last executing test programs: 4m15.24158318s ago: executing program 1 (id=6): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x1, 0x0, 0x0, 0x67, 0x1ff, {0x5, 0x4, 0x1, 0x2, 0x69d2, 0x66, 0xfff, 0x2, 0x21, 0x8, @multicast1, @multicast2}}}}}}, 0x0) 4m14.942318244s ago: executing program 1 (id=7): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 4m14.653178198s ago: executing program 1 (id=9): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x0, 0x0, 0x0}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) pselect6(0x40, &(0x7f0000000240)={0x5, 0xa, 0x5, 0x2, 0x7fff8000000000, 0x8, 0xff, 0x810}, 0x0, &(0x7f00000002c0)={0x8, 0x1, 0xb, 0x4, 0x1, 0x2, 0x100, 0x480000000000000}, &(0x7f0000000300), 0x0) syz_emit_ethernet(0x12, &(0x7f00000003c0)={@link_local, @link_local, @void, {@llc={0x4, {@llc={0x42, 0x0, "97", '\x00'}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x20000028, &(0x7f00000004c0)}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000040)={@random="b9bc537df788", @random="50a245d5cde0", @void, {@mpls_mc={0x8848, {[], @llc={@snap={0xab, 0xaa, '(', "364d1f", 0x805}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r3 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8) read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000000140)={0x0, 0x1e, 0x4, @tid=r3}, &(0x7f00000000c0)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000080), 0xb504, 0x4000) rt_sigprocmask(0x1, &(0x7f0000000400)={[0x8001]}, &(0x7f0000000440), 0x8) rt_sigsuspend(&(0x7f0000000280)={[0x7fffffffffffffff]}, 0x8) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000040)={[{@jqfmt_vfsold}]}, 0xfe, 0x565, &(0x7f0000000f00)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5bY3Xboka5ZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo4dho5Acnt85bf3htLtuS2Nj47M8kknxf/fwk//9AHnklIn79OuJEoTnd6uraYqlcTpfz+FRt6fJUdXXt5MWl0kK6kF6amZ09/c7szPvvvduzsr557u/vP7370elbx9a/+/n+4dtJnImD+bHGcjyD642RyZjMX5OxOPPYidM9SGyQJP3OAF0Zydv5WGR9wKEYyVs98P/3VURsAEMq0f5hSNXHAfW5fY/mwf8ZDz7cmgA1l39067OR2Ls5N9q/nuyYGWXz3YkepJ+l8csfd25nW/TucwiAXV2/ERGnRkeb+78k7/+6d6qDcx5PQ/8HL87dbPzzVqvxT2F7/BMtxj8HWrTdbuze/gv3W1yW9OpT6mz890HL8e/2otXESB57aXPMN5ZcuFhOs77t5Yg4HmN7sviO9Zy3d6Zxev3eRrv0G8d/2ZalXx8L5vm4P7pn5zXzpVrpWctd9+BGxGstx7/Jdv0nLeo/ez3OdZjG0fTO6+2O7V7+52vjp4g3Wtb/oxWtJF+fHImW65NTm/fDVP2uaPbXzaO/tUu/3+XP6n//k8s/kTSu11afPo0f9/6TtjvW7f0/nny+GR7P910t1WrL0xHjySfN+2ceXVuP18/Pyn/82JP7v1b3/76I+KLD8t88crPtqYNQ//NPVf9PH7j38Zc/tEu/s/rf6lCP53s66f86zeCzvHYAAAAAAAAwaAoRcTCSQnE7XCgUi1vf7zgS+wvlSrV24kJl5dJ8bP5WdiLGCvWV7kMN34eYzr8PW4/PPBafjYjDEfHtyL7NeHGuUp7vd+EBAAAAAAAAAAAAAAAAAABgQBxo8/v/zO8jLS8Zf7E5BJ4rj/yG4bVr++/Fk56AgeT9H4ZXV+1/X+/zAbx43v9hSI31OwNAP3n/h+Gl/cPw0v5heGn/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FPnzp7Nto31h9fmsvj8ldWVxcqVk/NpdbG4tDJXnKssXy4uVCoL5bQ4V1na7e+VK5XL0zOxcnWqllZrU9XVtfNLlZVLtfMXl0oL6fnU04YAAAAAAAAAAAAAAAAAAACgWXV1bbFULqfLAgJdBUYHIxsCDYFbPWjdfe6YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDBvwEAAP//V9Q1fg==") r6 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r6, &(0x7f0000000940)='2', 0x1, 0x8000c61) fallocate(r6, 0x8, 0x0, 0x10000) ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f00000000c0)) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x8) 4m12.457507642s ago: executing program 1 (id=16): syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x558, &(0x7f0000000100)="$eJzs3c1vI2cZAPBnnDi76QZioIeC1A/RStkKam+6tI04tEVC3CqByn2Jst4oWidexU7ZRCvY/QNQJYSg4tYTFyT+ACTUG1eEVAkunDggUIFdOFQIOmjGkw1Oxjhp4rhr/37Sm/me53n98Xo888YTwNR6JiJej4iZiHg+IhaL+ZWixN1eydZ7cP/OWlaSSNM3/5ZEUszLVkuKkrlUbHaxNyjV2d27udpqNbeL6UZ381ajs7v3wsbm6npzvbl19eryyyuvrLy0cqVk69mjs+YPz7jXN5XV69Wv/+nHb//sG6/+6svf/eO1v1z+XpbvQrF8vx6lLg9cMlTvMalmj8VDWfbbH3+XnygzRX2qQ9c88gQBADAG2TH+ZyPii/nx/2LMlB1bD5CMNDMAAADgrKSvLcS/k4gUAAAAmFiVvA9sUqkXfQEWolKp13t9eB+Pxyqtdqf7pRvtna3rvb6ytahWbmy0mlfmen1qa1FNsunlfPxg+sWH00lfH+AfLc7ny+tr7db18Z32AAAAgKly6dD3/38u9r7//x/30jRNzy1BAAAA4GzUxp0AAAAAMHJHv/+/O5Y8AAAAgNFx/R8AAAAm2jffeCMr6YP7d9ZmIuL6W7s7N9tv/TqanZv1zZ21+lp7+1Z9vd1eb6UXIjaH7a/Vbt/6Smzt3G50m51uo7O7d22zvbPVvbbRdwtsAAAA4Bx95un3fp9ExN2vzuclM5f9mRmwQU1/AZgUlRGsCTwaBn3MHzU70jyA8+ddDdOr2hskw9f8l9/8hwk1rAEY2HnnN6cK60YiAABwjpY+X379f/bg3AAwoVzVh+lVev1fowBTwfV/mF7VE/QABCbP/DHWudjfBeCgu8Cxr//vX+qf80MgAAAwJgt5SSr14rT/QlQ+THuiFtXkxkareSUiPh0Rv1usXsiml/Mtk+P80wAAAAAAAAAAAAAAAAAAAAAAAAAAkP8qdxIpAAAAMNEiKn9Oiht6LS0+t3D4/MBc8uFiPszvDvDmT26vdrvby9n8vxfzI7rvFPNfPMmZBzcZBgAAgFHJv6f/oBgujzsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbNg/t31vbLecb94GsRUSuLPxsX8+HFqEbEY/9IYnZ/o6cjkoiYOYP4d+9FxBNl8ZMsragVWfTFj4hKRMznWYw8/pNpmpbGv3Tq6DDd3svan9fL3n+VeCYflr//Z4tyWoPbv8rD9m+mJH7W8nzqmDG+8P4vGuVLLvSWz5a3P/vxkwHxny3bZcmD8p1v7+0Nyi19N2Kp9PMn6YvV6G7eanR2917Y2Fxdb643t65eXX555ZWVl1auNG5stJrF39IYP3zylx/1zfifZjv/bBkQv9Zf/9XD9X9ufwdD/Of92/c/dxCuL4sP7kVcfjY+StOjz/8T/fH7HtqZ+H6xVm9HSxFv/7VYtnQo/lM//+1Tg3LL4l8fUP9hz//l4VXPPf+th6PpMTcBAEaos7t3c7XVam6ffGT+ZFu9k6bpx451wpHsiHnAoj/8tFfxM4iVHR+dQc6PD0r1kzzy2klWTi+UvdjO4il4NEdmT/+yqQx+hZ/RyFibJQAAYAQODvrHnQkAAAAAAAAAAAAAAAAAAABMr/P4wbPDMe/2BnNjqC4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwED/DQAA//8GX9uY") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000008c0), 0x0) ptrace(0x10, r0) socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 4m11.769444802s ago: executing program 1 (id=19): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x10) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x800, 0xde, &(0x7f0000000340)=""/222}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x20, 0x0, @mcast1, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r1, 0x25, 0x2, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$eJzs3b9rO2UYAPDn0jQJOiSCkwge6OD05dvv6pIiLRQzKRnUQYttQZogtFDwB8ZOri6Ori6C4OY/4eJ/ILgKbhYsnNzlrklqGpPatP74fJa+fe953nve69uWDvf03eeHxwdpHJ1/8lO0WknUutGNiyQ6UYvKZzGj+0UAAP9mF1kWv2Zjq+QlEdFaX1kAwBqt/Pv/u7WXBACs2RtvvvXadq+383qatmJ3+PlZP//LPv84vr59FO/HIA7jcbTjMiK7Mh7vZlk2qqe5Trw0HJ3188zhOz+U62//ElHkb0U7OsXUbP5eb2crHZvKH+V1PFXev5vnP4l2PDvn/nu9nSdz8qPfiJdfnKr/UbTjx/figxjEQVHEOD9qEZ9upemr2Ze/ffx2Xl6en4zO+s0ibiLbuOcvDQAAAAAAAAAAAAAAAAAAAAAA/2GPyt45zSj69+RTZf+djcv8k81IK53Z/jzj/KRa6Fp/oFEWX1X9eR6naZqVgZP8ejxXj/rD7BoAAAAAAAAAAAAAAAAAAAD+WU4//Oh4fzA4PLmTQdUNoHqt/7brdKdmXojFwc3JvWrlcMHKsVHFJBELy8g3sXTNv5dtD2736J65qeZvvl16na//eu/lYHOJmL85qE7X8X4y/xk2o5ppVYfk++mYRix5r8ZNl7KVjl9j7qX2yntvPF0MRgtiIllU2Cs/j59cOZNc30WjeKpz0zfLwVT6bExr+fOcf6f8SXLVrSO52x9CAAAAAAAAAAAAAAAAAABAYfLS75yL5wtTa1lzbWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2a/P//FQajMnmJ4EacnD7wFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+CMAAP//SfdjDw==") mkdir(0x0, 0x66) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x5) 4m9.823650092s ago: executing program 1 (id=28): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 4m8.753097708s ago: executing program 32 (id=28): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 3m38.417626557s ago: executing program 2 (id=119): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0x7, 0x0, &(0x7f0000000200)="df12c9f7b9a600", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m38.18766977s ago: executing program 2 (id=121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) io_cancel(0x0, 0x0, &(0x7f00000003c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 3m34.955795939s ago: executing program 2 (id=129): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0x7, 0x0, &(0x7f0000000200)="df12c9f7b9a600", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m34.593594835s ago: executing program 2 (id=130): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f00000001c0), 0x1, 0x3fb, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x77f8) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eaba4) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT") r1 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r1, 0x0) open(&(0x7f00000003c0)='./file1\x00', 0x200000, 0xd8) 3m33.149690116s ago: executing program 2 (id=135): syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000200090585da20"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x300) syz_usb_connect(0x2, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x80000001) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) 3m31.526229711s ago: executing program 2 (id=140): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x400000, 0x25) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000300)=ANY=[@ANYBLOB="000075b8b62e943fefae1913e055b8852885f3200b41a4a7e940141a3e9a708cfa000f58442c767bb8bac7e75a49ac5762e52f7f3bf6909e28d3468821124bce8d75bf8584dedd275c45e85bfa22d157b6d5ac4e569df05173d6ff9d8ed3bdf95c41f60f6a1b456842fecd0f09b6ab9136de2336b349cfe9cd308933da9b574e4f040f"], 0x1, 0x5ec, &(0x7f0000001640)="$eJzs3cFvHFcdB/Dvbhxn10jpxk3agCphFalCWCS7tkRShASUgixUoUocOFvESaxs0sreIrcHCIhDxal/Qjn4H0Aci5QD7RFOPRv1iMQZ31zN7Ky9jreuHbvZdfP5SLPvvXkzb3/vN7OTmbWiDfDMWprP1KPUsjT/xkbR3tpc7G5tLt4f1JNcSFJPGklqxeq/J/kseZj+km8OOobKAz79qHHnkw8+fr/falRLuX3tsP0Oao5YtxtLqx9rWZ7AvvEWTjze/hnOJpk7WXxwOnYG/jOy+xifSwDgrKkl50atbyUz1c168RzQvyvu32OfaQ/HHQAAAAA8Bc9tZzsbuTjuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAsqX7/v1Yt9UF9LrXB7/9PV+tS1c+0R+MOAAAAAAAAAACOZuawzm9vZzsbuTho79TKv/m/XDYul6/fyDtZz0rWci0bWU4vvaylk6Q1NND0xnKvt9Y5wp4LI/dc2G1PndK8AQAAAAAAAOBZ8qcs7f39HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJkEtOdcvyuXyoN5KfSpJI8l0sd3D5N+D+ln2aNwBAAAAwFPw3Ha2s5GLg/ZOrXzmf6F87m/knTxIL6vppZuV3Cq/C+g/9de3Nhe7W5uL94vl4Lg//d+xwihHTP+7h9HvfLXcopnbWS3XXMtv81a6uZV6uWfh6iCe0XH9sYip9uPKESO7VZXFzH9ZlZOhVWbk/G5G2lVsRTYuHZ6JYx6dx9+pk/ruNz+Xv4Kcz1RlMZ/XJzrnC0Nn3wuHZyKZ/c1fbtztPrh39/b6/ORM6Qk9nonFoUy8+Exlol1m4spueym/yK8zn7m8mbWs5ndZTi8rmcvrZW25Op+L19bhmfrJvtabXxbJdHVc+lfR48X0crnvxazmV3krt8oj2s6N3MhCfpBX0953hK+MjPsPO1V3+amvH+9T/53vVpXzSX5elZOhyOulobwOX3NbZd/wmr0szZ7+tXHqW1WlOHtem7hr46XH/pUYZOL5wzPx1/LEWe8+uLd2d/ntI77fK1VZZOBnBzKxc+7EE3pixfkyWxyssrX/7Cj6nh/Z1yn7Lu/21Q/0Xdnt+7JP6nR1D3dwpIWy78WRff39rvb7mkXvqPstACbezPdmppv/bf6r+WHzz827zTcar124eeGl6Zz/5/kfTrXPvVJ/qfa3fJjf7z3/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT2793ffuLXe7K2uTXfn/Tt+kxKOi8jWvjPvKBHzVrvfuv319/d33vr96f/nOyp2VB6+2b97sdDo32tdvr3ZXqtdxRwkAnKa9m/5xRwIAAAAAAAAAAAAAAHyRp/Hficc9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OttaT5Tj1JLp32tXbS3Nhe7xTKo723ZSFIrKv9I8lnyMP0lraHhal/0Pp9+1LjzyQcfv783VmOwfe2w/Y7mRzNDsdQfi+kJ7JvbwonH25vhXJLZqoSx+zwAAP//3pMKTQ==") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, 0xfffffffffffffffd, 0x58) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 3m30.304895669s ago: executing program 33 (id=140): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x400000, 0x25) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000300)=ANY=[@ANYBLOB="000075b8b62e943fefae1913e055b8852885f3200b41a4a7e940141a3e9a708cfa000f58442c767bb8bac7e75a49ac5762e52f7f3bf6909e28d3468821124bce8d75bf8584dedd275c45e85bfa22d157b6d5ac4e569df05173d6ff9d8ed3bdf95c41f60f6a1b456842fecd0f09b6ab9136de2336b349cfe9cd308933da9b574e4f040f"], 0x1, 0x5ec, &(0x7f0000001640)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, 0xfffffffffffffffd, 0x58) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 1m12.032893181s ago: executing program 5 (id=610): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1m10.585465023s ago: executing program 5 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) io_cancel(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0x0, 0x0, 0x1, 0x0, 0x3, r1}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 1m9.117606655s ago: executing program 5 (id=620): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1m8.068820011s ago: executing program 5 (id=627): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$eJzs3b9vW1sdAPDvdeImL8996YM3AAJeeRQKqur8aBtVZaBdQKiqhKiYGNqQuFEUu47ipDShQzqyI1GJCf4ENgakTgxsbLCxlAGpQAVqkBiM7vVt6iZxYl5+uLU/H+nm3nOu4+85ds85vqe5PgEMrLMRsRkRpyLibkSM5/lJvsX11pY+7uWLR3NbLx7NJdFs3v5Hkp1P86Ltd1Lv5885GhE/+G7Ej5PdcRvrG0uz1WplJU9PrNaWJxrrGxcXC3nO9MzUzOTVS1emj6yuH9d+8/w7izd/+LvffunZHze/+dO0WKWfnc7OtdfjKLWqXoxSW95wRNw8jmA9Mpz/++Hdk7a2z0TEJ1n7H4+h7N0EAPpZszkezfH2NADQ79Lr/1IkhXI+F1CKQqFcbs3hfRRjhWq9sXphvL52fz6yOawzUSzcW6xWJvO5wjNRTNL0VHb8Oj0dm2+kL0XEhxHx85H3snR5rl6d7+UHHwAYYO/vGP//PdIa/wGAPjfa6wIAACfO+A8Ag8f4DwCD5/8Y/90dCAB9wvU/AAwe4z8ADJ4Dx//HJ1MOAOBEfP/WrXRrbuXffz3/YH3tW6UHF+crjaVybW2uPFdfWS4v1OsL1Up5rtnMf63j1z1X6/Xlqcvbycb6xp1afe3+6p3F2uxC5U6leAJ1AgD29+HHT/+cRMTmtfeyLdoGd2M19LdCrwsA9MxQrwsA9Iz7eWBwdXGNbxoA+tweS/S+oeOfCD2x+Cu8q85/3vw/DKpu5//dIgT959PN/3/7yMsBnDzz/zC4ms3Emv8AMGDM8QOH+v9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGFClbEsK5Wwt8M30Z6FcjjgdEWeimNxbrFYmI+KDiPjTSHEkTU/1utAAwCEV/pbk63+dHz9X2nn2VPKfkWwfET/55e1fPJxdXV2ZSvP/uZ2/+iTPnz7ViwoAAO2u785qjdP5vu1C/uWLR3OvtpMs4vMbrcVF07hb+dY6MxzD2X40ihEx9q8kT7ekn1eGjiD+5uOI+Nzr+j9si1DK5kBaK5/ujJ/GPn0M8V+//jvjF96IX8jOpfti9lp89gjKAoPm6Y1WP5m3vbSJ5e2vEGez/d7tfzTroQ7vVf+3tav/K2z3f0O74idZmz+7nd6/JM8v//57uzKb461zjyO+MLxX/GQ7ftKh/z3XZR3/8sUvf9LpXPNXEedj7/gttaybnVitLU801jcuLtZmFyoLlfvT0zNTM5NXL12ZnsjmqFs//7BXjL9fu/BBp/hp/cc6xB89oP5f67L+v/7v3R99ZZ/43/jq3u//R/vET8fEr3cZf3bsesflu9P48x3qf9D7f6HL+M/+ujHf5UMBgBPQWN9Ymq1WKysHHKSfNQ96jIOeHEQc8nliM6LntejLg2LX7evtO+h1zwQct/ZhBAAAAAAAAAAAAAAAeDs11jeWRqLDbUClo7pBDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI7H/wIAAP//L93NTg==") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) gettid() timer_create(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x1, 0x0, 0x1001f0) 1m6.224577848s ago: executing program 5 (id=632): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_process_wait\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x1, 0x0) 1m3.217586924s ago: executing program 5 (id=645): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") shutdown(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1m2.333506247s ago: executing program 34 (id=645): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") shutdown(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 50.029607383s ago: executing program 4 (id=691): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open(0x0, 0x14927e, 0x20) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, 0x0) 48.433269508s ago: executing program 4 (id=696): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x43, &(0x7f0000000e80)={@local, @multicast, @val={@void, {0x8100, 0x7}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x30, 0x31, 0x66, 0x0, 0x68, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x0, 0x200, 0x0, 0x48}, {"9f834fa37fa7744c03"}}}}}}, 0x0) 47.360240644s ago: executing program 4 (id=700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) 45.839452597s ago: executing program 4 (id=702): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f00000001c0), 0x1, 0x3fb, &(0x7f0000000a80)="$eJzs3E9PHGUYAPBnhn9CC4uJB1M9kGgUo0IXRa0xsXr1z6X6AQjQ2khLUzCxlQMaT548GG8e+gU8+AGaxjQx8Sv4BUyTxlAOesPM7MyywOwKsrCl/f2Syb7vzOw+77MzTN532HkDeGxNRMT5iOiLiJmIqBXr02KJ9caS7fdgY21+c2NtPomtrQt/JZEU68rPSorXU0VlMo1Iv414Zn1v3JUbNz+fW1pavF7Up1evXJteuXHz1ctX5i4tXlq8Wn/zXL0+O/NW/fWu5frj8y+d63v//Jmf/qjdmR0cHM7ae7rY1ppHt0zERPM72W2228F6bLDXDQAAYF/Sou/fn/f/a9GXlxpqMb3W08YBAAAAXbH1bvHazljbLQAAAMCJkbQf+wMAAACPhPJ3AA821ubLpYc/Rzh299+LiPHtZ5s3m/n3xxPFPgNH+HzrRERceyGpZUsc0XPIAACt7mT9n7NV/b80nm7Zbygi7w8Ndzn+xK763v5Peq/LIXfI+n/vRMTmnv5fWu4y3lfURvOu4kBy8fLS4tmIGIuIyRgYyur1DjE++Pvnj9tty/K/m4yOlUsW/26Sf3Qhvdc/tPM9C3Orc4fJudX9ryPO9FflnzT7v0lEjBwiRt9Xt95ut606/9GxQ4Q7kK1bES9WHv/tmXuSzvMTTefnw3R5Vuz1zze/fNQufq/zz47/SOf8x5PW+ZpWDh7j9me/P5sXKrJqHf9U5199/g8mn+Tlclz25dzq6vV6xGDy4d71M9vvLevl/ln+k89V//2X17+kmNPqdHEN6GCrauV33//6Sue3NfLPlix+ORY8Dln+Cwc6/p0KF4arNr1x+7dP28VvHv8kYr0y/+z4N+YAmyzW7Of6918t/f9nMwAAAJw8aX5fI0mnmuU0nZpq3O94KkbSpeWV1ZcvLn9xdaFx/2M8BtLyTlet5X5ovfFv9GZ9Zlf9tYh4MiJ+qA3n9an55aWFXicPAAAAj4lTbcb/mT+P7VcIAAAAwJEb73UDAAAAgCNn/A8AAACPtP3N66ews5B9cw9BM3pRGHo4mqFw1IVeX5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtn8DAAD//61VsxM=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000240)='./bus\x00', 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x1b4, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) 43.906150066s ago: executing program 4 (id=707): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x4, 0x0, 0x0, 0xc, 0x4, 0xd, 0x3, 0xb8, 0x4, 0x2, 0x5, 0x0, 0x8, 0x1, 0x3, 0x9, 0x6d, 0x81, '\x00', 0x2, 0xfff}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x200, 0x20003, 0x10020f5b, 0x0, [{0x4, 0x9}, {}, {}, {0x0, 0x35, 0xff}, {0x20, 0xa, 0xfc}, {0xe, 0x0, 0x6, '\x00', 0x7}, {0xbd, 0x0, 0x1}, {0x2, 0x2, 0x7}, {0x0, 0x48, 0x8, '\x00', 0x20}, {0xff, 0x1, 0xff, '\x00', 0x1}, {0x0, 0xff, 0xfe, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0xfd}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x2, 0x0, '\x00', 0x8}, {0x0, 0x8, 0xfc, '\x00', 0xff}, {0x0, 0x75, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0x20}, {0x0, 0x44, 0x3}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5, 0x0, '\x00', 0x1}, {0x0, 0xfc, 0x0, '\x00', 0x80}]}}) 42.31073881s ago: executing program 4 (id=714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 40.792762193s ago: executing program 35 (id=714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 8.073342479s ago: executing program 6 (id=795): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c00010062726964"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r5, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 6.845612047s ago: executing program 6 (id=799): unshare(0x2c020400) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, 0x0, 0x0) 6.111475538s ago: executing program 3 (id=803): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="530000000700004600f531132067043b2d877e09"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x0, 0x0) 6.029395569s ago: executing program 6 (id=804): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa84b01825fcef2e6}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x3, 0xb, 0x5, 0xf0000000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb40e}, 0x94) 5.785340753s ago: executing program 3 (id=805): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) clock_gettime(0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) 5.780831003s ago: executing program 6 (id=806): setregid(0xee01, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0xa00c40, &(0x7f0000000580)={[{@lazytime}, {@lazytime}, {@usrquota}, {@filestreams}, {@bsdgroups}, {@noikeep}, {@largeio}]}, 0x4, 0x96d1, &(0x7f0000012d80)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f0000000180)={[{@data_err_ignore}, {@norecovery}, {@noload}, {@errors_remount}, {@dioread_lock}]}, 0x1, 0x571, &(0x7f0000000780)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.798116038s ago: executing program 7 (id=807): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r3, 0xff, 0x1}, 0x8) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x3c}}, 0x0) 4.095848428s ago: executing program 7 (id=809): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004000000000000c910"], 0x0) 3.859861292s ago: executing program 3 (id=810): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) mount(0x0, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000300)=ANY=[@ANYBLOB="000075b8b62e943fefae1913e055b8852885f3200b41a4a7e940141a3e9a708cfa000f58442c767bb8bac7e75a49ac5762e52f7f3bf6909e28d3468821124bce8d75bf8584dedd275c45e85bfa22d157b6d5ac4e569df05173d6ff9d8ed3bdf95c41f60f6a1b456842fecd0f09b6ab9136de2336b349cfe9cd308933da9b574e4f040f"], 0x1, 0x5ec, &(0x7f0000001640)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, 0xfffffffffffffffd, 0x58) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80) 3.656726035s ago: executing program 7 (id=811): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1214080, &(0x7f00000002c0)={[{@uid={'uid', 0x3d, 0xee01}}, {@codepage={'codepage', 0x3d, 'iso8859-14'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@part={'part', 0x3d, 0x800}}, {@creator={'creator', 0x3d, "5863953a"}}]}, 0x11, 0x31c, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 3.543778707s ago: executing program 6 (id=812): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="4501006ab6408a0e9e4dd33547f6", 0x0, 0x7406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x25}, 0x50) 2.706749169s ago: executing program 0 (id=813): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000300)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.523171392s ago: executing program 7 (id=814): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="530000000700004600f531132067043b2d877e09"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x0, 0x0) 2.433396654s ago: executing program 0 (id=815): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r3, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) 2.261453056s ago: executing program 0 (id=816): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000040)={[{@sysvgroups}, {@dax_inode}, {@nouid32}, {@mblk_io_submit}]}, 0x1, 0x642, &(0x7f00000008c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x9, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x0, 0x3}, {0x0, 0x975e}, {0x0, 0x9}], 0x20}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_extract_tcp_res(0x0, 0xfffffff7, 0x3ff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) userfaultfd(0x0) 2.144299438s ago: executing program 7 (id=817): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) unshare(0x20000400) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0445624, &(0x7f0000000240)={0x180f0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x800000000, 0x2, 0xca1, 0x8, 0x0, 0x6, 0x0, 0x0, [0x6000000, 0x7fff, 0x2]}) 2.0288894s ago: executing program 0 (id=818): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) clock_gettime(0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) 1.869792522s ago: executing program 7 (id=819): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000140)={0x20, 0x9, 0x17, {0x17, 0x0, "efd3f2d0c525fc8780a6dabdd3e44ab3109bbe5be4"}}, 0x0}, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xffe0) 1.823289693s ago: executing program 6 (id=820): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x35, 0xa6, 0x40, 0x867, 0x9812, 0x16e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5d, 0xc2, 0x97}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 1.421959159s ago: executing program 3 (id=821): openat(0xffffffffffffffff, 0x0, 0xe00c2, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r1], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r2, &(0x7f0000000680), &(0x7f0000000700)=""/168}, 0x20) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) 993.383965ms ago: executing program 0 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, 0x0, r3, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000001200)='./file1\x00') 992.908965ms ago: executing program 3 (id=823): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1214080, &(0x7f00000002c0)={[{@uid={'uid', 0x3d, 0xee01}}, {@codepage={'codepage', 0x3d, 'iso8859-14'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@part={'part', 0x3d, 0x800}}, {@creator={'creator', 0x3d, "5863953a"}}]}, 0x11, 0x31c, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 748.678679ms ago: executing program 3 (id=824): dup(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) 0s ago: executing program 0 (id=825): r0 = add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000008540), &(0x7f0000008580)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r0) kernel console output (not intermixed with test programs): (retrying later): interface not active [ 87.020948][ T5787] team0: Port device team_slave_1 added [ 87.033899][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.040943][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.067005][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.081159][ T5784] team0: Port device team_slave_1 added [ 87.153359][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.160960][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.187348][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.201165][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.208235][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.234224][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.271170][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.278166][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.304496][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.330063][ T5795] Bluetooth: hci1: command tx timeout [ 87.330992][ T5789] Bluetooth: hci2: command tx timeout [ 87.335835][ T5795] Bluetooth: hci3: command tx timeout [ 87.356166][ T5797] hsr_slave_0: entered promiscuous mode [ 87.362883][ T5797] hsr_slave_1: entered promiscuous mode [ 87.386078][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.393163][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.419358][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.430108][ T5795] Bluetooth: hci0: command tx timeout [ 87.454677][ T5785] hsr_slave_0: entered promiscuous mode [ 87.461706][ T5785] hsr_slave_1: entered promiscuous mode [ 87.468216][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.476609][ T5785] Cannot create hsr debugfs directory [ 87.560391][ T5787] hsr_slave_0: entered promiscuous mode [ 87.566858][ T5787] hsr_slave_1: entered promiscuous mode [ 87.574165][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.581939][ T5787] Cannot create hsr debugfs directory [ 87.668408][ T5784] hsr_slave_0: entered promiscuous mode [ 87.675053][ T5784] hsr_slave_1: entered promiscuous mode [ 87.682905][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.690663][ T5784] Cannot create hsr debugfs directory [ 88.059999][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.075691][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.087792][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.108636][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.165886][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.177857][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.198334][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.217617][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.273157][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.284375][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.311217][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.346108][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.405093][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.418883][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.429851][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.441941][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.584522][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.637619][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.671234][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.678661][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.705453][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.751878][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.770449][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.781461][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.788601][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.825104][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.854925][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.862082][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.882302][ T5797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.893775][ T5797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.921549][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.928700][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.947304][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.988759][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.011097][ T742] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.018410][ T742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.075098][ T742] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.082324][ T742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.104619][ T742] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.111867][ T742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.127962][ T742] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.135250][ T742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.411041][ T5795] Bluetooth: hci3: command tx timeout [ 89.419596][ T5795] Bluetooth: hci2: command tx timeout [ 89.420053][ T5789] Bluetooth: hci1: command tx timeout [ 89.431161][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.495653][ T5789] Bluetooth: hci0: command tx timeout [ 89.596293][ T5797] veth0_vlan: entered promiscuous mode [ 89.656755][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.675661][ T5797] veth1_vlan: entered promiscuous mode [ 89.787102][ T5785] veth0_vlan: entered promiscuous mode [ 89.821903][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.836360][ T5785] veth1_vlan: entered promiscuous mode [ 89.869964][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.880574][ T5797] veth0_macvtap: entered promiscuous mode [ 89.913514][ T5797] veth1_macvtap: entered promiscuous mode [ 89.938840][ T5785] veth0_macvtap: entered promiscuous mode [ 89.961318][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.982290][ T5785] veth1_macvtap: entered promiscuous mode [ 90.021264][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.065378][ T5797] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.075374][ T5797] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.084470][ T5797] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.094403][ T5797] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.107560][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.120145][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.134559][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.142750][ T5784] veth0_vlan: entered promiscuous mode [ 90.171292][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.184611][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.196805][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.214324][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.223240][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.232049][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.241375][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.276172][ T5784] veth1_vlan: entered promiscuous mode [ 90.296706][ T5787] veth0_vlan: entered promiscuous mode [ 90.404163][ T5787] veth1_vlan: entered promiscuous mode [ 90.439906][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.464565][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.503090][ T5784] veth0_macvtap: entered promiscuous mode [ 90.527274][ T5784] veth1_macvtap: entered promiscuous mode [ 90.565162][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.574959][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.591341][ T5787] veth0_macvtap: entered promiscuous mode [ 90.603285][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.629720][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.638543][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.657300][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.667868][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.681999][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.696443][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.707533][ T5787] veth1_macvtap: entered promiscuous mode [ 90.783699][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.796013][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.806434][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.817433][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.829361][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.855009][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.873503][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.883725][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.894578][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.904867][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.916406][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.928694][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.957591][ T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.966174][ T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.986210][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.004904][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.017148][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.026604][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.041574][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.054350][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.065259][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.076130][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.086488][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.112448][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.138141][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.152347][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.162565][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.175594][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.185771][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.388893][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.435981][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.489527][ T5789] Bluetooth: hci2: command tx timeout [ 91.491488][ T5795] Bluetooth: hci3: command tx timeout [ 91.499890][ T5789] Bluetooth: hci1: command tx timeout [ 91.532706][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.542915][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.579767][ T5789] Bluetooth: hci0: command tx timeout [ 91.625498][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.635640][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.652391][ T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.665982][ T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.777834][ T5892] syz.2.8[5892]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.802477][ T5892] loop2: detected capacity change from 0 to 16 [ 91.862919][ T5892] erofs: (device loop2): mounted with root inode @ nid 36. [ 92.062463][ T1188] cfg80211: failed to load regulatory.db [ 92.120612][ T5894] loop1: detected capacity change from 0 to 1024 [ 92.157182][ T5899] loop0: detected capacity change from 0 to 128 [ 92.181444][ T5899] FAT-fs (loop0): Unrecognized mount option "ÿ" or missing value [ 92.239821][ T5894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.272960][ T5908] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.306333][ T5796] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.688904][ T5919] Zero length message leads to an empty skb [ 93.773125][ T5795] Bluetooth: hci2: command tx timeout [ 93.778932][ T5789] Bluetooth: hci1: command tx timeout [ 93.784907][ T5795] Bluetooth: hci3: command tx timeout [ 93.790877][ T5789] Bluetooth: hci0: command tx timeout [ 93.916318][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.105109][ T5923] loop2: detected capacity change from 0 to 512 [ 94.154779][ T5927] loop1: detected capacity change from 0 to 512 [ 94.167326][ T5927] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 94.216108][ T5927] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.16: iget: bogus i_mode (5) [ 94.230928][ T5923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.244700][ T5923] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.276385][ T5927] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.16: couldn't read orphan inode 15 (err -117) [ 94.333043][ T5927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.385790][ T5927] ext2 filesystem being mounted at /5/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.210400][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.678553][ T5954] loop2: detected capacity change from 0 to 1024 [ 95.946712][ T5954] ======================================================= [ 95.946712][ T5954] WARNING: The mand mount option has been deprecated and [ 95.946712][ T5954] and is ignored by this kernel. Remove the mand [ 95.946712][ T5954] option from the mount to silence this warning. [ 95.946712][ T5954] ======================================================= [ 96.351524][ T5936] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.377933][ T5954] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.406313][ T5954] EXT4-fs: Ignoring removed bh option [ 96.468892][ T5954] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.491501][ T5797] syz-executor (5797) used greatest stack depth: 20552 bytes left [ 96.555094][ T5954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.713134][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.632073][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.809585][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.928433][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.357085][ T5985] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.526975][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.550002][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.557938][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.577121][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.585932][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.596365][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.801383][ T5997] loop3: detected capacity change from 0 to 1024 [ 98.946228][ T27] audit: type=1800 audit(1751741582.947:2): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.39" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 99.031098][ T2978] hfsplus: b-tree write err: -5, ino 4 [ 100.535938][ T6022] loop3: detected capacity change from 0 to 128 [ 100.577193][ T6022] EXT4-fs (loop3): Test dummy encryption mode enabled [ 100.691504][ T5789] Bluetooth: hci3: command tx timeout [ 100.733360][ T6022] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 100.765922][ T6022] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.569390][ T6027] EXT4-fs error (device loop3): ext4_validate_block_bitmap:421: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 101.589664][ T6022] fscrypt (loop3): Error allocating 'cts(cbc(aes))' transform: -4 [ 101.840756][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.103233][ T5990] chnl_net:caif_netlink_parms(): no params data found [ 102.127381][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.366262][ T5833] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.760447][ T5833] usb 4-1: Using ep0 maxpacket: 8 [ 102.769341][ T5789] Bluetooth: hci3: command tx timeout [ 102.819527][ T5833] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 102.870510][ T5833] usb 4-1: config 179 has no interface number 0 [ 102.876862][ T5833] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 102.959548][ T12] hsr_slave_0: left promiscuous mode [ 102.971602][ T5833] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 103.034931][ T5833] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 103.067897][ T12] hsr_slave_1: left promiscuous mode [ 103.087935][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.088653][ T5833] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 103.113315][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.122081][ T5833] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 103.148293][ T5833] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 103.157562][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.201106][ T6042] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.309584][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.399238][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.408737][ T12] bridge_slave_1: left allmulticast mode [ 103.442433][ T12] bridge_slave_1: left promiscuous mode [ 103.497187][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.646842][ T12] bridge_slave_0: left allmulticast mode [ 103.744919][ T12] bridge_slave_0: left promiscuous mode [ 103.823950][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.291914][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.568855][ T12] veth1_macvtap: left promiscuous mode [ 104.615035][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.636603][ T12] veth0_macvtap: left promiscuous mode [ 104.688459][ T12] veth1_vlan: left promiscuous mode [ 104.735465][ T12] veth0_vlan: left promiscuous mode [ 104.901347][ T5789] Bluetooth: hci3: command tx timeout [ 105.198978][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 105.199073][ T5848] usb 4-1: USB disconnect, device number 2 [ 105.214588][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 106.439056][ C0] sched: RT throttling activated [ 107.136099][ T6083] loop3: detected capacity change from 0 to 1024 [ 107.144724][ T5103] Bluetooth: hci3: command tx timeout [ 108.015156][ T6093] loop3: detected capacity change from 0 to 512 [ 108.033833][ T6094] loop2: detected capacity change from 0 to 512 [ 108.042635][ T6093] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.075507][ T6094] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 108.081551][ T6093] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.107418][ T6094] EXT4-fs (loop2): orphan cleanup on readonly fs [ 108.131499][ T6094] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.59: Block bitmap for bg 0 marked uninitialized [ 108.144761][ T6093] EXT4-fs (loop3): 1 truncate cleaned up [ 108.147460][ T6093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.221722][ T6094] EXT4-fs (loop2): Remounting filesystem read-only [ 108.233487][ T6094] EXT4-fs (loop2): 1 orphan inode deleted [ 108.272799][ T6094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 108.547568][ T12] team0 (unregistering): Port device team_slave_1 removed [ 108.584403][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.611601][ T12] team0 (unregistering): Port device team_slave_0 removed [ 108.639182][ T786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.696993][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.763218][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.851516][ T786] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.866842][ T786] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.880451][ T786] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.900080][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.914724][ T786] usb 3-1: SerialNumber: syz [ 108.955793][ T6103] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 109.206149][ T6107] loop3: detected capacity change from 0 to 1024 [ 109.277118][ T6107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.329290][ T5103] Bluetooth: hci3: command tx timeout [ 109.352701][ T6107] Invalid ELF header magic: != ELF [ 109.444122][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.445656][ T12] bond0 (unregistering): Released all slaves [ 109.708219][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.742159][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.769722][ T5990] bridge_slave_0: entered allmulticast mode [ 109.777493][ T5990] bridge_slave_0: entered promiscuous mode [ 109.834195][ T6091] warning: `syz.2.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.875400][ T5990] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.880892][ T786] usb 3-1: 0:2 : does not exist [ 109.899200][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.930384][ T5990] bridge_slave_1: entered allmulticast mode [ 109.956880][ T5990] bridge_slave_1: entered promiscuous mode [ 109.970793][ T786] usb 3-1: USB disconnect, device number 2 [ 110.110958][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.277102][ T5990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.339335][ T5790] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.629868][ T5790] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.653799][ T5990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.704770][ T5790] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.889390][ T5790] usb 4-1: config 1 has no interface number 0 [ 110.931652][ T5790] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.976847][ T5790] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 111.008977][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.053979][ T5990] team0: Port device team_slave_0 added [ 111.093682][ T5790] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.113069][ T5990] team0: Port device team_slave_1 added [ 111.139089][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.147150][ T5790] usb 4-1: Product: syz [ 111.199316][ T5790] usb 4-1: Manufacturer: syz [ 111.203978][ T5790] usb 4-1: SerialNumber: syz [ 111.306341][ T6127] loop2: detected capacity change from 0 to 512 [ 111.313625][ T5990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.327038][ T5990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.364319][ T6127] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.394607][ T5990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.396666][ T6127] EXT4-fs (loop2): 1 truncate cleaned up [ 111.408541][ T5990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.418896][ T5990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.445268][ T5990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.458847][ T6127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.613184][ T5990] hsr_slave_0: entered promiscuous mode [ 111.631808][ T5990] hsr_slave_1: entered promiscuous mode [ 111.838681][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.910136][ T5790] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 111.930272][ T5790] cdc_ncm 4-1:1.1: bind() failure [ 111.979539][ T5790] usb 4-1: USB disconnect, device number 3 [ 113.279568][ T6153] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 114.403312][ T5990] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.594409][ T5990] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.695383][ T5990] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.747874][ T5990] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.783713][ T6161] loop2: detected capacity change from 0 to 256 [ 115.006053][ T5990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.074046][ T5990] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.101261][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.109122][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.124394][ T6173] loop3: detected capacity change from 0 to 512 [ 115.163630][ T6175] loop2: detected capacity change from 0 to 512 [ 115.172702][ T6175] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.201914][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.209218][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.236491][ T6173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.282304][ T6175] EXT4-fs (loop2): 1 truncate cleaned up [ 115.326340][ T6175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.469343][ T6181] process 'syz.0.80' launched './file2' with NULL argv: empty string added [ 115.556193][ T6186] syz.3.78 (6186): attempted to duplicate a private mapping with mremap. This is not supported. [ 115.850916][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.119268][ T6198] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 116.888768][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.997226][ T5990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.261437][ T6216] loop2: detected capacity change from 0 to 1024 [ 118.213062][ T6225] devtmpfs: Too few inodes for current use [ 118.243480][ T6227] loop3: detected capacity change from 0 to 2048 [ 118.342095][ T6227] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.736129][ T5990] veth0_vlan: entered promiscuous mode [ 118.816178][ T5990] veth1_vlan: entered promiscuous mode [ 118.979171][ T6241] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 119.688148][ T5990] veth0_macvtap: entered promiscuous mode [ 119.737890][ T5990] veth1_macvtap: entered promiscuous mode [ 119.760225][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.771125][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.781064][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.796092][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.811746][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.832905][ T6247] loop3: detected capacity change from 0 to 512 [ 119.839275][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.875468][ T6247] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.887503][ T5990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.927599][ T6247] EXT4-fs (loop3): 1 truncate cleaned up [ 119.958022][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.973473][ T6247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.985400][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.005827][ T6256] loop2: detected capacity change from 0 to 1024 [ 120.017808][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.046860][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.084334][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.289608][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.540038][ T5990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.911957][ T5990] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.968342][ T5990] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.977846][ T5990] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.987223][ T5990] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.182536][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.321688][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.353434][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.544454][ T6275] loop3: detected capacity change from 0 to 1024 [ 121.854815][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.744132][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.321376][ T6285] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 123.399542][ T6291] loop2: detected capacity change from 0 to 1024 [ 123.406840][ T6294] loop4: detected capacity change from 0 to 128 [ 123.441067][ T6291] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.458297][ T6291] EXT4-fs: Ignoring removed bh option [ 123.474930][ T6291] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.487862][ T6294] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.597647][ T6294] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.630444][ T6291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.740596][ T6305] loop3: detected capacity change from 0 to 256 [ 123.799822][ T6143] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.924364][ T5990] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.610440][ T5847] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.819277][ T5847] usb 5-1: Using ep0 maxpacket: 32 [ 124.826756][ T5847] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 124.843893][ T5847] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 124.859909][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.867981][ T5847] usb 5-1: Product: syz [ 124.879251][ T5847] usb 5-1: Manufacturer: syz [ 124.888611][ T5847] usb 5-1: SerialNumber: syz [ 124.912563][ T5847] usb 5-1: config 0 descriptor?? [ 124.919973][ T6318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 124.953428][ T5847] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 125.485675][ T786] usb 5-1: USB disconnect, device number 2 [ 126.269514][ T6342] loop4: detected capacity change from 0 to 16 [ 126.298311][ T6342] erofs: (device loop4): mounted with root inode @ nid 36. [ 127.441327][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.605899][ T6354] loop4: detected capacity change from 0 to 512 [ 127.626602][ T6354] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.729860][ T6354] EXT4-fs (loop4): 1 truncate cleaned up [ 127.737005][ T6354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.895535][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.966107][ T6364] loop3: detected capacity change from 0 to 512 [ 128.083558][ T6364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 128.103505][ T6364] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.443951][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 128.540947][ T6384] syz.4.117[6384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.541582][ T6384] syz.4.117[6384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.987475][ T6398] loop3: detected capacity change from 0 to 128 [ 130.101274][ T6398] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.178386][ T6398] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.792985][ T6411] loop4: detected capacity change from 0 to 256 [ 130.861889][ T6411] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 130.863205][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.920511][ T6411] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 131.594590][ T6424] loop3: detected capacity change from 0 to 256 [ 131.655711][ T6143] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.505763][ T6432] loop2: detected capacity change from 0 to 512 [ 132.604860][ T6432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.744090][ T6432] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.130: iget: bad i_size value: 15393162788874 [ 132.898057][ T6432] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 6: comm syz.2.130: lblock 0 mapped to illegal pblock 6 (length 1) [ 132.973344][ T6432] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 6: comm syz.2.130: lblock 0 mapped to illegal pblock 6 (length 1) [ 133.051921][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.058788][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.092220][ T6445] loop3: detected capacity change from 0 to 512 [ 133.126872][ T6445] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.156076][ T5785] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 6: comm syz-executor: lblock 0 mapped to illegal pblock 6 (length 1) [ 133.186275][ T6445] EXT4-fs (loop3): 1 truncate cleaned up [ 133.230619][ T6445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.284382][ T5785] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 133.363919][ T5785] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #2: comm syz-executor: mark_inode_dirty error [ 133.532713][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.603633][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.769268][ T5785] syz-executor (5785) used greatest stack depth: 20464 bytes left [ 135.038652][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.061088][ T6475] loop3: detected capacity change from 0 to 512 [ 135.095485][ T6475] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.275347][ T6475] EXT4-fs (loop3): 1 truncate cleaned up [ 135.330862][ T6475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.881433][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.000685][ T6475] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.142: corrupted in-inode xattr: overlapping e_value [ 136.045682][ T6475] EXT4-fs (loop3): Remounting filesystem read-only [ 136.057502][ T6475] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1781: inode #15: comm syz.3.142: unable to update i_inline_off [ 136.078713][ T6475] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 136.236554][ T6488] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 136.321756][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.366688][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.385927][ T6490] loop4: detected capacity change from 0 to 512 [ 136.456188][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.483831][ T6490] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.547403][ T6490] EXT4-fs (loop4): 1 truncate cleaned up [ 136.572205][ T6490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.799337][ T5790] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.808400][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.818580][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.831176][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.847777][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.850627][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.875502][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 136.883823][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.038110][ T5790] usb 4-1: Using ep0 maxpacket: 16 [ 137.045713][ T5790] usb 4-1: too many endpoints for config 0 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 137.089126][ T5790] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.115846][ T5790] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 137.139709][ T5790] usb 4-1: config 0 interface 0 has no altsetting 0 [ 137.146533][ T5790] usb 4-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 137.163456][ T6506] loop4: detected capacity change from 0 to 256 [ 137.175656][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.216048][ T5790] usb 4-1: config 0 descriptor?? [ 137.714966][ T5790] wacom 0003:056A:0015.0001: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 137.755392][ T5790] wacom 0003:056A:0015.0001: hidraw0: USB HID v0.21 Device [HID 056a:0015] on usb-dummy_hcd.3-1/input0 [ 137.774169][ T5790] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0015.0001/input/input6 [ 138.059180][ T5879] usb 4-1: USB disconnect, device number 4 [ 139.044660][ T5789] Bluetooth: hci2: command tx timeout [ 139.508525][ T6530] loop3: detected capacity change from 0 to 512 [ 139.618424][ T6530] EXT4-fs (loop3): Test dummy encryption mode enabled [ 139.733146][ T6530] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.153: invalid indirect mapped block 10 (level 1) [ 139.805387][ T6499] chnl_net:caif_netlink_parms(): no params data found [ 139.854188][ T6530] EXT4-fs (loop3): Remounting filesystem read-only [ 139.914674][ T6530] EXT4-fs (loop3): 1 truncate cleaned up [ 139.952007][ T6542] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 139.964663][ T6530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.970045][ T6544] loop4: detected capacity change from 0 to 256 [ 140.067351][ T6544] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xff48ad06, utbl_chksum : 0xe619d30d) [ 140.196714][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.247914][ T12] hsr_slave_0: left promiscuous mode [ 140.256524][ T12] hsr_slave_1: left promiscuous mode [ 140.324761][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.332305][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.351111][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.369107][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.385638][ T12] bridge_slave_1: left allmulticast mode [ 140.399305][ T12] bridge_slave_1: left promiscuous mode [ 140.409529][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.436264][ T12] bridge_slave_0: left allmulticast mode [ 140.447397][ T12] bridge_slave_0: left promiscuous mode [ 140.459337][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.518851][ T12] veth1_macvtap: left promiscuous mode [ 140.526108][ T6554] loop3: detected capacity change from 0 to 1024 [ 140.532808][ T12] veth0_macvtap: left promiscuous mode [ 140.539647][ T12] veth1_vlan: left promiscuous mode [ 140.545036][ T12] veth0_vlan: left promiscuous mode [ 140.551825][ T6554] EXT4-fs: Ignoring removed nobh option [ 140.557422][ T6554] EXT4-fs: Ignoring removed bh option [ 140.589205][ T6554] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.648009][ T6554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.837176][ T6554] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4036: comm syz.3.160: Allocating blocks 497-513 which overlap fs metadata [ 140.858505][ T6554] EXT4-fs (loop3): pa ffff8880779f4cb0: logic 256, phys. 385, len 8 [ 140.867044][ T6554] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 1 [ 140.958503][ T6559] EXT4-fs error (device loop3): mb_free_blocks:1943: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 141.117339][ T5789] Bluetooth: hci2: command tx timeout [ 141.236274][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.437450][ T12] team0 (unregistering): Port device team_slave_1 removed [ 142.507498][ T12] team0 (unregistering): Port device team_slave_0 removed [ 142.558525][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.628687][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.006792][ T6575] loop3: detected capacity change from 0 to 512 [ 143.027683][ T6575] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.097368][ T6575] EXT4-fs (loop3): 1 truncate cleaned up [ 143.124574][ T6575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.179224][ T5789] Bluetooth: hci2: command tx timeout [ 143.380734][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.123927][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 144.344851][ T12] bond0 (unregistering): Released all slaves [ 145.050123][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.069658][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.084636][ T6499] bridge_slave_0: entered allmulticast mode [ 145.127095][ T6499] bridge_slave_0: entered promiscuous mode [ 145.142806][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.179323][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.186608][ T6499] bridge_slave_1: entered allmulticast mode [ 145.226373][ T6499] bridge_slave_1: entered promiscuous mode [ 145.260771][ T5789] Bluetooth: hci2: command tx timeout [ 145.431732][ T6605] loop4: detected capacity change from 0 to 1024 [ 145.439524][ T6605] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.446031][ T6605] EXT4-fs: Ignoring removed bh option [ 145.453009][ T6605] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.502441][ T6605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.562726][ T6499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.584415][ T6499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.614758][ T6611] loop3: detected capacity change from 0 to 256 [ 146.374675][ T6609] loop3: detected capacity change from 0 to 512 [ 146.422110][ T6609] ext3: Unknown parameter 'defcontext' [ 146.532751][ T6499] team0: Port device team_slave_0 added [ 146.614114][ T6499] team0: Port device team_slave_1 added [ 146.727307][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.844316][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.862588][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.939526][ T6499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.982852][ T6625] loop3: detected capacity change from 0 to 512 [ 146.987025][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.039300][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.085221][ T6499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.121939][ T6625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.199253][ T6625] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.341722][ T6499] hsr_slave_0: entered promiscuous mode [ 147.379595][ T6499] hsr_slave_1: entered promiscuous mode [ 147.421566][ T6499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.452210][ T6499] Cannot create hsr debugfs directory [ 147.970664][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.205158][ T6645] loop3: detected capacity change from 0 to 256 [ 148.339473][ T6645] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 148.362522][ T6645] FAT-fs (loop3): Filesystem has been set read-only [ 148.399297][ T6645] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 148.456320][ T6499] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.464315][ T6645] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 148.499082][ T27] audit: type=1800 audit(1751741632.497:3): pid=6645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.180" name="file1" dev="loop3" ino=1048597 res=0 errno=0 [ 148.552151][ T6499] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.633412][ T6499] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.712277][ T6499] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.144468][ T6499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.211536][ T6499] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.261369][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.268653][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.304789][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.312030][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.515984][ T6499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.865662][ T6691] loop3: detected capacity change from 0 to 512 [ 150.012226][ T6691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.042889][ T6499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.060042][ T6691] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.880618][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.034064][ T6711] fuse: Bad value for 'fd' [ 151.390073][ T6499] veth0_vlan: entered promiscuous mode [ 151.440187][ T6499] veth1_vlan: entered promiscuous mode [ 151.555389][ T6499] veth0_macvtap: entered promiscuous mode [ 151.608574][ T6499] veth1_macvtap: entered promiscuous mode [ 151.675955][ T6499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.719168][ T6499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.749209][ T6499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.784280][ T6499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.807543][ T6499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.828041][ T6499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.861107][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.883546][ T6499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.909192][ T6499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.929604][ T6499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.949470][ T6499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.989173][ T6499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.022368][ T6499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.058581][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.088702][ T6499] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.127255][ T6499] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.149229][ T6499] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.158002][ T6499] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.181380][ T6739] loop3: detected capacity change from 0 to 256 [ 152.364152][ T6737] loop3: detected capacity change from 0 to 512 [ 152.393542][ T6743] fuse: Bad value for 'fd' [ 152.436805][ T6737] ext3: Unknown parameter 'defcontext' [ 152.517193][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.622117][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'. [ 152.633360][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.968683][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.982351][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.547291][ T6749] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 153.615409][ T6758] loop4: detected capacity change from 0 to 512 [ 153.622769][ T5833] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 153.763419][ T6758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.849206][ T5833] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.875038][ T6758] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.892918][ T5833] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.956954][ T5833] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.190914][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.200208][ T5833] usb 4-1: Product: syz [ 154.204432][ T5833] usb 4-1: Manufacturer: syz [ 154.210274][ T5833] usb 4-1: SerialNumber: syz [ 154.234890][ T5833] usb 4-1: selecting invalid altsetting 1 [ 154.561574][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.728735][ T5833] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 154.762227][ T5833] cdc_ncm 4-1:1.0: bind() failure [ 154.803081][ T5833] usb 4-1: USB disconnect, device number 5 [ 154.823827][ T6778] 9pnet_fd: Insufficient options for proto=fd [ 154.833505][ T6143] udevd[6143]: setting mode of /dev/bus/usb/004/005 to 020664 failed: No such file or directory [ 154.860417][ T6143] udevd[6143]: setting owner of /dev/bus/usb/004/005 to uid=0, gid=0 failed: No such file or directory [ 155.250226][ T6786] loop5: detected capacity change from 0 to 512 [ 155.355560][ T6786] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 155.833129][ T6786] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 156.242415][ T6786] EXT4-fs (loop5): 1 truncate cleaned up [ 156.292831][ T6786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.359546][ T6786] Bluetooth: MGMT ver 1.22 [ 156.493708][ T6794] loop3: detected capacity change from 0 to 4096 [ 156.520740][ T6499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.539212][ T6794] EXT4-fs: Ignoring removed orlov option [ 156.624767][ T6794] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 156.650455][ T6801] loop4: detected capacity change from 0 to 512 [ 156.716392][ T6801] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.806351][ T6801] EXT4-fs (loop4): 1 truncate cleaned up [ 156.858647][ T6801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.829220][ T6811] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 158.301543][ T6817] 9pnet_fd: Insufficient options for proto=fd [ 158.347696][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.622722][ T6827] loop3: detected capacity change from 0 to 256 [ 159.662335][ T6840] loop5: detected capacity change from 0 to 1024 [ 159.742370][ T6840] hfsplus: request for non-existent node 16777216 in B*Tree [ 159.787978][ T6840] hfsplus: request for non-existent node 16777216 in B*Tree [ 159.826202][ T6840] hfsplus: request for non-existent node 16777216 in B*Tree [ 159.929297][ T6840] hfsplus: request for non-existent node 16777216 in B*Tree [ 159.946678][ T6840] hfsplus: request for non-existent node 16777216 in B*Tree [ 159.956097][ T6840] hfsplus: request for non-existent node 16777216 in B*Tree [ 160.029297][ T27] audit: type=1800 audit(1751741644.027:4): pid=6840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.214" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 160.086976][ T6847] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 160.394242][ T6861] 9pnet_fd: Insufficient options for proto=fd [ 160.626351][ T6870] loop5: detected capacity change from 0 to 512 [ 160.637186][ T6869] loop4: detected capacity change from 0 to 512 [ 160.670434][ T6869] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.677727][ T6869] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.763574][ T6870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.770792][ T6869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 160.806899][ T6869] System zones: 1-12 [ 160.807840][ T6870] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.831956][ T6869] EXT4-fs (loop4): orphan cleanup on readonly fs [ 160.911681][ T6869] EXT4-fs (loop4): 1 truncate cleaned up [ 160.918806][ T6869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.454770][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.643095][ T6499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.899914][ T6895] loop5: detected capacity change from 0 to 1024 [ 162.096200][ T6895] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.135488][ T6895] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.426817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 162.529255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 162.631550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 162.891275][ T6895] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.898644][ T6895] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.918467][ T6895] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.958357][ T6895] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.987078][ T27] audit: type=1800 audit(1751741646.987:5): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.226" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 163.242100][ T6916] loop4: detected capacity change from 0 to 512 [ 163.254928][ T6916] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.273641][ T6916] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 163.329251][ T6916] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 163.354076][ T6916] System zones: 0-2, 18-18, 34-34 [ 164.148385][ T6932] 9pnet_fd: Insufficient options for proto=fd [ 164.185501][ T6932] loop3: detected capacity change from 0 to 1024 [ 164.193286][ T6932] hfsplus: unable to parse mount options [ 164.449818][ T6916] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.233: bg 0: block 248: padding at end of block bitmap is not set [ 164.551333][ T6916] Quota error (device loop4): write_blk: dquota write failed [ 164.569987][ T5980] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.605904][ T6929] loop3: detected capacity change from 0 to 1024 [ 164.675770][ T6916] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 164.731278][ T6916] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.233: Failed to acquire dquot type 1 [ 164.752695][ T6929] hfsplus: failed to load root directory [ 164.864382][ T6916] EXT4-fs (loop4): 1 truncate cleaned up [ 164.937010][ T6916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.032072][ T6916] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.152022][ T6916] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.233: iget: bad i_size value: 360287970189639690 [ 165.422738][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.549842][ T6953] loop3: detected capacity change from 0 to 1024 [ 165.580589][ T6953] EXT4-fs: Ignoring removed nobh option [ 165.604733][ T6953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.713133][ T6959] loop4: detected capacity change from 0 to 512 [ 165.727676][ T6953] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.240: bad orphan inode 32767 [ 165.762877][ T6959] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.803970][ T6953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.845998][ T6959] EXT4-fs (loop4): 1 truncate cleaned up [ 165.874280][ T6966] loop5: detected capacity change from 0 to 1024 [ 165.890628][ T6959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.919130][ T6953] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.240: iget: bad i_size value: 576460752303423498 [ 166.061451][ T6966] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 166.088948][ T6966] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 166.143773][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.285740][ T2996] hfsplus: b-tree write err: -5, ino 4 [ 166.408010][ T6977] loop3: detected capacity change from 0 to 512 [ 166.430975][ T6979] loop5: detected capacity change from 0 to 16 [ 166.490242][ T6979] erofs: (device loop5): mounted with root inode @ nid 36. [ 166.510715][ T6977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.581991][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.589253][ T6977] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.986373][ T6988] loop4: detected capacity change from 0 to 2048 [ 167.085351][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.154351][ T6988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.210515][ T6998] loop3: detected capacity change from 0 to 8 [ 167.716710][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.315118][ T7020] loop5: detected capacity change from 0 to 764 [ 168.351586][ T7020] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 169.232759][ T7029] loop5: detected capacity change from 0 to 512 [ 169.365780][ T7033] loop4: detected capacity change from 0 to 512 [ 169.386336][ T7029] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.400000][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 169.408989][ T7026] bridge_slave_1: left allmulticast mode [ 169.498918][ T7029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.522432][ T7026] bridge_slave_1: left promiscuous mode [ 169.565282][ T7026] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.624574][ T7033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.666505][ T7029] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.709344][ T7026] bridge_slave_0: left allmulticast mode [ 169.749408][ T7033] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.800250][ T7026] bridge_slave_0: left promiscuous mode [ 169.833864][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.397005][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.717849][ T6499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.922568][ T7085] loop3: detected capacity change from 0 to 512 [ 173.043259][ T7085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.144598][ T7085] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.701021][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.715519][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.275'. [ 176.163568][ T7124] loop4: detected capacity change from 0 to 1024 [ 176.167174][ T7121] loop3: detected capacity change from 0 to 512 [ 176.286451][ T7121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.320058][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.338900][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.346572][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.355607][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.363334][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.370977][ T7121] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.381708][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.389575][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.397001][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.404556][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.412081][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.425441][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.459253][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.474029][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.481898][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.503417][ T7135] loop5: detected capacity change from 0 to 128 [ 176.509486][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.535766][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.547098][ T7135] EXT4-fs: Ignoring removed nobh option [ 176.616055][ T7135] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.623082][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.643183][ T7135] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.729432][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.789616][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.797837][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.876425][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.951200][ T6499] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.960488][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.004071][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.061855][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.092806][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.108341][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.149198][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.179277][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.192980][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.200574][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.208094][ T7124] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.231469][ T27] audit: type=1800 audit(1751741661.237:6): pid=7124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.277" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 177.318095][ T7124] syz.4.277 (7124) used greatest stack depth: 20400 bytes left [ 177.445852][ T7153] loop3: detected capacity change from 0 to 1024 [ 177.453871][ T7153] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.460420][ T7153] EXT4-fs: Ignoring removed bh option [ 177.471064][ T7153] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.508262][ T7153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.247676][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.286'. [ 179.023236][ T7178] loop5: detected capacity change from 0 to 512 [ 179.227214][ T7178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.326530][ T7178] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.572112][ T6499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.956310][ T7196] loop4: detected capacity change from 0 to 1024 [ 180.014287][ T7198] loop5: detected capacity change from 0 to 128 [ 180.048495][ T7198] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.078057][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.108327][ T7198] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.117683][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.160497][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.167890][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.249151][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.277225][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.297658][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.316483][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.334773][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.372785][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.432443][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.471025][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.479197][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.486540][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.775074][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.949551][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.956977][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.012045][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.043804][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.082021][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.111468][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.143895][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.181616][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.212358][ T48] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.228409][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.257934][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.286468][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.309657][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.317036][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.335582][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.349229][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.365730][ T7196] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.399459][ T27] audit: type=1800 audit(1751741665.407:7): pid=7196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.294" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 181.527756][ T7216] loop3: detected capacity change from 0 to 736 [ 181.694329][ T7216] rock: directory entry would overflow storage [ 181.779169][ T7216] rock: sig=0x3b10, size=4, remaining=3 [ 182.041645][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.298'. [ 183.495636][ T7243] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 183.923568][ T7250] loop5: detected capacity change from 0 to 256 [ 183.977777][ T7250] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 185.319220][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 185.957698][ T7277] loop4: detected capacity change from 0 to 16 [ 186.058295][ T7277] erofs: (device loop4): mounted with root inode @ nid 36. [ 186.110680][ T7277] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 186.214403][ T7283] loop3: detected capacity change from 0 to 1024 [ 186.254493][ T7277] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 186.311876][ T7277] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 186.350307][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.405176][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.477182][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.497027][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.504552][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.512107][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.537125][ T27] audit: type=1800 audit(1751741670.537:8): pid=7283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.312" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 186.988822][ T7296] loop4: detected capacity change from 0 to 512 [ 187.136910][ T7296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.152607][ T7297] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 187.288168][ T7296] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.605441][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.609573][ T7342] loop3: detected capacity change from 0 to 256 [ 190.688388][ T7342] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 190.717334][ T7347] loop5: detected capacity change from 0 to 512 [ 190.850791][ T7347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.962119][ T7347] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.972585][ T7368] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 193.271930][ T7380] loop3: detected capacity change from 0 to 512 [ 193.487812][ T6499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.638043][ T7380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.667895][ T7380] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.770589][ T7380] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #2: comm syz.3.332: corrupted inode contents [ 193.835507][ T7380] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #2: comm syz.3.332: mark_inode_dirty error [ 193.857739][ T7389] loop4: detected capacity change from 0 to 256 [ 193.868122][ T7380] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #2: comm syz.3.332: corrupted inode contents [ 193.926794][ T7389] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 193.942182][ T7380] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.332: mark_inode_dirty error [ 194.142490][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.495829][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.502301][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.609250][ T7407] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 195.414067][ T7413] loop3: detected capacity change from 0 to 128 [ 195.486223][ T7413] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.517689][ T7413] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.756544][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.106997][ T7430] loop3: detected capacity change from 0 to 1024 [ 196.142910][ T7430] hfsplus: part requires an argument [ 196.167207][ T7430] hfsplus: unable to parse mount options [ 196.931113][ T7444] loop3: detected capacity change from 0 to 256 [ 197.004517][ T7444] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 199.755332][ T7489] loop3: detected capacity change from 0 to 2048 [ 199.796416][ T7489] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.194075][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 200.349164][ T5848] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 200.546993][ T5789] Bluetooth: hci2: link tx timeout [ 200.553435][ T5789] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.567935][ T5848] usb 4-1: not running at top speed; connect to a high speed hub [ 200.578782][ T5103] Bluetooth: hci2: link tx timeout [ 200.584125][ T5103] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.595039][ T5848] usb 4-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 200.612895][ T5848] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 200.633586][ T5848] usb 4-1: config 1 has no interface number 1 [ 200.643397][ T5848] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.659154][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.676928][ T5848] usb 4-1: Product: syz [ 200.685713][ T5848] usb 4-1: Manufacturer: syz [ 200.695844][ T5848] usb 4-1: SerialNumber: syz [ 200.799504][ T7501] loop5: detected capacity change from 0 to 2048 [ 200.879062][ T7501] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 200.896279][ T7501] UDF-fs: Scanning with blocksize 512 failed [ 200.991590][ T7501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.276200][ T5848] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 205.109145][ T5103] Bluetooth: hci2: command 0x0406 tx timeout [ 205.497902][ T5848] usb 4-1: 2:1: All rates were zero [ 205.707648][ T5848] usb 4-1: USB disconnect, device number 6 [ 205.863142][ T6143] udevd[6143]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.395595][ T7534] fuse: Bad value for 'fd' [ 208.374549][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 208.544962][ T7551] loop4: detected capacity change from 0 to 512 [ 208.698909][ T7551] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #12: comm syz.4.378: corrupted in-inode xattr: invalid ea_ino [ 208.819258][ T7551] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.378: couldn't read orphan inode 12 (err -117) [ 208.943813][ T7551] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.091414][ T7551] EXT4-fs (loop4): shut down requested (1) [ 209.730805][ T5990] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 209.892289][ T5847] kernel write not supported for file bpf-prog (pid: 5847 comm: kworker/0:4) [ 210.190248][ T7574] loop3: detected capacity change from 0 to 512 [ 210.267910][ T7574] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=e84ec028, mo2=0000] [ 210.385285][ T7574] System zones: 0-2, 18-18, 34-34 [ 210.454384][ T7574] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 210.492484][ T7574] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 210.502657][ T7574] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.384: Failed to acquire dquot type 0 [ 210.523154][ T7574] EXT4-fs (loop3): Remounting filesystem read-only [ 210.530949][ T7574] EXT4-fs (loop3): 1 orphan inode deleted [ 210.538895][ T7574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.556674][ T7574] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.194391][ T7587] loop5: detected capacity change from 0 to 512 [ 211.262812][ T7587] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 211.392497][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.425418][ T7587] EXT4-fs (loop5): 1 truncate cleaned up [ 211.500459][ T7587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.892774][ T5795] Bluetooth: hci0: command 0x0406 tx timeout [ 211.899579][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.389'. [ 211.900668][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 212.102565][ T6499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.314071][ T7612] loop5: detected capacity change from 0 to 256 [ 212.678815][ T7612] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 212.895553][ T7612] exFAT-fs (loop5): error, invalid size(size(0) > aligned(9223372036854777344) [ 212.895553][ T7612] [ 212.958835][ T7612] exFAT-fs (loop5): Filesystem has been set read-only [ 213.385798][ T7640] loop3: detected capacity change from 0 to 256 [ 213.446358][ T7640] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 214.455775][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.405'. [ 216.203474][ T7687] loop5: detected capacity change from 0 to 256 [ 216.267336][ T7687] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 217.533147][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.417'. [ 217.860763][ T5834] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 218.273126][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 218.627651][ T5834] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 218.724508][ T5834] usb 4-1: config 0 has no interface number 0 [ 218.741434][ T5834] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 218.783735][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.830115][ T5834] usb 4-1: Product: syz [ 218.868651][ T5834] usb 4-1: Manufacturer: syz [ 218.906907][ T5834] usb 4-1: SerialNumber: syz [ 218.947211][ T7737] loop4: detected capacity change from 0 to 256 [ 218.947829][ T5834] usb 4-1: config 0 descriptor?? [ 219.050011][ T5834] smsc95xx v2.0.0 [ 219.065440][ T5834] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 219.096483][ T5834] smsc95xx: probe of 4-1:0.67 failed with error -22 [ 219.144330][ T7737] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 220.636369][ T5834] usb 4-1: USB disconnect, device number 7 [ 222.145322][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 223.194761][ T7794] loop3: detected capacity change from 0 to 256 [ 223.330330][ T7794] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 225.088770][ T7816] loop5: detected capacity change from 0 to 512 [ 225.135062][ T7816] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 225.947988][ T7816] ip6erspan0: tun_chr_ioctl cmd 1074025677 [ 225.954255][ T7816] ip6erspan0: linktype set to 768 [ 230.530597][ T7915] capability: warning: `syz.3.460' uses deprecated v2 capabilities in a way that may be insecure [ 230.963411][ T5833] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 231.161988][ T5833] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 231.171533][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.181975][ T5833] usb 6-1: config 0 descriptor?? [ 231.190994][ T5833] cp210x 6-1:0.0: cp210x converter detected [ 231.610330][ T5833] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 232.642142][ T5833] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 232.650645][ T5833] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 232.683538][ T5833] usb 6-1: cp210x converter now attached to ttyUSB0 [ 232.694526][ T5833] usb 6-1: USB disconnect, device number 2 [ 232.709955][ T5833] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 232.730130][ T5833] cp210x 6-1:0.0: device disconnected [ 233.115669][ T7952] overlayfs: failed to clone upperpath [ 233.738480][ T7956] loop4: detected capacity change from 0 to 512 [ 233.765987][ T7956] EXT4-fs: Ignoring removed nobh option [ 233.824644][ T7956] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.473: iget: bad i_size value: 38620345925642 [ 233.880675][ T7956] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.473: couldn't read orphan inode 15 (err -117) [ 233.937531][ T7956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.020375][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.079868][ T7962] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=611449872 (39132791808 ns) > initial count (37077444416 ns). Using initial count to start timer. [ 234.297863][ T7968] loop4: detected capacity change from 0 to 2048 [ 234.419510][ T7968] loop4: p1 < > p3 [ 234.452128][ T7968] loop4: p3 size 134217728 extends beyond EOD, truncated [ 235.290327][ T7968] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 240.119508][ T8033] "syz.0.499" (8033) uses obsolete ecb(arc4) skcipher [ 242.510085][ T8047] loop4: detected capacity change from 0 to 2048 [ 242.580060][ T6143] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.617828][ T8062] loop5: detected capacity change from 0 to 8192 [ 242.628550][ T8047] loop4: detected capacity change from 0 to 512 [ 242.630898][ T6143] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 245.379286][ T5847] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 245.697709][ T5847] usb 5-1: config 10 has an invalid interface number: 97 but max is 0 [ 245.811934][ T5847] usb 5-1: config 10 has an invalid descriptor of length 36, skipping remainder of the config [ 245.985065][ T5847] usb 5-1: config 10 has no interface number 0 [ 246.007637][ T5847] usb 5-1: config 10 interface 97 has no altsetting 0 [ 246.036733][ T5847] usb 5-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice=d2.0d [ 246.077122][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.590168][ T5847] usb 5-1: string descriptor 0 read error: -71 [ 246.646963][ T5847] usb 5-1: USB disconnect, device number 3 [ 248.490660][ T8124] loop5: detected capacity change from 0 to 1024 [ 248.498409][ T8124] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.504957][ T8124] EXT4-fs: Ignoring removed bh option [ 248.511252][ T8124] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 248.586150][ T8124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.655405][ T6499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.820475][ T5790] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 250.179107][ T5790] usb 5-1: Using ep0 maxpacket: 8 [ 250.187651][ T5790] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 250.197147][ T5790] usb 5-1: config 179 has no interface number 0 [ 250.205433][ T5790] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 250.217809][ T5790] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 250.230115][ T5790] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 250.242330][ T5790] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 250.296845][ T5790] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 250.486828][ T5790] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 250.645593][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.885189][ T8139] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 251.085739][ T8158] ipt_REJECT: TCP_RESET invalid for non-tcp [ 252.534241][ T1188] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input10 [ 252.635719][ T8139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.646749][ T8139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.979745][ T1188] usb 5-1: USB disconnect, device number 4 [ 252.979813][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 252.979868][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 253.439496][ T5847] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 253.787464][ T5847] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 253.836734][ T5847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.890523][ T5847] usb 6-1: config 0 descriptor?? [ 253.937624][ T5847] cp210x 6-1:0.0: cp210x converter detected [ 255.096880][ T5847] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 255.109489][ T5847] cp210x 6-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 255.117054][ T5847] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 255.137282][ T5847] usb 6-1: cp210x converter now attached to ttyUSB0 [ 255.150856][ T5847] usb 6-1: USB disconnect, device number 3 [ 255.160074][ T5847] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 255.169804][ T5847] cp210x 6-1:0.0: device disconnected [ 256.601588][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.635975][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.259756][ T8211] loop5: detected capacity change from 0 to 1024 [ 257.402807][ T8211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.523538][ T8218] loop4: detected capacity change from 0 to 1024 [ 257.587668][ T6499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.088814][ T8247] loop4: detected capacity change from 0 to 1024 [ 260.124531][ T8247] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.158478][ T8251] loop5: detected capacity change from 0 to 136 [ 260.172240][ T8247] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 260.189173][ T8247] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (22856!=20869) [ 260.226371][ T8247] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 260.326105][ T8247] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 260.553774][ T6143] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 264.177481][ T8289] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.713529][ T8374] loop4: detected capacity change from 0 to 8192 [ 272.763724][ T8374] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 272.904480][ T8374] UDF-fs: Scanning with blocksize 512 failed [ 272.996295][ T8374] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 273.041923][ T8374] UDF-fs: Scanning with blocksize 1024 failed [ 273.108625][ T8384] loop5: detected capacity change from 0 to 512 [ 273.187572][ T8384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 273.282963][ T8374] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 273.434991][ T8374] UDF-fs: Scanning with blocksize 2048 failed [ 273.679818][ T8374] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.690315][ T8384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.776336][ T8384] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.806858][ T27] audit: type=1800 audit(1751741757.807:9): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.603" name="file1" dev="loop4" ino=818 res=0 errno=0 [ 273.909587][ T8384] EXT4-fs error (device loop5): ext4_get_verity_descriptor_location:335: inode #15: comm syz.5.607: verity file corrupted; can't find descriptor [ 273.972348][ T8384] EXT4-fs (loop5): Remounting filesystem read-only [ 274.039379][ T8384] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size [ 274.313188][ T6499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.521936][ T8395] overlayfs: failed to clone upperpath [ 275.721128][ T8407] loop4: detected capacity change from 0 to 256 [ 275.816099][ T8407] FAT-fs (loop4): Directory bread(block 64) failed [ 275.840889][ T8407] FAT-fs (loop4): Directory bread(block 65) failed [ 275.847628][ T8407] FAT-fs (loop4): Directory bread(block 66) failed [ 275.864265][ T8407] FAT-fs (loop4): Directory bread(block 67) failed [ 276.117497][ T8407] FAT-fs (loop4): Directory bread(block 68) failed [ 276.124605][ T8407] FAT-fs (loop4): Directory bread(block 69) failed [ 276.132261][ T8407] FAT-fs (loop4): Directory bread(block 70) failed [ 277.011074][ T8407] FAT-fs (loop4): Directory bread(block 71) failed [ 277.053030][ T8407] FAT-fs (loop4): Directory bread(block 72) failed [ 277.087789][ T8407] FAT-fs (loop4): Directory bread(block 73) failed [ 277.317847][ T27] audit: type=1800 audit(1751741761.317:10): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.613" name="file1" dev="loop4" ino=1048621 res=0 errno=0 [ 278.939392][ T8447] loop5: detected capacity change from 0 to 512 [ 278.985114][ T8447] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 279.045183][ T8447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.113630][ T8447] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.086613][ T6499] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 280.154407][ T6499] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 280.179578][ T6499] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 280.221123][ T6499] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 280.305794][ T6499] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 280.348578][ T6499] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 280.369524][ T8468] syz.4.633 uses obsolete (PF_INET,SOCK_PACKET) [ 280.422512][ T6499] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 280.488053][ T6499] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 280.527115][ T6499] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 280.552270][ T6499] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 280.573953][ T8474] overlayfs: failed to clone upperpath [ 282.793253][ T6499] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.026211][ T8495] 9pnet: p9_errstr2errno: server reported unknown error õ [ 283.073279][ T2996] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.766351][ T2996] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.918407][ T2996] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.103647][ T2996] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.551073][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.562594][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.571285][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.580534][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.589070][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 285.596833][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.851459][ T8523] fuse: Bad value for 'fd' [ 285.870220][ T8523] 9pnet_fd: Insufficient options for proto=fd [ 286.113486][ T8533] 9pnet: p9_errstr2errno: server reported unknown error õ [ 287.650794][ T5789] Bluetooth: hci2: command tx timeout [ 287.837102][ T8562] loop4: detected capacity change from 0 to 512 [ 287.845079][ T8516] chnl_net:caif_netlink_parms(): no params data found [ 287.885646][ T8562] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 287.956641][ T8562] EXT4-fs (loop4): 1 truncate cleaned up [ 287.988524][ T8562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.042518][ T8562] syz.4.661 (pid 8562) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 288.253642][ T2996] hsr_slave_0: left promiscuous mode [ 288.283498][ T2996] hsr_slave_1: left promiscuous mode [ 288.304090][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.326104][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.351934][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.377167][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.400553][ T2996] bridge_slave_1: left allmulticast mode [ 288.420190][ T2996] bridge_slave_1: left promiscuous mode [ 288.427186][ T2996] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.446386][ T8562] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 288.473333][ T2996] bridge_slave_0: left allmulticast mode [ 288.485191][ T2996] bridge_slave_0: left promiscuous mode [ 288.496002][ T2996] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.591378][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.606180][ T2996] veth1_macvtap: left promiscuous mode [ 288.627276][ T2996] veth0_macvtap: left promiscuous mode [ 288.645926][ T2996] veth1_vlan: left promiscuous mode [ 288.656701][ T2996] veth0_vlan: left promiscuous mode [ 288.802336][ T8583] 9pnet: p9_errstr2errno: server reported unknown error õ [ 289.752585][ T5789] Bluetooth: hci2: command tx timeout [ 289.771584][ T8593] loop4: detected capacity change from 0 to 256 [ 289.814096][ T8593] exfat: Deprecated parameter 'utf8' [ 289.854270][ T8593] exfat: Deprecated parameter 'utf8' [ 290.083843][ T8593] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 290.184365][ T8593] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 290.244764][ T8600] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 290.522891][ T8607] loop4: detected capacity change from 0 to 1024 [ 290.597825][ T8607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.877330][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.895061][ T5789] Bluetooth: hci2: command tx timeout [ 292.231461][ T2996] team0 (unregistering): Port device team_slave_1 removed [ 292.834661][ T2996] team0 (unregistering): Port device team_slave_0 removed [ 293.036178][ T2996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.105525][ T2996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.970476][ T5789] Bluetooth: hci2: command tx timeout [ 296.457269][ T8664] loop4: detected capacity change from 0 to 1024 [ 296.490000][ T8664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 296.605928][ T8664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.151997][ T5789] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 297.501238][ T2996] bond0 (unregistering): Released all slaves [ 297.722026][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.743559][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.757965][ T8516] bridge_slave_0: entered allmulticast mode [ 297.773684][ T8516] bridge_slave_0: entered promiscuous mode [ 297.786373][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.809256][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.817258][ T8516] bridge_slave_1: entered allmulticast mode [ 297.824858][ T8516] bridge_slave_1: entered promiscuous mode [ 297.852764][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.803581][ T8516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.876785][ T8516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.180167][ T8516] team0: Port device team_slave_0 added [ 300.514173][ T8516] team0: Port device team_slave_1 added [ 300.718156][ T8705] loop4: detected capacity change from 0 to 512 [ 300.774711][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.797521][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.840943][ T8516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.853649][ T8705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.988437][ T8705] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.702: iget: bad i_size value: 15393162788874 [ 301.013395][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.053162][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.128672][ T8516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.531955][ T8705] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #2: block 6: comm syz.4.702: lblock 0 mapped to illegal pblock 6 (length 1) [ 302.320454][ T5990] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #2: block 6: comm syz-executor: lblock 0 mapped to illegal pblock 6 (length 1) [ 302.432232][ T5990] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 302.465640][ T5990] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 4 in block_group 0 [ 302.506865][ T5990] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 302.530493][ T8516] hsr_slave_0: entered promiscuous mode [ 302.534296][ T5990] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #2: comm syz-executor: mark_inode_dirty error [ 302.619937][ T8516] hsr_slave_1: entered promiscuous mode [ 302.651960][ T8516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.679615][ T8516] Cannot create hsr debugfs directory [ 303.135005][ T2978] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm kworker/u4:8: Invalid inode table block 4 in block_group 0 [ 303.462632][ T5990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.585559][ T8516] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 304.674094][ T8516] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 304.735155][ T8516] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 304.858443][ T8516] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 305.752400][ T8516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.881182][ T8516] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.203086][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.210384][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.737536][ T7225] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.744781][ T7225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.123442][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.134194][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.149590][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.179830][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.188605][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 307.198879][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.827727][ T8516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.090402][ T8783] chnl_net:caif_netlink_parms(): no params data found [ 309.020112][ T8783] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.064901][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.115192][ T8783] bridge_slave_0: entered allmulticast mode [ 309.159605][ T8783] bridge_slave_0: entered promiscuous mode [ 309.169285][ T8783] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.176468][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.183976][ T8783] bridge_slave_1: entered allmulticast mode [ 309.191555][ T8783] bridge_slave_1: entered promiscuous mode [ 309.249258][ T5103] Bluetooth: hci3: command tx timeout [ 309.309707][ T8783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.364239][ T8783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.241411][ T8783] team0: Port device team_slave_0 added [ 310.271489][ T8783] team0: Port device team_slave_1 added [ 310.416562][ T8783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.425074][ T8783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.464817][ T8783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.506746][ T8783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.533013][ T8783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.620898][ T8783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.713226][ T8783] hsr_slave_0: entered promiscuous mode [ 310.781980][ T8834] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 310.789659][ T8834] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 310.805284][ T8834] Error parsing options; rc = [-22] [ 311.136841][ T8783] hsr_slave_1: entered promiscuous mode [ 311.326929][ T8783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.334659][ T5103] Bluetooth: hci3: command tx timeout [ 311.355115][ T8783] Cannot create hsr debugfs directory [ 311.527780][ T8516] veth0_vlan: entered promiscuous mode [ 311.596979][ T8516] veth1_vlan: entered promiscuous mode [ 311.750754][ T8516] veth0_macvtap: entered promiscuous mode [ 311.792686][ T8516] veth1_macvtap: entered promiscuous mode [ 311.867350][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.906317][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.939153][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.968267][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.980589][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.996606][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.015487][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.189559][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.217385][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.236867][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.250681][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.261078][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.271819][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.284632][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.316289][ T8783] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 312.564779][ T8516] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.658430][ T8516] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.757107][ T8516] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.939046][ T8516] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.119600][ T8783] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 313.137414][ T8783] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 313.162399][ T8783] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 313.188912][ T8860] mac80211_hwsim hwsim9 O3ãc¤±: renamed from wlan1 (while UP) [ 313.283195][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.301114][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.409528][ T5103] Bluetooth: hci3: command tx timeout [ 313.453775][ T7225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.499082][ T7225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.636580][ T8783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.712245][ T8783] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.763682][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.770982][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.818757][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.826042][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.086747][ T8783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.137869][ T8783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.845950][ T8783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.509408][ T5103] Bluetooth: hci3: command tx timeout [ 317.430144][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.438634][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.078897][ T8948] overlayfs: failed to clone upperpath [ 318.274546][ T8783] veth0_vlan: entered promiscuous mode [ 318.910608][ T8783] veth1_vlan: entered promiscuous mode [ 319.058443][ T8783] veth0_macvtap: entered promiscuous mode [ 319.770952][ T8783] veth1_macvtap: entered promiscuous mode [ 320.366688][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.619275][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.631952][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.656851][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.668354][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.747782][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.806564][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.020387][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.402467][ T8783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.588176][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.746576][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.905819][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.967685][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.988913][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.026019][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.053837][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.085965][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.120470][ T8783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.153807][ T8783] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.191573][ T8783] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.209005][ T8783] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.239059][ T8783] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.469978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 323.786889][ T742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.797664][ T8999] loop6: detected capacity change from 0 to 512 [ 323.835185][ T742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.851246][ T8999] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.994152][ T8999] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 324.061505][ T8999] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 324.072684][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.187282][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.252088][ T8999] EXT4-fs (loop6): 1 truncate cleaned up [ 324.369901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 324.378145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 324.526545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 324.942081][ T8999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.490274][ T9003] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 326.029766][ T9014] sit0: entered allmulticast mode [ 326.119186][ T9017] sit0: entered promiscuous mode [ 326.168273][ T8516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.889694][ T9039] input: syz1 as /devices/virtual/input/input11 [ 329.559775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 330.158356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 330.629807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 331.305122][ T9059] loop6: detected capacity change from 0 to 1024 [ 331.359811][ T9059] EXT4-fs: Ignoring removed mblk_io_submit option [ 331.409580][ T9059] EXT4-fs: Ignoring removed bh option [ 331.450677][ T9059] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 332.602812][ T9059] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.781003][ T8516] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.236074][ T9098] loop6: detected capacity change from 0 to 1024 [ 334.318307][ T9098] EXT4-fs: Ignoring removed mblk_io_submit option [ 334.379618][ T9098] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 334.433880][ T9098] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (22856!=20869) [ 334.446329][ T9098] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 334.456676][ T9098] EXT4-fs (loop6): filesystem has both journal inode and journal device! [ 335.721600][ T9117] loop6: detected capacity change from 0 to 2048 [ 335.837437][ T9117] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.414628][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 338.506739][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.795'. [ 338.549243][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.795'. [ 341.652596][ T9186] binder: BINDER_SET_CONTEXT_MGR already set [ 341.882251][ T9183] loop6: detected capacity change from 0 to 32768 [ 341.889975][ T9183] XFS: noikeep mount option is deprecated. [ 341.917892][ T9186] binder: 9185:9186 ioctl 4018620d 200000000040 returned -16 [ 341.970866][ T9183] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 342.085881][ T9183] XFS (loop6): Ending clean mount [ 342.109770][ T9183] XFS (loop6): Quotacheck needed: Please wait. [ 342.207501][ T9183] XFS (loop6): Quotacheck: Done. [ 342.755192][ T9215] loop7: detected capacity change from 0 to 64 [ 342.804951][ T8516] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 344.849293][ T42] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 344.919357][ T5790] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 345.239603][ T42] usb 8-1: Using ep0 maxpacket: 16 [ 345.246998][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.258625][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.284783][ T42] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.318299][ T5790] usb 7-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 345.334958][ T42] usb 8-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 345.344460][ T5790] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.368018][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.376725][ T5790] usb 7-1: Product: syz [ 345.381516][ T5790] usb 7-1: Manufacturer: syz [ 345.386147][ T5790] usb 7-1: SerialNumber: syz [ 345.408875][ T42] usb 8-1: config 0 descriptor?? [ 345.435393][ T5790] usb 7-1: config 0 descriptor?? [ 345.488225][ T5790] comedi comedi5: Wrong number of endpoints [ 345.495469][ T5790] dt9812 7-1:0.0: driver 'dt9812' failed to auto-configure device. [ 345.676611][ T9261] overlayfs: failed to clone upperpath [ 346.237398][ T9245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.282935][ T42] hid-u2fzero 0003:10C4:8ACF.0002: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.7-1/input0 [ 346.309844][ T9245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.374556][ T1188] usb 7-1: USB disconnect, device number 2 [ 346.403320][ T42] hid-u2fzero 0003:10C4:8ACF.0002: U2F Zero LED initialised [ 346.424584][ T42] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 346.436364][ T42] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 346.444836][ T42] CPU: 1 PID: 42 Comm: kworker/1:1 Not tainted 6.6.95-syzkaller #0 [ 346.452769][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 346.462879][ T42] Workqueue: usb_hub_wq hub_event [ 346.468043][ T42] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 346.473737][ T42] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 e7 94 fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 5f 95 fa f9 48 8d 44 24 60 49 89 07 [ 346.493497][ T42] RSP: 0018:ffffc90000b2e780 EFLAGS: 00010202 [ 346.499641][ T42] RAX: 0000000000000015 RBX: ffff888073484030 RCX: dffffc0000000000 [ 346.507663][ T42] RDX: 0000000000000000 RSI: ffffc90000b2e8a0 RDI: ffff88805f5e9968 [ 346.515693][ T42] RBP: ffffc90000b2e998 R08: 0000000000000000 R09: 0000000000000000 [ 346.523714][ T42] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888073484300 [ 346.531737][ T42] R13: 1ffff92000165cf8 R14: ffff888073484418 R15: 00000000000000a8 [ 346.539768][ T42] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 346.548753][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.555400][ T42] CR2: 0000000000000000 CR3: 000000005b592000 CR4: 00000000003506e0 [ 346.563440][ T42] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 346.571452][ T42] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 346.579436][ T42] Call Trace: [ 346.582741][ T42] [ 346.585685][ T42] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 346.591265][ T42] ? add_early_randomness+0x1e/0x1a0 [ 346.596586][ T42] ? mutex_unlock+0x10/0x10 [ 346.601201][ T42] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 346.606757][ T42] add_early_randomness+0x7a/0x1a0 [ 346.611901][ T42] hwrng_register+0x3db/0x4a0 [ 346.616704][ T42] devm_hwrng_register+0x47/0xb0 [ 346.621667][ T42] u2fzero_probe+0x348/0x460 [ 346.626280][ T42] hid_device_probe+0x293/0x5b0 [ 346.631172][ T42] ? hid_uevent+0x350/0x350 [ 346.635713][ T42] really_probe+0x25b/0xb40 [ 346.640249][ T42] ? pm_runtime_barrier+0x14b/0x1c0 [ 346.645470][ T42] __driver_probe_device+0x18c/0x330 [ 346.650790][ T42] driver_probe_device+0x4f/0x420 [ 346.655846][ T42] __device_attach_driver+0x2ca/0x520 [ 346.661249][ T42] bus_for_each_drv+0x24b/0x2d0 [ 346.666285][ T42] ? coredump_store+0x90/0x90 [ 346.670977][ T42] ? bus_find_device+0x320/0x320 [ 346.675937][ T42] __device_attach+0x2b5/0x400 [ 346.680742][ T42] ? device_attach+0x20/0x20 [ 346.685354][ T42] ? do_raw_spin_unlock+0x121/0x230 [ 346.690570][ T42] bus_probe_device+0x180/0x260 [ 346.695448][ T42] device_add+0x85b/0xc20 [ 346.699790][ T42] hid_add_device+0x38d/0x530 [ 346.704487][ T42] usbhid_probe+0xe02/0x1220 [ 346.709091][ T42] usb_probe_interface+0x5a4/0xb00 [ 346.714214][ T42] ? usb_register_driver+0x3d0/0x3d0 [ 346.719506][ T42] really_probe+0x25b/0xb40 [ 346.724027][ T42] ? pm_runtime_barrier+0x14b/0x1c0 [ 346.729248][ T42] __driver_probe_device+0x18c/0x330 [ 346.734551][ T42] driver_probe_device+0x4f/0x420 [ 346.739593][ T42] __device_attach_driver+0x2ca/0x520 [ 346.744985][ T42] bus_for_each_drv+0x24b/0x2d0 [ 346.749850][ T42] ? coredump_store+0x90/0x90 [ 346.754637][ T42] ? bus_find_device+0x320/0x320 [ 346.759589][ T42] __device_attach+0x2b5/0x400 [ 346.764373][ T42] ? device_attach+0x20/0x20 [ 346.768980][ T42] ? __kmem_cache_free+0xba/0x1f0 [ 346.774031][ T42] ? do_raw_spin_unlock+0x121/0x230 [ 346.779275][ T42] bus_probe_device+0x180/0x260 [ 346.784143][ T42] device_add+0x85b/0xc20 [ 346.788485][ T42] usb_set_configuration+0x1a79/0x20c0 [ 346.793981][ T42] usb_generic_driver_probe+0x8d/0x150 [ 346.799466][ T42] usb_probe_device+0x13d/0x280 [ 346.804327][ T42] ? usb_register_device_driver+0x230/0x230 [ 346.810229][ T42] really_probe+0x25b/0xb40 [ 346.814747][ T42] ? pm_runtime_barrier+0x14b/0x1c0 [ 346.819996][ T42] __driver_probe_device+0x18c/0x330 [ 346.825305][ T42] driver_probe_device+0x4f/0x420 [ 346.830352][ T42] __device_attach_driver+0x2ca/0x520 [ 346.835741][ T42] bus_for_each_drv+0x24b/0x2d0 [ 346.840602][ T42] ? coredump_store+0x90/0x90 [ 346.845316][ T42] ? bus_find_device+0x320/0x320 [ 346.850271][ T42] __device_attach+0x2b5/0x400 [ 346.855061][ T42] ? device_attach+0x20/0x20 [ 346.859677][ T42] ? __kmem_cache_free+0xba/0x1f0 [ 346.864716][ T42] ? do_raw_spin_unlock+0x121/0x230 [ 346.869939][ T42] bus_probe_device+0x180/0x260 [ 346.874801][ T42] device_add+0x85b/0xc20 [ 346.879145][ T42] usb_new_device+0xa31/0x1630 [ 346.883950][ T42] ? usb_disconnect+0x8a0/0x8a0 [ 346.888815][ T42] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.894044][ T42] ? lockdep_hardirqs_on+0x98/0x150 [ 346.899253][ T42] hub_event+0x2957/0x49c0 [ 346.903703][ T42] ? led_work+0x720/0x720 [ 346.908039][ T42] ? read_lock_is_recursive+0x20/0x20 [ 346.913429][ T42] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.918644][ T42] ? process_scheduled_works+0x957/0x15b0 [ 346.924385][ T42] ? process_scheduled_works+0x957/0x15b0 [ 346.930120][ T42] process_scheduled_works+0xa45/0x15b0 [ 346.935686][ T42] ? assign_work+0x400/0x400 [ 346.940288][ T42] ? assign_work+0x39e/0x400 [ 346.944904][ T42] worker_thread+0xa55/0xfc0 [ 346.949520][ T42] kthread+0x2fa/0x390 [ 346.953602][ T42] ? pr_cont_work+0x560/0x560 [ 346.958388][ T42] ? kthread_blkcg+0xd0/0xd0 [ 346.962982][ T42] ret_from_fork+0x48/0x80 [ 346.967413][ T42] ? kthread_blkcg+0xd0/0xd0 [ 346.972011][ T42] ret_from_fork_asm+0x11/0x20 [ 346.976800][ T42] [ 346.979837][ T42] Modules linked in: [ 347.017945][ T42] ---[ end trace 0000000000000000 ]--- [ 347.024222][ T42] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 347.030357][ T42] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 e7 94 fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 5f 95 fa f9 48 8d 44 24 60 49 89 07 [ 347.051544][ T42] RSP: 0018:ffffc90000b2e780 EFLAGS: 00010202 [ 347.060314][ T42] RAX: 0000000000000015 RBX: ffff888073484030 RCX: dffffc0000000000 [ 347.068437][ T42] RDX: 0000000000000000 RSI: ffffc90000b2e8a0 RDI: ffff88805f5e9968 [ 347.076938][ T42] RBP: ffffc90000b2e998 R08: 0000000000000000 R09: 0000000000000000 [ 347.085324][ T42] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888073484300 [ 347.095678][ T42] R13: 1ffff92000165cf8 R14: ffff888073484418 R15: 00000000000000a8 [ 347.104922][ T42] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 347.114340][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.121705][ T42] CR2: 00007f3c9326a6b0 CR3: 000000002f560000 CR4: 00000000003506e0 [ 347.131486][ T42] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 347.140340][ T42] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 347.148363][ T42] Kernel panic - not syncing: Fatal exception [ 347.154750][ T42] Kernel Offset: disabled [ 347.159097][ T42] Rebooting in 86400 seconds..