/input12 [ 282.013959][ T5856] kye 0003:0458:5010.0006: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.6-1/input0 [ 282.086747][ T5856] usb 7-1: USB disconnect, device number 4 [ 282.125469][ T8409] loop7: detected capacity change from 0 to 16 [ 282.201427][ T8409] erofs: (device loop7): mounted with root inode @ nid 36. [ 282.204510][ T8410] binder_alloc: 8403: binder_alloc_buf, no vma [ 282.243467][ T8407] fido_id[8407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 282.305577][ T3467] team0 (unregistering): Port device team_slave_1 removed [ 282.437900][ T3467] team0 (unregistering): Port device team_slave_0 removed [ 283.060323][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.323001][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.387197][ T8419] cgroup: Invalid name [ 284.634388][ T8429] loop7: detected capacity change from 0 to 1024 [ 284.697200][ T8429] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 284.739903][ T8429] EXT4-fs (loop7): Test dummy encryption mode enabled [ 284.812288][ T8429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 285.057171][ T8429] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 285.212873][ T7314] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.320662][ T8447] cgroup: Invalid name [ 286.596570][ T3467] bond0 (unregistering): Released all slaves [ 286.631598][ T8461] loop7: detected capacity change from 0 to 1024 [ 286.652204][ T8461] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 286.666184][ T8461] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 286.690114][ T8461] EXT4-fs (loop7): orphan cleanup on readonly fs [ 286.723968][ T8461] Quota error (device loop7): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 286.744171][ T8211] hsr_slave_0: entered promiscuous mode [ 286.750312][ T8461] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 286.762114][ T8461] EXT4-fs error (device loop7): ext4_acquire_dquot:6940: comm syz.7.588: Failed to acquire dquot type 0 [ 286.762188][ T8211] hsr_slave_1: entered promiscuous mode [ 286.780305][ T8211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.790177][ T8461] Quota error (device loop7): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 286.793530][ T8211] Cannot create hsr debugfs directory [ 286.800553][ T8461] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 286.816186][ T8461] EXT4-fs error (device loop7): ext4_acquire_dquot:6940: comm syz.7.588: Failed to acquire dquot type 0 [ 286.840070][ T8461] EXT4-fs error (device loop7): ext4_free_blocks:6676: comm syz.7.588: Freeing blocks not in datazone - block = 0, count = 4096 [ 286.893673][ T8461] Quota error (device loop7): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 286.948663][ T8461] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 286.989101][ T8461] EXT4-fs error (device loop7): ext4_acquire_dquot:6940: comm syz.7.588: Failed to acquire dquot type 0 [ 287.040468][ T8461] EXT4-fs (loop7): 1 orphan inode deleted [ 287.091181][ T8461] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.376661][ T7314] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.626105][ T8476] cgroup: Invalid name [ 288.797985][ T8486] binder_alloc: 8485: binder_alloc_buf, no vma [ 289.811116][ T8521] cgroup: Invalid name [ 291.380373][ T5875] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 291.641639][ T5875] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.652922][ T5875] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.663453][ T5875] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 291.673340][ T5875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.684874][ T5875] usb 8-1: config 0 descriptor?? [ 292.138058][ T5875] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 292.152520][ T5875] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 292.190658][ T5875] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.0007/input/input13 [ 292.270284][ T5875] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 292.499760][ T5856] usb 8-1: USB disconnect, device number 5 [ 293.543566][ T8211] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 293.555756][ T8211] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.629926][ T8211] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.666705][ T8211] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.698867][ T8551] loop7: detected capacity change from 0 to 128 [ 293.717941][ T8551] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 293.775989][ T8551] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 293.793171][ T8551] ext2 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.878728][ T27] audit: type=1800 audit(1760840770.179:22): pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.618" name="bus" dev="loop7" ino=12 res=0 errno=0 [ 293.972224][ T7314] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 293.983742][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 294.167101][ T8211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.279113][ T8211] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.411940][ T8321] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.419219][ T8321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.537790][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.545073][ T8321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.930769][ T8584] loop7: detected capacity change from 0 to 2048 [ 295.306509][ T8584] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.769489][ T7314] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.260580][ T8604] loop7: detected capacity change from 0 to 128 [ 296.307122][ T8604] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 296.373589][ T8604] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 296.441820][ T8604] ext2 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.587136][ T8211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.656215][ T27] audit: type=1800 audit(1760840772.979:23): pid=8604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.630" name="bus" dev="loop7" ino=12 res=0 errno=0 [ 296.767975][ T7314] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.791673][ T8623] loop6: detected capacity change from 0 to 8 [ 296.849199][ T8211] veth0_vlan: entered promiscuous mode [ 296.860485][ T8623] SQUASHFS error: lzo decompression failed, data probably corrupt [ 296.868403][ T8623] SQUASHFS error: Failed to read block 0x91: -5 [ 296.924478][ T8623] SQUASHFS error: Unable to read metadata cache entry [8f] [ 296.945146][ T8211] veth1_vlan: entered promiscuous mode [ 296.956295][ T8623] SQUASHFS error: Unable to read inode 0x11f [ 297.072643][ T8211] veth0_macvtap: entered promiscuous mode [ 297.147764][ T8211] veth1_macvtap: entered promiscuous mode [ 297.238924][ T8211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.279872][ T8211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.306428][ T8211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.337657][ T8211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.358080][ T8211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.379247][ T8211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.429424][ T8211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.465378][ T8211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.500059][ T8211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.534215][ T8211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.559900][ T8211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.580176][ T8211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.591357][ T8211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.625673][ T8211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.652258][ T8645] loop7: detected capacity change from 0 to 128 [ 297.692850][ T8645] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 297.703046][ T8211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.721054][ T8211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.745843][ T8211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.761173][ T8645] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.791037][ T8211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.851804][ T8645] ext2 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.954217][ T8654] loop4: detected capacity change from 0 to 8 [ 298.005703][ T27] audit: type=1800 audit(1760840774.329:24): pid=8645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.645" name="bus" dev="loop7" ino=13 res=0 errno=0 [ 298.013530][ T8654] SQUASHFS error: lzo decompression failed, data probably corrupt [ 298.112482][ T8654] SQUASHFS error: Failed to read block 0x91: -5 [ 298.119296][ T8654] SQUASHFS error: Unable to read metadata cache entry [8f] [ 298.172109][ T8654] SQUASHFS error: Unable to read inode 0x11f [ 298.186787][ T8321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.218400][ T8321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.248452][ T7314] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.433239][ T8321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.509348][ T8321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.861401][ T8673] loop0: detected capacity change from 0 to 1024 [ 298.935569][ T8676] syzkaller0: entered promiscuous mode [ 298.954936][ T8673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 298.955519][ T8676] syzkaller0: entered allmulticast mode [ 299.008719][ T8673] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.203500][ T8211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 299.228120][ T8691] loop4: detected capacity change from 0 to 128 [ 299.270102][ T8691] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 299.326734][ T8691] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.400079][ T8691] ext2 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.589580][ T27] audit: type=1800 audit(1760840775.909:25): pid=8691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.659" name="bus" dev="loop4" ino=13 res=0 errno=0 [ 299.714258][ T6173] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 300.781456][ T8713] loop7: detected capacity change from 0 to 512 [ 300.939888][ T8713] EXT4-fs: Ignoring removed bh option [ 301.332375][ T8713] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 301.370853][ T8713] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.665: bad orphan inode 131083 [ 301.392559][ T8713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.622207][ T7314] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.787735][ T8720] loop6: detected capacity change from 0 to 1024 [ 302.008379][ T8720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 302.092273][ T8720] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.163768][ T8735] loop0: detected capacity change from 0 to 128 [ 302.259966][ T8735] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 302.311749][ T8735] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.426425][ T8735] ext2 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.573867][ T27] audit: type=1800 audit(1760840778.899:26): pid=8735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.672" name="bus" dev="loop0" ino=13 res=0 errno=0 [ 302.612143][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 302.707636][ T8211] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.400076][ T6681] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 303.623899][ T6681] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.673700][ T6681] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.712831][ T6681] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 303.733394][ T6681] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.765577][ T6681] usb 8-1: config 0 descriptor?? [ 303.780885][ T8775] loop4: detected capacity change from 0 to 1024 [ 303.863402][ T8775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 303.932226][ T8775] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.145332][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 304.230836][ T6681] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 304.255069][ T8785] loop6: detected capacity change from 0 to 128 [ 304.265751][ T6681] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 304.278367][ T6681] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.0008/input/input14 [ 304.299007][ T8785] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 304.314156][ T6681] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 304.430719][ T8785] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 304.505699][ T6175] usb 8-1: USB disconnect, device number 6 [ 304.556343][ T8785] ext2 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.729185][ T8791] fido_id[8791]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 304.745260][ T27] audit: type=1800 audit(1760840781.069:27): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.686" name="bus" dev="loop6" ino=13 res=0 errno=0 [ 305.097288][ T6912] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 305.843506][ T8816] loop4: detected capacity change from 0 to 16 [ 305.916191][ T8816] erofs: (device loop4): mounted with root inode @ nid 36. [ 306.788043][ T8819] loop4: detected capacity change from 0 to 128 [ 306.834540][ T8819] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 306.868565][ T8819] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 306.888104][ T8819] ext2 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.959508][ T27] audit: type=1800 audit(1760840783.279:28): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.697" name="bus" dev="loop4" ino=13 res=0 errno=0 [ 307.024375][ T6173] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 309.353983][ T8832] loop0: detected capacity change from 0 to 1024 [ 309.438101][ T8832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 309.483104][ T8832] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.625098][ T8846] loop4: detected capacity change from 0 to 128 [ 309.660278][ T8846] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 309.745691][ T8211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 309.785616][ T8846] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 309.870998][ T8846] ext2 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.036057][ T27] audit: type=1800 audit(1760840786.349:29): pid=8846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.706" name="bus" dev="loop4" ino=13 res=0 errno=0 [ 310.175834][ T6173] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.632167][ T8878] loop4: detected capacity change from 0 to 1024 [ 310.748258][ T8878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 310.800386][ T8878] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.016512][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 314.704659][ T8943] loop0: detected capacity change from 0 to 512 [ 314.716739][ T8943] EXT4-fs: Ignoring removed bh option [ 314.750778][ T8943] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 315.012088][ T8943] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.724: bad orphan inode 131083 [ 315.043867][ T8943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.097973][ T8943] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.724: iget: bad extra_isize 1312 (inode size 256) [ 315.339695][ T8949] loop4: detected capacity change from 0 to 1024 [ 315.373116][ T8211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.426627][ T8949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 315.500133][ T8949] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.688607][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 316.215136][ T8978] loop4: detected capacity change from 0 to 512 [ 316.254241][ T8978] EXT4-fs (loop4): Test dummy encryption mode enabled [ 316.288386][ T8978] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 316.305285][ T8978] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 316.317723][ T8978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.115239][ T8987] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 317.137097][ T8945] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 317.344411][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.530352][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.536733][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.856666][ T8996] loop4: detected capacity change from 0 to 512 [ 317.868243][ T8996] EXT4-fs: Ignoring removed bh option [ 317.901496][ T8996] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 317.975179][ T8996] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.738: bad orphan inode 131083 [ 318.001559][ T8996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.044373][ T8996] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.738: iget: bad extra_isize 1312 (inode size 256) [ 318.517449][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.186708][ T9004] loop4: detected capacity change from 0 to 2048 [ 319.254185][ T9004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.818483][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.937665][ T9008] loop4: detected capacity change from 0 to 1024 [ 319.964816][ T9008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 319.981239][ T9008] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.066233][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 321.902464][ T9027] loop0: detected capacity change from 0 to 512 [ 321.916563][ T9027] EXT4-fs (loop0): Test dummy encryption mode enabled [ 321.927427][ T9027] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 321.954486][ T9027] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 321.981499][ T9031] loop7: detected capacity change from 0 to 16 [ 322.002715][ T9031] erofs: (device loop7): mounted with root inode @ nid 36. [ 322.022038][ T9027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.313558][ T9037] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 323.526003][ T8211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.614579][ T9048] loop7: detected capacity change from 0 to 128 [ 323.692394][ T9048] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 323.750444][ T9048] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 323.750646][ T9054] loop0: detected capacity change from 0 to 1024 [ 323.767132][ T9048] netlink: 104 bytes leftover after parsing attributes in process `syz.7.749'. [ 323.837750][ T7314] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 323.939567][ T9054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 323.990058][ T9054] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.288448][ T8211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 324.707039][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 325.922920][ T9086] loop7: detected capacity change from 0 to 16 [ 325.931219][ T9086] erofs: (device loop7): mounted with root inode @ nid 36. [ 326.651391][ T27] audit: type=1326 audit(1760840802.979:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9099 comm="syz.6.763" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f89f8efc9 code=0x0 [ 328.666777][ T9146] loop7: detected capacity change from 0 to 16 [ 328.682038][ T9146] erofs: (device loop7): mounted with root inode @ nid 36. [ 328.743736][ T5931] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 329.078054][ T9150] loop6: detected capacity change from 0 to 8 [ 329.102033][ T9150] SQUASHFS error: lzo decompression failed, data probably corrupt [ 329.111113][ T9150] SQUASHFS error: Failed to read block 0x91: -5 [ 329.117423][ T9150] SQUASHFS error: Unable to read metadata cache entry [8f] [ 329.126283][ T9150] SQUASHFS error: Unable to read inode 0x11f [ 329.499283][ T27] audit: type=1326 audit(1760840805.819:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.7.779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9ba18efc9 code=0x0 [ 333.156926][ T9162] sit0: entered allmulticast mode [ 333.160436][ T27] audit: type=1326 audit(1760840809.479:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.6.791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f89f8efc9 code=0x0 [ 333.180377][ T9165] sit0: entered promiscuous mode [ 334.010749][ T9203] Driver unsupported XDP return value 0 on prog (id 194) dev N/A, expect packet loss! [ 335.021990][ T27] audit: type=1326 audit(1760840811.349:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.6.809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f89f8efc9 code=0x0 [ 339.284830][ T27] audit: type=1326 audit(1760840815.599:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.6.824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f89f8efc9 code=0x0 [ 342.066400][ T27] audit: type=1326 audit(1760840818.389:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.7.837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9ba18efc9 code=0x0 [ 346.358015][ T27] audit: type=1326 audit(1760840822.679:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9374 comm="syz.0.852" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fade538efc9 code=0x0 [ 348.959049][ T9413] syzkaller0: entered promiscuous mode [ 348.975014][ T9413] syzkaller0: entered allmulticast mode [ 350.763220][ T27] audit: type=1326 audit(1760840827.089:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9441 comm="syz.7.867" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9ba18efc9 code=0x0 [ 352.510023][ T785] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 352.710951][ T785] usb 8-1: Using ep0 maxpacket: 32 [ 352.717207][ T785] usb 8-1: too many configurations: 17, using maximum allowed: 8 [ 352.727100][ T785] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.735388][ T785] usb 8-1: config 0 has no interface number 0 [ 352.743633][ T785] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.751887][ T785] usb 8-1: config 0 has no interface number 0 [ 352.759677][ T785] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.767959][ T785] usb 8-1: config 0 has no interface number 0 [ 352.798415][ T785] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.808880][ T785] usb 8-1: config 0 has no interface number 0 [ 352.826064][ T785] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.838432][ T785] usb 8-1: config 0 has no interface number 0 [ 352.846178][ T785] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.854492][ T785] usb 8-1: config 0 has no interface number 0 [ 352.862049][ T785] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.870149][ T785] usb 8-1: config 0 has no interface number 0 [ 352.877747][ T785] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.885899][ T785] usb 8-1: config 0 has no interface number 0 [ 352.898258][ T785] usb 8-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 352.908342][ T785] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.916937][ T785] usb 8-1: Product: syz [ 352.926140][ T785] usb 8-1: Manufacturer: syz [ 352.930991][ T785] usb 8-1: SerialNumber: syz [ 352.938732][ T785] usb 8-1: config 0 descriptor?? [ 352.969961][ T785] etas_es58x 8-1:0.2: Starting syz syz (Serial Number syz) [ 353.177895][ T785] etas_es58x 8-1:0.2: could not parse product info: '' [ 353.860484][ T9461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.875302][ T9461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.658808][ T9471] syzkaller1: entered promiscuous mode [ 354.687937][ T9471] syzkaller1: entered allmulticast mode [ 354.745170][ T9476] loop6: detected capacity change from 0 to 2048 [ 354.893418][ T9476] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.412836][ T27] audit: type=1326 audit(1760840831.729:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9487 comm="syz.4.878" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33b818efc9 code=0x0 [ 355.451405][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.466668][ T6179] usb 8-1: USB disconnect, device number 7 [ 355.476688][ T6179] etas_es58x 8-1:0.2: Disconnecting syz syz [ 357.793396][ T5788] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 357.852995][ T9533] loop4: detected capacity change from 0 to 2048 [ 357.871500][ T27] audit: type=1326 audit(1760840834.189:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.6.891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f89f8efc9 code=0x0 [ 357.909318][ T9533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.067611][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.243815][ T9548] binder_alloc: 9547: pid 9547 spamming oneway? 1 buffers allocated for a total size of 5240 [ 358.979076][ T5788] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 359.240204][ T9584] loop7: detected capacity change from 0 to 16 [ 359.281180][ T9584] erofs: (device loop7): mounted with root inode @ nid 36. [ 359.351531][ T5931] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 359.369583][ T9581] loop4: detected capacity change from 0 to 2048 [ 359.440451][ T9581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.549467][ T9590] loop0: detected capacity change from 0 to 128 [ 359.605669][ T9590] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 359.642358][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.658118][ T9590] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 359.711604][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.901'. [ 359.742760][ T9590] netlink: 104 bytes leftover after parsing attributes in process `syz.0.901'. [ 359.887138][ T8211] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.900443][ T6175] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 359.967595][ T9601] loop6: detected capacity change from 0 to 512 [ 359.977010][ T9601] EXT4-fs (loop6): Test dummy encryption mode enabled [ 359.986438][ T9601] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 360.049602][ T9601] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 360.117608][ T9601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.129909][ T6175] usb 8-1: Using ep0 maxpacket: 8 [ 360.142580][ T6175] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 360.161790][ T6175] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.185182][ T6175] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.238289][ T6175] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.269180][ T6175] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.398778][ T27] audit: type=1326 audit(1760840836.709:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9611 comm="syz.4.906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33b818efc9 code=0x0 [ 360.462743][ T9615] loop0: detected capacity change from 0 to 128 [ 360.504706][ T9615] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 360.526834][ T6175] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 360.536929][ T6175] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.552084][ T9615] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 360.579979][ T9615] ext2 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.666942][ T27] audit: type=1800 audit(1760840836.989:41): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.907" name="bus" dev="loop0" ino=13 res=0 errno=0 [ 360.745083][ T8211] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 360.788293][ T6175] usb 8-1: usb_control_msg returned -32 [ 360.796852][ T9601] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 360.918864][ T6175] usbtmc 8-1:16.0: can't read capabilities [ 360.951158][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.282861][ T9632] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 361.334291][ T9639] loop4: detected capacity change from 0 to 128 [ 361.405849][ T9639] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.479272][ T9639] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 361.495155][ T5837] usb 8-1: USB disconnect, device number 8 [ 361.578789][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.912'. [ 361.625315][ T9639] netlink: 104 bytes leftover after parsing attributes in process `syz.4.912'. [ 361.748976][ T6173] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.824592][ T5788] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 361.835141][ T5788] Bluetooth: hci1: Injecting HCI hardware error event [ 361.852216][ T50] Bluetooth: hci1: hardware error 0x00 [ 362.126191][ T9660] loop0: detected capacity change from 0 to 128 [ 362.173608][ T9660] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 362.225688][ T9660] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 362.237789][ T9664] loop7: detected capacity change from 0 to 512 [ 362.239880][ T785] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 362.285925][ T9660] ext2 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.297940][ T9664] EXT4-fs (loop7): Test dummy encryption mode enabled [ 362.352162][ T9664] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 362.419093][ T9664] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 362.428654][ T9664] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.459279][ T27] audit: type=1800 audit(1760840838.779:42): pid=9660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.916" name="bus" dev="loop0" ino=13 res=0 errno=0 [ 362.533544][ T785] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 362.579987][ T785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.621317][ T785] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 362.652405][ T785] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 362.712337][ T8211] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 362.725152][ T785] usb 5-1: Manufacturer: syz [ 362.765031][ T785] usb 5-1: config 0 descriptor?? [ 362.969929][ T785] rc_core: IR keymap rc-hauppauge not found [ 362.988067][ T785] Registered IR keymap rc-empty [ 363.028187][ T9664] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 363.031988][ T785] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 363.124889][ T785] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 363.185580][ T7314] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.258258][ T785] usb 5-1: USB disconnect, device number 6 [ 363.462524][ T27] audit: type=1326 audit(1760840839.789:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.7.920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9ba18efc9 code=0x0 [ 364.013493][ T50] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 364.311421][ T9705] netlink: 'syz.4.925': attribute type 1 has an invalid length. [ 364.494563][ T9709] loop6: detected capacity change from 0 to 128 [ 364.526402][ T9713] loop4: detected capacity change from 0 to 512 [ 364.545139][ T9713] EXT4-fs (loop4): Test dummy encryption mode enabled [ 364.554399][ T9709] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 364.570828][ T9713] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 364.603569][ T9713] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 364.625025][ T9713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.655454][ T9709] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 364.679977][ T9709] ext2 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.693030][ T9720] loop7: detected capacity change from 0 to 16 [ 364.772414][ T27] audit: type=1800 audit(1760840841.099:44): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.926" name="bus" dev="loop6" ino=13 res=0 errno=0 [ 364.835031][ T9720] erofs: (device loop7): mounted with root inode @ nid 36. [ 364.890717][ T6912] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.352798][ T9713] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 365.635978][ T6173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.866159][ T27] audit: type=1326 audit(1760840843.189:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9755 comm="syz.4.935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33b818efc9 code=0x0 [ 366.984601][ T9762] program syz.6.936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.142637][ T9764] loop6: detected capacity change from 0 to 128 [ 367.155781][ T9764] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 367.177143][ T9764] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 367.204877][ T9764] ext2 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.338870][ T27] audit: type=1800 audit(1760840843.659:46): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.938" name="bus" dev="loop6" ino=13 res=0 errno=0 [ 367.467481][ T6912] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.562547][ T9770] loop7: detected capacity change from 0 to 512 [ 367.585759][ T9770] EXT4-fs (loop7): Test dummy encryption mode enabled [ 367.614541][ T9770] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 367.627424][ T9770] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 367.637191][ T9770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.752055][ T9774] loop6: detected capacity change from 0 to 2048 [ 367.839194][ T9774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.943513][ T6912] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.329485][ T9777] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 368.338067][ T9777] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 368.558461][ T7314] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.575375][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 368.862027][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 368.924641][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 369.060843][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.161408][ T9] usb 5-1: config 0 descriptor?? [ 369.187054][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 369.573756][ T9802] loop7: detected capacity change from 0 to 128 [ 369.605900][ T9802] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 369.654226][ T9802] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.674749][ T9802] ext2 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.716914][ T27] audit: type=1800 audit(1760840846.039:47): pid=9802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.948" name="bus" dev="loop7" ino=13 res=0 errno=0 [ 369.807002][ T7314] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.807194][ T9809] loop0: detected capacity change from 0 to 2048 [ 369.864763][ T9809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.017251][ T8211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.387801][ T9824] loop0: detected capacity change from 0 to 512 [ 370.435026][ T9827] loop7: detected capacity change from 0 to 16 [ 370.442687][ T9824] EXT4-fs (loop0): Test dummy encryption mode enabled [ 370.480345][ T9827] erofs: (device loop7): mounted with root inode @ nid 36. [ 370.482003][ T9824] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 370.541664][ T9824] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 370.607532][ T9824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.023955][ T9824] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 371.173323][ T8211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.350228][ T9] gspca_sonixj: reg_w1 err -71 [ 372.355178][ T9] sonixj: probe of 5-1:0.0 failed with error -71 [ 372.383921][ T9] usb 5-1: USB disconnect, device number 7 [ 372.540068][ T28] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 372.583354][ T9854] loop6: detected capacity change from 0 to 128 [ 372.619914][ T9854] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 372.676930][ T9854] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.740472][ T28] usb 8-1: Using ep0 maxpacket: 32 [ 372.756491][ T28] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.768818][ T28] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.779542][ T28] usb 8-1: config 0 interface 0 has no altsetting 0 [ 372.788783][ T28] usb 8-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 372.798429][ T28] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.806824][ T9854] ext2 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.844307][ T28] usb 8-1: config 0 descriptor?? [ 372.925825][ T27] audit: type=1800 audit(1760840849.249:48): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.959" name="bus" dev="loop6" ino=13 res=0 errno=0 [ 373.051818][ T6912] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.081823][ T9846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.103524][ T9846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.230374][ T27] audit: type=1326 audit(1760840849.549:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.6.961" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f89f8efc9 code=0x0 [ 373.254014][ T9846] tipc: Can't bind to reserved service type 1 [ 373.816967][ T9885] loop4: detected capacity change from 0 to 16 [ 373.840118][ T9885] erofs: (device loop4): mounted with root inode @ nid 36. [ 375.465944][ T9896] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 375.477762][ T9896] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 375.486234][ T9896] CPU: 1 PID: 9896 Comm: syz.6.967 Not tainted syzkaller #0 [ 375.493567][ T9896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 375.503668][ T9896] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 375.509247][ T9896] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e9 cb df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c8 cb df f9 4d 8b 24 24 48 83 c3 [ 375.528874][ T9896] RSP: 0018:ffffc900053d7a80 EFLAGS: 00010206 [ 375.534965][ T9896] RAX: 0000000000000005 RBX: ffff8880233f1980 RCX: 0000000000080000 [ 375.542955][ T9896] RDX: ffffc900141f2000 RSI: 00000000000007d8 RDI: 00000000000007d9 [ 375.550943][ T9896] RBP: 0000000000000001 R08: ffff88802b2af12f R09: 1ffff11005655e25 [ 375.558931][ T9896] R10: dffffc0000000000 R11: ffffed1005655e26 R12: 0000000000000028 [ 375.566924][ T9896] R13: dffffc0000000000 R14: ffff88802b2af000 R15: dffffc0000000000 [ 375.574955][ T9896] FS: 00007f9f881f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 375.583899][ T9896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.590511][ T9896] CR2: 000055555d6f25c8 CR3: 000000006d7e0000 CR4: 00000000003506e0 [ 375.598505][ T9896] Call Trace: [ 375.601804][ T9896] [ 375.604752][ T9896] pcl818_detach+0x66/0xd0 [ 375.609195][ T9896] comedi_device_detach_locked+0x172/0x710 [ 375.615032][ T9896] comedi_unlocked_ioctl+0xccc/0xfe0 [ 375.620344][ T9896] ? comedi_poll+0x8c0/0x8c0 [ 375.624986][ T9896] ? __fget_files+0x28/0x4d0 [ 375.629602][ T9896] ? bpf_lsm_file_ioctl+0x9/0x10 [ 375.634550][ T9896] ? security_file_ioctl+0x80/0xa0 [ 375.639687][ T9896] ? comedi_poll+0x8c0/0x8c0 [ 375.644303][ T9896] __se_sys_ioctl+0xfd/0x170 [ 375.648912][ T9896] do_syscall_64+0x55/0xb0 [ 375.653351][ T9896] ? clear_bhb_loop+0x40/0x90 [ 375.658048][ T9896] ? clear_bhb_loop+0x40/0x90 [ 375.662741][ T9896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.668653][ T9896] RIP: 0033:0x7f9f89f8efc9 [ 375.673090][ T9896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.692716][ T9896] RSP: 002b:00007f9f881f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.701148][ T9896] RAX: ffffffffffffffda RBX: 00007f9f8a1e5fa0 RCX: 00007f9f89f8efc9 [ 375.709177][ T9896] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 375.717167][ T9896] RBP: 00007f9f8a011f91 R08: 0000000000000000 R09: 0000000000000000 [ 375.725152][ T9896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.733145][ T9896] R13: 00007f9f8a1e6038 R14: 00007f9f8a1e5fa0 R15: 00007ffc2ca0d5c8 [ 375.741150][ T9896] [ 375.744189][ T9896] Modules linked in: [ 375.770979][ T9896] ---[ end trace 0000000000000000 ]--- [ 375.776533][ T9896] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 375.777387][ T28] usbhid 8-1:0.0: can't add hid device: -71 [ 375.791496][ T28] usbhid: probe of 8-1:0.0 failed with error -71 [ 375.798766][ T9896] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e9 cb df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c8 cb df f9 4d 8b 24 24 48 83 c3 [ 375.800408][ T28] usb 8-1: USB disconnect, device number 9 [ 375.856245][ T9896] RSP: 0018:ffffc900053d7a80 EFLAGS: 00010206 [ 375.880063][ T9896] RAX: 0000000000000005 RBX: ffff8880233f1980 RCX: 0000000000080000 [ 375.888116][ T9896] RDX: ffffc900141f2000 RSI: 00000000000007d8 RDI: 00000000000007d9 [ 375.906987][ T9896] RBP: 0000000000000001 R08: ffff88802b2af12f R09: 1ffff11005655e25 [ 375.942171][ T9896] R10: dffffc0000000000 R11: ffffed1005655e26 R12: 0000000000000028 [ 375.951977][ T9896] R13: dffffc0000000000 R14: ffff88802b2af000 R15: dffffc0000000000 [ 375.961097][ T9896] FS: 00007f9f881f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 375.978105][ T9896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.985111][ T9896] CR2: 00007fade55b3ad8 CR3: 000000006d7e0000 CR4: 00000000003506f0 [ 375.995107][ T9896] Kernel panic - not syncing: Fatal exception [ 376.001565][ T9896] Kernel Offset: disabled [ 376.005905][ T9896] Rebooting in 86400 seconds..