last executing test programs: 9m22.426778173s ago: executing program 0 (id=432): write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0x0, {0x2}}, 0x13) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000005200"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0xc042) 9m21.662866766s ago: executing program 0 (id=434): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xa, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1000, {[0x0, 0x0, 0xfffffffe, 0xfffffef9, 0x1, 0x401, 0x2]}}, 0x5c) 9m21.524278275s ago: executing program 0 (id=435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x727b85c6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff038}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x150) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000300)="34036849c5ed7ce0bcd19e728fb9f3ada3c2da6985b0", 0x16, 0x1) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0x0, 0x80, 0x0, 0x5, 0x0, "5fd7bc000000000000000300", 0x1000, 0x4}) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x1208c48, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', 0x3242cac, &(0x7f0000000380)=ANY=[], 0xff, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0x1000) mount$cgroup(0x0, &(0x7f0000000140)='./file7\x00', 0x0, 0x89020, 0x0) 9m20.031523361s ago: executing program 0 (id=438): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@noload}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) unshare(0x22020600) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='!\xbe\'![#%!-\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) close(r5) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, 0x0) 9m18.820411331s ago: executing program 0 (id=442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bd52007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x62, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000002e40)=ANY=[], 0x0) 9m16.451789449s ago: executing program 0 (id=451): syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4, 0x550c, &(0x7f00000089c0)="$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") setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000040400000000000000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(r0, &(0x7f0000000440)='./bus\x00', 0x41) 9m16.009725664s ago: executing program 32 (id=451): syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4, 0x550c, &(0x7f00000089c0)="$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") setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000040400000000000000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(r0, &(0x7f0000000440)='./bus\x00', 0x41) 6m29.147368232s ago: executing program 3 (id=915): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) shutdown(r1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000340), &(0x7f0000000440)=r1}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6m28.459923731s ago: executing program 3 (id=917): epoll_create1(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1181, 0x8403}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) 6m26.991551827s ago: executing program 3 (id=919): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x50) bpf$MAP_CREATE(0x0, &(0x7f000001b0c0)=ANY=[@ANYBLOB="0200000004000000090004000900000000000000395df0da22b98513d7b61790f4227bc64f8042a0e2a3a70a364792370485662e68079373be776bcac5515786be8b9321d43344aaf8d9692e41ae7a5e0b298182c2", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xd, &(0x7f000001b140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) sendfile(r4, r4, 0x0, 0x4) r5 = syz_open_procfs(r1, &(0x7f000001b200)='net/netstat\x00') read$FUSE(r5, &(0x7f0000019080)={0x2020}, 0x2020) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000280)}], 0x1) writev(r7, 0x0, 0x0) 6m14.758100436s ago: executing program 3 (id=952): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0x8d}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x2c, 0x0, 0x5}, 0x28) io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 6m13.450695842s ago: executing program 3 (id=956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r4, 0x0, r3, 0x0, 0x100000004, 0x0) 6m11.709744783s ago: executing program 3 (id=962): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x50) bpf$MAP_CREATE(0x0, &(0x7f000001b0c0)=ANY=[@ANYBLOB="0200000004000000090004000900000000000000395df0da22b98513d7b61790f4227bc64f8042a0e2a3a70a364792370485662e68079373be776bcac5515786be8b9321d43344aaf8d9692e41ae7a5e0b298182c2", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xd, &(0x7f000001b140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) sendfile(r4, r4, 0x0, 0x4) r5 = syz_open_procfs(r1, &(0x7f000001b200)='net/netstat\x00') read$FUSE(r5, &(0x7f0000019080)={0x2020}, 0x2020) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000280)}], 0x1) writev(r7, 0x0, 0x0) 5m56.654443535s ago: executing program 33 (id=962): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x50) bpf$MAP_CREATE(0x0, &(0x7f000001b0c0)=ANY=[@ANYBLOB="0200000004000000090004000900000000000000395df0da22b98513d7b61790f4227bc64f8042a0e2a3a70a364792370485662e68079373be776bcac5515786be8b9321d43344aaf8d9692e41ae7a5e0b298182c2", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xd, &(0x7f000001b140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) sendfile(r4, r4, 0x0, 0x4) r5 = syz_open_procfs(r1, &(0x7f000001b200)='net/netstat\x00') read$FUSE(r5, &(0x7f0000019080)={0x2020}, 0x2020) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000280)}], 0x1) writev(r7, 0x0, 0x0) 40.274786498s ago: executing program 1 (id=1698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r4, 0x0, r3, 0x0, 0x100000004, 0x0) 39.338044002s ago: executing program 1 (id=1700): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20003, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f40)=""/4089, 0x1a, 0xff9, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{}, 'port1\x00'}) 32.454086071s ago: executing program 1 (id=1714): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 28.49076373s ago: executing program 1 (id=1727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) r4 = syz_open_procfs(r0, &(0x7f0000000340)='totmaps\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x14, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4008050}, 0x40000) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1b0000000000", @ANYBLOB="5e31aad889f038200b96ab7b703977fa86cebb6eb24c3d015027f4f339ed00ca3d", @ANYRES64=0x0], 0x20) fchmodat(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="180500000000000000000000ffffffffb7080000000000007b8af8ff0000000008000000000000964b7c7ac007c7aed0df7b8af0ff00008000bfa100000000000007010000f8ffff00000000", @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x94) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 27.360790056s ago: executing program 1 (id=1729): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) semop(0x0, 0x0, 0xffffffa3) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000740), 0x1, 0x220042) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r5, 0x400, 0x0) 26.260426369s ago: executing program 1 (id=1730): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640), 0x2f}, 0xb}], 0x3ffffbd, 0x40000040, 0x0) 14.383803397s ago: executing program 5 (id=1754): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={'erspan0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @ioapic={0x1000, 0x5, 0x4, 0x7, 0x0, [{0x1, 0x2, 0x9c, '\x00', 0x6}, {0x9, 0x9, 0xff}, {0x0, 0x9, 0x4, '\x00', 0xcc}, {0x8, 0x0, 0x1, '\x00', 0xe4}, {0x1, 0xd, 0x4, '\x00', 0x2}, {0x7, 0x8, 0x9, '\x00', 0x52}, {0x8, 0x2, 0x6, '\x00', 0x1}, {0x6, 0x1, 0x9, '\x00', 0x6}, {0x79, 0x80, 0x91, '\x00', 0x5}, {0x2, 0x5, 0xc, '\x00', 0xc}, {0xe, 0xf8, 0x7, '\x00', 0x4}, {0xfb, 0x9, 0x7, '\x00', 0x5}, {0xe, 0x1, 0xfa, '\x00', 0xbf}, {0x6, 0x81, 0x80, '\x00', 0x4}, {0x10, 0x1, 0x3, '\x00', 0xfe}, {0x7a, 0xb, 0x9, '\x00', 0x40}, {0x3, 0xb, 0x5, '\x00', 0x7}, {0x5, 0x6, 0x10, '\x00', 0x7}, {0x5, 0xa, 0x5, '\x00', 0x7}, {0x80, 0x4, 0x5, '\x00', 0x6}, {0x0, 0x8, 0xd5, '\x00', 0xf}, {0x0, 0x6, 0xa3, '\x00', 0x9}, {0x6, 0x8, 0x3b, '\x00', 0x47}, {0x9, 0x5, 0xff, '\x00', 0xff}]}}) fcntl$setstatus(r2, 0x4, 0x2000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="10002cbd7000fddbdf250d000000050030000080000008002c000700000008003c003f8e000005002f0001000000050030000000000008003a0000000000060028000400000005002900000000000a080900ffffffffffff0000"], 0x60}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) writev(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket(0x1a, 0x4, 0xfffffffd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r6, 0x1000006) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x1000000}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 13.310645879s ago: executing program 6 (id=1755): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) read$midi(r0, &(0x7f0000000180)=""/183, 0xb7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) read$midi(r0, 0x0, 0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) 11.283481236s ago: executing program 2 (id=1759): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000100)="b5770f4bb8d1821c", 0x8}, {&(0x7f0000001300)="864eb938fce1f61bbcda9c59f43acb3f403b54845615b78e52b6b0737bd9f5d64e4bc19dba78d11d3dd485f8cdc45f9bc19891b1c97ee633c31e95e79c13ff3419d1a982e907d34ef8d071f129122b02c6e31b0143dcbc59f262660b2d03d6dc8293", 0x62}, {&(0x7f00000001c0)="5be46fbdb4fb731d2695e4264ce0023d362b618f200320705f73ad854c42ebc3b12141c3e2436c8634a8a2e39799aa2817ae23", 0x33}], 0x3}, 0x4080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004fc0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.176345603s ago: executing program 34 (id=1730): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640), 0x2f}, 0xb}], 0x3ffffbd, 0x40000040, 0x0) 9.440367863s ago: executing program 2 (id=1764): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$adsp1(0xffffff9c, &(0x7f0000000080), 0x10181, 0x0) splice(r0, &(0x7f0000000040)=0xffffffffffffff5f, r1, 0x0, 0xb3c, 0x7) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x81, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x1, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xfe, 0x0, 0xa, 0x5, 0x1000005, 0x5f31, 0xf, 0x9, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x7, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x5, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0xfff, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0x8, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x400002, 0x57, 0x4, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x3a3, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x565, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xb}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0xe15, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) setsockopt(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}}, 0x0) 9.259002954s ago: executing program 5 (id=1765): syz_mount_image$ext4(&(0x7f0000000f80)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2055858, &(0x7f0000000fc0)={[{@noquota}, {@noquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x0, 0x4f3, &(0x7f0000000700)="$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") socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000002340)=""/4096) open(0x0, 0x0, 0x0) 9.257989374s ago: executing program 4 (id=1766): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) semop(0x0, 0x0, 0xffffffa3) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000740), 0x1, 0x220042) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r5, 0x400, 0x0) 7.93547124s ago: executing program 4 (id=1767): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) dup(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000340)='bdev\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x80000) write(r5, &(0x7f0000000040)="cb", 0xfffffdef) 7.279307659s ago: executing program 6 (id=1768): sched_setscheduler(0x0, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) fadvise64(r0, 0x1, 0xc, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) 6.411131149s ago: executing program 5 (id=1769): socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20003, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f40)=""/4089, 0x1a, 0xff9, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{}, 'port1\x00'}) 5.891161059s ago: executing program 4 (id=1770): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x14444, &(0x7f0000001d80)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e696362000064696e6963622c6769643d69676e6f72652c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c076f6e6761642c6769643d771d0f4d30dc61469a581342d98a7a4c3534a971c3e26de72edc9ec3db403d8b2e970b9dcea448ddbb5a116ce6f67d99a77aa50bce7fc5451bcf5b13e9698d80385c54fff77d38aa9703314cd19a075893a1648dd8ef78a118122ee7a0e400"/203, @ANYRESDEC=0x0, @ANYBLOB=',nostrict.\x00'], 0xfe, 0xc22, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000), 0x0, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r2, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 5.18139336s ago: executing program 5 (id=1771): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bc7000fcdbcf256b00000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 4.882593667s ago: executing program 6 (id=1772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') sendfile(r4, r4, 0x0, 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) 3.956009361s ago: executing program 6 (id=1773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xffffffff, 0x6361, 0x3, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240000e1}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3.669820807s ago: executing program 4 (id=1774): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 3.541760815s ago: executing program 4 (id=1775): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) sysfs$2(0x2, 0x101, 0x0) 3.541255485s ago: executing program 5 (id=1776): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) semop(0x0, 0x0, 0xffffffa3) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000740), 0x1, 0x220042) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r5, 0x400, 0x0) 3.539530505s ago: executing program 2 (id=1777): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create1(0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x1], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800000, 0x800001}, {0xffff}, {0x1ff}, {0x0, 0x3}, {}, {0x2}, {}, {}, {0x0, 0x9}], 0xc}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c850, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) 1.645360435s ago: executing program 5 (id=1778): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x2810000, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES8, @ANYRES8, @ANYRES8=0x0], 0x0, 0x352, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r0, 0xc0189436, 0x1ffffffe) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)={0x34, 0x0, [{0x86956090991702cc, 0xfffffed6, &(0x7f0000001e80)=""/133}, {0x0, 0xfffffffffffffdd3, &(0x7f0000000500)=""/10}]}) 1.642598915s ago: executing program 2 (id=1779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c0"], 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xff6}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x6, 0x2, 0x0, 0x0, @irqchip={0xf7fffffb, 0x5}}]}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000040)={0x6, 0x9}) socket(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x11e, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r7 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r4, 0x4ce1, 0x0, 0x0, 0x0, 0x0) 1.568308139s ago: executing program 6 (id=1780): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001300192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00", 0x53}], 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r6 = memfd_create(&(0x7f0000000440)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.h\xfc\x14\x05\x00\xfd\xa4\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k2Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\x04\x87\xe1$a\xcd\xaf\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%u\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\xf7\xa9\xa4\x1c\x15+\x84\x04\xce#\xf6\xda\xaa\xeb|\xb9\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:l\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\xf73\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00\xb2\xc9\xe4\x14A\x92P\x83o\xdb\x1d{E\xe8\xec\x85\xd4\xd2\x19\x18\xfd\xfcc~Y\x8f\xb3\x1d<\x91O\xe7\x04\x11\x1f\xbdz\xf1J\xc2\xb2\xdfH\xa7\xa7\xb80I\xc7P\xe9\n\xc8\xd6\x82\xc0\x1d\x82\x83$ky\xea\x9c5\xf3kF\xf5\xf3\xb2\xf4\r\xe3\xfe\xe0\xef8@|\xf9UGNI\xd2\xd1\xda\xcf:\x94Y\xb0\x80\xc4N\x95\xec\x90{\x19\\\f\x8b\xe1L\x06\xf42\x0e\xd1\xa9i)?\x7f;\xee\xfe\xc2\x10)\x1dQ\xcac\x14\xe8L\x16\x12!\x8120\x8e\xc9--\x96\xe3\x82\x8dT\x9b,\xc6\x83\xcb\x9bW\xa81\x9b\x88\xce\xaa\x01\xe0\x8cfVu\xdc\xf6\'\xc10a\x11\x98\xd6\x9cGp\xfeQ0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r8, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x6014, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 402.932217ms ago: executing program 2 (id=1782): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 251.467655ms ago: executing program 2 (id=1783): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x14444, &(0x7f0000001d80)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e696362000064696e6963622c6769643d69676e6f72652c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c076f6e6761642c6769643d771d0f4d30dc61469a581342d98a7a4c3534a971c3e26de72edc9ec3db403d8b2e970b9dcea448ddbb5a116ce6f67d99a77aa50bce7fc5451bcf5b13e9698d80385c54fff77d38aa9703314cd19a075893a1648dd8ef78a118122ee7a0e400"/203, @ANYRESDEC=0x0, @ANYBLOB=',nostrict.\x00'], 0xfe, 0xc22, &(0x7f00000002c0)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu43bTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22YXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkFPAYGbfikuKsmhTpCj7+2zqNzvz3sx7M+sZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/fOnMc+lhtwIAOEhXxr985qznPwB8rFz1//8AAAAAAAAAAAAAAHDYpSji8Ugxf2U9TVafOwYut2dv3Z4YGd252rFU1TxSlS9/Bp47e+78F54fvtDN96//oD0Zr45fvVR/ae7m/EJrcbE1XZ+YbU/NTbd2vYe91t9uqDoB9Zuv3Zq+fn2xfvbZc1s23x58r/+xk4MXh58+/VS37MTI6Oh4T5la34c++l3uNcLjaBRxOlI8890fp2ZEFLH3c3Gf785+O1Z1YqjqxMTIaNWRmXZzdqncONY9EUVEvadSo3uODuBa7EkjYrlsftngobJ74/PNhea1mVZ9rLmw1F5qz82OpU5ry/7Uo4gLKWIlItb6795dXxRRixTfPrGerkXEke55+Hw1MPje7Sj2sY+7ULaz3hexUjwC1+wQ648iXokUP3m7iKnynOWf+FzEK2V+P+LNMl+MSOUX43zEuzt8j3g01aKIvyiv/8X1NB0RGyc660frl79S/9Ls9bmest37yiP/fDhIh/zeNBBFNKs7/nr68L/ZAQAAAAAAAAAAAAAAAOBBOxZFPBkpXv6PP67GFUc1Lv3ExeE/GPzF3jHjT9xnP2XZZyNiudjdmNyjeQjxWBpL6SGPJf44G4gi/iSP//vmw24MAAAAAAAAAAAAAAAAAADAx1oRP4oUL7xzKq1E75zi7dkb9avNazOdWWG7c/9250zf2NjYqKdONnJO5lzOuZJzNedazihy/ZyNnJM5l3Ou5FzNuZYzjuT6ORs5J3Mu51zJuZpzLWfUcv2cjZyTOZdzruRczbmWMw7J3L0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8lRRTxs0jxra+tp0gR0YiYjE6u9nfLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPU38q4nuRov6HjTvrahGRqn87TpW/nI/G0TI/GY3hMl+MxqWczSprjW/e92hpX/rAh9eXivhhpOgfeOvO1cnXv6/zafOavfn1zU+/Uuvkke7Gwff6Hzt54uLw6K89ca/lHa/+0OX27K3b9YmR0dHxntW1fPRP9qwbzMctHkzXiYjF1994rTkz01qw8PFYqHUWanFI2nNQC/l+FYelPdsXGoejGZsLD/nGxIEon//vRorfeec/uw/87vP/Fzqf7jzh46d/uvn8f2H7jvbp+f94z7oX8u9G+moRA0s35/tORgwsvv7G6fbN5o3Wjdbs+TNnvjg8/MVzZ/qORgxcb8+0epb2fKoAAAAAAAAAAAAAAAAADlYq4vciRfOH66keEber8VqDF4efPv3UkThSjbfaMm7r1fGrl+ovzd2cX2gtLram6xOz7am56dZuDzdQDfeaGBndl87c17F9bv+xgZfm5l9faN/4o6Udtx8fuHRtcWmhObXz5jgWRUSjd81Q1eCJkdGq0TPt5mxVdewBvUqhLxXxX5Fi6nw9fTavy+P/to/w3zL+f3n7jvZp/N8netaVx0ypiJ9Git/+yyfis1U7j8dd5yyX+9tIMXThM7lcHC3LddvQea9AZ2RgWfb/IsU//mxr2e54yMc3yz636xP7iCiv/4lI8b0//078Rl639f0PO1//49t3tE/X/1M9645veV/BnrtOvv6nI8WLj78Vv5nXvd/7P4rY2Nj4RsSpXPjO+zn26fp/umfdYHSO+1sPrvsAAAAAAAAAAACPrL5UxN9FiqdGa+n5vG43f/9vevuO9unvf/1yz7rpA5qvaM8nFQAAAAAOib5UxI8ixY2lt+6Mod46/rtn/Ofvbs69PpK2ba3+nO+XqvcGPMg//+s1mI87ufduAwAAAAAAAAAAAAAAAAAAwKGSUhHP5/nUJ+8zn/pqpHj5f57J5dLJslx3HvjB6teBK3Ozpy/NzMxNNZea12Za9fH55lSrrPupSLH+N5/JdYtqfvXufPOdOd4HNrpzsS9EitG/75btzMXenZu8Mx94Zy72suwnIsV//8PWst15rD+9WfZsWfavI8VX/3nnsic3y54ry34nUvzgq/Vu2eNl2e77UTvvJB2oxUzr2am5mbtehQoAAAAAAAAAAAAAAAAAAAAfVF8q4s8ixf/eXInlPOw/z//fnYG/1i375td75vvf5nY1z/9gNf//vZY/zPz/gw+spwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OhIUcQbkWL+ynpa7S8/dwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lzw/fKGb71//QXsyXh2/eqn+0tzN+YXW4mJruj4x256am27teg97rb956jqGqhNQv/narenr1xfrZ589t2Xz7cH3+h87OXhx+OnTT3XLToyMjo73lKn1fYCjf6DGbToaRfxVpHjmuz9O/9IfUcTez8V9vjv77VjViaGqExMjo1VHZtrN2aVy41j3RBQR9Z5Kje45OoBrsSeNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv3t3fVHEa5Hi2yfW07/2RxzpnofPXxn/8pmz925HsY993IWynfW+iJXiEbhmh1h/FPFPkeInb5+Kf+uPqEXnJz4X8UqZ3494s8wXI1KK2PhGxLs7fI94NNWiiP8vr//F9fR2f3k/6N5XLn+l/qXZ63M9Zbv3lV09H3793sd86M+Hg3TI700DUcQPqjv+evp3/10DAAAAAAAAAAAAAAAAHCJF/GqkeOGdU6kaH3xnTHF79kb9avPaTGdYX3fsX3fM9MbGxkY9dbKRczLncs6VnKs513JGkevnbOSczLmccyXnas61nHEk18/ZyDmZcznnSs7VnGs5o5br52zknMy5nHMl52rOtZxxSMbuAQAAAAAAAAAAAAAAAAAAHy1F9U+Kb31tPW30d+aXnoxOrpoP9CPv5wEAAP//N4D+uw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r2, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=1784): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) kernel console output (not intermixed with test programs): no interface number 0 [ 382.968983][ T7603] EXT4-fs (loop1): Ignoring removed orlov option [ 382.981332][ T4253] usb 3-1: config 13 interface 51 has no altsetting 0 [ 382.994945][ T7603] EXT4-fs (loop1): Test dummy encryption mode enabled [ 383.002488][ T7603] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 383.073867][ T7603] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 383.104873][ T7603] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,i_version,nouid32,,errors=continue. Quota mode: none. [ 383.130303][ T7610] loop3: detected capacity change from 0 to 128 [ 383.176547][ T7610] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 383.194890][ T4253] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=60.e3 [ 383.204513][ T4253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.223933][ T4253] usb 3-1: Product: syz [ 383.226179][ T7612] loop2: detected capacity change from 0 to 2048 [ 383.244725][ T4253] usb 3-1: Manufacturer: syz [ 383.264750][ T4253] usb 3-1: can't set config #13, error -71 [ 383.276493][ T4253] usb 3-1: USB disconnect, device number 18 [ 383.288643][ T7612] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.299059][ T7603] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 383.341562][ T25] audit: type=1800 audit(1770309543.370:119): pid=7610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.884" name="file1" dev="loop3" ino=104 res=0 errno=0 [ 383.576498][ T7620] loop2: detected capacity change from 0 to 256 [ 383.668713][ T7631] loop3: detected capacity change from 0 to 256 [ 383.705349][ T7620] exfat: Unknown parameter 'ÿÿ' [ 383.737666][ T7633] loop1: detected capacity change from 0 to 512 [ 383.761027][ T7631] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 384.995679][ T7631] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 386.252240][ T7631] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 386.319848][ T7633] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 386.343668][ T7633] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.344756][ T7631] exFAT-fs (loop3): error, failed to bmap (inode : ffff8880602bbbe0 iblock : 0, err : -5) [ 386.402017][ T7633] EXT4-fs (loop1): re-mounted. Opts: grpjquota=,errors=continue,noblock_validity,. Quota mode: writeback. [ 386.464406][ T7631] exFAT-fs (loop3): Filesystem has been set read-only [ 386.841496][ T7648] hub 9-0:1.0: USB hub found [ 386.842863][ T7649] loop3: detected capacity change from 0 to 256 [ 386.847500][ T7648] hub 9-0:1.0: 1 port detected [ 387.450282][ T7656] loop2: detected capacity change from 0 to 16 [ 387.493910][ T7656] erofs: (device loop2): mounted with root inode @ nid 36. [ 387.615402][ T7658] loop1: detected capacity change from 0 to 128 [ 389.676825][ T7669] loop3: detected capacity change from 0 to 2048 [ 389.679952][ T7658] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 389.710946][ T7658] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 389.749309][ T7669] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 389.805304][ T7658] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 389.819705][ T7672] netlink: 128 bytes leftover after parsing attributes in process `syz.5.891'. [ 393.370999][ T7690] loop4: detected capacity change from 0 to 1024 [ 393.628163][ T7692] hub 9-0:1.0: USB hub found [ 393.633870][ T7692] hub 9-0:1.0: 1 port detected [ 393.910056][ T7690] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 394.296640][ T7690] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 394.351444][ T7694] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20003 [ 394.385399][ T7690] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 394.406434][ T7690] System zones: 0-1, 3-36 [ 394.417749][ T7697] loop5: detected capacity change from 0 to 1024 [ 394.607251][ T7690] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 395.053296][ T7697] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 395.068621][ T7697] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.110716][ T7697] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.902: inode has both inline data and extents flags [ 396.642584][ T7712] loop3: detected capacity change from 0 to 1024 [ 396.671306][ T7711] loop5: detected capacity change from 0 to 512 [ 396.739519][ T7711] EXT4-fs (loop5): Test dummy encryption mode enabled [ 396.759156][ T7711] EXT4-fs (loop5): Ignoring removed oldalloc option [ 396.808300][ T7711] EXT4-fs (loop5): 1 truncate cleaned up [ 396.814089][ T7711] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,bsdgroups,nouid32,i_version,prjquota,oldalloc,stripe=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 396.986243][ T7712] loop_set_status: loop3 () has still dirty pages (nrpages=1) [ 397.890801][ T7726] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 398.564992][ T7736] hub 9-0:1.0: USB hub found [ 398.571069][ T7736] hub 9-0:1.0: 1 port detected [ 399.329952][ T7740] loop1: detected capacity change from 0 to 128 [ 399.528737][ T7744] loop4: detected capacity change from 0 to 2048 [ 400.304752][ T4250] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 400.334093][ T7744] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.775098][ T4250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.811043][ T4250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.539197][ T4250] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 401.608213][ T4250] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 401.718313][ T4250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.821079][ T4250] usb 3-1: config 0 descriptor?? [ 404.041625][ T4250] usbhid 3-1:0.0: can't add hid device: -71 [ 404.051580][ T4250] usbhid: probe of 3-1:0.0 failed with error -71 [ 404.154806][ T4250] usb 3-1: USB disconnect, device number 19 [ 404.572675][ T7771] loop4: detected capacity change from 0 to 128 [ 404.625067][ T7771] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 404.670558][ T7771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.037904][ T7777] loop1: detected capacity change from 0 to 128 [ 405.049992][ T7776] device wlan0 entered promiscuous mode [ 405.141615][ T7777] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 405.194714][ T7777] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 408.373258][ T7810] hub 9-0:1.0: USB hub found [ 408.378953][ T7810] hub 9-0:1.0: 1 port detected [ 409.405259][ T7827] loop4: detected capacity change from 0 to 256 [ 409.501756][ T7827] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 409.610311][ T7827] attempt to access beyond end of device [ 409.610311][ T7827] loop4: rw=524288, want=34359738496, limit=256 [ 409.679920][ T7827] attempt to access beyond end of device [ 409.679920][ T7827] loop4: rw=0, want=34359738496, limit=256 [ 409.733948][ T25] audit: type=1800 audit(1770309569.760:120): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.942" name="file1" dev="loop4" ino=1048619 res=0 errno=0 [ 409.771404][ T7830] loop1: detected capacity change from 0 to 8192 [ 409.862266][ T7830] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 410.024752][ T7830] FAT-fs (loop1): Filesystem has been set read-only [ 410.117726][ T7838] trusted_key: encrypted_key: key user:syz not found [ 410.923334][ T7842] md: array md2 already initialised! [ 410.975400][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.948'. [ 411.218093][ T7854] loop2: detected capacity change from 0 to 128 [ 411.355195][ T7854] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 411.426838][ T4307] Bluetooth: hci2: command 0x0405 tx timeout [ 411.454210][ T7854] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 411.794656][ T7854] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 411.894015][ T7854] UDF-fs: Scanning with blocksize 512 failed [ 411.926685][ T7854] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 412.085474][ T7854] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 412.161848][ T7867] hub 9-0:1.0: USB hub found [ 412.167645][ T7867] hub 9-0:1.0: 1 port detected [ 412.465140][ T7854] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 412.548558][ T7854] UDF-fs: Scanning with blocksize 1024 failed [ 412.869397][ T7854] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 412.908173][ T7854] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 414.113108][ T7854] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 414.123057][ T7854] UDF-fs: Scanning with blocksize 2048 failed [ 414.132600][ T7854] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 414.156982][ T7854] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 414.189832][ T7854] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 414.199616][ T7854] UDF-fs: Scanning with blocksize 4096 failed [ 414.213244][ T7854] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 414.466474][ T7883] loop5: detected capacity change from 0 to 2048 [ 414.577887][ T7883] UDF-fs: bad mount option "volume=00000000000tÒÕ’" or missing value [ 414.578606][ T7882] md: array md2 already initialised! [ 416.255424][ T7904] hub 9-0:1.0: USB hub found [ 416.261242][ T7904] hub 9-0:1.0: 1 port detected [ 417.347422][ T7918] md: array md2 already initialised! [ 417.895242][ T4250] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 418.455170][ T4250] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 419.187348][ T4250] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.304069][ T4250] usb 3-1: config 0 interface 0 has no altsetting 0 [ 421.613521][ T4250] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 421.625219][ T4250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.723674][ T4250] usb 3-1: config 0 descriptor?? [ 421.789592][ T4250] usb 3-1: can't set config #0, error -71 [ 421.834872][ T4250] usb 3-1: USB disconnect, device number 20 [ 425.616306][ T7965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.978'. [ 425.627817][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.978'. [ 425.638491][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.978'. [ 425.749140][ T7964] loop2: detected capacity change from 0 to 512 [ 425.780241][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.791010][ T7957] loop1: detected capacity change from 0 to 512 [ 425.821822][ T7968] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 425.858423][ T7964] EXT4-fs (loop2): Ignoring removed nobh option [ 425.878314][ T7957] EXT4-fs (loop1): Test dummy encryption mode enabled [ 425.925725][ T7957] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 425.978152][ T7964] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 425.987153][ T7964] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 425.995851][ T7964] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #13: comm syz.2.985: inode has both inline data and extents flags [ 426.027945][ T7964] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.985: couldn't read orphan inode 13 (err -117) [ 426.040755][ T7957] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.979: bad orphan inode 131083 [ 426.052486][ T7964] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 426.075216][ T7964] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 426.192621][ T7979] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 426.265158][ T7978] xt_limit: Overflow, try lower: 2147483649/3300 [ 426.670911][ T7957] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 426.676049][ T7979] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 426.768112][ T4197] Bluetooth: unknown link type 130 [ 426.796193][ T7978] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 429.147911][ T4307] Bluetooth: hci1: command 0x0409 tx timeout [ 433.309770][ T8019] chnl_net:caif_netlink_parms(): no params data found [ 433.614390][ T8019] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.637827][ T25] audit: type=1326 audit(1770309593.670:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.2.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 433.675594][ T8019] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.694476][ T8019] device bridge_slave_0 entered promiscuous mode [ 433.696793][ T8028] loop2: detected capacity change from 0 to 2044 [ 433.715465][ T8019] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.740834][ T8019] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.771322][ T25] audit: type=1326 audit(1770309593.670:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.2.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 433.797627][ T8019] device bridge_slave_1 entered promiscuous mode [ 433.860524][ T8019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.874642][ T25] audit: type=1326 audit(1770309593.670:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.2.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 433.922398][ T8019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.955227][ T25] audit: type=1326 audit(1770309593.670:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.2.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 434.050380][ T8019] team0: Port device team_slave_0 added [ 434.084655][ T25] audit: type=1326 audit(1770309593.670:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.2.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 434.123131][ T8019] team0: Port device team_slave_1 added [ 434.194203][ T8037] loop2: detected capacity change from 0 to 256 [ 434.235829][ T25] audit: type=1326 audit(1770309593.670:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.2.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 434.264048][ T8019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.296754][ T8019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.344360][ T8040] loop4: detected capacity change from 0 to 1024 [ 434.393557][ T8037] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 434.411868][ T8019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.429431][ T8040] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 434.469228][ T8040] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 8192 [ 434.505253][ T8037] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 434.549836][ T8019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.559150][ T25] audit: type=1326 audit(1770309593.670:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.2.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 434.582053][ T25] audit: type=1326 audit(1770309593.670:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.2.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 434.606069][ T25] audit: type=1326 audit(1770309593.670:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.2.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 434.619194][ T8037] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 434.628528][ T25] audit: type=1326 audit(1770309593.670:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.2.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 434.629217][ T8019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.704083][ T8019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.857647][ T8019] device hsr_slave_0 entered promiscuous mode [ 435.177075][ T4273] Bluetooth: hci5: command 0x0409 tx timeout [ 435.267890][ T8019] device hsr_slave_1 entered promiscuous mode [ 435.300063][ T8019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.309252][ T8019] Cannot create hsr debugfs directory [ 435.681876][ T8049] loop1: detected capacity change from 0 to 736 [ 437.644702][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 437.855091][ T8073] loop5: detected capacity change from 0 to 8 [ 437.895506][ T8019] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 438.461054][ T8069] loop1: detected capacity change from 0 to 8192 [ 438.516206][ T8073] SQUASHFS error: zlib decompression failed, data probably corrupt [ 438.524182][ T8073] SQUASHFS error: Failed to read block 0x4de: -5 [ 438.539466][ T8019] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 438.573826][ T8019] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 438.582029][ T8073] SQUASHFS error: Failed to read block 0x4e2: -5 [ 438.637233][ T8073] SQUASHFS error: Failed to read block 0x9ca: -5 [ 438.643812][ T8073] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 438.654310][ T8019] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 438.679321][ T8073] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 438.735067][ T8073] SQUASHFS error: Failed to read block 0x535f2: -5 [ 438.749067][ T25] kauditd_printk_skb: 46 callbacks suppressed [ 438.749081][ T25] audit: type=1800 audit(1770309598.780:177): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1016" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 439.016417][ T8086] loop5: detected capacity change from 0 to 256 [ 439.053660][ T8086] FAT-fs (loop5): Unrecognized mount option "ÿÿÿ" or missing value [ 439.076174][ T8019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.745672][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 439.819221][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 439.835488][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 439.878506][ T8019] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.961461][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 439.972140][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.978715][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.012512][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 440.049359][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.056533][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.129987][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 440.236126][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 440.266351][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 440.295143][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.302502][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.319041][ T1108] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 440.330104][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 440.342453][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 440.356865][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 440.368063][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 440.382760][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 440.403665][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 440.426081][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 440.465382][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 440.514425][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 440.553130][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 440.586104][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 440.615436][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 440.626274][ T8019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 440.735087][ T1108] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.768949][ T1108] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.785454][ T8097] loop2: detected capacity change from 0 to 1024 [ 440.795519][ T1108] usb 5-1: config 0 interface 0 has no altsetting 0 [ 440.802596][ T1108] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 440.814481][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.843545][ T1108] usb 5-1: config 0 descriptor?? [ 440.896370][ T8097] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 440.931095][ T8097] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 8192 [ 441.036645][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.079962][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.185864][ T8019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.364731][ T1108] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 441.393417][ T1108] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 441.434465][ T1108] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 441.470102][ T1108] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 441.498618][ T1108] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 441.544662][ T1108] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 441.575044][ T1108] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 441.582767][ T1108] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 441.605091][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 441.638283][ T1108] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 441.663304][ T4185] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 441.688790][ T4185] FAT-fs (loop1): Filesystem has been set read-only [ 441.694671][ T1108] cougar 0003:060B:500A.0004: unknown main item tag 0x0 [ 441.703152][ T1108] cougar 0003:060B:500A.0004: collection stack underflow [ 441.734694][ T1108] cougar 0003:060B:500A.0004: item 0 0 0 12 parsing failed [ 441.742323][ T1108] cougar 0003:060B:500A.0004: parse failed [ 441.760507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 441.774745][ T1108] cougar: probe of 0003:060B:500A.0004 failed with error -22 [ 441.793081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 441.804682][ T6859] Bluetooth: hci5: command 0x0419 tx timeout [ 441.866796][ T6859] usb 5-1: USB disconnect, device number 6 [ 441.906299][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 441.959665][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 442.060384][ T8019] device veth0_vlan entered promiscuous mode [ 443.087602][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 443.102686][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 443.241776][ T8019] device veth1_vlan entered promiscuous mode [ 443.291420][ T8130] loop1: detected capacity change from 0 to 1024 [ 444.023555][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 444.040847][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 444.116920][ T8130] loop_set_status: loop1 () has still dirty pages (nrpages=2) [ 444.118316][ T8019] device veth0_macvtap entered promiscuous mode [ 444.172861][ T8019] device veth1_macvtap entered promiscuous mode [ 444.971645][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.010150][ T8152] loop1: detected capacity change from 0 to 1024 [ 445.034842][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.074796][ T8152] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 445.083093][ T8152] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 8192 [ 445.111898][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.838553][ T8159] netlink: 'syz.4.1037': attribute type 1 has an invalid length. [ 445.847176][ T8159] netlink: 'syz.4.1037': attribute type 2 has an invalid length. [ 446.327775][ T8156] md: array md2 already initialised! [ 446.374562][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.424591][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.480698][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.514698][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.566045][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.606944][ T8019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.616276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 446.676649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.831063][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.237891][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.669188][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.738401][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.804417][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.834600][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.862385][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.894098][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.934069][ T8019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.962414][ T8019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.008977][ T8019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.105287][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 448.175672][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 448.273191][ T8019] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.322380][ T8019] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.464580][ T8019] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.524246][ T8019] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.624304][ T8183] loop2: detected capacity change from 0 to 128 [ 449.724906][ T25] audit: type=1804 audit(1770309609.750:178): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1045" name="/newroot/209/bus/bus" dev="loop2" ino=1048635 res=1 errno=0 [ 449.932325][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.955160][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.029171][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 450.066251][ T8183] attempt to access beyond end of device [ 450.066251][ T8183] loop2: rw=2049, want=129, limit=128 [ 450.079063][ T4718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.123661][ T4718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.179542][ T8183] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 450.215376][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 450.307915][ T4215] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.560321][ T4215] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.663362][ T8194] hub 9-0:1.0: USB hub found [ 450.669361][ T8194] hub 9-0:1.0: 1 port detected [ 451.268857][ T8195] loop1: detected capacity change from 0 to 512 [ 451.435518][ T8195] EXT4-fs (loop1): Ignoring removed orlov option [ 451.442367][ T8195] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 451.516881][ T8200] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1038'. [ 451.688435][ T4215] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.794149][ T8195] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 451.825564][ T8195] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 451.846878][ T8195] EXT4-fs (loop1): orphan cleanup on readonly fs [ 451.853480][ T8195] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 451.863750][ T8195] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 451.879365][ T8195] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 451.906323][ T4215] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.921119][ T8195] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1047: bg 0: block 40: padding at end of block bitmap is not set [ 451.977881][ T8195] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 452.152680][ T8195] EXT4-fs (loop1): 1 truncate cleaned up [ 452.225258][ T8195] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,acl,noblock_validity,norecovery,i_version,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 453.015150][ T8195] EXT4-fs (loop1): shut down requested (1) [ 454.620156][ T8227] loop5: detected capacity change from 0 to 512 [ 454.668486][ T8229] loop1: detected capacity change from 0 to 256 [ 454.703715][ T8229] FAT-fs (loop1): Unrecognized mount option "ÿÿÿ" or missing value [ 454.745026][ T8227] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 454.793791][ T8227] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 455.519114][ T8227] System zones: 0-1, 15-15, 18-18, 34-34 [ 455.525997][ T8227] EXT4-fs (loop5): orphan cleanup on readonly fs [ 455.532499][ T8227] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 455.542580][ T8227] EXT4-fs warning (device loop5): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 455.604981][ T8237] loop4: detected capacity change from 0 to 736 [ 455.608124][ T8227] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 455.786435][ T8227] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1044: bg 0: block 40: padding at end of block bitmap is not set [ 456.175832][ T8227] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 456.385422][ T8247] input: syz0 as /devices/virtual/input/input8 [ 456.394343][ T8227] EXT4-fs (loop5): 1 truncate cleaned up [ 456.415870][ T8227] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 456.502109][ T8247] loop2: detected capacity change from 0 to 512 [ 456.784401][ T8227] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 456.897623][ T8247] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 456.914597][ T1108] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 457.075931][ T8247] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.632737][ T8284] loop4: detected capacity change from 0 to 1024 [ 459.770618][ T8284] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 459.825075][ T8284] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 8192 [ 460.752555][ T4215] device hsr_slave_0 left promiscuous mode [ 460.799471][ T4215] device hsr_slave_1 left promiscuous mode [ 460.826733][ T4215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.880204][ T4215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.800741][ T4215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.866097][ T8321] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.878960][ T8321] blk_update_request: I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.890867][ T8321] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 461.902862][ T8321] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.914521][ T8321] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 461.924345][ T8321] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 461.932658][ T8321] UDF-fs: Scanning with blocksize 512 failed [ 461.941290][ T8321] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.954819][ T8321] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.966378][ T8321] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 461.976826][ T8321] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 461.988712][ T8321] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 461.998820][ T8321] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 462.007315][ T8321] UDF-fs: Scanning with blocksize 1024 failed [ 462.015440][ T8321] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 462.027640][ T8321] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 462.039499][ T8321] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 462.050125][ T8321] blk_update_request: I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 462.061790][ T8321] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 462.071746][ T8321] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 462.080936][ T8321] UDF-fs: Scanning with blocksize 2048 failed [ 462.089669][ T8321] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 462.101974][ T8321] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 462.112503][ T8321] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 462.122645][ T8321] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 462.130851][ T8321] UDF-fs: Scanning with blocksize 4096 failed [ 462.137173][ T8321] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 462.677771][ T4215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.722373][ T4215] device bridge_slave_1 left promiscuous mode [ 462.743296][ T4215] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.763268][ T8327] loop4: detected capacity change from 0 to 256 [ 462.771456][ T4215] device bridge_slave_0 left promiscuous mode [ 462.784749][ T4215] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.797088][ T8325] loop1: detected capacity change from 0 to 1024 [ 462.854344][ T4215] device veth1_macvtap left promiscuous mode [ 462.886844][ T4215] device veth0_macvtap left promiscuous mode [ 462.909128][ T8327] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 462.924828][ T4215] device veth1_vlan left promiscuous mode [ 462.940939][ T8325] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 462.951110][ T4215] device veth0_vlan left promiscuous mode [ 462.974734][ T8325] hfsplus: xattr search failed [ 463.023805][ T5445] hfsplus: b-tree write err: -5, ino 4 [ 465.509403][ T8352] loop5: detected capacity change from 0 to 256 [ 465.518086][ T4215] team0 (unregistering): Port device team_slave_1 removed [ 465.548376][ T8352] FAT-fs (loop5): Unrecognized mount option "ÿÿÿ" or missing value [ 465.571314][ T4215] team0 (unregistering): Port device team_slave_0 removed [ 465.606476][ T4215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.336838][ T4215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.453456][ T4215] bond0 (unregistering): Released all slaves [ 467.512618][ T8376] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 468.568880][ T8389] loop1: detected capacity change from 0 to 128 [ 468.625730][ T8389] UDF-fs: bad mount option "1844674407370955161501777777777777777777777" or missing value [ 468.946711][ T8393] loop1: detected capacity change from 0 to 256 [ 469.047764][ T8393] exfat: Bad value for 'gid' [ 469.666315][ T8395] loop1: detected capacity change from 0 to 1024 [ 470.027882][ T4718] hfsplus: b-tree write err: -5, ino 3 [ 470.534587][ T4229] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 470.954759][ T4229] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.980373][ T4229] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 471.052505][ T4229] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 471.794833][ T4229] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 471.847235][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.036931][ T8442] loop6: detected capacity change from 0 to 512 [ 472.366535][ T4229] usb 6-1: Product: syz [ 472.377808][ T4229] usb 6-1: Manufacturer: syz [ 472.397556][ T4229] usb 6-1: SerialNumber: syz [ 472.620584][ T8442] EXT4-fs (loop6): Test dummy encryption mode enabled [ 472.658785][ T8442] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 472.777638][ T8442] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.1098: bad orphan inode 131083 [ 472.917831][ T8442] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 472.978894][ T4201] Bluetooth: unknown link type 130 [ 473.024795][ T6859] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 473.314685][ T6859] usb 3-1: Using ep0 maxpacket: 8 [ 473.484837][ T6859] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 473.512289][ T6859] usb 3-1: config 179 has no interface number 0 [ 473.528413][ T8473] loop4: detected capacity change from 0 to 512 [ 473.532948][ T6859] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 473.548475][ T6859] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 473.560216][ T6859] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 473.575022][ T4229] cdc_ncm 6-1:1.0: bind() failure [ 473.591960][ T6859] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 473.602203][ T4229] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 473.650624][ T6859] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 473.661681][ T4229] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 473.695545][ T6859] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 473.709691][ T8473] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1105: inode has both inline data and extents flags [ 473.733250][ T6859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.754240][ T8477] loop1: detected capacity change from 0 to 512 [ 473.784887][ T8450] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 473.786323][ T8473] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1105: couldn't read orphan inode 15 (err -117) [ 473.810826][ T4229] usbtest: probe of 6-1:1.1 failed with error -71 [ 473.891304][ T4229] usb 6-1: USB disconnect, device number 5 [ 473.908524][ T8473] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 473.910087][ T8477] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 474.002889][ T8477] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.747468][ T8477] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 3: comm syz.1.1108: lblock 0 mapped to illegal pblock 3 (length 1) [ 474.836861][ T6859] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input9 [ 474.995742][ T4307] usb 3-1: USB disconnect, device number 22 [ 475.014571][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 475.027835][ T4307] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 475.152683][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 475.304666][ T8477] EXT4-fs (loop1): Remounting filesystem read-only [ 476.037283][ T154] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm kworker/u4:2: Invalid inode table block 34 in block_group 0 [ 476.076887][ T8501] loop5: detected capacity change from 0 to 128 [ 476.092720][ T154] EXT4-fs (loop1): Remounting filesystem read-only [ 476.109848][ T8501] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 476.178536][ T8501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 478.506563][ T8535] loop2: detected capacity change from 0 to 512 [ 479.678418][ T8520] loop4: detected capacity change from 0 to 512 [ 479.825855][ T4242] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 479.990445][ T8535] EXT4-fs (loop2): Test dummy encryption mode enabled [ 480.009050][ T8535] EXT4-fs (loop2): Test dummy encryption mode enabled [ 480.111999][ T8535] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 480.418623][ T4242] usb 6-1: config 0 has no interfaces? [ 480.495124][ T4242] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 480.519451][ T4242] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 480.564964][ T4242] usb 6-1: Manufacturer: syz [ 480.595809][ T4242] usb 6-1: config 0 descriptor?? [ 480.839703][ T8537] loop5: detected capacity change from 0 to 16 [ 481.684154][ T8537] erofs: (device loop5): mounted with root inode @ nid 36. [ 482.209359][ T4242] usb 6-1: USB disconnect, device number 6 [ 483.643297][ T8581] binder: 8579:8581 ioctl c0306201 0 returned -14 [ 484.323444][ T8596] loop5: detected capacity change from 0 to 736 [ 490.656247][ T8659] loop6: detected capacity change from 0 to 1024 [ 490.709196][ T8659] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 490.830981][ T8659] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 491.991798][ T8670] 9pnet: Insufficient options for proto=fd [ 495.302503][ T8693] loop6: detected capacity change from 0 to 764 [ 497.538043][ T8714] loop2: detected capacity change from 0 to 256 [ 499.470177][ T8729] loop4: detected capacity change from 0 to 736 [ 499.900843][ T4242] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 500.444760][ T4242] usb 6-1: Using ep0 maxpacket: 16 [ 500.535202][ T8747] loop4: detected capacity change from 0 to 2048 [ 500.576940][ T4242] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 500.612549][ T8747] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 500.614664][ T4242] usb 6-1: config 0 has no interface number 0 [ 500.679425][ T8747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 500.694699][ T4242] usb 6-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 500.744659][ T4242] usb 6-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 500.789822][ T4242] usb 6-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 501.025072][ T4242] usb 6-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 501.053208][ T4242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.104552][ T4242] usb 6-1: Product: syz [ 501.117375][ T4242] usb 6-1: Manufacturer: syz [ 501.190025][ T4242] usb 6-1: SerialNumber: syz [ 501.231561][ T4242] usb 6-1: config 0 descriptor?? [ 501.240923][ T8757] loop6: detected capacity change from 0 to 1024 [ 501.279496][ T8757] EXT4-fs (loop6): Ignoring removed orlov option [ 501.286448][ T8732] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 501.339530][ T8732] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 501.407257][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.413634][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.441718][ T8757] EXT4-fs (loop6): mounted filesystem without journal. Opts: orlov,usrjquota=,,errors=continue. Quota mode: none. [ 501.867472][ T8768] loop1: detected capacity change from 0 to 256 [ 503.080567][ T4242] usb 6-1: USB disconnect, device number 7 [ 503.712616][ T8783] netlink: 'syz.5.1168': attribute type 1 has an invalid length. [ 504.402169][ T8783] netlink: 'syz.5.1168': attribute type 2 has an invalid length. [ 504.884881][ T8797] loop5: detected capacity change from 0 to 736 [ 509.108962][ T4258] Bluetooth: hci1: command 0x2021 tx timeout [ 509.990143][ T8837] loop5: detected capacity change from 0 to 256 [ 510.054094][ T8837] exfat: Bad value for 'uid' [ 511.520113][ T8849] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 511.531153][ T8849] netlink: 'syz.4.1183': attribute type 2 has an invalid length. [ 515.698380][ T8886] device sit0 entered promiscuous mode [ 515.758635][ T8886] netlink: 'syz.2.1191': attribute type 1 has an invalid length. [ 515.830610][ T8886] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1191'. [ 516.122847][ T25] audit: type=1326 audit(1770309676.150:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8896 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 516.799523][ T25] audit: type=1326 audit(1770309676.150:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8896 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 517.575341][ T25] audit: type=1326 audit(1770309676.150:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8896 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 518.198259][ T25] audit: type=1326 audit(1770309676.150:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8896 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 518.234081][ T25] audit: type=1326 audit(1770309676.150:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8896 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 518.369339][ T25] audit: type=1326 audit(1770309676.150:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8896 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 518.462579][ T8915] loop5: detected capacity change from 0 to 736 [ 518.516956][ T25] audit: type=1326 audit(1770309676.150:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8896 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 518.713382][ T25] audit: type=1326 audit(1770309676.150:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8896 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 519.514589][ T25] audit: type=1326 audit(1770309676.150:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8896 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 519.616503][ T25] audit: type=1326 audit(1770309676.150:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8896 comm="syz.2.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 524.060877][ T8981] md: array md2 already initialised! [ 527.340160][ T8998] loop5: detected capacity change from 0 to 512 [ 527.752114][ T8998] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 527.769048][ T8998] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.823598][ T9023] loop5: detected capacity change from 0 to 128 [ 530.752538][ T9030] loop6: detected capacity change from 0 to 764 [ 531.201548][ T9040] loop5: detected capacity change from 0 to 512 [ 531.913295][ T9038] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 532.339974][ T4201] Bluetooth: unknown link type 130 [ 534.386897][ T4192] Bluetooth: hci2: command 0x201b tx timeout [ 534.388615][ T9077] netlink: 'syz.6.1232': attribute type 1 has an invalid length. [ 534.401028][ T9077] netlink: 'syz.6.1232': attribute type 2 has an invalid length. [ 534.416879][ T4192] Bluetooth: hci1: command 0x0409 tx timeout [ 535.943003][ T9087] loop2: detected capacity change from 0 to 1024 [ 536.082810][ T9087] EXT4-fs (loop2): Ignoring removed bh option [ 536.223580][ T9095] loop1: detected capacity change from 0 to 512 [ 536.315969][ T9087] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 536.416535][ T9101] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1233'. [ 537.299525][ T9109] loop2: detected capacity change from 0 to 512 [ 538.152260][ T9109] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 538.499904][ T9109] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 538.521799][ T9109] EXT4-fs (loop2): orphan cleanup on readonly fs [ 538.592014][ T9109] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.1239: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 538.719127][ T9109] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1239: couldn't read orphan inode 13 (err -117) [ 538.755477][ T9109] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,journal_dev=0x0000000000000001,grpid,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback. [ 538.860859][ T9109] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (24564!=0) [ 539.360504][ T9130] loop4: detected capacity change from 0 to 2048 [ 539.420998][ T9130] UDF-fs: bad mount option "volume=0000000000000000001" or missing value [ 539.573876][ T9137] loop1: detected capacity change from 0 to 512 [ 539.668499][ T9137] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 539.744610][ T9137] EXT4-fs (loop1): 1 truncate cleaned up [ 539.763087][ T9137] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 540.105836][ T9151] loop1: detected capacity change from 0 to 16 [ 540.776525][ T9154] netlink: 'syz.5.1245': attribute type 1 has an invalid length. [ 540.784556][ T9154] netlink: 'syz.5.1245': attribute type 2 has an invalid length. [ 541.352921][ T9151] erofs: (device loop1): mounted with root inode @ nid 36. [ 542.342093][ T9171] loop1: detected capacity change from 0 to 16 [ 542.792820][ T9171] erofs: (device loop1): mounted with root inode @ nid 36. [ 542.890444][ T9176] loop6: detected capacity change from 0 to 128 [ 544.186721][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1256'. [ 544.551070][ T9200] loop5: detected capacity change from 0 to 512 [ 546.905467][ T9223] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 547.277711][ T9233] futex_wake_op: syz.4.1253 tries to shift op by 144; fix this program [ 547.315915][ T9233] loop4: detected capacity change from 0 to 512 [ 547.875081][ T9229] loop1: detected capacity change from 0 to 736 [ 547.990350][ T9233] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 548.557248][ T9233] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1253: iget: bogus i_mode (5) [ 548.570698][ T9233] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1253: couldn't read orphan inode 15 (err -117) [ 548.583742][ T9233] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 548.595684][ T9233] ext2 filesystem being mounted at /273/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.038629][ T9250] loop4: detected capacity change from 0 to 1024 [ 550.090274][ T9250] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 550.154440][ T9250] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 8192 [ 551.797857][ T9260] loop4: detected capacity change from 0 to 256 [ 552.642929][ T9260] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d) [ 552.771528][ T25] audit: type=1800 audit(1770309712.800:189): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1271" name="file1" dev="loop4" ino=1048653 res=0 errno=0 [ 552.981791][ T9268] loop2: detected capacity change from 0 to 128 [ 553.186718][ T9268] attempt to access beyond end of device [ 553.186718][ T9268] loop2: rw=2051, want=1041, limit=128 [ 554.917631][ T9286] loop6: detected capacity change from 0 to 1024 [ 555.048172][ T9288] loop5: detected capacity change from 0 to 256 [ 555.116954][ T9288] FAT-fs (loop5): Unrecognized mount option "ÿÿÿ" or missing value [ 555.220491][ T9291] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 555.656580][ T9286] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 555.878867][ T9291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.004439][ T9286] EXT4-fs (loop6): Number of reserved GDT blocks insanely large: 8192 [ 556.058420][ T9299] loop1: detected capacity change from 0 to 512 [ 557.335940][ T9299] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 557.489952][ T9299] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.771677][ T4453] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm kworker/u4:11: Invalid inode table block 34 in block_group 0 [ 557.963159][ T9315] loop6: detected capacity change from 0 to 512 [ 557.995682][ T4453] EXT4-fs (loop1): Remounting filesystem read-only [ 558.140413][ T4185] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 34 in block_group 0 [ 558.208535][ T9315] EXT4-fs (loop6): Ignoring removed nobh option [ 558.288550][ T9315] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 558.458878][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 558.472727][ T4185] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 558.489535][ T9315] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1286: inode has both inline data and extents flags [ 558.503835][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 558.634775][ T4185] EXT4-fs error (device loop1): ext4_quota_off:6540: inode #4: comm syz-executor: mark_inode_dirty error [ 558.734060][ T9315] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1286: couldn't read orphan inode 15 (err -117) [ 558.757173][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 558.909931][ T9315] EXT4-fs (loop6): mounted filesystem without journal. Opts: auto_da_alloc,block_validity,nobh,i_version,,errors=continue. Quota mode: none. [ 562.856765][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.863886][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.892578][ T9356] loop5: detected capacity change from 0 to 256 [ 563.095462][ T9356] FAT-fs (loop5): Unrecognized mount option "ÿÿÿ" or missing value [ 569.053907][ T9394] loop4: detected capacity change from 0 to 1024 [ 569.120060][ T9394] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 569.189885][ T9394] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 8192 [ 571.050948][ T9409] loop5: detected capacity change from 0 to 8 [ 571.255465][ T25] audit: type=1326 audit(1770309731.290:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 571.341412][ T25] audit: type=1326 audit(1770309731.290:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 572.888757][ T25] audit: type=1326 audit(1770309731.290:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 572.913976][ T25] audit: type=1326 audit(1770309731.290:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 573.147710][ T9419] loop6: detected capacity change from 0 to 512 [ 573.841573][ T25] audit: type=1326 audit(1770309731.290:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 575.225780][ T25] audit: type=1326 audit(1770309731.290:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 575.249780][ T25] audit: type=1326 audit(1770309731.290:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 575.285727][ T9419] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 575.309075][ T9419] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.326419][ T25] audit: type=1326 audit(1770309731.290:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 575.504578][ T25] audit: type=1326 audit(1770309731.290:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 575.631500][ T25] audit: type=1326 audit(1770309731.310:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.5.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 577.552696][ T9446] IPVS: set_ctl: invalid protocol: 0 172.30.1.6:20003 [ 578.208740][ T9455] loop1: detected capacity change from 0 to 256 [ 580.475087][ T9471] loop1: detected capacity change from 0 to 1024 [ 581.649891][ T9471] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 581.885180][ T9481] loop1: detected capacity change from 0 to 1024 [ 581.982998][ T9481] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 582.759952][ T9486] loop6: detected capacity change from 0 to 1164 [ 583.111113][ T9481] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 8192 [ 583.365966][ T9491] loop5: detected capacity change from 0 to 1024 [ 583.378205][ T9489] loop1: detected capacity change from 0 to 512 [ 583.419972][ T9489] EXT4-fs (loop1): Ignoring removed oldalloc option [ 583.427869][ T9489] EXT4-fs (loop1): Test dummy encryption mode enabled [ 583.454536][ T9489] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 583.553194][ T9491] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 583.602118][ T9489] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1330: inode has both inline data and extents flags [ 583.687288][ T9498] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20003 [ 583.712224][ T9489] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1330: couldn't read orphan inode 15 (err -117) [ 583.731441][ T9489] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 584.146695][ T9489] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 584.181017][ T9489] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none. [ 585.367549][ T9517] loop5: detected capacity change from 0 to 256 [ 585.552064][ T25] audit: type=1326 audit(1770309745.580:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 586.152552][ T9526] loop2: detected capacity change from 0 to 736 [ 586.193800][ T25] audit: type=1326 audit(1770309745.580:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 586.262849][ T9519] loop4: detected capacity change from 0 to 8192 [ 586.304623][ T25] audit: type=1326 audit(1770309745.580:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 586.446635][ T25] audit: type=1326 audit(1770309745.580:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 586.775434][ T25] audit: type=1326 audit(1770309745.580:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 586.859656][ T25] audit: type=1326 audit(1770309745.580:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 587.070389][ T25] audit: type=1326 audit(1770309745.580:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 587.254904][ T25] audit: type=1326 audit(1770309745.580:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9520 comm="syz.6.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 587.596376][ T25] audit: type=1326 audit(1770309747.530:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b1722eb9 code=0x7ffc0000 [ 587.811093][ T25] audit: type=1326 audit(1770309747.660:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b1722eb9 code=0x7ffc0000 [ 589.915401][ T9548] loop4: detected capacity change from 0 to 512 [ 593.262146][ T9565] netlink: 'syz.4.1346': attribute type 1 has an invalid length. [ 593.271171][ T9565] netlink: 'syz.4.1346': attribute type 2 has an invalid length. [ 594.238361][ T9577] IPVS: set_ctl: invalid protocol: 0 172.30.1.7:20003 [ 599.363118][ T9609] netlink: 'syz.2.1358': attribute type 1 has an invalid length. [ 599.370880][ T9609] netlink: 'syz.2.1358': attribute type 2 has an invalid length. [ 599.869942][ T9614] loop6: detected capacity change from 0 to 512 [ 604.549603][ T9640] loop5: detected capacity change from 0 to 2048 [ 605.022772][ T9640] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 605.090576][ T9640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 605.266421][ T9641] loop2: detected capacity change from 0 to 512 [ 605.329087][ T9641] EXT4-fs (loop2): Test dummy encryption mode enabled [ 605.336198][ T9641] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 605.395037][ T9641] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1359: bad orphan inode 131083 [ 605.406175][ T9641] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 606.268066][ T4201] Bluetooth: unknown link type 130 [ 606.904889][ T9652] netlink: 'syz.5.1369': attribute type 1 has an invalid length. [ 606.912715][ T9652] netlink: 'syz.5.1369': attribute type 2 has an invalid length. [ 607.863985][ T9662] loop2: detected capacity change from 0 to 512 [ 609.013966][ T6742] Bluetooth: hci3: command 0x0409 tx timeout [ 612.844394][ T9692] loop6: detected capacity change from 0 to 1024 [ 612.890104][ T9692] EXT4-fs (loop6): inline encryption not supported [ 612.896882][ T9692] EXT4-fs (loop6): Ignoring removed nobh option [ 612.903141][ T9692] EXT4-fs (loop6): Ignoring removed bh option [ 612.909348][ T9692] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 613.006404][ T9692] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 617.214779][ T9713] loop2: detected capacity change from 0 to 256 [ 617.448708][ T9715] device sit0 entered promiscuous mode [ 617.484305][ T9715] netlink: 'syz.5.1378': attribute type 1 has an invalid length. [ 617.543019][ T9715] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1378'. [ 618.581669][ T9729] md: array md2 already initialised! [ 619.323469][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 621.253958][ T9746] futex_wake_op: syz.5.1390 tries to shift op by 144; fix this program [ 621.956012][ T9752] loop2: detected capacity change from 0 to 16 [ 622.049948][ T9751] loop5: detected capacity change from 0 to 2048 [ 622.074665][ T9752] erofs: (device loop2): mounted with root inode @ nid 36. [ 622.095452][ T13] usb 5-1: device not accepting address 7, error -71 [ 622.302821][ T9751] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 622.343054][ T9751] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 622.835001][ T4258] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 623.225563][ T4258] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.244972][ T4258] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.259633][ T4258] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 623.274784][ T4258] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 623.284353][ T4258] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.315085][ T4258] usb 7-1: config 0 descriptor?? [ 624.038103][ T4258] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 624.064701][ T4258] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 624.090488][ T4258] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 624.163311][ T4258] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 624.286338][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.292901][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.526697][ T9777] loop5: detected capacity change from 0 to 512 [ 624.901368][ T7] usb 7-1: USB disconnect, device number 2 [ 624.966896][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1399'. [ 628.622334][ T25] audit: type=1326 audit(1770309787.970:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 628.756808][ T25] audit: type=1326 audit(1770309787.980:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 628.933884][ T25] audit: type=1326 audit(1770309787.980:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 628.962832][ T9799] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1403'. [ 630.164507][ T25] audit: type=1326 audit(1770309787.980:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 630.245153][ T9822] loop4: detected capacity change from 0 to 256 [ 630.305912][ T9822] FAT-fs (loop4): Unrecognized mount option "ÿÿÿ" or missing value [ 630.354598][ T25] audit: type=1326 audit(1770309787.980:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 630.501245][ T25] audit: type=1326 audit(1770309787.980:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 630.544603][ T13] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 630.699253][ T25] audit: type=1326 audit(1770309787.980:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 630.875304][ T25] audit: type=1326 audit(1770309787.980:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9803 comm="syz.2.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 630.974869][ T13] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 631.013845][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.188505][ T13] usb 6-1: config 0 descriptor?? [ 631.256574][ T13] cp210x 6-1:0.0: cp210x converter detected [ 631.904660][ T13] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 631.925305][ T13] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 632.604855][ T13] usb 6-1: cp210x converter now attached to ttyUSB0 [ 632.617550][ T13] usb 6-1: USB disconnect, device number 8 [ 632.649436][ T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 632.706644][ T13] cp210x 6-1:0.0: device disconnected [ 633.494523][ T6859] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 633.984695][ T6859] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 634.491630][ T6859] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 634.624622][ T6859] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 635.024698][ T6859] usb 3-1: string descriptor 0 read error: -22 [ 635.030992][ T6859] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 635.908743][ T6859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.054646][ T6859] usb 3-1: can't set config #1, error -71 [ 636.165505][ T6859] usb 3-1: USB disconnect, device number 23 [ 637.801758][ T9876] loop6: detected capacity change from 0 to 512 [ 644.233240][ T9907] loop6: detected capacity change from 0 to 1024 [ 644.524981][ T9912] loop1: detected capacity change from 0 to 512 [ 644.551030][ T9914] IPVS: set_ctl: invalid protocol: 0 172.30.1.7:20003 [ 646.539739][ T9919] netlink: 'syz.6.1441': attribute type 1 has an invalid length. [ 646.547520][ T9919] netlink: 'syz.6.1441': attribute type 2 has an invalid length. [ 647.074214][ T9925] loop5: detected capacity change from 0 to 16 [ 648.715743][ T6859] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 648.724932][ T6859] Bluetooth: hci0: Injecting HCI hardware error event [ 648.734060][ T4201] Bluetooth: hci0: hardware error 0x00 [ 652.421892][ T9951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1450'. [ 654.981718][ T9964] loop6: detected capacity change from 0 to 1024 [ 655.051890][ T9964] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 655.061056][ T9964] EXT4-fs (loop6): orphan cleanup on readonly fs [ 655.073275][ T9964] EXT4-fs error (device loop6): ext4_free_blocks:6234: comm syz.6.1448: Freeing blocks not in datazone - block = 0, count = 4096 [ 655.099573][ T9964] EXT4-fs (loop6): 1 orphan inode deleted [ 655.114468][ T9964] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_dev=0x0000000000008001,max_batch_time=0x000000004a460f54,data_err=abort,noload,barrier,discard,debug_want_extra_isize=0x0000000000000004,dax=never,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 656.234345][ T9978] loop2: detected capacity change from 0 to 256 [ 657.441721][ T9983] loop1: detected capacity change from 0 to 128 [ 657.996380][ T9983] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 658.234643][ T9983] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.961661][ T9997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1461'. [ 658.995550][ T9998] loop4: detected capacity change from 0 to 16 [ 659.107516][ T9998] erofs: (device loop4): mounted with root inode @ nid 36. [ 660.199509][T10010] IPVS: set_ctl: invalid protocol: 0 172.30.1.6:20003 [ 661.203437][T10023] loop6: detected capacity change from 0 to 128 [ 661.278747][T10023] EXT4-fs (loop6): Test dummy encryption mode enabled [ 661.373440][T10023] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 661.474721][T10023] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 662.257645][ T4307] Bluetooth: hci5: command 0x0406 tx timeout [ 662.262691][T10023] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 663.643369][T10046] loop6: detected capacity change from 0 to 2048 [ 663.965177][T10046] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 664.069720][T10046] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 664.694702][T10057] loop6: detected capacity change from 0 to 512 [ 664.908911][T10057] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 665.160063][T10057] EXT4-fs (loop6): 1 truncate cleaned up [ 665.160097][T10057] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000080,noquota,stripe=0x0000000000003ffd,noload,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 665.256038][T10061] md: array md2 already initialised! [ 666.467900][T10070] loop1: detected capacity change from 0 to 1024 [ 666.552066][T10072] loop5: detected capacity change from 0 to 1024 [ 667.234981][T10082] futex_wake_op: syz.2.1485 tries to shift op by 144; fix this program [ 667.869670][T10072] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 667.919533][T10072] hfsplus: xattr search failed [ 668.032752][T10072] attempt to access beyond end of device [ 668.032752][T10072] loop5: rw=0, want=917506, limit=1024 [ 668.081876][T10071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.123379][T10072] Buffer I/O error on dev loop5, logical block 458752, async page read [ 668.172535][T10072] hfsplus: unable to mark blocks free: error -5 [ 668.204698][T10072] hfsplus: can't free extent [ 668.924106][T10099] loop5: detected capacity change from 0 to 512 [ 668.994319][T10099] EXT4-fs (loop5): Ignoring removed nobh option [ 669.037009][T10099] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 669.176030][T10099] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.1490: iget: bad extra_isize 90 (inode size 256) [ 669.207183][T10099] EXT4-fs (loop5): Remounting filesystem read-only [ 669.217018][T10099] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1490: error while reading EA inode 11 err=-117 [ 669.377790][T10099] EXT4-fs (loop5): Remounting filesystem read-only [ 669.432276][T10099] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.1490: iget: bad extra_isize 90 (inode size 256) [ 669.521636][T10104] md: array md2 already initialised! [ 669.557437][T10099] EXT4-fs (loop5): Remounting filesystem read-only [ 670.512274][T10110] netlink: 'syz.6.1492': attribute type 1 has an invalid length. [ 670.520448][T10110] netlink: 'syz.6.1492': attribute type 2 has an invalid length. [ 670.636265][T10099] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1490: error while reading EA inode 11 err=-117 [ 671.101948][T10099] EXT4-fs (loop5): Remounting filesystem read-only [ 671.131776][T10099] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #18: comm syz.5.1490: iget: bad extra_isize 90 (inode size 256) [ 671.177624][T10099] EXT4-fs (loop5): Remounting filesystem read-only [ 671.193077][T10099] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1490: error while reading EA inode 18 err=-117 [ 671.234623][ T13] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 671.255981][T10099] EXT4-fs (loop5): Remounting filesystem read-only [ 671.272892][T10099] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #18: comm syz.5.1490: iget: bad extra_isize 90 (inode size 256) [ 671.348113][T10099] EXT4-fs (loop5): Remounting filesystem read-only [ 671.374687][T10099] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1490: error while reading EA inode 18 err=-117 [ 671.415140][T10099] EXT4-fs (loop5): Remounting filesystem read-only [ 671.434754][T10099] EXT4-fs (loop5): 1 orphan inode deleted [ 671.440944][T10099] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,max_dir_size_kb=0x0000000010000005,nolazytime,nobh,. Quota mode: none. [ 671.786236][T10115] loop2: detected capacity change from 0 to 512 [ 671.854809][ T13] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 671.874634][ T13] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 671.892017][ T13] usb 5-1: Product: syz [ 671.900661][ T13] usb 5-1: Manufacturer: syz [ 671.905535][T10115] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 671.920321][ T13] usb 5-1: SerialNumber: syz [ 671.927727][T10115] ext4 filesystem being mounted at /307/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.940847][ T13] usb 5-1: config 0 descriptor?? [ 671.964271][ T25] audit: type=1800 audit(1770309831.990:218): pid=10115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1494" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 672.030575][ T13] ch341 5-1:0.0: ch341-uart converter detected [ 673.180937][ T13] usb 5-1: failed to receive control message: -110 [ 673.197706][ T13] ch341-uart: probe of ttyUSB0 failed with error -110 [ 673.238475][ T13] usb 5-1: USB disconnect, device number 9 [ 673.257087][ T13] ch341 5-1:0.0: device disconnected [ 673.304584][ T4307] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 673.816224][ T4307] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 673.925201][ T4307] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 674.065498][ T4307] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 674.127293][ T4307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 674.254781][ T4307] usb 2-1: SerialNumber: syz [ 675.509629][ T4307] usb 2-1: 0:2 : does not exist [ 675.535359][ T4307] usb 2-1: unit 5 not found! [ 675.587905][T10157] loop5: detected capacity change from 0 to 16 [ 675.604871][ T4307] usb 2-1: USB disconnect, device number 6 [ 675.663473][T10157] erofs: (device loop5): mounted with root inode @ nid 36. [ 676.169844][ T7086] udevd[7086]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 678.653545][T10176] loop6: detected capacity change from 0 to 512 [ 678.776168][T10176] EXT4-fs (loop6): Ignoring removed nobh option [ 678.806463][T10176] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 678.879103][T10176] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #11: comm syz.6.1510: iget: bad extra_isize 90 (inode size 256) [ 679.715421][T10176] EXT4-fs (loop6): Remounting filesystem read-only [ 679.773152][T10176] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1510: error while reading EA inode 11 err=-117 [ 679.873195][T10176] EXT4-fs (loop6): Remounting filesystem read-only [ 679.917746][T10176] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #11: comm syz.6.1510: iget: bad extra_isize 90 (inode size 256) [ 680.104945][T10176] EXT4-fs (loop6): Remounting filesystem read-only [ 680.111651][T10176] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1510: error while reading EA inode 11 err=-117 [ 680.175745][T10196] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20003 [ 680.183002][T10176] EXT4-fs (loop6): Remounting filesystem read-only [ 680.220231][T10176] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #18: comm syz.6.1510: iget: bad extra_isize 90 (inode size 256) [ 680.248994][T10176] EXT4-fs (loop6): Remounting filesystem read-only [ 680.260228][T10176] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1510: error while reading EA inode 18 err=-117 [ 680.287651][T10176] EXT4-fs (loop6): Remounting filesystem read-only [ 680.294934][T10176] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #18: comm syz.6.1510: iget: bad extra_isize 90 (inode size 256) [ 680.325215][T10176] EXT4-fs (loop6): Remounting filesystem read-only [ 680.334517][T10176] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1510: error while reading EA inode 18 err=-117 [ 680.363739][T10176] EXT4-fs (loop6): Remounting filesystem read-only [ 680.373165][T10176] EXT4-fs (loop6): 1 orphan inode deleted [ 680.380312][T10176] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,max_dir_size_kb=0x0000000010000005,nolazytime,nobh,. Quota mode: none. [ 681.333751][T10221] IPv6: Can't replace route, no match found [ 681.469068][T10223] loop2: detected capacity change from 0 to 8 [ 681.583377][T10225] loop5: detected capacity change from 0 to 736 [ 681.911463][ T25] audit: type=1800 audit(1770309841.940:219): pid=10223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1522" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 682.614444][ T25] audit: type=1326 audit(1770309842.640:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10222 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 683.000442][ T25] audit: type=1326 audit(1770309842.640:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10222 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 683.666528][T10243] loop5: detected capacity change from 0 to 2048 [ 683.799011][T10243] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 683.862476][T10243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 684.032724][T10259] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20003 [ 684.049665][T10261] loop4: detected capacity change from 0 to 2048 [ 684.151904][T10261] UDF-fs: error (device loop4): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (4 > 0) [ 684.240423][T10261] UDF-fs: Scanning with blocksize 512 failed [ 684.318318][T10261] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 684.341194][T10261] UDF-fs: Scanning with blocksize 1024 failed [ 684.394067][T10261] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 684.411306][T10267] md: array md2 already initialised! [ 684.459197][T10261] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 684.501302][T10261] UDF-fs: Scanning with blocksize 2048 failed [ 684.636551][T10261] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 684.690175][T10261] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 684.730163][T10261] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 684.822567][T10261] UDF-fs: Scanning with blocksize 4096 failed [ 684.876246][T10261] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 685.383518][T10281] loop1: detected capacity change from 0 to 512 [ 685.726670][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.733155][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.967900][T10281] EXT4-fs (loop1): Ignoring removed nobh option [ 685.994902][T10281] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 686.178435][T10281] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.1542: iget: bad extra_isize 90 (inode size 256) [ 686.482715][T10295] futex_wake_op: syz.5.1545 tries to shift op by 144; fix this program [ 687.158731][T10281] EXT4-fs (loop1): Remounting filesystem read-only [ 687.185447][T10281] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1542: error while reading EA inode 11 err=-117 [ 687.255641][T10299] loop2: detected capacity change from 0 to 512 [ 687.269247][T10281] EXT4-fs (loop1): Remounting filesystem read-only [ 687.359825][T10299] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 687.377967][T10281] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.1542: iget: bad extra_isize 90 (inode size 256) [ 687.392449][T10299] ext4 filesystem being mounted at /319/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.474748][T10281] EXT4-fs (loop1): Remounting filesystem read-only [ 687.481490][T10281] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1542: error while reading EA inode 11 err=-117 [ 687.485738][ T25] audit: type=1800 audit(1770309847.520:222): pid=10299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1548" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 687.502559][T10281] EXT4-fs (loop1): Remounting filesystem read-only [ 687.525141][T10306] md: array md2 already initialised! [ 687.534759][T10281] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.1542: iget: bad extra_isize 90 (inode size 256) [ 687.570076][T10281] EXT4-fs (loop1): Remounting filesystem read-only [ 687.584583][T10281] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1542: error while reading EA inode 18 err=-117 [ 687.660174][T10281] EXT4-fs (loop1): Remounting filesystem read-only [ 687.676790][T10281] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.1542: iget: bad extra_isize 90 (inode size 256) [ 688.828507][T10281] EXT4-fs (loop1): Remounting filesystem read-only [ 688.841058][T10281] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1542: error while reading EA inode 18 err=-117 [ 688.957228][T10281] EXT4-fs (loop1): Remounting filesystem read-only [ 689.264769][T10281] EXT4-fs (loop1): 1 orphan inode deleted [ 689.316168][T10281] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,max_dir_size_kb=0x0000000010000005,nolazytime,nobh,. Quota mode: none. [ 690.454988][T10327] IPVS: set_ctl: invalid protocol: 0 172.30.1.7:20003 [ 691.321137][T10334] loop1: detected capacity change from 0 to 1024 [ 691.675468][ T25] audit: type=1326 audit(1770309851.610:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 691.969483][ T25] audit: type=1326 audit(1770309851.610:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 692.325461][ T25] audit: type=1326 audit(1770309851.610:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 692.514287][ T25] audit: type=1326 audit(1770309851.610:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 692.704113][ T25] audit: type=1326 audit(1770309851.610:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 693.186982][ T25] audit: type=1326 audit(1770309851.610:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 693.297569][ T25] audit: type=1326 audit(1770309851.620:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 693.381451][ T25] audit: type=1326 audit(1770309851.620:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 694.860852][ T25] audit: type=1326 audit(1770309851.620:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 695.507980][ T25] audit: type=1326 audit(1770309851.620:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cf7c1eb9 code=0x7ffc0000 [ 696.144363][T10377] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20003 [ 696.925424][T10381] loop2: detected capacity change from 0 to 16 [ 697.283863][T10379] loop6: detected capacity change from 0 to 512 [ 697.301263][T10381] erofs: (device loop2): mounted with root inode @ nid 36. [ 697.565433][T10379] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,grpid,grpquota,journal_ioprio=0x0000000000000007,sb=0x0000000000000009,sb=0x0000000000000007,acl,min_batch_time=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 697.720070][T10379] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 699.332276][T10402] loop4: detected capacity change from 0 to 512 [ 699.458047][T10402] EXT4-fs (loop4): Ignoring removed nobh option [ 699.468173][T10402] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 699.617171][T10402] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.1565: iget: bad extra_isize 90 (inode size 256) [ 700.104724][T10402] EXT4-fs (loop4): Remounting filesystem read-only [ 700.118536][T10402] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1565: error while reading EA inode 11 err=-117 [ 700.319163][T10402] EXT4-fs (loop4): Remounting filesystem read-only [ 700.460678][T10402] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.1565: iget: bad extra_isize 90 (inode size 256) [ 700.516721][T10402] EXT4-fs (loop4): Remounting filesystem read-only [ 700.534859][T10402] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1565: error while reading EA inode 11 err=-117 [ 700.556219][T10402] EXT4-fs (loop4): Remounting filesystem read-only [ 700.639506][T10402] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.1565: iget: bad extra_isize 90 (inode size 256) [ 700.701457][T10402] EXT4-fs (loop4): Remounting filesystem read-only [ 700.716363][T10402] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1565: error while reading EA inode 18 err=-117 [ 701.879233][T10423] IPVS: set_ctl: invalid protocol: 0 172.30.1.6:20003 [ 701.891637][T10402] EXT4-fs (loop4): Remounting filesystem read-only [ 701.919074][T10402] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.1565: iget: bad extra_isize 90 (inode size 256) [ 701.955268][T10402] EXT4-fs (loop4): Remounting filesystem read-only [ 701.961870][T10402] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1565: error while reading EA inode 18 err=-117 [ 701.992169][T10402] EXT4-fs (loop4): Remounting filesystem read-only [ 702.022845][T10402] EXT4-fs (loop4): 1 orphan inode deleted [ 702.070024][T10402] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,max_dir_size_kb=0x0000000010000005,nolazytime,nobh,. Quota mode: none. [ 702.116884][T10429] loop1: detected capacity change from 0 to 512 [ 702.363963][T10429] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 702.392800][T10429] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.512020][T10440] loop5: detected capacity change from 0 to 1024 [ 703.580538][T10447] loop6: detected capacity change from 0 to 128 [ 703.716083][T10447] FAT-fs (loop6): bogus number of reserved sectors [ 704.023151][T10447] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 704.141639][ T25] audit: type=1800 audit(1770309864.170:233): pid=10440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1587" name="bus" dev="loop5" ino=26 res=0 errno=0 [ 704.318478][T10447] FAT-fs (loop6): Can't find a valid FAT filesystem [ 704.810626][ T1173] hfsplus: b-tree write err: -5, ino 4 [ 707.376802][T10488] netlink: 'syz.4.1598': attribute type 1 has an invalid length. [ 707.376838][T10488] netlink: 'syz.4.1598': attribute type 2 has an invalid length. [ 710.960369][ T25] audit: type=1326 audit(1770309870.980:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.6.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 711.914634][ T25] audit: type=1326 audit(1770309870.980:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.6.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 712.013479][ T25] audit: type=1326 audit(1770309870.980:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.6.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 712.141304][ T25] audit: type=1326 audit(1770309870.990:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.6.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 712.227266][T10529] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1611'. [ 712.284042][ T25] audit: type=1326 audit(1770309870.990:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.6.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 714.104722][ T25] audit: type=1326 audit(1770309870.990:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.6.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 714.183638][ T25] audit: type=1326 audit(1770309870.990:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.6.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 714.300641][ T25] audit: type=1326 audit(1770309870.990:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.6.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 714.322936][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.339113][ T25] audit: type=1326 audit(1770309870.990:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.6.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 714.395009][ T25] audit: type=1326 audit(1770309870.990:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.6.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0d14c3eb9 code=0x7ffc0000 [ 714.435674][T10547] loop1: detected capacity change from 0 to 512 [ 714.510646][T10549] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1617'. [ 714.543961][T10547] EXT4-fs (loop1): Ignoring removed nobh option [ 714.570094][T10547] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 714.741869][T10556] loop5: detected capacity change from 0 to 512 [ 715.112083][T10547] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.1605: iget: bad extra_isize 90 (inode size 256) [ 715.150715][T10547] EXT4-fs (loop1): Remounting filesystem read-only [ 715.167865][T10547] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1605: error while reading EA inode 11 err=-117 [ 715.186103][T10556] EXT4-fs (loop5): Test dummy encryption mode enabled [ 715.201014][T10556] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 715.210839][T10547] EXT4-fs (loop1): Remounting filesystem read-only [ 715.247445][T10547] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.1605: iget: bad extra_isize 90 (inode size 256) [ 715.292424][T10556] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1619: bad orphan inode 131083 [ 715.345112][T10547] EXT4-fs (loop1): Remounting filesystem read-only [ 715.351855][T10547] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1605: error while reading EA inode 11 err=-117 [ 716.095672][T10547] EXT4-fs (loop1): Remounting filesystem read-only [ 716.103162][T10556] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 716.135012][ T4197] Bluetooth: unknown link type 130 [ 716.144784][T10547] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.1605: iget: bad extra_isize 90 (inode size 256) [ 716.185182][T10547] EXT4-fs (loop1): Remounting filesystem read-only [ 716.191956][T10547] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1605: error while reading EA inode 18 err=-117 [ 716.207956][T10547] EXT4-fs (loop1): Remounting filesystem read-only [ 716.215294][T10547] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.1605: iget: bad extra_isize 90 (inode size 256) [ 716.230455][T10547] EXT4-fs (loop1): Remounting filesystem read-only [ 716.237435][T10547] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1605: error while reading EA inode 18 err=-117 [ 716.327084][T10547] EXT4-fs (loop1): Remounting filesystem read-only [ 716.370499][T10547] EXT4-fs (loop1): 1 orphan inode deleted [ 716.376397][T10547] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,max_dir_size_kb=0x0000000010000005,nolazytime,nobh,. Quota mode: none. [ 716.544121][T10580] futex_wake_op: syz.6.1623 tries to shift op by 144; fix this program [ 718.710082][ T4192] Bluetooth: hci2: command 0x0409 tx timeout [ 720.058362][T10599] loop4: detected capacity change from 0 to 512 [ 720.253654][T10599] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 720.414941][T10599] ext4 filesystem being mounted at /342/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.501389][ T25] audit: type=1800 audit(1770309880.530:244): pid=10599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1629" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 723.997916][T10635] futex_wake_op: syz.6.1636 tries to shift op by 144; fix this program [ 724.646877][T10646] loop6: detected capacity change from 0 to 512 [ 724.777886][T10646] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 724.788792][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'. [ 724.812997][T10646] ext4 filesystem being mounted at /109/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 725.344726][ T25] audit: type=1800 audit(1770309885.320:245): pid=10646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1641" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 726.681946][T10679] loop2: detected capacity change from 0 to 128 [ 726.721281][T10679] FAT-fs (loop2): bogus number of reserved sectors [ 726.753637][T10679] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 726.809303][T10679] FAT-fs (loop2): Can't find a valid FAT filesystem [ 727.831088][T10696] loop4: detected capacity change from 0 to 256 [ 728.206074][T10696] FAT-fs (loop4): Unrecognized mount option "ÿÿÿ" or missing value [ 729.113391][ T4307] Bluetooth: hci5: command 0x0405 tx timeout [ 730.122712][ T25] audit: type=1326 audit(1770309890.140:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 730.727515][ T25] audit: type=1326 audit(1770309890.150:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 730.751724][T10715] loop4: detected capacity change from 0 to 512 [ 730.792465][T10717] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 730.958784][ T25] audit: type=1326 audit(1770309890.150:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 730.997849][T10721] loop2: detected capacity change from 0 to 2048 [ 731.013764][T10715] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 731.081591][T10715] ext4 filesystem being mounted at /350/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.146967][T10721] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 731.199517][T10721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 731.210875][ T25] audit: type=1326 audit(1770309890.150:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 731.332714][ T25] audit: type=1326 audit(1770309890.150:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 731.563363][ T25] audit: type=1326 audit(1770309890.150:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 731.790832][ T25] audit: type=1326 audit(1770309890.150:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 731.868479][T10739] loop4: detected capacity change from 0 to 128 [ 731.928004][ T25] audit: type=1326 audit(1770309890.150:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 732.008283][T10741] loop2: detected capacity change from 0 to 16 [ 732.032330][ T25] audit: type=1326 audit(1770309890.150:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 732.093006][T10739] FAT-fs (loop4): bogus number of reserved sectors [ 732.100543][T10741] erofs: (device loop2): mounted with root inode @ nid 36. [ 732.127984][T10739] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 732.176619][T10739] FAT-fs (loop4): Can't find a valid FAT filesystem [ 732.196890][ T25] audit: type=1326 audit(1770309890.150:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10710 comm="syz.2.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2cc0aeb9 code=0x7ffc0000 [ 734.761961][T10759] loop1: detected capacity change from 0 to 2048 [ 734.877610][T10759] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 734.917388][T10759] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 736.974574][ T4242] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 737.274618][ T4242] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 738.564687][ T4242] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 738.596989][ T4242] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 738.643125][ T4242] usb 2-1: config 0 interface 0 has no altsetting 0 [ 738.754681][ T4242] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 738.815022][ T4242] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 738.864500][ T4242] usb 2-1: config 0 interface 0 has no altsetting 0 [ 739.054712][ T4242] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 739.078541][ T4242] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 739.113040][ T4242] usb 2-1: config 0 interface 0 has no altsetting 0 [ 739.264645][ T4242] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 739.369621][ T4242] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 739.401292][ T4242] usb 2-1: config 0 interface 0 has no altsetting 0 [ 739.494731][ T4242] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 739.544569][ T4242] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 739.587611][ T4242] usb 2-1: config 0 interface 0 has no altsetting 0 [ 739.663574][T10809] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1683'. [ 739.744639][ T4242] usb 2-1: unable to read config index 5 descriptor/all [ 739.758500][ T4242] usb 2-1: can't read configurations, error -71 [ 741.088343][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1687'. [ 741.106772][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1687'. [ 741.118281][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1687'. [ 741.132906][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1687'. [ 741.143111][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1687'. [ 741.170203][T10827] netlink: 'syz.5.1687': attribute type 27 has an invalid length. [ 742.886256][T10827] device sit0 left promiscuous mode [ 743.297654][T10827] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.305595][T10827] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.452330][T10840] loop2: detected capacity change from 0 to 16 [ 743.477960][T10840] erofs: (device loop2): mounted with root inode @ nid 36. [ 744.962541][T10851] loop1: detected capacity change from 0 to 512 [ 745.040179][T10827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.120697][T10827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.159025][T10853] input: syz0 as /devices/virtual/input/input13 [ 745.822187][T10859] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1696'. [ 746.674557][ T4192] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 746.731211][T10827] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.741662][T10827] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.751587][T10827] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.761040][T10827] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.913822][T10827] device wlan0 left promiscuous mode [ 746.954442][ T4192] usb 3-1: Using ep0 maxpacket: 8 [ 747.007740][T10861] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.015697][T10861] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.087438][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.104046][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.134563][ T4192] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 748.142794][ T4192] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 748.183512][ T4192] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 748.220820][ T4192] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 748.260075][ T4192] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 748.297080][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1703'. [ 748.326676][ T4192] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 748.335613][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1703'. [ 748.362873][ T4192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.365171][T10877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1703'. [ 748.665103][ T4192] usb 3-1: GET_CAPABILITIES returned 0 [ 748.673443][ T4192] usbtmc 3-1:16.0: can't read capabilities [ 749.424171][ T4192] usb 3-1: USB disconnect, device number 24 [ 750.478350][T10895] loop2: detected capacity change from 0 to 256 [ 751.991647][T10890] bridge0: port 3(erspan0) entered blocking state [ 751.998488][T10890] bridge0: port 3(erspan0) entered disabled state [ 752.009517][T10890] device erspan0 entered promiscuous mode [ 752.016329][T10890] bridge0: port 3(erspan0) entered blocking state [ 752.023341][T10890] bridge0: port 3(erspan0) entered forwarding state [ 752.684771][T10908] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1711'. [ 754.828769][T10927] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1717'. [ 755.226079][T10938] IPVS: set_ctl: invalid protocol: 0 172.30.1.7:20003 [ 760.117109][T10969] gfs2: path_lookup on  returned error -2 [ 762.720998][T10986] loop5: detected capacity change from 0 to 512 [ 763.010813][T10986] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 763.251477][T10986] ext4 filesystem being mounted at /246/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 763.851069][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 763.851081][ T25] audit: type=1800 audit(1770309923.880:257): pid=10986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1736" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 766.700384][T11009] netlink: 'syz.2.1742': attribute type 1 has an invalid length. [ 766.708294][T11009] netlink: 'syz.2.1742': attribute type 2 has an invalid length. [ 767.791028][T11023] loop4: detected capacity change from 0 to 16 [ 767.851934][T11023] erofs: (device loop4): mounted with root inode @ nid 36. [ 768.978337][ T25] audit: type=1326 audit(1770309929.010:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b1722eb9 code=0x7ffc0000 [ 769.083119][ T25] audit: type=1326 audit(1770309929.010:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3b16c42d9 code=0x7ffc0000 [ 769.217920][ T25] audit: type=1326 audit(1770309929.010:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3b16c42d9 code=0x7ffc0000 [ 769.315038][ T25] audit: type=1326 audit(1770309929.010:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3b16c42d9 code=0x7ffc0000 [ 769.735694][ T25] audit: type=1326 audit(1770309929.010:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3b16c42d9 code=0x7ffc0000 [ 769.759299][ T25] audit: type=1326 audit(1770309929.010:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3b16c42d9 code=0x7ffc0000 [ 769.783745][ T25] audit: type=1326 audit(1770309929.010:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3b16c42d9 code=0x7ffc0000 [ 769.849533][ T25] audit: type=1326 audit(1770309929.010:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3b16c42d9 code=0x7ffc0000 [ 769.959634][ T25] audit: type=1326 audit(1770309929.010:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3b16c42d9 code=0x7ffc0000 [ 769.982281][ T25] audit: type=1326 audit(1770309929.010:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.4.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb3b16c42d9 code=0x7ffc0000 [ 770.179310][T11042] loop6: detected capacity change from 0 to 512 [ 770.511105][T11042] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 770.554572][T11042] ext4 filesystem being mounted at /135/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.653842][T11038] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1743'. [ 771.323328][T11050] netlink: 'syz.5.1753': attribute type 1 has an invalid length. [ 771.331675][T11050] netlink: 'syz.5.1753': attribute type 2 has an invalid length. [ 773.761836][T11062] loop2: detected capacity change from 0 to 2048 [ 773.921453][T11062] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 773.943582][T11064] loop4: detected capacity change from 0 to 16 [ 774.034551][T11064] erofs: (device loop4): mounted with root inode @ nid 36. [ 774.053685][T11062] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 776.531771][T11081] loop4: detected capacity change from 0 to 512 [ 776.657051][T11081] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 776.749895][T11081] ext4 filesystem being mounted at /376/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 776.792270][ T25] kauditd_printk_skb: 1034 callbacks suppressed [ 776.792283][ T25] audit: type=1800 audit(1770309936.820:1302): pid=11081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1763" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 776.920918][T11082] chnl_net:caif_netlink_parms(): no params data found [ 777.070014][T11096] loop5: detected capacity change from 0 to 512 [ 778.403873][T11082] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.502865][T11082] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.590415][T11082] device bridge_slave_0 entered promiscuous mode [ 778.649992][T11082] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.684565][ T4253] Bluetooth: hci4: command 0x0409 tx timeout [ 778.699236][T11082] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.743279][T11082] device bridge_slave_1 entered promiscuous mode [ 780.947864][ T4253] Bluetooth: hci4: command 0x041b tx timeout [ 780.976158][T11116] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1768'. [ 781.080792][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1771'. [ 781.764792][T11092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.837288][T11092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.260136][T11092] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.284220][T11092] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.298927][T11092] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.322312][T11129] loop4: detected capacity change from 0 to 2048 [ 782.329485][T11092] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.386400][T11129] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 782.466341][T11129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 782.649073][T11133] device syzkaller0 entered promiscuous mode [ 782.764629][T11082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.830342][T11082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.841814][T11142] loop4: detected capacity change from 0 to 512 [ 783.037699][T11146] futex_wake_op: syz.2.1777 tries to shift op by 144; fix this program [ 784.576455][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 784.705361][T11142] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 784.788917][T11156] kvm: apic: phys broadcast and lowest prio [ 784.928228][T11142] ext4 filesystem being mounted at /381/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 785.516735][T11082] team0: Port device team_slave_0 added [ 785.526851][ T25] audit: type=1800 audit(1770309945.560:1303): pid=11142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1775" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 785.776579][T11082] team0: Port device team_slave_1 added [ 785.956460][T11082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.031546][T11082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.289320][T11165] loop2: detected capacity change from 0 to 2048 [ 786.311368][T11082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.373408][T11165] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 786.410481][T11082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.418850][T11082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.449977][T11082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.451165][T11172] INFO: trying to register non-static key. [ 786.466292][T11172] The code is fine but needs lockdep annotation, or maybe [ 786.473389][T11172] you didn't initialize this object before use? [ 786.479649][T11172] turning off the locking correctness validator. [ 786.485964][T11172] CPU: 0 PID: 11172 Comm: iou-wrk-11170 Not tainted syzkaller #0 [ 786.493660][T11172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 786.503717][T11172] Call Trace: [ 786.506995][T11172] [ 786.509929][T11172] dump_stack_lvl+0x188/0x250 [ 786.514625][T11172] ? show_regs_print_info+0x20/0x20 [ 786.519913][T11172] ? load_image+0x400/0x400 [ 786.524414][T11172] ? cpumask_next+0xb3/0xd0 [ 786.528918][T11172] ? __is_module_percpu_address+0x2a7/0x410 [ 786.534797][T11172] ? is_kernel_percpu_address+0x143/0x160 [ 786.540505][T11172] assign_lock_key+0x1ec/0x200 [ 786.545275][T11172] ? SOFTIRQ_verbose+0x10/0x10 [ 786.550033][T11172] register_lock_class+0x21d/0x890 [ 786.555129][T11172] ? __lock_acquire+0x13bc/0x7d10 [ 786.560139][T11172] ? is_dynamic_key+0x1f0/0x1f0 [ 786.564977][T11172] __lock_acquire+0x16f/0x7d10 [ 786.569723][T11172] ? is_dynamic_key+0x1f0/0x1f0 [ 786.574553][T11172] ? mark_lock+0x94/0x320 [ 786.579036][T11172] ? verify_lock_unused+0x140/0x140 [ 786.584227][T11172] ? mark_lock+0x94/0x320 [ 786.588208][T11165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 786.588550][T11172] ? __lock_acquire+0x12e8/0x7d10 [ 786.602587][T11172] ? verify_lock_unused+0x140/0x140 [ 786.607890][T11172] ? __might_sleep+0xf0/0xf0 [ 786.612495][T11172] lock_acquire+0x19e/0x400 [ 786.617012][T11172] ? gsmld_write+0x57/0x120 [ 786.621528][T11172] ? read_lock_is_recursive+0x10/0x10 [ 786.626909][T11172] ? _copy_from_iter+0x6db/0x1170 [ 786.631943][T11172] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 786.637444][T11172] ? lockdep_hardirqs_off+0x70/0x100 [ 786.642803][T11172] _raw_spin_lock_irqsave+0xb0/0x100 [ 786.648080][T11172] ? gsmld_write+0x57/0x120 [ 786.652571][T11172] ? _raw_spin_lock+0x40/0x40 [ 786.657233][T11172] ? rcu_lock_release+0x20/0x20 [ 786.662068][T11172] gsmld_write+0x57/0x120 [ 786.666384][T11172] file_tty_write+0x557/0x910 [ 786.671050][T11172] ? gsmld_read+0x10/0x10 [ 786.675365][T11172] ? file_tty_write+0x910/0x910 [ 786.680198][T11172] io_issue_sqe+0x32b7/0xb290 [ 786.684871][T11172] ? __io_queue_sqe+0x360/0x360 [ 786.689734][T11172] ? mark_lock+0x94/0x320 [ 786.694053][T11172] ? __lock_acquire+0x13bc/0x7d10 [ 786.699075][T11172] ? mark_lock+0x94/0x320 [ 786.703406][T11172] ? __lock_acquire+0x13bc/0x7d10 [ 786.708420][T11172] ? verify_lock_unused+0x140/0x140 [ 786.713608][T11172] ? verify_lock_unused+0x140/0x140 [ 786.718798][T11172] ? ret_from_fork+0x1f/0x30 [ 786.723384][T11172] ? psi_task_switch+0x499/0x7d0 [ 786.728443][T11172] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 786.734423][T11172] ? lock_chain_count+0x20/0x20 [ 786.739281][T11172] ? finish_lock_switch+0x12f/0x280 [ 786.744493][T11172] ? lockdep_hardirqs_on+0x94/0x140 [ 786.749900][T11172] ? finish_lock_switch+0x12f/0x280 [ 786.755109][T11172] ? finish_task_switch+0x12f/0x640 [ 786.760301][T11172] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 786.766279][T11172] ? look_up_lock_class+0x71/0x110 [ 786.771394][T11172] ? lockdep_hardirqs_on+0x94/0x140 [ 786.776585][T11172] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 786.782737][T11172] ? release_firmware_map_entry+0x190/0x190 [ 786.788620][T11172] ? preempt_schedule+0xbc/0xd0 [ 786.793457][T11172] ? preempt_schedule_common+0xa5/0xd0 [ 786.798903][T11172] ? preempt_schedule+0xbc/0xd0 [ 786.803733][T11172] ? schedule_preempt_disabled+0x20/0x20 [ 786.809646][T11172] ? __lock_acquire+0x7d10/0x7d10 [ 786.814657][T11172] ? do_raw_spin_lock+0x128/0x2f0 [ 786.819785][T11172] ? __rwlock_init+0x140/0x140 [ 786.824655][T11172] io_wq_submit_work+0x1a2/0x4a0 [ 786.829604][T11172] io_worker_handle_work+0x783/0xd10 [ 786.834907][T11172] io_wqe_worker+0x3b6/0xe40 [ 786.839528][T11172] ? create_worker_cont+0x5e0/0x5e0 [ 786.844733][T11172] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 786.850736][T11172] ? lock_chain_count+0x20/0x20 [ 786.855602][T11172] ? _raw_spin_unlock_irq+0x1f/0x40 [ 786.860819][T11172] ? lockdep_hardirqs_on+0x94/0x140 [ 786.866026][T11172] ? create_worker_cont+0x5e0/0x5e0 [ 786.871236][T11172] ret_from_fork+0x1f/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 786.875668][T11172] [ 786.880942][ T4253] Bluetooth: hci4: command 0x0419 tx timeout [ 786.886908][T11082] device hsr_slave_0 entered promiscuous mode [ 786.968976][T11082] device hsr_slave_1 entered promiscuous mode [ 787.005988][T11082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 787.013545][T11082] Cannot create hsr debugfs directory [ 788.494826][ T5445] device hsr_slave_0 left promiscuous mode [ 788.501125][ T5445] device hsr_slave_1 left promiscuous mode [ 788.507996][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.518851][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.526708][ T5445] device bridge_slave_1 left promiscuous mode [ 788.533080][ T5445] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.541519][ T5445] device bridge_slave_0 left promiscuous mode [ 788.547745][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.608987][ T5445] team0 (unregistering): Port device team_slave_1 removed [ 788.621209][ T5445] team0 (unregistering): Port device team_slave_0 removed [ 788.635357][ T5445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.649021][ T5445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.690346][ T5445] bond0 (unregistering): Released all slaves [ 789.392429][ T5445] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.446923][ T5445] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.517822][ T5445] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.587302][ T5445] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.672621][ T5445] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.708541][ T5445] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.758595][ T5445] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.807694][ T5445] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.123347][ T5445] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.180423][ T5445] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.220777][ T5445] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.268558][ T5445] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.859470][ T5445] bridge0: port 3(erspan0) entered disabled state [ 790.871106][ T5445] device erspan0 left promiscuous mode [ 790.877099][ T5445] bridge0: port 3(erspan0) entered disabled state [ 791.584105][ T5445] device hsr_slave_0 left promiscuous mode [ 791.590509][ T5445] device hsr_slave_1 left promiscuous mode [ 791.597223][ T5445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.605812][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.613460][ T5445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.621497][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.629496][ T5445] device bridge_slave_1 left promiscuous mode [ 791.635985][ T5445] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.643990][ T5445] device bridge_slave_0 left promiscuous mode [ 791.650451][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.662145][ T5445] device hsr_slave_0 left promiscuous mode [ 791.668945][ T5445] device hsr_slave_1 left promiscuous mode [ 791.675426][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.682884][ T5445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.690671][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.698714][ T5445] device bridge_slave_1 left promiscuous mode [ 791.705989][ T5445] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.713630][ T5445] device bridge_slave_0 left promiscuous mode [ 791.719822][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.729246][ T5445] device hsr_slave_0 left promiscuous mode [ 791.735733][ T5445] device hsr_slave_1 left promiscuous mode [ 791.741816][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.749698][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.757264][ T5445] device bridge_slave_1 left promiscuous mode [ 791.763384][ T5445] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.772168][ T5445] device bridge_slave_0 left promiscuous mode [ 791.778369][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.788714][ T5445] device hsr_slave_0 left promiscuous mode [ 791.795249][ T5445] device hsr_slave_1 left promiscuous mode [ 791.801411][ T5445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.809015][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.816548][ T5445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.824032][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.831833][ T5445] device bridge_slave_1 left promiscuous mode [ 791.838084][ T5445] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.846557][ T5445] device bridge_slave_0 left promiscuous mode [ 791.852671][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.860829][ T5445] device hsr_slave_0 left promiscuous mode [ 791.867039][ T5445] device hsr_slave_1 left promiscuous mode [ 791.873164][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.881049][ T5445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.888809][ T5445] device bridge_slave_1 left promiscuous mode [ 791.894968][ T5445] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.902648][ T5445] device bridge_slave_0 left promiscuous mode [ 791.908852][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.919551][ T5445] device veth1_macvtap left promiscuous mode [ 791.925799][ T5445] device veth0_macvtap left promiscuous mode [ 791.931816][ T5445] device veth1_vlan left promiscuous mode [ 791.937827][ T5445] device veth0_vlan left promiscuous mode [ 791.944034][ T5445] device veth1_macvtap left promiscuous mode [ 791.950143][ T5445] device veth0_macvtap left promiscuous mode [ 791.956613][ T5445] device veth1_vlan left promiscuous mode [ 791.962353][ T5445] device veth0_vlan left promiscuous mode [ 791.969048][ T5445] device veth1_macvtap left promiscuous mode [ 791.975151][ T5445] device veth0_macvtap left promiscuous mode [ 791.981240][ T5445] device veth1_vlan left promiscuous mode [ 791.987323][ T5445] device veth0_vlan left promiscuous mode [ 792.130967][ T5445] team0 (unregistering): Port device team_slave_1 removed [ 792.143482][ T5445] team0 (unregistering): Port device team_slave_0 removed [ 792.153721][ T5445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.166140][ T5445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.209943][ T5445] bond0 (unregistering): Released all slaves [ 792.327954][ T5445] team0 (unregistering): Port device team_slave_1 removed [ 792.338249][ T5445] team0 (unregistering): Port device team_slave_0 removed [ 792.351396][ T5445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.363419][ T5445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.404590][ T5445] bond0 (unregistering): Released all slaves [ 792.488179][ T5445] team0 (unregistering): Port device team_slave_1 removed [ 792.499222][ T5445] team0 (unregistering): Port device team_slave_0 removed [ 792.508699][ T5445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.523124][ T5445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.565530][ T5445] bond0 (unregistering): Released all slaves [ 792.639557][ T5445] team0 (unregistering): Port device team_slave_1 removed [ 792.649675][ T5445] team0 (unregistering): Port device team_slave_0 removed [ 792.659196][ T5445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.672716][ T5445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.713578][ T5445] bond0 (unregistering): Released all slaves [ 792.756448][ T5445] team0 (unregistering): Port device team_slave_1 removed [ 792.766771][ T5445] team0 (unregistering): Port device team_slave_0 removed [ 792.776239][ T5445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.788224][ T5445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.826803][ T5445] bond0 (unregistering): Released all slaves