last executing test programs: 13.410078427s ago: executing program 0 (id=1217): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0}) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) socket(0xa, 0x801, 0x0) 10.872665242s ago: executing program 0 (id=1218): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x500, 0x80000007, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 10.839732182s ago: executing program 2 (id=1219): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x402, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1, 0x288, &(0x7f0000000d80)="$eJzs3MFqE2sYxvGnaU6bprTJ4pwDCuKLbnQztPECJEgLYkCpjagLYWonGjImJRMqEbHduXHhdRSX7gT1BrrQnfvuuhHcFBQjSRM7aVOl2nSq+f+gM2/79Zl8k0zCOwOZzZvPH5QKgVNwa4olTDFpVVtSulm1DbXXsVY9orBVnR//9OHU9Vu3r2RzuZk5s9ns/IWMmU2efv3w8Yszb2vjN15OvhrVevrO5sfMxvr/6yc2v87fLwZWDKxcqZlrC5VKzV3wPVssBiXH7JrvuYFnxXLgVbvGC35laalubnlxIrlU9YLA3HLdSl7dahWrVevm3nOLZXMcxyaSws/k1+bm3GzUs0DfxJuLajXrDksa2zOcX4tiUgAAIFrh/l/Hrv9vdi0/7v9X6f9/A/3/IGj2/8n2+7cb/T8AAAAAAAAAAAAAAAAAAAAAAH+CrUYj1Wg0Up1152dUUkJS5/eo54n+4PUfbKEv7iUk/+lyfjkv+UPNZVO2oKJ8eZpSSl9ax0Pbdj17OTczZS1pvfFX2vmV5fxwd35aKaV756e389ad/0fJcD6jlP7tnc/0zI/o3NlQ3lFK7++qIl+LreN6J/9k2uzS1dyu/Fjr/wAAAAAA+Bs49l3P83fH2W98O3+A6wO7zq/jOhmPdt8BAAAAABgUQf1RyfV9r9r3Qp1iKDT0uX2x4GAb3Igf9eSjLf6T9Evxi6G7vu4Mxff85bCLZ5V28U7H5Tk8PkVC0qFucEz9mGpUn0gAAAAA+mWn6Y96JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADK6juOHZPg8dO+JdBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACL3LQAA//9SjyKC") socket$alg(0x26, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000007c0)=""/29, 0x1d, 0x9) 10.453227991s ago: executing program 2 (id=1221): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x3, 0xff) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$unix(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)="a22b45d4167faeff2d0967bee6b1f6a1dc772dac", 0x14}], 0x1}, 0x800) r4 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) msgget(0x1, 0x240) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x80, 0x9e}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800c97800000000000000000a0000000000000004000b"], 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a0001050000000000000000000000000000000008000500", @ANYRES32=r10, @ANYBLOB="68bb709771087cdf7260121e5fc3c20eead40b8636e5cb973f4f5ca4e55e843eaf609ee0e716851c580da2b4bc0c3a8ea38d7353c3884578193e0554421011e286188f35701d250cdd399e3a050000007614dba26e61cf8605904538dbcb5eb6ccb8d9c5"], 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r11) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x17, 0x404, 0x0, 0x25dfdbfc, {0x5}}, 0x14}}, 0x0) 10.420525671s ago: executing program 3 (id=1223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @multicast2}, 0x166}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a3a32c1c896048f14fd1778c686bace7109f1dae7a88deb83a6c3bdd38a1d1d4e5292ca60126386cb47064a05d751ab900f4e1ea453a6e812055f760ce895af77411095ee9e9d2dd58e5035e01c3ca9631dc7dea9c9867579c0f1fb680a44e7d584cf114dec30fb11133f1f87bdf9d04a1117d16e94ccd59a6317c9d38063779bbc0234a8b"], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x2eda) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r4, 0x1}, 0x20) recvmmsg(r4, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xd212}], 0x1, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) r7 = io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) 9.70717999s ago: executing program 0 (id=1225): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x3) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 9.172154818s ago: executing program 3 (id=1226): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d00)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0xfd, "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"}) r2 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904340102d469e70009058a", @ANYRES8], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) 9.042469178s ago: executing program 0 (id=1227): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000200)={0x1, 0x101}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000a40)={0x2, 0x0, [{0x0, 0x3d, &(0x7f0000000500)=""/61}, {0x0, 0xc8, &(0x7f00000007c0)=""/200}]}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) r1 = eventfd2(0x1, 0x80801) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000080)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x20000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8b}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r2, 0x0) 7.279551515s ago: executing program 0 (id=1230): openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper], 0x1, 0x1800, &(0x7f00000007c0)='b'}) 7.096237895s ago: executing program 1 (id=1231): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x402, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1, 0x288, &(0x7f0000000d80)="$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") socket$alg(0x26, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000007c0)=""/29, 0x1d, 0x9) 6.907636954s ago: executing program 0 (id=1233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x24, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) rt_sigaction(0x11, 0x0, 0x0, 0x8, &(0x7f0000000280)) 6.743868374s ago: executing program 1 (id=1234): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc3f, &(0x7f0000001780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000080)={0x1008}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0xc0086c43, &(0x7f0000000080)=0x700) 5.475947781s ago: executing program 4 (id=1235): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "f6c3ba7d82dd04000064d89912a4ab586f0020"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x80000) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000200)) 5.443612271s ago: executing program 3 (id=1236): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @multicast2}, 0x166}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a3a32c1c896048f14fd1778c686bace7109f1dae7a88deb83a6c3bdd38a1d1d4e5292ca60126386cb47064a05d751ab900f4e1ea453a6e812055f760ce895af77411095ee9e9d2dd58e5035e01c3ca9631dc7dea9c9867579c0f1fb680a44e7d584cf114dec30fb11133f1f87bdf9d04a1117d16e94ccd59a6317c9d38063779bbc0234a8b"], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x2eda) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r4, 0x1}, 0x20) recvmmsg(r4, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xd212}], 0x1, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) r7 = io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) 5.442535601s ago: executing program 1 (id=1237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x1, 'queue0\x00', 0xfffffffe}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 5.280677501s ago: executing program 2 (id=1238): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.04938067s ago: executing program 3 (id=1239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x0, 0xffffffffffffffff, 0x2007) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000004700)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x1000801, &(0x7f0000000300)=ANY=[], 0xfe, 0x1d1, &(0x7f0000000400)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000102c0)="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", 0x2000, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001440)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, r4]}}], 0x60}}], 0x1, 0x40) 1.999568074s ago: executing program 1 (id=1240): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000200)={0x1, 0x101}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000a40)={0x2, 0x0, [{0x0, 0x3d, &(0x7f0000000500)=""/61}, {0x0, 0xc8, &(0x7f00000007c0)=""/200}]}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) r1 = eventfd2(0x1, 0x80801) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000080)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x20000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8b}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r2, 0x0) 1.827803834s ago: executing program 3 (id=1241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000380)={[{@fat=@dmask}, {@uni_xlate}, {@numtail}, {@rodir}, {@fat=@fmask={'fmask', 0x3d, 0x7}}, {@numtail}, {@uni_xlate}, {@numtail}, {@uni_xlateno}, {@utf8}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@numtail}, {@fat=@dos1xfloppy}, {@rodir}, {@uni_xlate}, {@fat=@quiet}]}, 0xf5, 0x2f0, &(0x7f0000000f80)="$eJzs3ctrE0EcwPFf3klrTQ8iIgpDBVGkSxPw5sEiLYgBpW0EKwhbu9WQbVKyoRAR24Pg1bOHHjyKIII3LyJee/Ev8HXrpTcLFlc2u5umyZqmlT79fg7NdOf325ndme1j2uyuXHk+W5yxtF92VJr1S1giXnlRLn5a+np2/OMx93OlRocnMlmlwiJy9/HrgQ/V3tvvjr9PyHL/vZXV7I/lMxMivyceSlgVLFWybdtWU+VyNeQkTxesoqbULdPQLUMVSpZRqSq9Xq9PmYaaMctzczWll6b7euYqhmUpvVRTRaOmqmVVrdSU/kAvlJSmaaqvR1AfLF+4rS7UKTH/as22ZdUZoMSi2LYdEL3oF2Lea+LfOouDpGX8O8a2TY7IbvYMe2HNjjbGP77F+OPoca//by+6uf5x9IzfmbwxnMuNjCmVFJl9Np+fz7uvbv2XXimIKYYsjV2aXBdnjngk5HwcvZ4bGVJ1/XJ+dsHLX5jPu98chme8/IyknZ9TmvLFz8+4+Wpzfkx6mvOzkpYTwflZP1/CTflxuXCuKV+TtHy+L2UxZVqc3I38Jxmlrt3MtbSfqscBAAAAAAAAAHAYaaphY/0+1PhTb0rTEvX/+GjUp5zNTpwb0FhfH5K0rAevzw8Fru9H5XR0Hw8cAAAAAID/iFV7VNRN06jsTiHyMtWhiZiIOAWRpwNOZzru8KTX4+5aj4tIe1WkcxObCqnLbntvxryOyW6eqB0WwiLSvMV9s4Zz8OZbPyYlQenhbU2AwXjgmU/u6SFLN8GS3NnETnQ9tVoLoXV/y6nAGDu09X5s3Yy5W/wLc6vWr27rcvhrIdl6oga/u/s1O3zR+NlY4gMAAABwiDT94gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbJjm4e5t+3f3OVeI+Ib78lW+tz4rnvPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAD6E8AAAD//+b9sCg=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file1', [{0x20, '^'}, {0x20, 'ext4\x00'}, {}]}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000580), &(0x7f0000000180)=r0}, 0x20) 1.827538164s ago: executing program 4 (id=1242): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, 0x0, 0x20000811) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000ec0)={0x58, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @from_mac=@broadcast, {0x9, 0xc4d}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0x10, 0x9, @device_a, {0x0, 0x6, @default_ap_ssid}, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x58}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) 1.650206403s ago: executing program 4 (id=1243): openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper], 0x1, 0x1800, &(0x7f00000007c0)='b'}) 1.607329213s ago: executing program 2 (id=1244): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x402, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1, 0x288, &(0x7f0000000d80)="$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") socket$alg(0x26, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000007c0)=""/29, 0x1d, 0x9) 1.572473323s ago: executing program 1 (id=1245): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000500)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ppoll(&(0x7f0000000480)=[{r2, 0x466}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 1.311767503s ago: executing program 4 (id=1246): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040), 0x0) 1.178845413s ago: executing program 2 (id=1247): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./bus\x00', 0x10418, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000002240)='net/sockstat\x00') read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) ftruncate(r5, 0x10000000100) 1.069959902s ago: executing program 4 (id=1248): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440), 0x24}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000cc0)=ANY=[], 0x2c4}}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) r2 = mq_open(&(0x7f0000000140)=')^M/-\x00', 0x800, 0xc0, &(0x7f0000000200)={0x7, 0x4, 0xfffffffffffff142, 0x8}) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffef, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0xfffffffc, 0x3, 0xfffffffd, 0x139, 0x55f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x6], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x40000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0x0, 0x200, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x6, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12141, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00') r4 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r4, r3, &(0x7f0000002140)=0x6, 0x4) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000140000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r6}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000003c0)=0x9) sendto$packet(r7, &(0x7f00000000c0)="3f030278a8900100db901e0089e9aaa911d7c2290f2b86dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3f", 0x46, 0x0, &(0x7f0000000540)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) tkill(r9, 0x2c) ptrace(0x10, r9) mq_notify(r2, &(0x7f0000000240)={0x0, 0x33, 0x4, @thr={&(0x7f0000000300)="bec8e33918616fbf21848549fda8c03bffc9e1da77b444312b9dc0754f95d5caa1734dee854411e3fbf84720f4301c787f6e53f37c10732d58354d3722b9eeafde21a31f02de8b62d53c3f1ff369427decb8c30d3e4b418308c02e9790008fde26b9e851c450d64f03a3a17b6f989145f6195b532127a84954cbbac3151ed98a7df6a5295b73c6e8f8fc10228d54c13cc48105e6cfbb9f4131b3bbc6e921cca0fe688312490cc47972bda743aced6ab5e5563541ae83819c92b6978d9cbaf364", &(0x7f0000000480)="696b189b5f7c2e191e3c1cc03e096a0ca4a3a733bf3c0800473eca09e117d21824c1d8c674e47f9d54e478dcd96f0012aebc98740c6546077cac4ba66aecab71fcf408318313d5c74fb0a6781dc299f763efc8d1f2e7b4030e77c0b2794ed4d5a465f1ae28952d53905ce6180f52d59b736b1d3734561f35f8e251e74e7985c3326fe2ae59df393bb7f3abc28883424a280ecf848f552132d742649b060feabfd7ef720a15bc8c324023b3264dd8a1a137b2baa563306bc893fe7133ac075673c71cb4b762c01b961cbfb5b66db10674024d7a935351ae4d6d62b4a28ecbfee61f29a436be8627ab3da8fa800000000000000000"}}) 872.477262ms ago: executing program 4 (id=1249): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@data_err_ignore}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r3, 0x0) pwritev2(r3, &(0x7f0000000580)=[{&(0x7f0000000340)="14", 0xff8c}], 0x1, 0x1000000, 0x0, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="85", 0x1}], 0x1, 0x1200, 0x0, 0x3) r5 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 958.25µs ago: executing program 3 (id=1250): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e060000006e756d7461696c3d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00"], 0xfd, 0x29c, &(0x7f0000000280)="$eJzs3M9rE0EUwPHXtGnTlDY5iKAgPvSil6WNf0GQFsSAUhtRD8LUbjRkTUp2jUTE9ubVv6N49CZY/4FevHkXL0UQvPQgXelu1mxLsD9s3Np8P1B2ujMvM7s7CW8XdjbvvXlaq7hWxXiSyqikRFZlSyS/U+oYim2HZFTiVuXqxI/PF+7cf3CzWCrNzqvOFReuFVR16uKH5y/fXvroTdx9N/V+TDbyDze/F75snN04t7m9EH16w1Oji42GZxYdW5eqbs1Sve3YxrW1Wnft5q76itNYXm6rqS9NZpebtuuqqbe1ZrfVa6jXbKt5bKp1tSxLJ7MyaIYPHVFem583xb4MBkkY77Wz2Sya4Z6V5bV/MSgAAHCyHCb/Tx1j/v+k6mrV1fp++X9KyP/7J8j/t3smjTgd0js3AEWT7Xx/dyP/BwAAAAAAAAAAAAAAAAAAAADgf7Dl+znf93PRNvobE5GMiET/Jz1O9McRrv9QgsPFMYu9uJcRcV63yq1yuA3rixWpiiO2TKdFfgbzoSMsz90ozU5rIC/rzkonPnhJcCyKj+R7x8+E8RqLX2mV05KN91+QnJzpHV/YE58WkVZ5VK5cjsVbkpNPj6QhjiwF87ob/2pG9fqt0p7+x4N2AAAAAACcBpb+lt99/xuuJmlZGi0bsqc+3Nl9PiC5fZ4PqKyPSjd+RM6PJHfcAAAAAAAMErf9omYcx25SOFxhEE+dlQknzR8b+76/stPo7ztNiUhCR/pNRE7ACT/uwtdn4QU8SOMkf5UAAAAA9EM36U96JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADK6DLh4WtT/K2mOx7oaTOUoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgZPgVAAD//z2nG1k=") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="2000000002"], 0x202400) 414.4µs ago: executing program 1 (id=1251): syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="0181c200000065c537c4"], 0x0) syz_80211_inject_frame(&(0x7f0000000500), &(0x7f00000006c0)=ANY=[@ANYBLOB="80bcba00ffffffffffffffffffffffffb2a053eca81523362000c1c1010400000000000064000000010005c402867ff508a52eea9a9b9c0af60a1ca6ba1f77c973a7a47a937e22073ad364f25d958aaec47d0e5f9300bee4304c83c78ac38330098c0a2922868a3f9378f47d2c02b8261a8efb2308eb080cb79f66d9c2825858e1122f7d2543c85f50dd88af566e712e559ccdedba208309f9e26455918c69c3ca0df1239fb668046700acd2202cf2118d840fbddc98d97782bb6ab25430025356688842075a1392bdb101c3dff34fc96e796396e034dd11237b6b508b47899af2ff4b6a05ae48e6df8058b8d411005b023286b720a93be33401bf0f1fe80fcd2a01033c0408000000000000000500040019000000000807000000827206030303030303760647fd38000400dd60cae9ddc6c62c5d2b80246b3f27eaecd443a9b1c91e2847177ebd822fe39d0800bf5076da43b0652521f5f82b523da7abf41420ce35fe938aab7508555bbf397006dd9a5fed05fc5ec26b2004c950a3267e4b32152cd20a0119eae334e45721a5dd544f4c7122d207f84fa25e9182067560d0e1ae7ab57e5beed43706f155d56184dc73ec09f54b39340f035fa96e8c860756914e47b16d8fee8188e09e651a865e8b0f7dd774cc434c7bebbf214d9d1b9a678da5beefddd8afbba90d2f547611dec54317fa1ac53564f9ce3429d1f7ebdaabcac328491a4b0d3d2f306375e08e2b40d1d15ce7be450f47c69d4781174b640c9f8947a4f64a3d4f7d01914e506f2ff0c51fbe4824f1bbb0f09e60b0f96f18c86061c8682112f94628b6c53c5b9ffcca3ba4b89ae9765755f6cdc5830f44d72107a0424bdce218de189252190d188531ce5bae9ff3d05a37c2d17b1b191fcf4c5514fbfb4f39c670c1e5702b1e9dee03d9263907a422c38a839393f900"/679], 0x2b7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff4ba61f2be82db1af0000000000", 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x34, r2, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xae}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x7ff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) 0s ago: executing program 2 (id=1252): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") mknod$loop(0x0, 0x6000, 0x0) mknod$loop(0x0, 0x8, 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="020000000100000000000000040001408000000010003c000000000020000000000000000fc85dafca07e1d3991200c1b7241ff79acadd3e571d5c5ff0143610473b4687c342db579290bc5eb570aba667e9dbd587bfe7c102f398d4457a37d1a34c8a4d50b3d44830f61b8a921a5e92aade8b26996fc5af6d"], 0x24, 0x3) symlink(&(0x7f0000001000)='.\x00', 0x0) creat(0x0, 0x0) kernel console output (not intermixed with test programs): loop1: detected capacity change from 0 to 2048 [ 182.441090][ T5376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.599054][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 182.829852][ T5390] netlink: 68 bytes leftover after parsing attributes in process `syz.0.274'. [ 183.976446][ T5397] loop3: detected capacity change from 0 to 512 [ 184.013692][ T5397] EXT4-fs (loop3): Test dummy encryption mode enabled [ 184.119723][ T5397] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 184.169434][ T5397] EXT4-fs (loop3): 1 truncate cleaned up [ 184.185700][ T5397] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 184.298524][ T5403] loop0: detected capacity change from 0 to 2048 [ 184.389484][ T5403] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 185.157538][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 185.446690][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 186.342415][ T5422] loop2: detected capacity change from 0 to 8 [ 187.348052][ T5436] netlink: 68 bytes leftover after parsing attributes in process `syz.2.287'. [ 187.437815][ T5434] loop0: detected capacity change from 0 to 256 [ 187.633783][ T5434] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 189.014439][ T5448] loop2: detected capacity change from 0 to 2048 [ 189.097225][ T5448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 189.171498][ T5382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.271'. [ 189.196280][ T5382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.271'. [ 189.261468][ T5413] netlink: 'syz.3.281': attribute type 6 has an invalid length. [ 189.772278][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 189.787187][ T5454] loop0: detected capacity change from 0 to 512 [ 189.838740][ T5454] EXT4-fs (loop0): Test dummy encryption mode enabled [ 189.854407][ T5454] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 189.964593][ T5454] EXT4-fs (loop0): 1 truncate cleaned up [ 190.006644][ T5454] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 191.016711][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 191.072048][ T5477] loop3: detected capacity change from 0 to 8 [ 191.393167][ T5489] netlink: 68 bytes leftover after parsing attributes in process `syz.0.300'. [ 193.086050][ T5502] loop2: detected capacity change from 0 to 2048 [ 193.179246][ T5502] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 193.240443][ T5478] loop1: detected capacity change from 0 to 256 [ 193.535664][ T5478] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 193.990589][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 194.258030][ T5516] loop2: detected capacity change from 0 to 2048 [ 194.314507][ T5516] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.467359][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 194.554841][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.561466][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.082337][ T5527] loop1: detected capacity change from 0 to 512 [ 195.122236][ T5527] EXT4-fs (loop1): Test dummy encryption mode enabled [ 195.148796][ T5527] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 195.185329][ T5527] EXT4-fs (loop1): 1 truncate cleaned up [ 195.206876][ T5527] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 195.998878][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 196.238311][ T5539] netlink: 68 bytes leftover after parsing attributes in process `syz.1.313'. [ 197.295827][ T5545] loop4: detected capacity change from 0 to 8 [ 198.040238][ T5553] loop4: detected capacity change from 0 to 2048 [ 198.136510][ T5553] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 199.070114][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 199.134277][ T5561] loop1: detected capacity change from 0 to 256 [ 199.185484][ T5561] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 199.517958][ T5510] netlink: 'syz.0.306': attribute type 6 has an invalid length. [ 199.549783][ T5517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.307'. [ 199.592222][ T5517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.307'. [ 199.853524][ T5576] loop0: detected capacity change from 0 to 512 [ 199.875674][ T5576] EXT4-fs (loop0): Test dummy encryption mode enabled [ 199.908609][ T5576] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 199.997636][ T5579] netlink: 68 bytes leftover after parsing attributes in process `syz.4.325'. [ 200.850500][ T5576] EXT4-fs (loop0): 1 truncate cleaned up [ 200.856232][ T5576] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 201.775074][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 202.017039][ T5603] loop4: detected capacity change from 0 to 8 [ 202.296271][ T5611] loop3: detected capacity change from 0 to 2048 [ 202.424921][ T5611] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 203.123277][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 203.357869][ T5626] loop3: detected capacity change from 0 to 2048 [ 203.418305][ T5626] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.584137][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 203.712945][ T5631] loop4: detected capacity change from 0 to 256 [ 203.763699][ T5631] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 203.824764][ T5631] usb usb8: usbfs: process 5631 (syz.4.335) did not claim interface 0 before use [ 204.504443][ T5640] netlink: 68 bytes leftover after parsing attributes in process `syz.4.340'. [ 205.300286][ T5644] loop1: detected capacity change from 0 to 512 [ 205.331992][ T5644] EXT4-fs (loop1): Test dummy encryption mode enabled [ 205.347237][ T5644] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 205.405311][ T5644] EXT4-fs (loop1): 1 truncate cleaned up [ 205.414474][ T5644] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 206.227947][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 206.676510][ T5662] loop1: detected capacity change from 0 to 8 [ 206.701996][ T5658] kvm [5657]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 206.716506][ T5658] kvm [5657]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 206.732538][ T5658] kvm [5657]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 206.775213][ T5658] kvm [5657]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 206.800186][ T5658] kvm [5657]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 206.837989][ T5658] kvm [5657]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 206.871985][ T5658] kvm [5657]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 206.901008][ T5658] kvm [5657]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 206.926522][ T5658] kvm [5657]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 206.953458][ T5658] kvm [5657]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 207.890320][ T5674] loop4: detected capacity change from 0 to 2048 [ 207.985738][ T5674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 208.458489][ T5618] netlink: 'syz.0.334': attribute type 6 has an invalid length. [ 208.469510][ T5628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.336'. [ 208.479889][ T5628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.336'. [ 208.661823][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 209.284365][ T5692] netlink: 68 bytes leftover after parsing attributes in process `syz.4.354'. [ 210.318612][ T5698] loop2: detected capacity change from 0 to 8 [ 210.708625][ T5707] loop3: detected capacity change from 0 to 256 [ 210.751492][ T5707] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 210.872769][ T5707] usb usb8: usbfs: process 5707 (syz.3.353) did not claim interface 0 before use [ 210.914001][ T5712] loop2: detected capacity change from 0 to 2048 [ 211.051473][ T5712] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 211.682333][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 212.067701][ T5726] loop0: detected capacity change from 0 to 2048 [ 212.177495][ T5726] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.329489][ T5721] netlink: 'syz.1.362': attribute type 6 has an invalid length. [ 212.565364][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 213.466999][ T5751] loop1: detected capacity change from 0 to 8 [ 213.700185][ T5755] loop4: detected capacity change from 0 to 2048 [ 213.783833][ T5755] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 214.531367][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 215.477352][ T5771] loop4: detected capacity change from 0 to 256 [ 215.525443][ T5771] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 215.618830][ T5771] usb usb8: usbfs: process 5771 (syz.4.376) did not claim interface 0 before use [ 217.573430][ T5783] kvm_set_msr_common: 57 callbacks suppressed [ 217.573455][ T5783] kvm [5782]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 217.644313][ T5783] kvm [5782]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 217.682818][ T5783] kvm [5782]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 217.733211][ T5783] kvm [5782]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 217.754948][ T5783] kvm [5782]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 217.783089][ T5783] kvm [5782]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 217.817700][ T5783] kvm [5782]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 217.833652][ T5783] kvm [5782]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 217.866903][ T5783] kvm [5782]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 217.894856][ T5783] kvm [5782]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 218.776755][ T5735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.364'. [ 218.815992][ T5735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.364'. [ 218.935755][ T5775] netlink: 'syz.1.378': attribute type 6 has an invalid length. [ 219.409960][ T5800] loop4: detected capacity change from 0 to 8 [ 219.514101][ T5807] loop1: detected capacity change from 0 to 128 [ 219.555016][ T5802] loop3: detected capacity change from 0 to 2048 [ 219.559399][ T5807] EXT4-fs: Ignoring removed nobh option [ 219.639920][ T5802] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 219.639942][ T5807] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 219.732646][ T5807] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 220.482118][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 220.817826][ T5828] netlink: 'syz.4.393': attribute type 6 has an invalid length. [ 221.962960][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 222.454664][ T5844] loop3: detected capacity change from 0 to 256 [ 222.517722][ T5847] loop1: detected capacity change from 0 to 2048 [ 222.537331][ T5844] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 222.589993][ T5838] kvm_set_msr_common: 40 callbacks suppressed [ 222.590014][ T5838] kvm [5837]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 222.604660][ T5847] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.671663][ T5838] kvm [5837]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 222.734404][ T5838] kvm [5837]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 222.792567][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 222.825938][ T5838] kvm [5837]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 222.892468][ T5838] kvm [5837]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 223.555504][ T5858] loop3: detected capacity change from 0 to 2048 [ 223.639738][ T5858] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 224.897988][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 225.242857][ T5873] loop4: detected capacity change from 0 to 8 [ 227.321285][ T5895] kvm [5894]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 227.334934][ T5895] kvm [5894]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 227.349399][ T5895] kvm [5894]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 227.363554][ T5895] kvm [5894]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 227.383923][ T5895] kvm [5894]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 227.384218][ T5898] loop0: detected capacity change from 0 to 256 [ 227.443174][ T5898] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 227.608731][ T5895] kvm_set_msr_common: 20 callbacks suppressed [ 227.608754][ T5895] kvm [5894]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 227.636088][ T5895] kvm [5894]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 227.657209][ T5895] kvm [5894]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 227.678535][ T5895] kvm [5894]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 227.698309][ T5895] kvm [5894]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 227.718845][ T5895] kvm [5894]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 227.739320][ T5895] kvm [5894]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 227.759762][ T5895] kvm [5894]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 227.774992][ T5895] kvm [5894]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 227.780113][ T5895] kvm [5894]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 228.440320][ T5907] loop3: detected capacity change from 0 to 2048 [ 228.533896][ T5907] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 228.812157][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 229.139128][ T5850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.398'. [ 229.151948][ T5850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.398'. [ 229.235892][ T5882] netlink: 'syz.4.407': attribute type 6 has an invalid length. [ 229.307434][ T5918] loop3: detected capacity change from 0 to 128 [ 229.314673][ T5918] EXT4-fs: Ignoring removed nobh option [ 229.340990][ T5918] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 229.371172][ T5918] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 229.509324][ T5921] loop2: detected capacity change from 0 to 128 [ 229.996708][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 230.795418][ T5949] loop1: detected capacity change from 0 to 256 [ 230.861334][ T5949] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 231.005670][ T5951] loop0: detected capacity change from 0 to 2048 [ 231.049544][ T5953] netlink: 'syz.3.427': attribute type 6 has an invalid length. [ 231.114536][ T5951] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 231.142747][ T5938] syz.2.423 (5938) used greatest stack depth: 18608 bytes left [ 231.272307][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 232.522190][ T5965] loop1: detected capacity change from 0 to 2048 [ 232.667207][ T5965] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.696504][ T5972] loop0: detected capacity change from 0 to 128 [ 232.785660][ T5974] loop2: detected capacity change from 0 to 128 [ 232.813880][ T5974] EXT4-fs: Ignoring removed nobh option [ 232.842196][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 232.860633][ T5974] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 232.875932][ T5974] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.340595][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 233.838033][ T5987] loop2: detected capacity change from 0 to 2048 [ 233.917664][ T5987] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 234.066589][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 234.201895][ T5996] loop2: detected capacity change from 0 to 512 [ 234.269681][ T5996] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 234.290942][ T5996] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.356076][ T5996] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz.2.439: bad inode number: 12 [ 234.435066][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 235.037923][ T6004] kvm_set_msr_common: 33 callbacks suppressed [ 235.037945][ T6004] kvm [6003]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 235.059334][ T6004] kvm [6003]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 235.075628][ T6004] kvm [6003]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 235.090148][ T6004] kvm [6003]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 235.104509][ T6004] kvm [6003]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 235.118244][ T6004] kvm [6003]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 235.134242][ T6004] kvm [6003]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 235.149229][ T6004] kvm [6003]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 235.162917][ T6004] kvm [6003]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 235.177645][ T6004] kvm [6003]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbfb7 [ 236.269772][ T5975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.431'. [ 236.286600][ T5975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.431'. [ 236.288087][ T6009] loop4: detected capacity change from 0 to 256 [ 236.300937][ T6000] netlink: 'syz.2.440': attribute type 6 has an invalid length. [ 236.316561][ T6009] exfat: Bad value for 'uid' [ 236.647875][ T6017] loop0: detected capacity change from 0 to 128 [ 236.762641][ T6017] EXT4-fs: Ignoring removed nobh option [ 237.127256][ T6017] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 237.283123][ T6017] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 237.905082][ T6030] loop1: detected capacity change from 0 to 2048 [ 238.054185][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 238.083160][ T6030] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 238.713195][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 239.792310][ T6060] loop4: detected capacity change from 0 to 2048 [ 239.833470][ T6060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.994924][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 240.217088][ T6066] loop1: detected capacity change from 0 to 128 [ 240.325865][ T4398] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.204844][ T6055] netlink: 'syz.3.455': attribute type 6 has an invalid length. [ 242.221289][ T6061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.456'. [ 242.252312][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.456'. [ 243.620309][ T6083] loop2: detected capacity change from 0 to 2048 [ 243.711615][ T6083] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 244.205709][ T6099] loop4: detected capacity change from 0 to 2048 [ 244.255507][ T6099] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.339160][ T6095] loop0: detected capacity change from 0 to 256 [ 244.349518][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 244.359863][ T6095] exfat: Bad value for 'uid' [ 244.378862][ T6099] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 244.682813][ T6099] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.468: bg 0: block 234: padding at end of block bitmap is not set [ 244.779819][ T6099] EXT4-fs (loop4): Remounting filesystem read-only [ 244.898061][ T6110] netlink: 'syz.3.471': attribute type 6 has an invalid length. [ 244.943210][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 244.966328][ T6112] loop2: detected capacity change from 0 to 256 [ 245.120761][ T6116] loop4: detected capacity change from 0 to 128 [ 245.243725][ T4398] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 246.521717][ T6135] loop2: detected capacity change from 0 to 2048 [ 246.601562][ T6135] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 246.848338][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 247.058422][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 247.088164][ T14] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 247.180853][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.277446][ T14] usb 5-1: config 0 descriptor?? [ 247.297823][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 247.494726][ T14] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 247.728386][ T952] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 247.928346][ T952] usb 3-1: Using ep0 maxpacket: 8 [ 247.936353][ T952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.958740][ T952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.770500][ T952] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.808306][ T952] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 248.835260][ T952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.877231][ T952] usb 3-1: config 0 descriptor?? [ 249.028793][ T6178] loop0: detected capacity change from 0 to 16 [ 249.065083][ T6178] erofs: (device loop0): mounted with root inode @ nid 36. [ 249.824105][ T952] wacom 0003:056A:033B.0001: item fetching failed at offset 1/3 [ 249.873506][ T952] wacom 0003:056A:033B.0001: parse failed [ 249.889462][ T952] wacom: probe of 0003:056A:033B.0001 failed with error -22 [ 249.980590][ T14] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 250.147696][ T14] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 250.533229][ T14] asix: probe of 5-1:0.0 failed with error -71 [ 250.796538][ T14] usb 5-1: USB disconnect, device number 3 [ 250.832922][ T952] usb 3-1: USB disconnect, device number 3 [ 251.010758][ T6200] loop3: detected capacity change from 0 to 2048 [ 251.116886][ T6200] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 251.478040][ T6218] loop4: detected capacity change from 0 to 128 [ 251.733484][ T27] audit: type=1800 audit(1738100263.582:3): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.500" name="file1" dev="loop4" ino=1048598 res=0 errno=0 [ 252.085330][ T6213] loop0: detected capacity change from 0 to 2048 [ 252.342957][ T6213] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.352065][ T6213] EXT4-fs: Ignoring removed i_version option [ 252.636591][ T6213] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 253.876112][ T27] audit: type=1804 audit(1738100265.142:4): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.501" name="/newroot/97/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 253.956014][ T6229] loop4: detected capacity change from 0 to 1024 [ 254.000655][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 254.009765][ T6229] EXT4-fs: Ignoring removed orlov option [ 254.011852][ T6234] loop2: detected capacity change from 0 to 512 [ 254.016258][ T6229] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.071611][ T6234] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 254.387287][ T6239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.599052][ T6234] EXT4-fs (loop2): 1 truncate cleaned up [ 255.630202][ T6234] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 255.636353][ T6229] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 255.685664][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 255.878390][ T6229] process 'syz.4.503' launched './file0/file0' with NULL argv: empty string added [ 255.915889][ T6248] loop3: detected capacity change from 0 to 128 [ 255.977300][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 255.997100][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.005180][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.172487][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 256.915315][ T6255] loop1: detected capacity change from 0 to 1024 [ 256.969355][ T6255] EXT4-fs: Ignoring removed orlov option [ 257.010482][ T6257] loop4: detected capacity change from 0 to 1024 [ 257.018804][ T6255] EXT4-fs (loop1): Test dummy encryption mode enabled [ 257.047489][ T6259] loop3: detected capacity change from 0 to 2048 [ 257.089168][ T6259] UDF-fs: bad mount option "defcontext=user_u" or missing value [ 257.098674][ T6255] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 257.214708][ T4398] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 257.269307][ T6262] loop2: detected capacity change from 0 to 2048 [ 258.179930][ T6262] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.233899][ T6255] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 258.552140][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 259.383483][ T6281] loop0: detected capacity change from 0 to 256 [ 259.485370][ T6281] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 260.287549][ T6291] loop2: detected capacity change from 0 to 2048 [ 260.532656][ T6291] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 260.849362][ T6281] loop9: detected capacity change from 0 to 6 [ 261.146327][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 261.373297][ T6312] loop1: detected capacity change from 0 to 128 [ 261.453819][ T4398] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.173169][ T6315] loop3: detected capacity change from 0 to 2048 [ 262.241180][ T6315] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 262.268446][ T6328] loop1: detected capacity change from 0 to 164 [ 262.280654][ T6328] ISOFS: Bad logical zone size 25856 [ 263.147503][ T4251] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 263.179465][ T4398] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 263.241567][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 263.436743][ T6340] loop4: detected capacity change from 0 to 2048 [ 263.497518][ T6340] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.624730][ T6345] loop2: detected capacity change from 0 to 2048 [ 263.749155][ T6345] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 265.110458][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 265.408613][ T6362] loop0: detected capacity change from 0 to 128 [ 265.485149][ T4398] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 265.583296][ T4297] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 265.908656][ T4297] usb 5-1: Using ep0 maxpacket: 8 [ 265.932004][ T4297] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 266.113263][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.242323][ T4297] usb 5-1: config 0 descriptor?? [ 266.262702][ T6367] loop3: detected capacity change from 0 to 256 [ 266.318844][ T6367] exfat: Bad value for 'uid' [ 266.404300][ T4398] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 266.462024][ T4297] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 266.553615][ T6375] loop1: detected capacity change from 0 to 16 [ 266.577087][ T6375] erofs: (device loop1): mounted with root inode @ nid 36. [ 266.603098][ T6375] erofs: (device loop1): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 266.938502][ T6384] loop2: detected capacity change from 0 to 2048 [ 266.996343][ T6385] loop0: detected capacity change from 0 to 2048 [ 267.017934][ T6388] loop3: detected capacity change from 0 to 2048 [ 267.063359][ T6391] loop1: detected capacity change from 0 to 2048 [ 267.073443][ T6384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 267.098724][ T6388] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 267.121125][ T6385] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 267.126511][ T6391] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.497937][ T4253] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 268.009008][ T4259] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 268.032915][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 268.075906][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 268.382252][ T6410] loop1: detected capacity change from 0 to 128 [ 268.417527][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 268.432252][ T6409] loop0: detected capacity change from 0 to 512 [ 268.560339][ T4297] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 268.570950][ T4297] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 268.582929][ T4297] asix: probe of 5-1:0.0 failed with error -71 [ 268.592552][ T4297] usb 5-1: USB disconnect, device number 4 [ 268.617053][ T6409] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.548: corrupted inode contents [ 268.637100][ T6409] EXT4-fs error (device loop0): ext4_dirty_inode:6089: inode #16: comm syz.0.548: mark_inode_dirty error [ 268.675438][ T6409] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.548: corrupted inode contents [ 268.736762][ T6409] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.548: mark_inode_dirty error [ 268.761645][ T6409] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.548: corrupted inode contents [ 268.893922][ T6409] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 268.949325][ T6409] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.548: corrupted inode contents [ 269.021279][ T6409] EXT4-fs error (device loop0): ext4_truncate:4311: inode #16: comm syz.0.548: mark_inode_dirty error [ 269.328406][ T4297] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 269.357825][ T6409] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 269.392466][ T6409] EXT4-fs (loop0): 1 truncate cleaned up [ 269.404364][ T6409] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 269.427546][ T11] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 269.458746][ T6409] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.481268][ T6422] loop3: detected capacity change from 0 to 1024 [ 269.488222][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6817: comm kworker/u4:1: Failed to release dquot type 1 [ 269.549615][ T4297] usb 3-1: Using ep0 maxpacket: 16 [ 269.556940][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.577117][ T6409] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 269.605448][ T4297] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 269.627659][ T6409] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 269.638485][ T4297] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 269.649512][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.660867][ T6409] EXT4-fs error (device loop0): ext4_acquire_dquot:6794: comm syz.0.548: Failed to acquire dquot type 1 [ 269.674829][ T6424] loop4: detected capacity change from 0 to 2048 [ 269.689721][ T4297] usb 3-1: config 0 descriptor?? [ 269.704678][ T6426] loop1: detected capacity change from 0 to 2048 [ 269.802355][ T6426] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.915036][ T6427] hfsplus: xattr searching failed [ 270.044069][ T6424] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.053279][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.554'. [ 270.089519][ T6428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.554'. [ 270.272658][ T4297] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 270.286596][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 270.295586][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 270.296661][ T4297] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 270.347897][ T4508] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 270.374105][ T4297] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 270.387733][ T4508] EXT4-fs error (device loop0): ext4_release_dquot:6817: comm kworker/u4:13: Failed to release dquot type 1 [ 270.403530][ T4297] microsoft 0003:045E:07DA.0002: no inputs found [ 270.410692][ T4297] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 270.585779][ T26] usb 3-1: USB disconnect, device number 4 [ 271.101760][ T6443] loop1: detected capacity change from 0 to 2048 [ 271.151053][ T6444] loop0: detected capacity change from 0 to 256 [ 271.157832][ T6444] exfat: Bad value for 'uid' [ 271.198833][ T6443] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 271.798385][ T6448] loop3: detected capacity change from 0 to 2048 [ 271.941279][ T6448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 271.995599][ T4252] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 272.268021][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 272.550255][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 272.600791][ T6464] loop1: detected capacity change from 0 to 128 [ 272.734528][ T4398] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.862125][ T27] audit: type=1326 audit(1738100284.722:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378778cda9 code=0x7ffc0000 [ 272.903860][ T6471] syz.0.568 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 273.073502][ T27] audit: type=1326 audit(1738100284.932:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378778cda9 code=0x7ffc0000 [ 273.634818][ T6474] loop4: detected capacity change from 0 to 2048 [ 273.722466][ T6474] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.366619][ T6488] loop1: detected capacity change from 0 to 512 [ 274.401027][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 274.447130][ T6488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 274.500813][ T6488] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.614506][ T6495] netlink: 'syz.2.575': attribute type 6 has an invalid length. [ 274.744904][ T6497] loop0: detected capacity change from 0 to 128 [ 274.961560][ T27] audit: type=1800 audit(1738100286.822:7): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.576" name="file1" dev="loop0" ino=1048602 res=0 errno=0 [ 275.757695][ T6513] loop3: detected capacity change from 0 to 128 [ 275.770819][ T6513] EXT4-fs: Ignoring removed nobh option [ 276.526276][ T6513] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 276.573173][ T6513] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.587497][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 276.753766][ T6523] loop2: detected capacity change from 0 to 128 [ 277.495085][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 277.742094][ T6539] loop1: detected capacity change from 0 to 256 [ 277.768064][ T6539] exfat: Bad value for 'uid' [ 277.827949][ T6540] loop3: detected capacity change from 0 to 2048 [ 277.884832][ T6543] loop2: detected capacity change from 0 to 512 [ 277.905957][ T6540] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.035949][ T6548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.589'. [ 278.085608][ T6543] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 278.111141][ T6543] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.123386][ T6548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.589'. [ 278.159646][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 278.260786][ T6550] loop0: detected capacity change from 0 to 128 [ 278.422311][ T27] audit: type=1800 audit(1738100290.222:8): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.591" name="file1" dev="loop0" ino=1048603 res=0 errno=0 [ 279.208663][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 279.447930][ T6565] loop4: detected capacity change from 0 to 2048 [ 279.475056][ T6568] loop1: detected capacity change from 0 to 2048 [ 279.546329][ T6565] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 279.574942][ T6568] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 280.212872][ T6584] loop2: detected capacity change from 0 to 128 [ 280.225666][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 280.228648][ T4250] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 280.259291][ T6584] EXT4-fs: Ignoring removed nobh option [ 280.287819][ T6584] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 280.311476][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 280.330396][ T6584] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 280.585466][ T6595] loop4: detected capacity change from 0 to 128 [ 280.664199][ T4398] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 281.232150][ T6601] loop0: detected capacity change from 0 to 128 [ 281.528268][ T27] audit: type=1800 audit(1738100293.232:9): pid=6601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.603" name="file1" dev="loop0" ino=1048604 res=0 errno=0 [ 283.086099][ T6612] loop3: detected capacity change from 0 to 256 [ 283.136598][ T6612] exfat: Bad value for 'uid' [ 283.604954][ T6617] loop0: detected capacity change from 0 to 2048 [ 283.636760][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 284.469554][ T6617] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 284.522453][ T6625] loop4: detected capacity change from 0 to 8 [ 284.713768][ T6625] SQUASHFS error: Failed to read block 0x4de: -5 [ 284.841577][ T6625] SQUASHFS error: Failed to read block 0x4de: -5 [ 284.867980][ T27] audit: type=1800 audit(1738100296.722:10): pid=6625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.613" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 285.053907][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 285.503344][ T6640] loop2: detected capacity change from 0 to 128 [ 285.772776][ T27] audit: type=1800 audit(1738100297.572:11): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.616" name="file1" dev="loop2" ino=1048605 res=0 errno=0 [ 286.617807][ T27] audit: type=1804 audit(1738100298.472:12): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.621" name="bus" dev="ramfs" ino=43803 res=1 errno=0 [ 286.771330][ T6660] loop4: detected capacity change from 0 to 2048 [ 286.808564][ T952] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 286.854858][ T6660] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 286.998412][ T952] usb 4-1: Using ep0 maxpacket: 8 [ 287.011677][ T952] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 287.040485][ T952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.085955][ T952] usb 4-1: config 0 descriptor?? [ 287.315417][ T6667] loop1: detected capacity change from 0 to 2048 [ 287.317753][ T952] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 287.482963][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 287.512825][ T6667] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 287.758891][ T4252] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 287.784299][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 288.761682][ T952] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 288.797324][ T952] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 288.797442][ T952] asix: probe of 4-1:0.0 failed with error -71 [ 288.842662][ T952] usb 4-1: USB disconnect, device number 2 [ 289.019045][ T6685] loop2: detected capacity change from 0 to 8 [ 289.061354][ T6683] loop0: detected capacity change from 0 to 256 [ 289.081922][ T6685] squashfs image failed sanity check [ 289.089391][ T6683] exfat: Bad value for 'uid' [ 289.137404][ T4398] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 289.637188][ T6696] loop4: detected capacity change from 0 to 2048 [ 289.699549][ T6696] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 289.803996][ T4250] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 289.846798][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 289.884355][ T6705] loop0: detected capacity change from 0 to 1024 [ 289.978055][ T6705] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 290.362880][ T6716] loop4: detected capacity change from 0 to 128 [ 290.392502][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 294.234358][ T6742] loop4: detected capacity change from 0 to 2048 [ 294.639082][ T6742] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.238063][ T6744] loop1: detected capacity change from 0 to 256 [ 295.259761][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.653'. [ 295.276173][ T6744] exfat: Bad value for 'uid' [ 295.546906][ T6750] device bridge_slave_1 left promiscuous mode [ 295.586450][ T6750] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.671218][ T6750] bridge1: port 1(bridge_slave_1) entered blocking state [ 295.744725][ T6750] bridge1: port 1(bridge_slave_1) entered disabled state [ 295.802348][ T6750] device bridge_slave_1 entered promiscuous mode [ 295.873788][ T4244] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 296.727110][ T6769] loop3: detected capacity change from 0 to 128 [ 296.915454][ T6776] netlink: 68 bytes leftover after parsing attributes in process `syz.4.660'. [ 297.818984][ T6780] loop0: detected capacity change from 0 to 2048 [ 297.833142][ T6781] loop1: detected capacity change from 0 to 16 [ 297.842746][ T6781] erofs: (device loop1): mounted with root inode @ nid 36. [ 297.854090][ T6781] syz.1.662: attempt to access beyond end of device [ 297.854090][ T6781] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 297.894329][ T6781] syz.1.662: attempt to access beyond end of device [ 297.894329][ T6781] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 297.917029][ T6780] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.935184][ T6780] EXT4-fs: Ignoring removed i_version option [ 297.976600][ T6780] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 298.108472][ T14] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 298.357111][ T6793] loop2: detected capacity change from 0 to 128 [ 298.576659][ T27] audit: type=1800 audit(1738100310.292:13): pid=6793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.665" name="file1" dev="loop2" ino=1048606 res=0 errno=0 [ 300.414295][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 300.538242][ T4330] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 300.630758][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 300.641646][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.669037][ T6803] loop0: detected capacity change from 0 to 2048 [ 300.674272][ T14] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 300.704796][ T14] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 300.723537][ T6803] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 300.734552][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.745988][ T4330] usb 4-1: config 0 has an invalid interface number: 185 but max is 0 [ 300.746055][ T14] usb 5-1: config 0 descriptor?? [ 300.762641][ T6803] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 300.764879][ T4330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.794628][ T6803] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 300.823601][ T6803] UDF-fs: Scanning with blocksize 512 failed [ 300.836649][ T4330] usb 4-1: config 0 has no interface number 0 [ 300.841221][ T14] usb 5-1: can't set config #0, error -71 [ 300.862164][ T14] usb 5-1: USB disconnect, device number 5 [ 300.880984][ T4330] usb 4-1: config 0 interface 185 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 300.883993][ T6803] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.944279][ T4330] usb 4-1: config 0 interface 185 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 300.985358][ T4330] usb 4-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.014185][ T4330] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 301.025278][ T4330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.055802][ T4330] usb 4-1: config 0 descriptor?? [ 301.368798][ T4330] usb 4-1: string descriptor 0 read error: -71 [ 301.393110][ T4330] gspca_main: spca561-2.14.0 probing abcd:cdee [ 301.453183][ T4330] spca561: probe of 4-1:0.185 failed with error -22 [ 301.484708][ T4330] usb 4-1: MIDIStreaming interface descriptor not found [ 301.820555][ T4330] usb 4-1: USB disconnect, device number 3 [ 302.443990][ T6822] loop3: detected capacity change from 0 to 2048 [ 302.549108][ T6822] EXT4-fs: Ignoring removed mblk_io_submit option [ 302.650714][ T6822] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 302.689767][ T6829] loop4: detected capacity change from 0 to 2048 [ 302.786070][ T6829] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 302.856450][ T4242] udevd[4242]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.185/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.856563][ T952] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 302.978214][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 303.123058][ T952] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 303.175184][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.177991][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 303.190335][ T952] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 303.216162][ T14] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 303.227070][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.236714][ T14] usb 2-1: Product: syz [ 303.239550][ T952] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 303.296272][ T14] usb 2-1: Manufacturer: syz [ 303.342831][ T14] usb 2-1: SerialNumber: syz [ 303.387756][ T14] usb 2-1: config 0 descriptor?? [ 303.393529][ T952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.419659][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 303.479998][ T952] usb 3-1: Product: syz [ 303.484281][ T952] usb 3-1: Manufacturer: syz [ 303.502000][ T952] usb 3-1: SerialNumber: syz [ 303.513407][ T952] usb 3-1: config 0 descriptor?? [ 303.525559][ T6827] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 303.550215][ T6827] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 303.614501][ T6846] loop4: detected capacity change from 0 to 1024 [ 303.911386][ T6848] netlink: 32 bytes leftover after parsing attributes in process `syz.3.680'. [ 304.486929][ T6850] hfsplus: xattr search failed [ 304.507366][ T6827] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 304.515323][ T6827] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 304.577398][ T14] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 304.630278][ T14] usb 2-1: USB disconnect, device number 2 [ 304.935433][ T952] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 304.949949][ T4398] udevd[4398]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.060793][ T6862] loop3: detected capacity change from 0 to 128 [ 305.278590][ T27] audit: type=1800 audit(1738100317.072:14): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.683" name="file1" dev="loop3" ino=1048607 res=0 errno=0 [ 305.809155][ T952] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 305.821576][ T952] usb 3-1: USB disconnect, device number 5 [ 305.897434][ T6865] binder: 6864:6865 ioctl c0306201 20000140 returned -14 [ 306.141031][ T6874] loop1: detected capacity change from 0 to 8 [ 306.178372][ T6874] squashfs image failed sanity check [ 307.577614][ T6894] loop3: detected capacity change from 0 to 16 [ 307.597648][ T6894] erofs: (device loop3): mounted with root inode @ nid 36. [ 308.034140][ T6897] loop0: detected capacity change from 0 to 128 [ 308.071196][ T6897] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 308.142755][ T6897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.606952][ T6917] loop2: detected capacity change from 0 to 128 [ 309.763132][ T27] audit: type=1800 audit(1738100321.612:15): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.701" name="file1" dev="loop2" ino=1048608 res=0 errno=0 [ 310.435427][ T6921] loop3: detected capacity change from 0 to 8 [ 310.468607][ T6921] squashfs image failed sanity check [ 310.507559][ T6924] loop0: detected capacity change from 0 to 128 [ 310.609237][ T6924] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 310.641532][ T6924] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.649592][ T6930] loop1: detected capacity change from 0 to 256 [ 310.659334][ T6930] exfat: Unknown parameter '²áSÌh_‚&†aÐúÊ^©Ë@RY »ÊécayrÍïFzQ>P߆º*Ù¹àV£µ8‡‰d|ëCüŸpÅIýÑ7°7ò"€T©U®ûT¹ªCH{W¶Ž.H K; ^ ­j¡_—]Ñ7ò5³q•Yçb¯Yþ•ÉF' [ 310.667958][ T6932] netlink: 'syz.4.710': attribute type 6 has an invalid length. [ 310.943398][ T6930] loop1: detected capacity change from 0 to 512 [ 311.700718][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 312.335412][ T6963] loop3: detected capacity change from 0 to 128 [ 313.051075][ T6963] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 313.162078][ T6963] FAT-fs (loop3): FAT read failed (blocknr 128) [ 313.393182][ T6960] loop1: detected capacity change from 0 to 2048 [ 313.446426][ T6960] EXT4-fs: Ignoring removed mblk_io_submit option [ 313.484764][ T6960] EXT4-fs: Ignoring removed i_version option [ 313.737458][ T6973] loop2: detected capacity change from 0 to 2048 [ 313.825827][ T6960] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 313.868668][ T6973] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 314.718703][ T27] audit: type=1804 audit(1738100326.552:16): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.718" name="/newroot/115/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 315.785442][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 315.862976][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 317.434023][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.446710][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.859149][ T6994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.102708][ T7007] loop3: detected capacity change from 0 to 256 [ 318.184495][ T7007] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 319.016452][ T7017] loop0: detected capacity change from 0 to 2048 [ 319.061809][ T7021] loop3: detected capacity change from 0 to 2048 [ 319.062169][ T7018] loop1: detected capacity change from 0 to 256 [ 319.087165][ T7017] EXT4-fs: Ignoring removed oldalloc option [ 319.101883][ T7018] exfat: Bad value for 'uid' [ 319.131669][ T7017] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 319.241523][ T7021] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 319.251334][ T7017] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 319.973077][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 320.194461][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 320.560546][ T7037] loop0: detected capacity change from 0 to 2048 [ 320.565357][ T7042] capability: warning: `syz.1.740' uses deprecated v2 capabilities in a way that may be insecure [ 320.595913][ T7037] EXT4-fs: Ignoring removed mblk_io_submit option [ 320.968401][ T7037] EXT4-fs: Ignoring removed i_version option [ 321.548885][ T7037] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 321.995211][ T27] audit: type=1804 audit(1738100333.842:17): pid=7051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.737" name="/newroot/151/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 322.407802][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 322.621122][ T7056] netlink: 'syz.3.742': attribute type 6 has an invalid length. [ 322.976673][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.986704][ T7064] device batadv_slave_0 entered promiscuous mode [ 323.786041][ T7057] loop0: detected capacity change from 0 to 2048 [ 323.927136][ T7068] loop3: detected capacity change from 0 to 2048 [ 324.039237][ T7057] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 324.072940][ T7068] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 324.082823][ T7069] netlink: 9 bytes leftover after parsing attributes in process `syz.2.745'. [ 324.691531][ T7079] loop1: detected capacity change from 0 to 128 [ 324.702205][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 324.716512][ T7069] device gretap0 entered promiscuous mode [ 324.752476][ T4253] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 324.968599][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 325.307736][ T7083] loop3: detected capacity change from 0 to 128 [ 325.651483][ T27] audit: type=1800 audit(1738100337.462:18): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.748" name="file1" dev="loop3" ino=1048612 res=0 errno=0 [ 326.573482][ T7097] loop1: detected capacity change from 0 to 2048 [ 326.599732][ T7099] loop0: detected capacity change from 0 to 8 [ 326.607538][ T7097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.624488][ T7099] squashfs image failed sanity check [ 326.929711][ T7103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.754'. [ 326.938848][ T7103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.754'. [ 327.966920][ T7108] loop0: detected capacity change from 0 to 2048 [ 328.012357][ T7110] loop4: detected capacity change from 0 to 256 [ 328.029686][ T7108] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 328.059489][ T7110] exfat: Deprecated parameter 'namecase' [ 328.202251][ T7110] exfat: Deprecated parameter 'namecase' [ 328.638354][ T7110] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 328.671574][ T7113] loop3: detected capacity change from 0 to 256 [ 328.679616][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 328.719895][ T7113] exfat: Bad value for 'uid' [ 328.781302][ T4390] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 328.969597][ T7121] netlink: 'syz.1.761': attribute type 6 has an invalid length. [ 329.224159][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.259927][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.295569][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.357567][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.408285][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.456847][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.514305][ T7132] loop1: detected capacity change from 0 to 128 [ 329.521051][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.571864][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.614002][ T7134] loop2: detected capacity change from 0 to 512 [ 329.625903][ T7134] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 329.633095][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.666011][ T7134] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 329.707595][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.751073][ T7134] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.765: corrupted in-inode xattr [ 329.773099][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.783126][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.802096][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.815037][ T7134] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.765: couldn't read orphan inode 15 (err -117) [ 329.832426][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.855614][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.950312][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.968375][ T7134] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 329.981996][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 329.997918][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 330.008814][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 330.016455][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 330.046569][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 330.822210][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 330.830797][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 330.839372][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 330.848454][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 330.856081][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 330.865521][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 330.873881][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 330.900578][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 330.924459][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 331.090941][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 331.098966][ T952] hid-generic 0006:0003:0003.0003: unknown main item tag 0x0 [ 331.115766][ T952] hid-generic 0006:0003:0003.0003: hidraw0: VIRTUAL HID v0.00 Device [syz1] on syz0 [ 331.398239][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 331.649789][ T14] usb 1-1: config 0 has no interfaces? [ 331.655336][ T14] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 331.854958][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.912198][ T14] usb 1-1: config 0 descriptor?? [ 332.018963][ T7155] loop4: detected capacity change from 0 to 2048 [ 332.106759][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 332.115363][ T7155] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 332.787644][ T14] usb 1-1: USB disconnect, device number 2 [ 332.851021][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 334.119365][ T7175] netlink: 'syz.4.774': attribute type 6 has an invalid length. [ 335.567386][ T7190] loop3: detected capacity change from 0 to 256 [ 335.592268][ T7190] exfat: Bad value for 'uid' [ 335.818180][ T952] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 336.040569][ T952] usb 5-1: config 0 has an invalid interface number: 61 but max is 0 [ 336.059669][ T7197] loop1: detected capacity change from 0 to 128 [ 336.068567][ T952] usb 5-1: config 0 has no interface number 0 [ 336.084801][ T952] usb 5-1: config 0 interface 61 has no altsetting 0 [ 336.105042][ T7197] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 336.299761][ T7197] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 336.316379][ T952] usb 5-1: New USB device found, idVendor=05ac, idProduct=0229, bcdDevice=ac.89 [ 336.364266][ T952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.401908][ T952] usb 5-1: config 0 descriptor?? [ 336.417947][ T952] appletouch 5-1:0.61: Could not find int-in endpoint [ 336.431245][ T952] appletouch: probe of 5-1:0.61 failed with error -5 [ 336.439046][ T952] usbhid 5-1:0.61: couldn't find an input interrupt endpoint [ 336.616740][ T952] usb 5-1: USB disconnect, device number 6 [ 337.057555][ T7208] loop2: detected capacity change from 0 to 512 [ 337.157408][ T7208] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 337.249108][ T7208] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 337.290291][ T7208] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.667856][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 337.747131][ T7220] loop4: detected capacity change from 0 to 128 [ 338.458594][ T27] audit: type=1800 audit(1738100350.262:19): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.788" name="file1" dev="loop4" ino=1048614 res=0 errno=0 [ 339.290788][ T7226] loop2: detected capacity change from 0 to 128 [ 340.118326][ T27] audit: type=1800 audit(1738100351.972:20): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.789" name="file1" dev="loop2" ino=1048615 res=0 errno=0 [ 340.257596][ T7232] loop4: detected capacity change from 0 to 128 [ 340.447288][ T7234] loop0: detected capacity change from 0 to 512 [ 340.581376][ T7234] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 340.622651][ T7243] loop2: detected capacity change from 0 to 128 [ 340.631050][ T7234] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.642314][ T7242] loop1: detected capacity change from 0 to 128 [ 340.663151][ T7243] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 340.688292][ T27] audit: type=1800 audit(1738100352.552:21): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.793" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 340.744121][ T7243] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 340.811278][ T27] audit: type=1800 audit(1738100352.622:22): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.793" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 340.902708][ T27] audit: type=1800 audit(1738100352.622:23): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.793" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 340.990418][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 341.454657][ T7243] fscrypt (loop2, inode 12): Error allocating 'cts(cbc(aes))' transform: -4 [ 341.503210][ T7253] loop1: detected capacity change from 0 to 2048 [ 341.553848][ T7253] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.608938][ T7260] loop4: detected capacity change from 0 to 8 [ 341.625184][ T7260] squashfs image failed sanity check [ 341.654490][ T27] audit: type=1800 audit(1738100353.512:24): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.798" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 341.672846][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 344.016601][ T7282] loop2: detected capacity change from 0 to 2048 [ 344.037766][ T7287] loop3: detected capacity change from 0 to 128 [ 344.066919][ T7282] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.337593][ T14] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 344.541179][ T14] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 344.553756][ T14] usb 5-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 344.557631][ T7294] loop1: detected capacity change from 0 to 128 [ 344.578404][ T14] usb 5-1: config 0 has no interface number 0 [ 344.592065][ T14] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 41033, setting to 64 [ 344.615557][ T14] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.659641][ T14] usb 5-1: config 0 interface 52 has no altsetting 0 [ 344.690086][ T14] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 344.718869][ T14] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 344.766970][ T14] usb 5-1: Product: syz [ 344.782369][ T14] usb 5-1: SerialNumber: syz [ 344.803610][ T14] usb 5-1: config 0 descriptor?? [ 345.155360][ T7299] loop3: detected capacity change from 0 to 8 [ 345.257883][ T7299] squashfs image failed sanity check [ 345.336204][ T14] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input7 [ 345.606039][ T7307] loop3: detected capacity change from 0 to 16 [ 345.650948][ T952] usb 5-1: USB disconnect, device number 7 [ 345.665993][ T3609] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 345.697525][ T7307] erofs: (device loop3): mounted with root inode @ nid 36. [ 345.707233][ T7310] usb usb8: usbfs: process 7310 (syz.0.816) did not claim interface 0 before use [ 345.735909][ T7310] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 346.943362][ T7317] loop4: detected capacity change from 0 to 2048 [ 347.230023][ T7329] xt_TPROXY: Can be used only with -p tcp or -p udp [ 347.458490][ T7317] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 348.167847][ T7321] device syzkaller0 entered promiscuous mode [ 348.733067][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 348.811522][ T7336] loop0: detected capacity change from 0 to 128 [ 348.913717][ T4398] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 349.056509][ T7341] loop2: detected capacity change from 0 to 128 [ 349.388559][ T7346] loop3: detected capacity change from 0 to 8 [ 349.407071][ T7346] squashfs image failed sanity check [ 349.486041][ T7348] tmpfs: Unknown parameter ' ' [ 349.712588][ T7355] netlink: 68 bytes leftover after parsing attributes in process `syz.3.828'. [ 351.335601][ T7372] loop2: detected capacity change from 0 to 512 [ 351.347732][ T7372] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 351.384530][ T7372] EXT4-fs (loop2): orphan cleanup on readonly fs [ 351.391189][ T7372] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.833: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 351.410962][ T7372] EXT4-fs error (device loop2): ext4_quota_enable:6988: comm syz.2.833: Bad quota inode: 3, type: 0 [ 351.422811][ T7372] EXT4-fs warning (device loop2): ext4_enable_quotas:7029: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 351.437770][ T7372] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 351.445058][ T7372] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 352.101887][ T7381] loop4: detected capacity change from 0 to 2048 [ 352.166049][ T7381] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 352.204141][ T27] audit: type=1804 audit(1738100364.062:25): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.834" name="/newroot/180/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 352.227161][ T27] audit: type=1800 audit(1738100364.062:26): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.834" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 352.877064][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 352.960997][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 353.116414][ T7391] loop2: detected capacity change from 0 to 2048 [ 353.142475][ T7391] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.161604][ T7391] EXT4-fs: Ignoring removed i_version option [ 353.185236][ T7395] loop4: detected capacity change from 0 to 2048 [ 353.187131][ T7391] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 353.319600][ T7395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 354.705646][ T27] audit: type=1804 audit(1738100366.562:27): pid=7402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.836" name="/newroot/161/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 355.031890][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 355.034722][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 355.185803][ T7407] loop3: detected capacity change from 0 to 2048 [ 355.199858][ T7410] loop0: detected capacity change from 0 to 8 [ 355.220392][ T7407] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.418240][ T7415] netlink: 68 bytes leftover after parsing attributes in process `syz.2.842'. [ 355.470009][ T7416] loop4: detected capacity change from 0 to 128 [ 355.518377][ T27] audit: type=1800 audit(1738100367.352:28): pid=7416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.840" name="file1" dev="loop4" ino=1048617 res=0 errno=0 [ 355.606965][ T7410] squashfs image failed sanity check [ 356.245324][ T7421] loop0: detected capacity change from 0 to 128 [ 356.622336][ T7434] loop3: detected capacity change from 0 to 128 [ 356.744702][ T7436] loop4: detected capacity change from 0 to 128 [ 356.802203][ T7433] loop1: detected capacity change from 0 to 256 [ 357.058440][ T27] audit: type=1800 audit(1738100368.862:29): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.846" name="file1" dev="loop4" ino=1048618 res=0 errno=0 [ 357.541557][ T4398] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 357.591732][ T7433] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 358.294956][ T7433] exFAT-fs (loop1): hint_cluster is invalid (17) [ 358.523520][ T7445] loop4: detected capacity change from 0 to 2048 [ 358.664234][ T7449] loop2: detected capacity change from 0 to 2048 [ 358.750053][ T7449] EXT4-fs: Ignoring removed mblk_io_submit option [ 358.779312][ T7445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 358.831292][ T7449] EXT4-fs: Ignoring removed i_version option [ 359.420276][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 359.440617][ T7449] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 359.790583][ T7471] netlink: 68 bytes leftover after parsing attributes in process `syz.4.858'. [ 360.235148][ T27] audit: type=1804 audit(1738100372.082:30): pid=7473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.853" name="/newroot/165/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 360.733425][ T7478] loop0: detected capacity change from 0 to 2048 [ 360.734509][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 360.756054][ T7478] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.905837][ T7481] loop1: detected capacity change from 0 to 2048 [ 360.941314][ T7481] EXT4-fs: Ignoring removed mblk_io_submit option [ 360.980343][ T7481] EXT4-fs: Ignoring removed i_version option [ 361.065862][ T7481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 361.180224][ T7491] loop4: detected capacity change from 0 to 8 [ 361.431523][ T7491] squashfs image failed sanity check [ 361.718501][ T27] audit: type=1804 audit(1738100373.542:31): pid=7494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.861" name="/newroot/141/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 362.156007][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 362.402048][ T7498] loop4: detected capacity change from 0 to 128 [ 362.596055][ T7485] loop2: detected capacity change from 0 to 128 [ 362.678944][ T27] audit: type=1800 audit(1738100374.542:32): pid=7483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.862" name="file1" dev="loop2" ino=1048620 res=0 errno=0 [ 362.910738][ T127] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 362.913657][ T7510] loop0: detected capacity change from 0 to 16 [ 363.000983][ T7510] erofs: (device loop0): mounted with root inode @ nid 36. [ 363.918260][ T127] usb 2-1: Using ep0 maxpacket: 16 [ 363.956131][ T127] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 363.976813][ T7520] 9pnet_fd: Insufficient options for proto=fd [ 363.996082][ T127] usb 2-1: config 0 has no interface number 0 [ 364.057739][ T127] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 364.102162][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.129513][ T127] usb 2-1: Product: syz [ 364.134134][ T127] usb 2-1: Manufacturer: syz [ 364.182787][ T127] usb 2-1: SerialNumber: syz [ 364.317573][ T127] usb 2-1: config 0 descriptor?? [ 364.426126][ T7525] loop2: detected capacity change from 0 to 2048 [ 364.458866][ T7525] EXT4-fs: Ignoring removed mblk_io_submit option [ 364.483271][ T7525] EXT4-fs: Ignoring removed i_version option [ 364.515317][ T7525] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 364.533277][ T7531] loop4: detected capacity change from 0 to 2048 [ 364.676349][ T7531] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 364.837556][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 364.950378][ T27] audit: type=1804 audit(1738100376.802:33): pid=7538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.875" name="/newroot/167/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 365.752781][ T7543] loop3: detected capacity change from 0 to 128 [ 365.961878][ T27] audit: type=1800 audit(1738100377.722:34): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.878" name="file1" dev="loop3" ino=1048621 res=0 errno=0 [ 366.109450][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 366.473234][ T14] usb 2-1: USB disconnect, device number 3 [ 366.666413][ T7560] loop0: detected capacity change from 0 to 16 [ 367.075384][ T7560] erofs: (device loop0): mounted with root inode @ nid 36. [ 367.642139][ T7566] netlink: 68 bytes leftover after parsing attributes in process `syz.1.884'. [ 368.883496][ T7583] loop4: detected capacity change from 0 to 2048 [ 368.892066][ T7583] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.898801][ T7583] EXT4-fs: Ignoring removed i_version option [ 368.983777][ T7583] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 369.088801][ T7581] loop1: detected capacity change from 0 to 128 [ 369.211396][ T27] audit: type=1800 audit(1738100381.072:35): pid=7581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.891" name="file1" dev="loop1" ino=1048622 res=0 errno=0 [ 369.227083][ T7592] loop2: detected capacity change from 0 to 512 [ 370.168153][ T27] audit: type=1804 audit(1738100381.822:36): pid=7594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.890" name="/newroot/194/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 370.194889][ T7592] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 370.260855][ T7592] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.893: bad orphan inode 131083 [ 370.340735][ T7592] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 370.383641][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 370.553833][ T7599] loop1: detected capacity change from 0 to 164 [ 371.145435][ T7599] syz.1.894: attempt to access beyond end of device [ 371.145435][ T7599] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 371.150777][ T7602] netlink: 'syz.0.895': attribute type 1 has an invalid length. [ 371.568896][ T7599] syz.1.894: attempt to access beyond end of device [ 371.568896][ T7599] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 371.631057][ T27] audit: type=1800 audit(1738100383.492:37): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.894" name="file0" dev="loop1" ino=1862 res=0 errno=0 [ 371.740587][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 372.053823][ T7612] netlink: 68 bytes leftover after parsing attributes in process `syz.1.898'. [ 373.652306][ T7622] loop4: detected capacity change from 0 to 2048 [ 373.693166][ T7622] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 373.816033][ T7632] loop3: detected capacity change from 0 to 512 [ 373.840390][ T7634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.903'. [ 373.873467][ T7634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.903'. [ 373.964019][ T7632] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 374.002009][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 374.028233][ T4331] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 374.655435][ T4331] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 374.669795][ T4331] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 374.702054][ T4331] usb 2-1: config 0 has no interface number 0 [ 374.717663][ T4331] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 41033, setting to 64 [ 374.745156][ T4331] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.080458][ T4331] usb 2-1: config 0 interface 52 has no altsetting 0 [ 375.250268][ T4331] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 375.285287][ T4331] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 375.341571][ T4331] usb 2-1: Product: syz [ 375.367659][ T4331] usb 2-1: SerialNumber: syz [ 375.440235][ T4331] usb 2-1: config 0 descriptor?? [ 375.461802][ T7648] loop4: detected capacity change from 0 to 8 [ 375.500624][ T7648] squashfs image failed sanity check [ 375.745171][ T4331] usb 2-1: Can not set alternate setting to 1, error: -71 [ 375.752483][ T4331] synaptics_usb: probe of 2-1:0.52 failed with error -71 [ 375.763560][ T4331] usb 2-1: USB disconnect, device number 4 [ 375.774069][ T4434] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 375.789155][ T4398] udevd[4398]: setting owner of /dev/bus/usb/002/004 to uid=0, gid=0 failed: No such file or directory [ 375.898527][ T7655] loop2: detected capacity change from 0 to 512 [ 375.908637][ T7655] journal_path: Lookup failure for './bus' [ 375.914655][ T7655] EXT4-fs: error: could not find journal device path [ 376.629816][ T7638] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 496: padding at end of block bitmap is not set [ 376.930503][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 377.346447][ T7676] loop0: detected capacity change from 0 to 2048 [ 377.372489][ T7676] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.377661][ T7681] Bluetooth: MGMT ver 1.22 [ 377.445858][ T7687] loop4: detected capacity change from 0 to 16 [ 377.467256][ T7687] erofs: (device loop4): mounted with root inode @ nid 36. [ 378.179049][ T7689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.918'. [ 378.251805][ T7689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.918'. [ 378.375908][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 378.870972][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.877384][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.984123][ T7714] loop1: detected capacity change from 0 to 128 [ 379.178324][ T27] audit: type=1800 audit(1738100391.012:38): pid=7714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.927" name="file1" dev="loop1" ino=1048623 res=0 errno=0 [ 380.061925][ T7727] loop1: detected capacity change from 0 to 2048 [ 380.536757][ T7727] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 380.751375][ T7727] EXT4-fs (loop1): shut down requested (2) [ 380.971003][ T7739] loop4: detected capacity change from 0 to 2048 [ 381.047763][ T7739] EXT4-fs: Ignoring removed mblk_io_submit option [ 381.076402][ T7739] EXT4-fs: Ignoring removed i_version option [ 381.083741][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 381.156200][ T7739] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 381.310329][ T7751] loop1: detected capacity change from 0 to 2048 [ 381.371878][ T7751] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.473571][ T7758] loop0: detected capacity change from 0 to 256 [ 381.578032][ T7759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.940'. [ 381.698574][ T27] audit: type=1804 audit(1738100393.502:39): pid=7761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.935" name="/newroot/204/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 381.847607][ T7758] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 381.927865][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 381.934824][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 382.039679][ T7758] exFAT-fs (loop0): hint_cluster is invalid (17) [ 382.057535][ T7759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.940'. [ 382.103887][ T27] audit: type=1800 audit(1738100393.962:40): pid=7767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.943" name="file1" dev="loop0" ino=1048624 res=0 errno=0 [ 382.137948][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 382.805372][ T7785] loop1: detected capacity change from 0 to 2048 [ 382.847196][ T7785] EXT4-fs: Ignoring removed mblk_io_submit option [ 382.910684][ T7785] EXT4-fs: Ignoring removed i_version option [ 382.977327][ T7785] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 383.448305][ T27] audit: type=1804 audit(1738100395.282:41): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.949" name="/newroot/156/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 383.763585][ T7800] loop0: detected capacity change from 0 to 2048 [ 383.837072][ T7800] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.852150][ T7802] loop4: detected capacity change from 0 to 2048 [ 383.890809][ T7802] EXT4-fs: Ignoring removed mblk_io_submit option [ 383.943047][ T7802] EXT4-fs: Ignoring removed i_version option [ 383.946563][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 384.073935][ T7802] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 384.434116][ T7808] loop0: detected capacity change from 0 to 2048 [ 384.569683][ T27] audit: type=1804 audit(1738100396.432:42): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.956" name="/newroot/206/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 384.796537][ T7815] loop3: detected capacity change from 0 to 256 [ 384.817593][ T7808] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 385.161700][ T7815] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 385.404213][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 385.410502][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 385.487883][ T7815] exFAT-fs (loop3): hint_cluster is invalid (17) [ 385.579402][ T27] audit: type=1800 audit(1738100397.442:43): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.959" name="file1" dev="loop3" ino=1048625 res=0 errno=0 [ 385.815191][ T7825] loop4: detected capacity change from 0 to 2048 [ 385.891265][ T7828] loop2: detected capacity change from 0 to 4096 [ 385.907827][ T7828] EXT4-fs (loop2): Test dummy encryption mode enabled [ 385.950406][ T7825] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 386.009589][ T7828] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 386.036606][ T7828] System zones: 0-5 [ 386.057321][ T7825] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 386.062067][ T7842] netlink: 'syz.1.967': attribute type 6 has an invalid length. [ 386.082882][ T7828] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 386.156346][ T7828] EXT4-fs (loop2): shut down requested (1) [ 386.184499][ T7828] fs-verity: sha512 using implementation "sha512-avx2" [ 386.284589][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 386.580134][ T7855] loop2: detected capacity change from 0 to 2048 [ 386.587447][ T7855] EXT4-fs: Ignoring removed mblk_io_submit option [ 386.594630][ T7855] EXT4-fs: Ignoring removed i_version option [ 386.625369][ T7855] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 386.736322][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 386.988362][ T27] audit: type=1800 audit(1738100398.842:44): pid=7860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.971" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 387.479311][ T7861] loop0: detected capacity change from 0 to 512 [ 387.485775][ T27] audit: type=1804 audit(1738100398.842:45): pid=7860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.971" name="/newroot/186/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 387.559640][ T7861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 387.661321][ T7863] loop4: detected capacity change from 0 to 2048 [ 387.678559][ T27] audit: type=1800 audit(1738100398.842:46): pid=7860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.971" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 387.701547][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 387.710428][ T7861] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 387.734806][ T7861] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.899085][ T7863] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 388.268853][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 388.514943][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 388.542126][ T7882] netlink: 'syz.3.980': attribute type 6 has an invalid length. [ 388.733117][ T7887] loop2: detected capacity change from 0 to 512 [ 388.777392][ T7889] loop4: detected capacity change from 0 to 8 [ 388.800126][ T7889] squashfs image failed sanity check [ 388.821127][ T7887] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 388.851290][ T7893] loop0: detected capacity change from 0 to 128 [ 388.889055][ T7887] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.942716][ T7895] binder: 7894:7895 ioctl c0306201 0 returned -14 [ 388.974748][ T7887] EXT4-fs error (device loop2): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.2.981: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 389.051366][ T7887] EXT4-fs error (device loop2): ext4_get_first_dir_block:3594: inode #12: comm syz.2.981: directory missing '.' [ 389.145477][ T7903] netlink: 68 bytes leftover after parsing attributes in process `syz.1.985'. [ 389.579012][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 390.079466][ T7913] loop2: detected capacity change from 0 to 512 [ 390.093307][ T7911] loop1: detected capacity change from 0 to 2048 [ 390.114104][ T7913] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.2.988: corrupted xattr block 95 [ 390.137445][ T7913] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 390.152035][ T7913] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.988: bg 0: block 7: invalid block bitmap [ 390.168329][ T7913] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 390.182457][ T7913] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2925: inode #11: comm syz.2.988: corrupted xattr block 95 [ 390.197514][ T7913] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 390.208366][ T7913] EXT4-fs (loop2): 1 orphan inode deleted [ 390.214160][ T7913] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 390.243456][ T7915] loop4: detected capacity change from 0 to 2048 [ 390.297898][ T7911] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 390.481953][ T7915] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 391.896577][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 392.008838][ T4297] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 392.103935][ T4250] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 392.125613][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 392.159035][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 392.245727][ T7935] loop1: detected capacity change from 0 to 2048 [ 392.253243][ T4297] usb 4-1: device descriptor read/64, error -71 [ 392.303393][ T7939] loop0: detected capacity change from 0 to 8 [ 392.312343][ T7939] squashfs image failed sanity check [ 392.333817][ T7935] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 392.374797][ T4434] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 392.545901][ T7945] loop4: detected capacity change from 0 to 16 [ 392.601616][ T7945] erofs: (device loop4): mounted with root inode @ nid 36. [ 393.239228][ T4297] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 393.678462][ T4297] usb 4-1: device descriptor read/64, error -71 [ 393.779130][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 393.848369][ T4297] usb usb4-port1: attempt power cycle [ 393.890877][ T7953] loop4: detected capacity change from 0 to 2048 [ 393.908286][ T7953] EXT4-fs: Ignoring removed mblk_io_submit option [ 393.916341][ T7953] EXT4-fs: Ignoring removed i_version option [ 393.979270][ T7957] binder: 7956:7957 ioctl c0306201 0 returned -14 [ 394.067296][ T7953] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 395.089470][ T27] audit: type=1804 audit(1738100406.372:47): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.999" name="/newroot/213/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 395.266422][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 395.658614][ T7978] loop0: detected capacity change from 0 to 2048 [ 395.712792][ T7976] loop2: detected capacity change from 0 to 2048 [ 395.810354][ T7978] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 395.869706][ T7976] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 396.510491][ T4253] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 396.566724][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 396.604881][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 396.635872][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1009'. [ 397.022163][ T8004] loop4: detected capacity change from 0 to 2048 [ 397.029666][ T8004] EXT4-fs: Ignoring removed mblk_io_submit option [ 397.036146][ T8004] EXT4-fs: Ignoring removed i_version option [ 397.052762][ T8008] loop3: detected capacity change from 0 to 128 [ 397.057460][ T8004] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 398.008759][ T8017] binder: 8016:8017 ioctl c0306201 0 returned -14 [ 398.217690][ T27] audit: type=1800 audit(1738100410.062:48): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1014" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 398.459068][ T27] audit: type=1804 audit(1738100410.072:49): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1014" name="/newroot/216/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 398.509480][ T8023] loop2: detected capacity change from 0 to 2048 [ 398.550559][ T8023] EXT4-fs: Ignoring removed mblk_io_submit option [ 398.601253][ T8023] EXT4-fs: Ignoring removed i_version option [ 398.623601][ T27] audit: type=1800 audit(1738100410.072:50): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1014" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 398.702726][ T8023] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 398.743738][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 399.027465][ T8033] loop0: detected capacity change from 0 to 2048 [ 399.030979][ T8037] loop1: detected capacity change from 0 to 2048 [ 399.222558][ T8039] loop4: detected capacity change from 0 to 16 [ 399.344814][ T27] audit: type=1804 audit(1738100411.172:51): pid=8041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1020" name="/newroot/194/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 399.587752][ T8039] erofs: (device loop4): mounted with root inode @ nid 36. [ 399.657728][ T8037] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 399.675385][ T8033] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 400.291794][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 400.308883][ T4253] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 400.330192][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 400.377816][ T8048] loop3: detected capacity change from 0 to 2048 [ 400.428856][ T8048] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 400.470515][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 400.503941][ T8048] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 400.668180][ T8048] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 400.686200][ T8048] UDF-fs: Scanning with blocksize 512 failed [ 400.725967][ T8058] loop4: detected capacity change from 0 to 512 [ 400.738936][ T8048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.789575][ T8058] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 401.253905][ T8058] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.896575][ T8067] loop2: detected capacity change from 0 to 2048 [ 401.952868][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 401.988150][ T8073] loop1: detected capacity change from 0 to 256 [ 401.994907][ T8067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.024524][ T8070] netlink: 'syz.3.1033': attribute type 6 has an invalid length. [ 402.070039][ T8073] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 402.197069][ T8073] exFAT-fs (loop1): hint_cluster is invalid (17) [ 402.244445][ T27] audit: type=1800 audit(1738100414.102:52): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1032" name="file1" dev="loop1" ino=1048626 res=0 errno=0 [ 402.273386][ T8076] loop4: detected capacity change from 0 to 2048 [ 402.317821][ T8076] EXT4-fs: Ignoring removed mblk_io_submit option [ 402.387911][ T8076] EXT4-fs: Ignoring removed i_version option [ 402.509138][ T8076] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 402.589945][ T8091] loop1: detected capacity change from 0 to 2048 [ 402.655623][ T8091] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 402.785246][ T8096] loop3: detected capacity change from 0 to 16 [ 403.919897][ T27] audit: type=1804 audit(1738100415.772:53): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1034" name="/newroot/220/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 403.996050][ T8096] erofs: (device loop3): mounted with root inode @ nid 36. [ 404.281043][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 404.281863][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 404.388868][ T8088] loop0: detected capacity change from 0 to 2048 [ 404.452926][ T8088] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 404.517967][ T8112] loop3: detected capacity change from 0 to 16 [ 404.528646][ T8112] erofs: (device loop3): mounted with root inode @ nid 36. [ 404.535524][ T8110] loop1: detected capacity change from 0 to 256 [ 404.668558][ T4253] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 404.760312][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 404.919620][ T8122] netlink: 'syz.4.1047': attribute type 6 has an invalid length. [ 405.208281][ T8134] loop4: detected capacity change from 0 to 256 [ 405.237587][ T8134] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 406.163973][ T8144] loop1: detected capacity change from 0 to 2048 [ 406.246888][ T8144] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.274875][ T8164] loop3: detected capacity change from 0 to 16 [ 407.282951][ T8164] erofs: (device loop3): mounted with root inode @ nid 36. [ 407.352121][ T8165] loop2: detected capacity change from 0 to 2048 [ 407.391545][ T8165] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 407.755734][ T4259] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 407.795259][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 407.802314][ T8172] netlink: 'syz.4.1059': attribute type 6 has an invalid length. [ 408.328260][ T4411] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 408.343387][ T8193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1068'. [ 408.554342][ T8199] loop0: detected capacity change from 0 to 1024 [ 408.615363][ T4411] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 408.638205][ T4411] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.639027][ T8199] ext4: Unknown parameter 'noacl' [ 409.478365][ T4411] usb 3-1: config 0 has no interface number 0 [ 409.485439][ T4411] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 409.497192][ T4411] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 409.508298][ T4411] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.522096][ T4411] usb 3-1: config 0 interface 52 has no altsetting 0 [ 409.610202][ T4411] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 409.815277][ T4411] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 409.824113][ T4411] usb 3-1: Product: syz [ 409.828649][ T4411] usb 3-1: SerialNumber: syz [ 409.859179][ T4411] usb 3-1: config 0 descriptor?? [ 410.142887][ T8215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.152100][ T8215] device batadv_slave_0 entered promiscuous mode [ 410.980316][ T4411] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input9 [ 411.009755][ T8212] loop1: detected capacity change from 0 to 2048 [ 411.034707][ T3609] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 411.079472][ T3609] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 411.137669][ T8219] netlink: 'syz.4.1073': attribute type 6 has an invalid length. [ 411.159508][ T8212] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 411.228748][ T3609] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 411.253127][ T3609] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 411.276153][ T4299] usb 3-1: USB disconnect, device number 6 [ 411.419335][ T4252] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 411.475305][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 411.596206][ T8232] loop1: detected capacity change from 0 to 1024 [ 412.033178][ T8240] hfsplus: xattr search failed [ 412.682551][ T8244] loop2: detected capacity change from 0 to 2048 [ 412.768247][ T8244] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.048690][ T8249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1080'. [ 413.079135][ T8249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1080'. [ 413.276655][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 414.033629][ T8257] loop4: detected capacity change from 0 to 2048 [ 414.058470][ T8257] EXT4-fs: Ignoring removed mblk_io_submit option [ 414.094535][ T8257] EXT4-fs: Ignoring removed i_version option [ 414.108924][ T8267] netlink: 'syz.2.1086': attribute type 6 has an invalid length. [ 414.148302][ T6420] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 414.496257][ T8257] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 415.168245][ T6420] usb 4-1: device descriptor read/64, error -71 [ 415.310384][ T27] audit: type=1804 audit(1738100427.162:54): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1083" name="/newroot/234/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 415.478131][ T6420] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 415.638165][ T6420] usb 4-1: device descriptor read/64, error -71 [ 415.722780][ T8285] loop2: detected capacity change from 0 to 256 [ 415.758285][ T6420] usb usb4-port1: attempt power cycle [ 415.814590][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 415.821280][ T8285] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 416.066015][ T8287] loop4: detected capacity change from 0 to 2048 [ 416.168525][ T6420] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 416.190601][ T8287] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 416.208852][ T6420] usb 4-1: device descriptor read/8, error -71 [ 416.310921][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 416.488201][ T6420] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 416.618074][ T952] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 416.627131][ T6420] usb 4-1: device descriptor read/8, error -71 [ 416.818346][ T6420] usb usb4-port1: unable to enumerate USB device [ 416.964723][ T952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.128193][ T952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.178450][ T952] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.214569][ T952] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.229836][ T952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.257168][ T952] usb 3-1: config 0 descriptor?? [ 418.317762][ T8317] loop0: detected capacity change from 0 to 2048 [ 418.361020][ T952] plantronics 0003:047F:FFFF.0004: unbalanced collection at end of report description [ 418.377086][ T952] plantronics 0003:047F:FFFF.0004: parse failed [ 418.384595][ T952] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 418.393518][ T8317] EXT4-fs: Ignoring removed mblk_io_submit option [ 418.410085][ T952] usb 3-1: USB disconnect, device number 7 [ 418.461574][ T8317] EXT4-fs: Ignoring removed i_version option [ 418.496059][ T8320] loop1: detected capacity change from 0 to 2048 [ 418.571222][ T8317] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 418.615085][ T8320] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 418.674041][ T8332] loop3: detected capacity change from 0 to 256 [ 419.038196][ T27] audit: type=1804 audit(1738100430.872:55): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1102" name="/newroot/223/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 419.249630][ T8332] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 419.401308][ T4252] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 419.427383][ T8332] exFAT-fs (loop3): hint_cluster is invalid (17) [ 419.510829][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 419.599634][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 420.043471][ T8356] loop1: detected capacity change from 0 to 16 [ 420.055906][ T8356] erofs: (device loop1): mounted with root inode @ nid 36. [ 420.168250][ T4299] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 420.629481][ T4299] usb 4-1: device descriptor read/64, error -71 [ 421.358270][ T4299] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 421.548278][ T4299] usb 4-1: device descriptor read/64, error -71 [ 421.573291][ T8372] loop4: detected capacity change from 0 to 2048 [ 421.678123][ T8372] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 421.708219][ T4299] usb usb4-port1: attempt power cycle [ 421.728442][ T8378] loop2: detected capacity change from 0 to 2048 [ 421.735648][ T8378] EXT4-fs: Ignoring removed mblk_io_submit option [ 421.785939][ T8378] EXT4-fs: Ignoring removed i_version option [ 421.821307][ T4250] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 421.864467][ T8378] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 421.875399][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 421.993676][ T8384] loop1: detected capacity change from 0 to 256 [ 422.115673][ T8384] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 422.531952][ T27] audit: type=1804 audit(1738100434.362:56): pid=8392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1120" name="/newroot/210/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 422.794351][ T8384] exFAT-fs (loop1): hint_cluster is invalid (17) [ 422.891553][ T4299] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 422.905222][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 422.958214][ T4299] usb 4-1: device descriptor read/8, error -71 [ 423.484846][ T8411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.514710][ T8411] device batadv_slave_0 entered promiscuous mode [ 424.231757][ T8432] loop3: detected capacity change from 0 to 256 [ 424.284823][ T8432] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 424.350832][ T8432] exFAT-fs (loop3): hint_cluster is invalid (17) [ 424.453690][ T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 424.476989][ T8434] loop0: detected capacity change from 0 to 128 [ 424.734543][ T8438] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 424.759948][ T8438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 424.769093][ T8438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 424.795533][ T14] usb 3-1: device descriptor read/64, error -71 [ 425.281392][ T14] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 425.458250][ T14] usb 3-1: device descriptor read/64, error -71 [ 425.598817][ T14] usb usb3-port1: attempt power cycle [ 425.995745][ T8460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.007776][ T8460] device batadv_slave_0 entered promiscuous mode [ 426.017664][ T14] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 426.078840][ T14] usb 3-1: device descriptor read/8, error -71 [ 426.177597][ T8466] loop1: detected capacity change from 0 to 16 [ 426.472644][ T8466] erofs: (device loop1): mounted with root inode @ nid 36. [ 426.566802][ T8468] loop0: detected capacity change from 0 to 256 [ 426.598287][ T14] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 426.638810][ T14] usb 3-1: device descriptor read/8, error -71 [ 426.651706][ T8472] loop4: detected capacity change from 0 to 256 [ 426.703676][ T8472] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 426.759836][ T14] usb usb3-port1: unable to enumerate USB device [ 426.777678][ T8472] exFAT-fs (loop4): hint_cluster is invalid (17) [ 427.114102][ T8480] loop1: detected capacity change from 0 to 1024 [ 427.549244][ T8480] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 428.211525][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 428.295647][ T8499] loop4: detected capacity change from 0 to 2048 [ 428.348907][ T8499] EXT4-fs: Ignoring removed mblk_io_submit option [ 428.380467][ T8499] EXT4-fs: Ignoring removed i_version option [ 428.440193][ T8499] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 428.852012][ T27] audit: type=1804 audit(1738100440.702:57): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1157" name="/newroot/253/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 429.375715][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 429.505950][ T8518] loop1: detected capacity change from 0 to 256 [ 429.547688][ T8518] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 429.624219][ T8518] exFAT-fs (loop1): hint_cluster is invalid (17) [ 429.717361][ T8525] loop2: detected capacity change from 0 to 16 [ 429.725310][ T8525] erofs: (device loop2): mounted with root inode @ nid 36. [ 429.885627][ T8530] netlink: 'syz.4.1166': attribute type 6 has an invalid length. [ 430.278145][ T4298] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 430.314384][ T8541] loop4: detected capacity change from 0 to 128 [ 430.359792][ T8542] loop1: detected capacity change from 0 to 128 [ 430.478357][ T4298] usb 1-1: Using ep0 maxpacket: 8 [ 430.486530][ T4298] usb 1-1: no configurations [ 430.559300][ T27] audit: type=1800 audit(1738100442.402:58): pid=8542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1168" name="file1" dev="loop1" ino=1048634 res=0 errno=0 [ 430.681367][ T4298] usb 1-1: can't read configurations, error -22 [ 431.118158][ T4298] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 431.259097][ T8546] loop1: detected capacity change from 0 to 2048 [ 431.269440][ T8546] EXT4-fs: Ignoring removed mblk_io_submit option [ 431.302336][ T8551] loop3: detected capacity change from 0 to 2048 [ 431.302350][ T8546] EXT4-fs: Ignoring removed i_version option [ 431.319212][ T8551] EXT4-fs: Ignoring removed mblk_io_submit option [ 431.325912][ T8551] EXT4-fs: Ignoring removed i_version option [ 431.338301][ T4298] usb 1-1: Using ep0 maxpacket: 8 [ 431.354171][ T4298] usb 1-1: no configurations [ 431.364901][ T4298] usb 1-1: can't read configurations, error -22 [ 431.384847][ T4298] usb usb1-port1: attempt power cycle [ 431.405226][ T8551] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 431.415784][ T8546] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 432.924076][ T27] audit: type=1804 audit(1738100444.242:59): pid=8565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1173" name="/newroot/249/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 433.690634][ T27] audit: type=1804 audit(1738100444.852:60): pid=8567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1171" name="/newroot/206/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 433.828242][ T4298] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 433.843663][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 433.860103][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 433.878614][ T4298] usb 1-1: device descriptor read/8, error -71 [ 434.103549][ T8576] loop1: detected capacity change from 0 to 256 [ 434.117085][ T8579] loop4: detected capacity change from 0 to 256 [ 434.150980][ T8576] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 434.172485][ T8579] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 434.266170][ T8579] exFAT-fs (loop4): hint_cluster is invalid (17) [ 434.687978][ T8590] loop0: detected capacity change from 0 to 128 [ 434.862714][ T27] audit: type=1800 audit(1738100446.692:61): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1181" name="file1" dev="loop0" ino=1048637 res=0 errno=0 [ 435.412364][ T8594] loop2: detected capacity change from 0 to 2048 [ 435.419580][ T8594] EXT4-fs: Ignoring removed mblk_io_submit option [ 435.426042][ T8594] EXT4-fs: Ignoring removed i_version option [ 435.535480][ T8594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 435.723166][ T8601] loop3: detected capacity change from 0 to 2048 [ 435.811686][ T8601] EXT4-fs: Ignoring removed mblk_io_submit option [ 435.924462][ T27] audit: type=1804 audit(1738100447.782:62): pid=8607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1187" name="/newroot/223/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 435.958197][ T8601] EXT4-fs: Ignoring removed i_version option [ 436.060886][ T6420] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 436.085706][ T8601] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 436.344864][ T4259] EXT4-fs (loop2): unmounting filesystem. [ 436.380152][ T6420] usb 1-1: Using ep0 maxpacket: 8 [ 436.408205][ T6420] usb 1-1: no configurations [ 436.417646][ T6420] usb 1-1: can't read configurations, error -22 [ 436.591214][ T27] audit: type=1804 audit(1738100448.442:63): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1188" name="/newroot/252/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 436.613439][ T6420] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 437.069293][ T8623] loop4: detected capacity change from 0 to 128 [ 437.088105][ T6420] usb 1-1: Using ep0 maxpacket: 8 [ 437.093909][ T6420] usb 1-1: no configurations [ 437.117493][ T6420] usb 1-1: can't read configurations, error -22 [ 437.127710][ T6420] usb usb1-port1: attempt power cycle [ 437.172215][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 437.479221][ T8626] loop3: detected capacity change from 0 to 256 [ 437.562648][ T8626] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 437.575230][ T6420] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 437.614262][ T6420] usb 1-1: Using ep0 maxpacket: 8 [ 437.627744][ T6420] usb 1-1: no configurations [ 437.652124][ T8626] exFAT-fs (loop3): hint_cluster is invalid (17) [ 437.656849][ T6420] usb 1-1: can't read configurations, error -22 [ 437.755078][ T8630] loop4: detected capacity change from 0 to 16 [ 437.775174][ T8630] erofs: (device loop4): mounted with root inode @ nid 36. [ 437.838383][ T6420] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 437.878943][ T6420] usb 1-1: Using ep0 maxpacket: 8 [ 437.884734][ T6420] usb 1-1: no configurations [ 437.917806][ T6420] usb 1-1: can't read configurations, error -22 [ 437.946349][ T6420] usb usb1-port1: unable to enumerate USB device [ 438.881211][ T8641] loop3: detected capacity change from 0 to 128 [ 439.240364][ T27] audit: type=1800 audit(1738100451.092:64): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1197" name="file1" dev="loop3" ino=1048639 res=0 errno=0 [ 439.799712][ T8656] loop2: detected capacity change from 0 to 128 [ 439.994475][ T8660] loop0: detected capacity change from 0 to 256 [ 440.062686][ T8660] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 440.319957][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.329583][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.473675][ T8674] exFAT-fs (loop0): hint_cluster is invalid (17) [ 441.665601][ T8680] loop1: detected capacity change from 0 to 128 [ 441.686142][ T8680] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 441.744045][ T8680] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 442.154412][ T8689] loop1: detected capacity change from 0 to 512 [ 444.624584][ T8689] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 444.656458][ T8689] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 444.690783][ T8700] loop2: detected capacity change from 0 to 128 [ 444.737415][ T27] audit: type=1800 audit(1738100456.592:65): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1216" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 444.857921][ T27] audit: type=1800 audit(1738100456.692:66): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1216" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 444.943244][ T27] audit: type=1800 audit(1738100456.692:67): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1216" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 445.282658][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 446.000004][ T8718] loop4: detected capacity change from 0 to 16 [ 446.056797][ T8718] erofs: (device loop4): mounted with root inode @ nid 36. [ 446.119158][ T8717] loop1: detected capacity change from 0 to 256 [ 446.255137][ T8717] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 446.339085][ T8717] exFAT-fs (loop1): hint_cluster is invalid (17) [ 446.738760][ T4298] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 447.478973][ T8738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.782685][ T4298] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 447.878466][ T4298] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 448.022450][ T4298] usb 4-1: config 0 has no interface number 0 [ 448.121665][ T4298] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 41033, setting to 64 [ 448.154264][ T8738] device batadv_slave_0 entered promiscuous mode [ 448.181910][ T4298] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.205425][ T4298] usb 4-1: config 0 interface 52 has no altsetting 0 [ 448.237036][ T4298] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 448.257075][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 448.309370][ T4298] usb 4-1: Product: syz [ 448.313691][ T4298] usb 4-1: SerialNumber: syz [ 448.399936][ T4298] usb 4-1: config 0 descriptor?? [ 448.522127][ T8742] loop1: detected capacity change from 0 to 128 [ 448.634930][ T4298] input: syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input10 [ 448.653354][ T8747] binder: 8743:8747 ioctl c0306201 0 returned -14 [ 448.857943][ T8617] usb 4-1: USB disconnect, device number 15 [ 448.880057][ T8749] loop1: detected capacity change from 0 to 2048 [ 448.883920][ T3609] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 448.891462][ T8749] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 452.596524][ T8766] loop2: detected capacity change from 0 to 128 [ 453.236919][ T8769] loop3: detected capacity change from 0 to 16 [ 453.418776][ T8766] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 453.442861][ T8769] erofs: (device loop3): mounted with root inode @ nid 36. [ 453.533731][ T8766] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 453.840444][ T8776] loop3: detected capacity change from 0 to 2048 [ 453.964855][ T8784] loop2: detected capacity change from 0 to 128 [ 453.974295][ T8776] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 454.035748][ T8787] binder: 8785:8787 ioctl c0306201 0 returned -14 [ 454.078382][ T8776] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 454.394680][ T8794] netlink: 'syz.4.1248': attribute type 6 has an invalid length. [ 454.615367][ T8798] loop4: detected capacity change from 0 to 2048 [ 454.622760][ T8798] EXT4-fs: Ignoring removed mblk_io_submit option [ 454.633025][ T8798] EXT4-fs: Ignoring removed i_version option [ 454.708159][ T8799] loop2: detected capacity change from 0 to 128 [ 454.798799][ T8799] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 454.836593][ T8799] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.011875][ T8798] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 455.418670][ T6500] ------------[ cut here ]------------ [ 455.424679][ T6500] kernel BUG at fs/ext4/inode.c:2759! [ 455.543828][ T6500] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 455.550071][ T6500] CPU: 1 PID: 6500 Comm: kworker/u4:19 Not tainted 6.1.127-syzkaller #0 [ 455.558426][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 455.568505][ T6500] Workqueue: writeback wb_workfn (flush-7:3) [ 455.574541][ T6500] RIP: 0010:ext4_writepages+0x3dd9/0x3de0 [ 455.580293][ T6500] Code: c7 70 22 4c 8d 4c 89 f2 e8 14 2c 34 02 e9 b9 fb ff ff e8 2a 1a 4f ff 0f 0b e8 23 1a 4f ff 0f 0b e8 1c 53 77 08 e8 17 1a 4f ff <0f> 0b 0f 1f 44 00 00 41 57 41 56 41 55 41 54 53 49 89 f7 49 89 fe [ 455.599920][ T6500] RSP: 0018:ffffc90005166f40 EFLAGS: 00010293 [ 455.605994][ T6500] RAX: ffffffff823b8289 RBX: 0000008000000000 RCX: ffff88802e509dc0 [ 455.613972][ T6500] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 455.621946][ T6500] RBP: ffffc90005167330 R08: ffffffff823b4b40 R09: ffffed100b46f791 [ 455.629922][ T6500] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 455.637891][ T6500] R13: ffffc90005167710 R14: 000000c410000000 R15: ffffc90005167200 [ 455.645888][ T6500] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 455.654821][ T6500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.661426][ T6500] CR2: 00005555926e9808 CR3: 000000005d3c0000 CR4: 00000000003506e0 [ 455.669406][ T6500] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 455.677393][ T6500] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 455.685452][ T6500] Call Trace: [ 455.688734][ T6500] [ 455.691667][ T6500] ? __die_body+0x5e/0xa0 [ 455.696034][ T6500] ? die+0x83/0xb0 [ 455.699766][ T6500] ? do_trap+0x11e/0x350 [ 455.704017][ T6500] ? ext4_writepages+0x3dd9/0x3de0 [ 455.709225][ T6500] ? ext4_writepages+0x3dd9/0x3de0 [ 455.714348][ T6500] ? do_error_trap+0x13d/0x1e0 [ 455.719122][ T6500] ? ext4_writepages+0x3dd9/0x3de0 [ 455.724259][ T6500] ? do_int3+0x30/0x30 [ 455.728350][ T6500] ? report_bug+0x3e0/0x500 [ 455.732883][ T6500] ? rcu_is_watching+0x11/0xb0 [ 455.737647][ T6500] ? handle_invalid_op+0x2c/0x40 [ 455.742589][ T6500] ? ext4_writepages+0x3dd9/0x3de0 [ 455.747709][ T6500] ? exc_invalid_op+0x2f/0x40 [ 455.752388][ T6500] ? asm_exc_invalid_op+0x16/0x20 [ 455.757427][ T6500] ? ext4_writepages+0x690/0x3de0 [ 455.762462][ T6500] ? ext4_writepages+0x3dd9/0x3de0 [ 455.767584][ T6500] ? ext4_writepages+0x3dd9/0x3de0 [ 455.772709][ T6500] ? mark_lock+0x9a/0x340 [ 455.777050][ T6500] ? __lock_acquire+0x125b/0x1f80 [ 455.782185][ T6500] ? validate_chain+0x112/0x5950 [ 455.787154][ T6500] ? reacquire_held_locks+0x660/0x660 [ 455.792531][ T6500] ? mark_lock+0x9a/0x340 [ 455.796880][ T6500] ? __lock_acquire+0x125b/0x1f80 [ 455.801919][ T6500] ? ext4_read_folio+0x390/0x390 [ 455.806899][ T6500] ? do_raw_spin_unlock+0x137/0x8a0 [ 455.812099][ T6500] ? ext4_read_folio+0x390/0x390 [ 455.817043][ T6500] do_writepages+0x3a2/0x670 [ 455.821645][ T6500] ? __writepage+0x120/0x120 [ 455.826335][ T6500] ? writeback_sb_inodes+0x760/0x1b20 [ 455.831712][ T6500] ? __lock_acquire+0x1f80/0x1f80 [ 455.836811][ T6500] ? do_raw_spin_lock+0x14a/0x370 [ 455.841840][ T6500] __writeback_single_inode+0x15d/0x11e0 [ 455.847481][ T6500] writeback_sb_inodes+0xc2b/0x1b20 [ 455.852685][ T6500] ? move_expired_inodes+0x375/0x810 [ 455.857973][ T6500] ? mark_lock+0x9a/0x340 [ 455.862317][ T6500] ? do_raw_spin_lock+0x14a/0x370 [ 455.867359][ T6500] ? queue_io+0x630/0x630 [ 455.871714][ T6500] ? __writeback_inodes_wb+0x400/0x400 [ 455.877203][ T6500] ? queue_io+0x42a/0x630 [ 455.881538][ T6500] wb_writeback+0x49d/0xe10 [ 455.886049][ T6500] ? percpu_ref_tryget+0x260/0x260 [ 455.891163][ T6500] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 455.897157][ T6500] ? do_raw_spin_unlock+0x137/0x8a0 [ 455.902368][ T6500] wb_workfn+0x427/0x1020 [ 455.906721][ T6500] ? inode_wait_for_writeback+0x280/0x280 [ 455.912455][ T6500] ? read_lock_is_recursive+0x10/0x10 [ 455.917837][ T6500] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 455.923826][ T6500] ? print_irqtrace_events+0x210/0x210 [ 455.929292][ T6500] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 455.935199][ T6500] ? do_raw_spin_unlock+0x137/0x8a0 [ 455.940406][ T6500] ? process_one_work+0x7a9/0x11d0 [ 455.945526][ T6500] process_one_work+0x8a9/0x11d0 [ 455.950475][ T6500] ? worker_detach_from_pool+0x260/0x260 [ 455.956113][ T6500] ? _raw_spin_lock_irqsave+0x120/0x120 [ 455.961667][ T6500] ? kthread_data+0x4e/0xc0 [ 455.966182][ T6500] ? wq_worker_running+0x97/0x190 [ 455.971213][ T6500] worker_thread+0xa47/0x1200 [ 455.975898][ T6500] ? _raw_spin_unlock+0x40/0x40 [ 455.980758][ T6500] ? release_firmware_map_entry+0x186/0x186 [ 455.986803][ T6500] ? _raw_spin_unlock+0x40/0x40 [ 455.991763][ T6500] kthread+0x28d/0x320 [ 455.995834][ T6500] ? worker_clr_flags+0x190/0x190 [ 456.000862][ T6500] ? kthread_blkcg+0xd0/0xd0 [ 456.005454][ T6500] ret_from_fork+0x1f/0x30 [ 456.009884][ T6500] [ 456.012901][ T6500] Modules linked in: [ 456.025261][ T6500] ---[ end trace 0000000000000000 ]--- [ 456.030962][ T6500] RIP: 0010:ext4_writepages+0x3dd9/0x3de0 [ 456.036835][ T6500] Code: c7 70 22 4c 8d 4c 89 f2 e8 14 2c 34 02 e9 b9 fb ff ff e8 2a 1a 4f ff 0f 0b e8 23 1a 4f ff 0f 0b e8 1c 53 77 08 e8 17 1a 4f ff <0f> 0b 0f 1f 44 00 00 41 57 41 56 41 55 41 54 53 49 89 f7 49 89 fe [ 456.063883][ T8805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.074321][ T6500] RSP: 0018:ffffc90005166f40 EFLAGS: 00010293 [ 456.090173][ T6500] RAX: ffffffff823b8289 RBX: 0000008000000000 RCX: ffff88802e509dc0 [ 456.099338][ T27] audit: type=1804 audit(1738100467.962:68): pid=8803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1249" name="/newroot/278/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 456.434057][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 456.493503][ T8806] loop0: detected capacity change from 0 to 2048 [ 456.515979][ T8810] loop2: detected capacity change from 0 to 256 [ 456.533827][ T6500] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 456.550585][ T8806] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 456.586626][ T6500] RBP: ffffc90005167330 R08: ffffffff823b4b40 R09: ffffed100b46f791 [ 456.599001][ T8810] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 456.763442][ T6500] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 456.796507][ T6500] R13: ffffc90005167710 R14: 000000c410000000 R15: ffffc90005167200 [ 457.007598][ T6500] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 457.156703][ T6500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.194595][ T6500] CR2: 0000000000000000 CR3: 000000002fc27000 CR4: 00000000003506e0 [ 457.232666][ T6500] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 457.254225][ T6500] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 457.272739][ T6500] Kernel panic - not syncing: Fatal exception [ 457.279134][ T6500] Kernel Offset: disabled [ 457.283465][ T6500] Rebooting in 86400 seconds..