last executing test programs: 6m43.197244396s ago: executing program 0 (id=59): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 6m42.962484509s ago: executing program 0 (id=62): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 6m39.780911717s ago: executing program 0 (id=69): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m38.600932947s ago: executing program 0 (id=73): syz_mount_image$minix(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f0000000080)=ANY=[], 0x1, 0x1cf, &(0x7f0000001f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 6m37.081872226s ago: executing program 0 (id=79): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 6m34.040519765s ago: executing program 0 (id=86): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="9cf9ad258963981511d9de699a75f5d71cb604eabc48fd892b4dc3737520bd5bda32268404ab99a848bf77fb6a5725f795bbb1f2dfdf284e7f82f6668ecefa6a85a7cc434bd34e91014dabf203309be1bf6999d8f59d0dd567ecf9a87c680dd467a682cb262e4d90b57237e3cdf84c85df4749a4ef6a67dc6556b6ff4ae8f5026f865e4075efa250a02a670d48851a6cf97522e52300c7ef213ef50de6979ee12e2ecb9f5068e3e68e8d06c5ad68570a9e9e1fec5bcfedf4b7f56b0fa96f8b4cdb9f5178efb59d90367e10da96bd6b57ac82f23fd4d18692fe381bc4f2cc390a5056cccee185b77089246101c0647c3486055342dd36"], 0x1, 0x2c2, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000200)='./file0/file0\x00', 0x812488, 0x0, 0xff, 0x0, &(0x7f00000007c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8000000000000000, &(0x7f00000004c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x40000000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 6m33.934491231s ago: executing program 32 (id=86): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="9cf9ad258963981511d9de699a75f5d71cb604eabc48fd892b4dc3737520bd5bda32268404ab99a848bf77fb6a5725f795bbb1f2dfdf284e7f82f6668ecefa6a85a7cc434bd34e91014dabf203309be1bf6999d8f59d0dd567ecf9a87c680dd467a682cb262e4d90b57237e3cdf84c85df4749a4ef6a67dc6556b6ff4ae8f5026f865e4075efa250a02a670d48851a6cf97522e52300c7ef213ef50de6979ee12e2ecb9f5068e3e68e8d06c5ad68570a9e9e1fec5bcfedf4b7f56b0fa96f8b4cdb9f5178efb59d90367e10da96bd6b57ac82f23fd4d18692fe381bc4f2cc390a5056cccee185b77089246101c0647c3486055342dd36"], 0x1, 0x2c2, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000200)='./file0/file0\x00', 0x812488, 0x0, 0xff, 0x0, &(0x7f00000007c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) ptrace$getenv(0x4201, 0x0, 0x8000000000000000, &(0x7f00000004c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x40000000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 5m22.23260952s ago: executing program 5 (id=511): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000180)='./file1\x00', 0x2008040, &(0x7f0000000240)=ANY=[], 0x2, 0x150c, &(0x7f00000002c0)="$eJzs3QucTtX6OPD1rLX2GNPEm+QyrGc9mzcNlkmSXJLkkiRJkuSWkDRJkpAYcktCEnKdJJchJJeJSeN+v+SeNDmSJAkJCev/mTod5/w6v4/Ov87P+Zx5vp/P/rzrmb2fZ6/9Pu/Mu/f+zMz7TdfhtZrUrt6IiMQfAr88pAghYoUQg4QQeYUQgRCifL7y+bLX51aQ8sd2wv5cD6Zd6RmwK4n7n7Nx/3M27n/Oxv3P2bj/ORv3P2fj/v8Xivn9m3L/GcvJts4sfA0vOXf54/f/Y3954Pv//0lif99m/P6fs3H//9ucyv2vbM39/29y0Xv/r2Vw/3MI/c+/zP3P2bj/ORv3P2fj/uds3H/GcrI/cu94y59Qg5cru1zhlx9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsRzirL9ECyF+HV/peTHGGGOMMcYYY+zP43Nd6RkwxhhjjDHGGGPs3w+EFEpoEYgYkUvEitwiTlwl4sXVIo/IKyLiGpFPXCvyi+tEAVFQFBKFRYIoIooKI1BYQSIUxURxERXXixLiBpEoSopSorRwooxIEjeKsuImUU7cLMqLW0QFcauoKCqJyqKKuE1UFbeLauIOUV3cKWqImqKWqC3uEnXE3aKuuEfUE/eK+uI+0UDcLxqKB0Qj8aBoLB4STcTDoql4RDQTzUUL0VK0+v/Kf0H0FC+KXqK3SBF9RF/xkugn+osBYqAYJF4Wg8UrYoh4VQwVw8Rw8ZoYIV4XI8UbYpQYLcaIN8VYMU6MFxPERDFJpIq3xGTxtpgi3hFTxTQxXcwQaWKmmCXeFbPFHDFXvCfmiffFfLFALBSLRLr4QCwWS0SG+FAsFR+JTLFMLBcrxEqxSqwWa8RasU6sFxvERrFJbBZbxFbxsdgmtosdYqfYJXaLPeITsVd8KvaJz0SW+PxfzD/zP/K7gQABEiRo0BADMRALsRAHcRAP8ZAH8kAEIpAP8kF+yA8FoAAUgkKQAAlQFIoCAgIBQTEoBlGIQgkoAYmQCKWgFDhwkARJUBZugnJQDspDeagAFaAiVIJKUAWqQFWoCtWgGlSH6lADakAtqAV3wV1wN9SFulAP6kF9qA8NoAE0hIbQCBpBY2gMTaAJNIWm0AyaQQtoAa2gFbSG1tAG2kA7aAftoT10gA6QDMnQETpCJ+gEnaEzdIEu0BW6QjfoDt3hBXgBXoQXoTfUkH2gL/SFftAPBsBAGAgvw2B4BV6BV2EoDIPh8Bq8Bq/DSDgNo2A0jIExUFWOg/EwAUhOglRIhckwGabAFJgK02AazIA0mAmzYBbMhjkwB96DefA+vA8LYAEsgnRIh8WwBDIgA5bCGciEZbAcVsBKWAUrYQ2shTWwHjbAetgEm2ALbIGP4WPYDtthJ+yE3bAbPoFP4FP4FIZCFmTBftgPB+AAHISDcAgOwWE4DEfgCByFo3AMjsFxOAEn4QScglNwGs7AWTgL5+AcnIfzcBEuZn/zy2xaahkjY2SsjJVxMk7Gy3iZR+aRERmR+WQ+mV/mlwVkAVlIFpIJMkEWlUUlSpQkQ1lMFpNRGZUlZAmZKBNlKVlKOulkkkySZWVZWU6Wk+XlLbKCvFVWlJVkW1dFVpFVZTtXTd4hq8vqsoasKWvJ2rK2rCPryLqyrqwn68n6sr5sIO+XDWUfGAAPyuzONJHDoKkcDs1kc9lCtpSvw6OytRwJbWRb2U4+LkfDKOggW7tk+ZTsKMdDJ/mMnADPyi5yEnSVz8tusrvsIV+QPWUb10v2llOhj+wrZ0A/2V8OkAPlbKgpsztWS74qh8phcrh8TS6C1+VI+YYcJUfLMfJNOVaOk+PlBDlRTpKp8i05Wb4tp8h35FQ5TU6XM2SanClnyXflbDlHzpXvyXnyfTlfLpAL5SKZLj+Qi+USmSE/lEvlRzJTLpPL5Qq5Uq6Sq+UauVauk+vlBrlRbpKb5Ra5VX4st8ntcofcKXfJ3XKP/ETulZ/KffIzmSU/l/vlX+QB+YU8KL+Uh+RX8rD8Wh6R38ij8lt5TH4nj8sT8qT8Xp6SP8jT8ow8K3+U5+RP8ry8IC9KL4UCJZVSWgUqRuVSsSq3ilNXqXh1tcqj8qqIukblU9eq/Oo6VUAVVIVUYZWgiqiiyihUVpEKVTFVXEXV9aqEukElqpKqlCqtnCqjktSNqqy6SZVTN6vy6hZVQd2qKqpKqrKqom5TVdXtqpq6Q1VXd6oaqqaqpWqru1Qddbeqq+5R9dS9qr66TzVQ96uG6gHVSD2oGquHVBP1sGqqHlHNVHPVQrVUrdSjqrV6TLVRbVU79bhqr55QHdSTKlk9pTqqp1Un9YzqrJ5VXdRzqqt6XnVT3VUPdUFdVF71Ur1Viuqj+qqXVD/VXw1QA9Ug9bIarF5RQ9Sraqgapoar19QI9boaqd5Qo9RoNUa9qcaqcWq8mqAmqkkqVb2lJqu31RT1jpqqpqnpaoZKUzPVgL9Wmvs78t/Ozo/8Y/6Qn/e+RW1VH6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6kf1vTqlflCn1Rl1Rv2ozqlz6vxfnwOhQUuttNaBjtG5dKzOreP0VTpeX63z6Lw6oq/R+fS1Or++ThfQBXUhXVgn6CK6qDYatdWkQ11MF9dRfb0uoW/QibqkLqVLa6fL6CR94x/Ov9z8WulWurVurdvoNrqdbqfb6/a6g+6gk3Wy7qg76k66k+6sO+suuovuqrvqbrqb7qF76J66p/ZCiBSdovvql3Q/3V8P0AP1IP2yHqwH6yF6iB6qh+rhergeoUfokXqkHqVH6TF6jB6rx+rxeryeqCfqVJ2qJ+vJeoqeoqfqqXq6nq7TdJqepWfp2Xq2nqvn6nl6np6v5+uFeqFO1+l6sV6sM3SGXqqX6ky9TC/TK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SmfrXX9DcoXfoXXqX3qP36L16r96n9+ksnaX36/36gD6gD+qD+pA+pA/rw/qIPqKP6qP6mD6mj+vj+qQ+qU/pU1r+9YzvnD6nz+vz+qK+mH3aF8hABjrQQUwQE8QGsUFcEBfEB/FBniBPEAkiQb4gX5A/uC4oEBQMCgWFg4SgSFA0MAEGNqAgDIoFxYNocH1QIrghSAxKBqWC0oELygRJwY1B2eCmoFxwc1A+uCWoENwaVAwqBZWDKsFtQdXg9qBacEdQPbgzqBHUDGoFtYO7gjrB3UHd4J6gXnBvUD+4L2gQ3B80DB4IGgUPBo2Dh4ImwcNB0+CRoFnQPGgRtAxa/an1vT9d8DHXy/Q2KaaP6WteMv1MfzPADDSDzMtmsHnFDDGvmqFmmBluXjMjzOtmpHnDjDKjzRjzphlrxpnxZoKZaCaZVPOWmWzeNlPMO2aqmWammxkmzcw0s8y7ZraZY+aa98w8876ZbxaYhWaRSTcfmMVmickwH5ql5iOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+NtvMdrPD7DS7zG6zx3xi9ppPzT7zmckyn5v95i/mgPnCHDRfmkPmK3PYfG2OmG/MUfOtOWa+M8fNCXPSfG9OmR/MaXPGnDU/mnPmJ3PeXDAXjc8+uc9+e0eNGmMwBmMxFuMwDuMxHvNgHoxgBPNhPsyP+bEAFsBCWAgTMAGLYlHMRkhYDIthFKNYAktgIiZiKSyFDh0mYRKWxbJYDstheSyPFbACVsSKWBmzX5234e14O96Bd+CdeCfWxJpYG2tjHayDdbEu1sN6WB/rYwNsgA2xITbCRtgYG2MTbIJNsSk2w2bYAltgK2yFrbE1tsE22A7bYXtsjx2wAyZjMnbEjtgJO2Fn7IxdsAt2xa7YDbthD+yBPbEn9sJemIIp2Bf7Yj/shwNwAA7CQTgYB+MQHIJDcSgOx+E4AkfgSByJo3A0jsE3cSyOw/E4ASfiJEzFVJyMk3EKTsGpOBWn43RMwzSchbNwNs7GuTgX5+E8nI/zcSEuxHRMx8W4GDMwA5fiUszETFyOy3ElrsTVuBrX4lpcj+txI27EzbgZt+JW3IbbcAfuwF24C/fgHtyLe3Ef7sMszML9uB8P4AE8iAfxEB7Cw3gYj+ARPIpH8Rgew+N4HE7iSTyFp/A0nsazeBbP4U94Hi/gRfQYa3PbOHuVjbdX2zw2r421uXsLIf4WF7KFbYItYotaYwvYgv8Qo7U20Za0pWxp62wZm2Rv/E1c0VaylW0Ve5utam+31X4T17F327r2HlvP3mtr27v+Ia5v77MN7MO2oX3ENrLNbWPb0jaxD9um9hHbzDa3LWxL294+YTvYJ22yfcp2tE//Jl5sl9i1dp1dbzfYvfZTe9b+aI/Yb+w5+5PtZXvbQfZlO9i+YofYV+1QO+w38Rj7ph1rx9nxdoKdaCf9Jp5uZ9g0O9POsu/a2XbOb+J0+4GdZzPsfLvALrSLfo6z55RhP7RL7Uc20y6zy+0Ku9Kusqvtmr/NdYXdZDfbLXaP/cRus9vtDrvT7rK7f46zj2Of/cxm2c/tYfu1PWC/sAftUXvIfvVznH18R+239pj9zh63J+xJ+709ZX+wp+2Zn48/+9i/txfsReutICBJijQFFEO5KJZyUxxdRfF0NeWhvBShaygfXUv56ToqQAWpEBWmBCpCRckQkiWikIpRcYrS9VSCbqBEKkmlqDQ5KkNJdCOVpZuoHN1M5ekWqkC3UkWqRJWpCt1GVel2qkZ3UHW6k2pQTapFtekuqkN3U126h+rRvVSf7qMGdD81pAeoET1IjekhakIPU1N6hJpRc2pBLakVPUqt6TFqQ22pHT1O7ekJ6kBPUjI9RR3paepEz1Bnepa60HPUlZ6nbtSdetAL1JNepF7Um1KoD/Wll6gf9acBNJAG0cs0mF6hIfQqDaVhNJxeoxH0Oo2kN2gUjaYx9CaNpXE0nibQRJpEqfQWTaa3aQq9Q1NpGk2nGZRGM2kWvUuzaQ7NpfdoHr1P82kBLaRFlE4f0GJaQhn0IS2ljyiTltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJU+pm20nXbQTtpFu2kPfUJ76VPaR59RFn1O++kvdIC+oIP0JR2ir+gwfU1H6Bs6St/SMfqOjtMJOknf0yn6gU7TGTpLP9I5+onO0wW6SJ5ECKEMVajDIIwJc4WxYe4wLrwqjA+vDvOEecNIeA0IIcL84XVhgbBgWCgsHCaERcKioQkxtCGFYVgsLB5Gw+vDEuENYWJYMiwVlg5dWCZMCm8My4Y3heXCm8Py4S1hhfDWsGJYKawcVglvC6uGt4fVwjvC6uGdYY2wZlgrrB3eFdYJ7w7rhveE9cJ7w3LhfWGD8P6wYfhA2Ch8MGwcPhQ2CR8Om4aPhM3C5mGLsGXYKnw0bB0+FrYJ24btwsfD9uETYYfwyTA5fCrsGD592fUpYZ+wb/hS+FLo/T1qYXRRND36QXRxdEk0I/phdGn0o2hmdFl0eXRFdGV0VXR1dE10bXRddH10Q3RjdFN0c3RL1PvauYQDJ51y2gUuxuVysS63i3NXuXh3tcvj8rqIu8blc9e6/O46V8AVdIVcYZfgiriizjh01pELXTFX3EXd9a6Eu8ElupKulCvtnCvjklxL18q1cq3dY66Na+vaucfd4+4J94R70j3pnnId3dOuk3vGdXbPui7uOfece951c91dD/eC6+ledL1cb5fiUlxf19f1c/3cADfADXKD3GA32A1xQ9xQN9QNd8PdCDfCjXQj3Sg3yo1xY9xYN9aNd+PdRDfRpbpUN9lNdlPcFDfVTXXT3XSX5tLcLDfLzXaz3Vw3181z89x8N98tdAtdukt3i91il+Ey3FK31GW6TLfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va3zW1zO9wOt8vtcnvcHrfX7XX73D6X5bLcfrffHXAH3EH3pTvkvnKH3dfuiPvGHXXfumPuO3fcnXAn3ffulPvBnXZn3Fn3ozvnfnLn3QV30XmXGnkrMjnydmRK5J3I1Mi0yPTIjEhaZGZkVuTdyOzInMjcyHuReZH3I/MjCyILI4si6ZEPIosjSyIZkQ8jSyMfRTIjyyLLIysiKyOrIt4X2Rb6Yr64j/rrfQl/g0/0JX0pX9o7X8Yn+Rt9WX+TL+dv9uX9Lb6Cv9VX9JV8Zf+Ib+ab+xa+pW/lH/Wt/WO+jW/r2/nHfXv/hO/gn/TJ/inf0T/tO/lnfGf/rO/in/Nd/fO+m+/ue/gXfE//ou/le/sU38f39S/5fr6/H+AH+kH+ZT/Yv+KH+Ff9UD/MD/ev+RH+dT/Sv+FH+dF+jH/Tj/Xj/Hg/wU/0k3yqf8tP9m/7Kf4dP9VP89P9DJ/mZ/pZ/l0/28/xc/17fp5/38/3C/xCv8in+w/8Yr/EZ/gP/VL/kc/0y/xyv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9R/7bX673+F3+l1+t9/jP/F7/ad+n//MZ/nP/X7/F3/Af+EP+i/9If+VP+y/9kf8N/6o/9Yf89/54/6EP+m/96f8D/60P+PP+h/9Of+TP+8v+Iv8N2uMMcYYY7+Lusz6Pv9Lzq/3kvsKIa7eXvjQ/1y/scAv4/7xCe0jQoinend98NelRo2UlJS/bpupRFB8gRAicik/RlyKl4l24gmRLNqKsn9bH/t3++ovu5+jy9SP3iJE3N/lZOf/Gl+qf9M/Pf7+cty8y9ZfIERi8Us5ucWl+FL9cv9L/YKtL1M/9xepQrT5u5x4cSm+VD9JPCaeFsn/sCVjjDHGGGOMMfaL/rJy58td32ZfnyfoSzm5xKX4n12fM8YYY4wxxhhj7D/Ls917PPlocnLbzjz4dw183l+e6v+U+fCAB79jcKV/MjHGGGOMMcb+bJdO+q/0TBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsZzr/+Lfif26r8t91iBjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDH23+r/BQAA//8ThjRr") openat(0xffffffffffffff9c, 0x0, 0x107842, 0x1) 5m21.332839803s ago: executing program 5 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000002280)='oom_adj\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) sendmsg$nl_generic(r3, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x53, 0x6, 0x3, 0x5, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4004e0, 0x1, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xfffffff8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$SW_SYNC_IOC_INC(r7, 0x40045701, &(0x7f00000002c0)=0x3) sendfile(r5, r5, 0x0, 0x800000009) preadv2(r5, 0x0, 0x0, 0x1, 0x40, 0x9) 5m20.141264703s ago: executing program 5 (id=521): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x1, @any, 0xd069, 0x1}, 0xe) 5m20.000506141s ago: executing program 5 (id=523): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[], 0xf5, 0x1213, &(0x7f0000000600)="$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") mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1000, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) unshare(0x22020600) fallocate(r0, 0x10, 0x4000, 0x4000) 5m19.501498981s ago: executing program 5 (id=528): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x189, 0x51cfa, 0x0, 0x1000, 0x7, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xff}) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0x8400088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0xc0) close_range(r0, 0xffffffffffffffff, 0x0) 5m17.913952924s ago: executing program 5 (id=532): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 5m16.419535632s ago: executing program 33 (id=532): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 3m58.055425273s ago: executing program 4 (id=782): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/56], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @loopback, 0x1}, 0x1c) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000000c0), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 3m57.339644895s ago: executing program 4 (id=785): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) socket(0x200000000000011, 0x4000000000080002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3m54.752432138s ago: executing program 4 (id=795): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100b, 0xfffffffffffffffc}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@handle={0x73682a85, 0x100a, 0x1}}, &(0x7f0000000200)={0x0, 0x24, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 3m54.613215586s ago: executing program 4 (id=797): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_open_dev$loop(0x0, 0x1000000000006, 0x8201) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6400) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40080) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000002640)=""/4139, 0x0, 0x1030}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3m51.834249659s ago: executing program 4 (id=802): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m50.858597456s ago: executing program 4 (id=806): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0xf4, 0xa}, {0xd3, 0x8, 0x9, 0x8}}}}, 0x17) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_delete(0x0) 3m35.425591285s ago: executing program 34 (id=806): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0xf4, 0xa}, {0xd3, 0x8, 0x9, 0x8}}}}, 0x17) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_delete(0x0) 17.634679343s ago: executing program 1 (id=1425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) vmsplice(r4, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) 16.524928178s ago: executing program 1 (id=1417): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f000008f000/0x4000)=nil, 0x4000, 0x1000014, 0x8010, 0x0, 0x9e3ec000) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000080)=0x1) 15.491446799s ago: executing program 3 (id=1419): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x648001, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') getdents64(r3, &(0x7f0000002440)=""/181, 0xb8) 13.316850177s ago: executing program 6 (id=1424): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6f6, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x808}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 13.107613329s ago: executing program 6 (id=1426): fsmount(0xffffffffffffffff, 0x0, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) shutdown(r3, 0x2) 10.957350695s ago: executing program 7 (id=1431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)='WJ', 0x2}], 0x1, 0xe5b, 0xac, 0x1b) 10.237671478s ago: executing program 1 (id=1433): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0xbe0b, 0x10100, 0x0, 0x24c}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x211}, 0x1}) io_uring_enter(r3, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r7, 0x4, 0x0) r8 = dup(r7) pwritev2(r8, &(0x7f0000000500)=[{&(0x7f00000000c0)="aa", 0x1}], 0x1, 0xd8c1, 0x0, 0x0) 9.384879418s ago: executing program 2 (id=1435): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940), 0x0, 0x90}}], 0x1, 0x40) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) fcntl$setstatus(r4, 0x4, 0x42000) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) recvmmsg(r4, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000bc0), 0x1}, 0x7bdf70d5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea6}, 0x40}], 0x2, 0x40002042, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 8.432961534s ago: executing program 2 (id=1436): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getdents64(r0, &(0x7f00000010c0)=""/4067, 0xfe3) 7.956551542s ago: executing program 6 (id=1437): mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f00000002c0)={[{@numtail}, {@utf8}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@utf8}, {@utf8}, {@utf8no}, {@uni_xlate}, {@shortname_winnt}, {@uni_xlate}, {@fat=@fmask={'fmask', 0x3d, 0x6b}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@utf8no}, {@shortname_lower}, {@shortname_mixed}, {@uni_xlate}, {@numtail}]}, 0x3, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGfd+GosxlzM9+J7Vxsppez8Z6sri7WuiNhtd+eP9dJWfTrO9Ob/8UysDS88+oN0nyIurK6cq/UGqK/349sRe8MbFTr5L8RcfP/iYJiU+ncwrq5cXuwnPYzfqlfj4mAvHPgJCAAAAAAAAAAAAAAAAAAAAAAA3JaF2sD8YP2c1HnOV8pZWJjQ3l0fJ4/vrQ+0l68PlKopUvrjjYfq72Sxb32g0fV5tiwkCAAAAAAAAAAAAAAAAAAAAAOb25VotFprG5vbO81iob2xuT0VEZ2aV7/95KvZGO9zk0I5n6IaMZii1pt2p9lIWb9zyiLGw7PO5P2ajz4fZFzsUx1sxcQ0qgc3tVp33Pfz+8Oae7P+yH8P+2QxeQOzQhqPjoy8fmee0q3sqEHhXLGmOj77lZRSoeatYvjl58cHjFJE+dYP3E5zKg7ukzqFb66+fHd/7ze+TLkHHpx7+sp7H/7WbLQ6M0f3CFY2Nm+kZqPU73yE2XvDpe4hGJ4bpcgLpeKZUD5swL39NY3sh9+fuefd7462E1Kx5vXO+TzSJ8s359PR8Epe6KQ50jQ7DJ/ubURrbXrCyX+zwm0c07s++OLjlH769chTDE2NvWyU/p1XHwAAAAAAAAAAAAAAAAAAoKjwXfHel67becP0YVEPP3FC6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiRj+//9CYW83RmqOUvirPSGquraxGVH5rzcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uX8CAAD//3wwZok=") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x46) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 7.63689153s ago: executing program 2 (id=1438): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x197, 0x7, 0x9}}}}]}, 0x44}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x4e}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010102}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x301, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 6.602644282s ago: executing program 2 (id=1439): syz_mount_image$jfs(&(0x7f0000000480), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x6030, &(0x7f00000006c0)="$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") setuid(0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffebb) 6.598110732s ago: executing program 1 (id=1449): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6f6, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 6.331841647s ago: executing program 6 (id=1440): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6f6, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x808}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 6.249417322s ago: executing program 7 (id=1441): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) 5.414608732s ago: executing program 6 (id=1442): syz_mount_image$btrfs(&(0x7f0000000400), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@clear_cache}, {@barrier}, {@treelog}, {@fatal_errors_bug}, {@autodefrag}, {@notreelog}, {@discard_sync}, {@space_cache}]}, 0x0, 0x559e, &(0x7f0000002900)="$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") r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f00000003c0), 0x300, 0x1, 0x0, 0x0, r1}) 5.233736902s ago: executing program 1 (id=1443): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f000008f000/0x4000)=nil, 0x4000, 0x1000014, 0x8010, 0x0, 0x9e3ec000) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000080)=0x1) 5.214846253s ago: executing program 7 (id=1444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') 5.006533815s ago: executing program 3 (id=1445): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x800404, &(0x7f0000000080)={[{@nouid32}, {@nogrpid}, {@stripe}]}, 0x3, 0x453, &(0x7f0000000640)="$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") r0 = socket$netlink(0x10, 0x3, 0xb) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0xfffe3523, 0x206, 0xefcb, 0x7ffd, 0xb2, "20ab980900eea4a7446c180000cd681ec267a0", 0x6, 0x4}) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000100), 0x6) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x6, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0xb) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 4.24285077s ago: executing program 3 (id=1446): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 4.125404197s ago: executing program 3 (id=1447): fsmount(0xffffffffffffffff, 0x0, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) shutdown(r3, 0x2) 3.917571809s ago: executing program 2 (id=1448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getdents64(0xffffffffffffffff, &(0x7f00000010c0)=""/4067, 0xfe3) 3.22889015s ago: executing program 2 (id=1450): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x503, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 2.537648041s ago: executing program 6 (id=1451): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x28108c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="646973636172642c696f636861727365743d63703837342c6572726f72733d72656d6f756e742d726f2c75737271756f74612c696f636861727365743d63703836312c696f636861727365743d6370313235302c696e7465677269747900696f636861727365743d69736f383835392d342c646973636172643d30783030303030303030303030303030396943b95b49aca56faf1cc22189cc312c696f636861727365743d6d6163677265656b2c71756f74612c726573697a653d3078303030303030303030303030376666662c646973636172643d3078303030303030303066666666666666662c756d61736b3d3078303030303030303030303032303034352c6673636f6e746578743d836e636f6e66696e65645f752c66736d616769633d3078303030303030303030303230303030392c324216873b95edfe8ceab2bb0b11835a5cf531ac6273c29a4d4f9d056f1bcb8cd0a969ed12cf99802b3e3201518ecfc59a4fd94dd5349dc55633bd2bde1128ad071807ef13a9f10c0fbf3ad861c2009067c5c6c84cdba2806fa74eddff8373799d0b8c1e6f7e2b205235161b610ae5c66d1d9cfc2bc0cb617ae49331ade71595c2a5438139933aada47236dafdffffff088a552445f95768ccecb0c35797e832beced2077fa197623cd3de51d69d7a4f77a80eb5f783f091e5ec6047a0f67676819f4bf66744c1cb0975b96baf730000000000000001004e257bbabf33e3fa8d0cca2fbb4dabe1c5634bdf889b764ce26ae4e539fdffa2ea82c34b16308e26ce945d101d5f2e2577d8e2a21d9401194a97a6c281b603da7c66934f0c341df8ff02d91cd4f2d80ea7dde697", @ANYRESHEX, @ANYBLOB="225e3e04144dc2e927d1143012f425adf35b86475cc1620fcb7876ad48709699910669f065bd3fd947be71819a83a7d93f1ade6d0c1cb4dcd34e755a08fa8fc5fa21e901174d7b178f39f4baf3f0a548d9bc0eb9a18dfa160f5a4ea15c2d582dcf11b15bda104abe42c23d114d686aa74610bdb03c4343bef8ed2d0467d8dd5cac260692889ec1e2a89dc6ecf88611511909bf7ba3a8089b523c9959d2f6eb07b4dab3dcada9b9f5ab23da0428bf96973cf50a8b40595c1debb8be64978b81575696a0ca285f235c5997eb1cd7bcb1b750ef8ddac657b6e1200a9ef084a2850b777eba15fb47fc6140b1d4dd47ed13e09981a3e36c38286d1cac942e"], 0xfe, 0x61f6, &(0x7f000000cdc0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 2.023249541s ago: executing program 1 (id=1452): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x6093, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) getdents64(r0, &(0x7f0000000100)=""/83, 0x53) 1.87779154s ago: executing program 7 (id=1453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x803, 0x0) mmap$binder(&(0x7f0000937000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) r4 = fsopen(&(0x7f00000000c0)='proc\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000080)={'a', ' *:* ', 'r\x00'}, 0x8) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000001c0)={'b', ' *:* ', 'rm\x00'}, 0x9) r11 = openat$cgroup_devices(r6, 0x0, 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000940)=ANY=[@ANYBLOB='a *:* r'], 0x8) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r4, 0x0, 0xf) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x80}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, r12, 0x8, &(0x7f0000000000), 0x8}, 0x94) 950.533114ms ago: executing program 7 (id=1454): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x30, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@barrier_val}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@i_version}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ptrace$getenv(0x4201, r1, 0x80000000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7], 0x15c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40) 582.957846ms ago: executing program 3 (id=1455): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6f6, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 621.2µs ago: executing program 3 (id=1456): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) 0s ago: executing program 7 (id=1457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xfdff) kernel console output (not intermixed with test programs): -1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.263901][ T4292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.452311][ T4292] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 123.540062][ T4292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.617383][ T4292] usb 6-1: config 0 descriptor?? [ 124.107004][ T4292] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 124.214438][ T4292] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 124.246160][ T4292] ft260 0003:0403:6030.0002: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 124.384135][ T4292] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 125.760586][ T4292] ft260 0003:0403:6030.0002: failed to retrieve status: -71 [ 125.820096][ T4292] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71 [ 125.875661][ T4292] usb 6-1: USB disconnect, device number 3 [ 126.144962][ T5495] fido_id[5495]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 132.757973][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.764700][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.970835][ T5965] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 147.433121][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 147.600950][ T5988] loop2: detected capacity change from 0 to 8 [ 148.008666][ T5988] SQUASHFS error: zlib decompression failed, data probably corrupt [ 148.071937][ T5988] SQUASHFS error: Failed to read block 0x4de: -5 [ 148.106733][ T5988] SQUASHFS error: Failed to read block 0x4e2: -5 [ 148.139336][ T5988] SQUASHFS error: Failed to read block 0x9ca: -5 [ 148.170196][ T5988] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 148.200211][ T5988] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 148.252969][ T5988] SQUASHFS error: Failed to read block 0x535f2: -5 [ 148.288197][ T26] audit: type=1800 audit(1769156080.656:5): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.481" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 148.297544][ T6000] loop4: detected capacity change from 0 to 512 [ 148.443486][ T6000] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.484: bad orphan inode 11862016 [ 148.467187][ T6000] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.489187][ T6000] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.603074][ T6011] loop3: detected capacity change from 0 to 164 [ 148.699697][ T6011] Symlink component flag not implemented [ 148.731543][ T6011] Symlink component flag not implemented (7) [ 148.828830][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 149.002579][ T6029] loop1: detected capacity change from 0 to 512 [ 149.055559][ T4243] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 149.097770][ T6029] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.632996][ T6029] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 149.651432][ T6029] EXT4-fs (loop1): 1 truncate cleaned up [ 149.664248][ T6029] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 149.863148][ T4243] usb 6-1: Using ep0 maxpacket: 32 [ 150.144063][ T4243] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.175565][ T4243] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.361663][ T4243] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 150.377570][ T4243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.528495][ T4243] usb 6-1: config 0 descriptor?? [ 151.026703][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 151.174582][ T4243] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 151.352532][ T26] audit: type=1326 audit(1769156083.716:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.2.502" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff44ec09cb9 code=0x0 [ 151.542718][ T6063] loop1: detected capacity change from 0 to 256 [ 151.690043][ T6068] loop2: detected capacity change from 0 to 16 [ 151.746773][ T6068] erofs: (device loop2): mounted with root inode @ nid 36. [ 151.757591][ T6063] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 151.773576][ T6068] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 180223 of nid 36 [ 151.810108][ T6068] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95] [ 152.814028][ T4243] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 152.863040][ T6083] loop5: detected capacity change from 0 to 256 [ 153.021884][ T6083] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1179abd0) [ 153.194216][ T6083] exFAT-fs (loop5): invalid boot region [ 153.220036][ T6083] exFAT-fs (loop5): failed to recognize exfat type [ 153.654799][ T4252] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 153.773920][ T6097] syz.5.516 (6097): /proc/6094/oom_adj is deprecated, please use /proc/6094/oom_score_adj instead. [ 154.165360][ T4252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.259937][ T4244] usb 6-1: USB disconnect, device number 4 [ 154.288309][ T4252] usb 5-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 154.357157][ T4252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.376573][ T4252] usb 5-1: config 0 descriptor?? [ 155.136064][ T4252] chicony 0003:04F2:1123.0004: item fetching failed at offset 0/3 [ 155.145788][ T4252] chicony 0003:04F2:1123.0004: Chicony hid parse failed: -22 [ 155.153202][ T4252] chicony: probe of 0003:04F2:1123.0004 failed with error -22 [ 155.189658][ T6117] loop5: detected capacity change from 0 to 8192 [ 155.273580][ T6117] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.369580][ T6084] loop4: detected capacity change from 0 to 2048 [ 155.381610][ C0] blk_update_request: operation not supported error, dev loop5, sector 32 op 0x9:(WRITE_ZEROES) flags 0x800800 phys_seg 0 prio class 0 [ 155.466850][ T6084] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.502342][ T4933] usb 5-1: USB disconnect, device number 5 [ 155.527424][ T6127] loop1: detected capacity change from 0 to 2048 [ 155.614230][ T6127] EXT4-fs (loop1): Ignoring removed nobh option [ 155.711800][ T6127] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,usrjquota=,nobh,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 155.730429][ T6127] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.752884][ T26] audit: type=1800 audit(1769156088.116:7): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.527" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 155.753717][ T6127] fs-verity (loop1, inode 13): Unknown hash algorithm number: 0 [ 157.179000][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.452905][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.560420][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.649876][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.183595][ T6244] loop4: detected capacity change from 0 to 256 [ 160.291913][ T6244] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 160.364500][ T6191] chnl_net:caif_netlink_parms(): no params data found [ 160.439491][ T6244] attempt to access beyond end of device [ 160.439491][ T6244] loop4: rw=524288, want=34225520825, limit=256 [ 160.504601][ T6244] attempt to access beyond end of device [ 160.504601][ T6244] loop4: rw=0, want=34225520825, limit=256 [ 160.560274][ T26] audit: type=1800 audit(1769156092.926:8): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.538" name="file1" dev="loop4" ino=1048608 res=0 errno=0 [ 161.044908][ T6191] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.082175][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.115043][ T6191] device bridge_slave_0 entered promiscuous mode [ 161.473144][ T6191] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.486999][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.510414][ T6191] device bridge_slave_1 entered promiscuous mode [ 161.565105][ T4244] Bluetooth: hci0: command 0x0409 tx timeout [ 163.471298][ T6191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.539025][ T6191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.633925][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 163.648740][ T9] device hsr_slave_0 left promiscuous mode [ 163.666116][ T9] device hsr_slave_1 left promiscuous mode [ 163.695286][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.702732][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.745388][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.753099][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.799484][ T9] device bridge_slave_1 left promiscuous mode [ 163.816752][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.871771][ T9] device bridge_slave_0 left promiscuous mode [ 164.537812][ T6289] capability: warning: `syz.2.549' uses 32-bit capabilities (legacy support in use) [ 164.575388][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.642476][ T9] device veth1_macvtap left promiscuous mode [ 164.678312][ T9] device veth0_macvtap left promiscuous mode [ 164.756366][ T9] device veth1_vlan left promiscuous mode [ 164.762193][ T9] device veth0_vlan left promiscuous mode [ 165.190133][ T6294] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 165.829583][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 166.252148][ T9] team0 (unregistering): Port device team_slave_1 removed [ 166.270190][ T9] team0 (unregistering): Port device team_slave_0 removed [ 166.289146][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.329460][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.353683][ T6309] loop3: detected capacity change from 0 to 512 [ 166.395037][ T6309] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.439545][ T9] bond0 (unregistering): Released all slaves [ 166.440523][ T6309] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 166.462031][ T6309] EXT4-fs (loop3): 1 truncate cleaned up [ 166.467981][ T6309] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 166.646376][ T6191] team0: Port device team_slave_0 added [ 166.655367][ T6191] team0: Port device team_slave_1 added [ 166.675764][ T6191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.683009][ T6191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.474853][ T6191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.491807][ T6191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.558006][ T6191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.727415][ T6191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.304646][ T4251] Bluetooth: hci0: command 0x0419 tx timeout [ 169.097956][ T6191] device hsr_slave_0 entered promiscuous mode [ 169.124914][ T6191] device hsr_slave_1 entered promiscuous mode [ 169.153716][ T6191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.162275][ T6191] Cannot create hsr debugfs directory [ 169.209914][ T6336] netlink: 'syz.4.561': attribute type 1 has an invalid length. [ 169.245181][ T6336] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.313698][ T6338] bond2: (slave veth3): Enslaving as an active interface with a down link [ 169.362330][ T6336] bond2: (slave dummy0): making interface the new active one [ 169.371623][ T6336] device dummy0 entered promiscuous mode [ 169.379177][ T6336] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 169.451060][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 169.518994][ T6336] bond2 (unregistering): (slave veth3): Releasing active interface [ 169.554709][ T6336] bond2 (unregistering): (slave dummy0): Releasing active interface [ 169.567795][ T6336] bond2 (unregistering): Released all slaves [ 169.709576][ T6336] syz.4.561 (6336) used greatest stack depth: 20984 bytes left [ 170.401319][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.567'. [ 170.485823][ T6191] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 170.528196][ T6191] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 170.590005][ T6191] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 171.167311][ T6191] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 171.304926][ T6373] loop4: detected capacity change from 0 to 8192 [ 171.592952][ T6191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.711696][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.722239][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.768496][ T6191] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.796992][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.815584][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.839131][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.846322][ T4386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.891140][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.651681][ T6402] loop4: detected capacity change from 0 to 512 [ 172.660917][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.690655][ T6402] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.717668][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.752955][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.760202][ T4354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.769478][ T6402] EXT4-fs error (device loop4): ext4_init_orphan_info:621: comm syz.4.577: orphan file block 0: bad magic [ 172.795284][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.813629][ T6402] EXT4-fs (loop4): mount failed [ 172.819985][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.938608][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.302030][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.560283][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.620250][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.653456][ T6191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.739566][ T6191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.832662][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.845590][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.873664][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.904326][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.933464][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.997955][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.470244][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.486809][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.551445][ T6191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.310872][ T6449] loop4: detected capacity change from 0 to 512 [ 175.789441][ T6449] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 175.804410][ T1107] Bluetooth: hci2: command 0x0406 tx timeout [ 175.811093][ T1107] Bluetooth: hci3: command 0x0406 tx timeout [ 175.937586][ T6449] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.585: corrupted xattr entries [ 175.956847][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 176.019001][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 176.021052][ T6449] EXT4-fs (loop4): 1 orphan inode deleted [ 176.050865][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 176.084323][ T6449] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 176.109504][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.134458][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.216827][ T6191] device veth0_vlan entered promiscuous mode [ 176.236974][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.264499][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.296687][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.342860][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.387245][ T6191] device veth1_vlan entered promiscuous mode [ 176.476933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.514951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.539993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.570719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.598138][ T6191] device veth0_macvtap entered promiscuous mode [ 176.618083][ T6191] device veth1_macvtap entered promiscuous mode [ 176.681993][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.692724][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 176.723099][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.744758][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.773918][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.808937][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.833923][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.853895][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.873878][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.897218][ T6191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.919868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.937180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.943960][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 176.971037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.001598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.038298][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.561220][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.571710][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.584028][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.633905][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.643692][ T23] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 177.666359][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.679773][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.682914][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.777922][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.790646][ T6191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.808524][ T6191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.819703][ T6191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.829159][ T23] usb 2-1: config 0 descriptor?? [ 177.843545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.026676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.353647][ T6191] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.487750][ T23] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 178.499864][ T6191] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.530292][ T6191] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.555811][ T6191] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.898997][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.031423][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.492147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.542199][ T6212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.565173][ T6212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.619409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.864062][ T4933] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 180.003169][ T6521] 9pnet: Insufficient options for proto=fd [ 182.481050][ T4292] usb 2-1: USB disconnect, device number 2 [ 184.637608][ T6584] loop3: detected capacity change from 0 to 256 [ 185.375757][ T6584] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.394275][ T6584] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 185.584514][ T6584] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 189.406888][ T1107] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 190.711428][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 192.444094][ T1107] usb 5-1: unable to read config index 0 descriptor/all [ 192.451161][ T1107] usb 5-1: can't read configurations, error -71 [ 194.936081][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.942411][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.336847][ T6713] loop6: detected capacity change from 0 to 2048 [ 196.419492][ T6713] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.588069][ T6724] loop3: detected capacity change from 0 to 512 [ 196.868628][ T6724] EXT4-fs (loop3): 1 truncate cleaned up [ 196.881289][ T6724] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 197.642295][ T6740] loop6: detected capacity change from 0 to 512 [ 197.772570][ T6740] EXT4-fs (loop6): inline encryption not supported [ 198.900444][ T6740] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,inlinecrypt,,errors=continue. Quota mode: writeback. [ 199.155066][ T4351] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 199.463939][ T4351] usb 5-1: Using ep0 maxpacket: 32 [ 199.584196][ T4351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.605981][ T4351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.770781][ T4351] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 199.830019][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.880816][ T4351] usb 5-1: config 0 descriptor?? [ 200.043905][ T4252] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 200.283890][ T4252] usb 2-1: Using ep0 maxpacket: 8 [ 200.382933][ T4351] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 200.424329][ T4252] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 200.432724][ T4252] usb 2-1: config 179 has no interface number 0 [ 200.442740][ T4252] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 200.459034][ T4252] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 200.923464][ T4252] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 201.114488][ T4252] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 201.141797][ T4252] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 201.195766][ T6785] loop3: detected capacity change from 0 to 2048 [ 201.196191][ T4252] usb 2-1: config 179 interface 65 has no altsetting 0 [ 201.229997][ T4252] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 201.250417][ T4252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.298913][ T4935] usb 5-1: USB disconnect, device number 8 [ 201.312835][ T6785] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.350825][ T4252] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input6 [ 202.371940][ T6803] loop4: detected capacity change from 0 to 1024 [ 202.488553][ T6803] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.610778][ T4251] usb 2-1: USB disconnect, device number 3 [ 203.625394][ T4251] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 205.053983][ T4244] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 205.344099][ T4244] usb 5-1: Using ep0 maxpacket: 32 [ 205.474114][ T4244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.499270][ T4244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.132457][ T4244] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 206.153994][ T4244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.175687][ T4244] usb 5-1: config 0 descriptor?? [ 206.189251][ T6857] loop1: detected capacity change from 0 to 512 [ 206.230036][ T6857] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 206.252089][ T6857] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.672: corrupted xattr entries [ 206.271030][ T6857] EXT4-fs (loop1): 1 orphan inode deleted [ 206.280013][ T6857] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 206.465305][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 207.897390][ T4244] usbhid 5-1:0.0: can't add hid device: -71 [ 207.907240][ T4244] usbhid: probe of 5-1:0.0 failed with error -71 [ 207.941014][ T4244] usb 5-1: USB disconnect, device number 9 [ 207.974113][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 208.024376][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 208.259236][ T7] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 208.273825][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.341878][ T7] usb 4-1: Product: syz [ 208.460971][ T7] usb 4-1: Manufacturer: syz [ 208.557998][ T7] usb 4-1: SerialNumber: syz [ 209.005951][ T7] usb 4-1: config 0 descriptor?? [ 209.034165][ T6855] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 209.052062][ T6855] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 209.145019][ T7] dm9601: probe of 4-1:0.0 failed with error -71 [ 209.184851][ T7] usb 4-1: USB disconnect, device number 2 [ 209.307294][ T6890] loop3: detected capacity change from 0 to 1024 [ 209.381184][ T6890] EXT4-fs (loop3): Unrecognized mount option "euid>18446744073709551615" or missing value [ 211.044474][ T6916] loop1: detected capacity change from 0 to 2048 [ 211.165555][ T6916] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.564495][ T4176] udevd[4176]: incorrect jbd checksum on /dev/loop1 [ 212.217638][ T6954] loop1: detected capacity change from 0 to 128 [ 212.668881][ T6954] FAT-fs (loop1): bogus sectors per cluster 0 [ 212.675271][ T6954] FAT-fs (loop1): Can't find a valid FAT filesystem [ 213.626691][ T6972] loop4: detected capacity change from 0 to 128 [ 213.727532][ T6979] loop1: detected capacity change from 0 to 128 [ 213.738504][ T6980] loop6: detected capacity change from 0 to 512 [ 213.750611][ T6975] loop3: detected capacity change from 0 to 512 [ 213.765193][ T6972] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 213.835237][ T6972] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 213.859501][ T6975] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 213.936898][ T6980] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 214.010721][ T6980] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.086016][ T6975] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.700: bad orphan inode 131083 [ 214.358383][ T6975] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000005,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 214.390653][ T26] audit: type=1800 audit(1769156402.755:9): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.702" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 215.239701][ T6980] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #12: comm syz.6.702: Directory hole found for htree leaf block 0 [ 215.307416][ T6992] loop4: detected capacity change from 0 to 2048 [ 215.375115][ T26] audit: type=1800 audit(1769156403.745:10): pid=6989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.702" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 215.526946][ T7005] loop1: detected capacity change from 0 to 8192 [ 215.540141][ T6992] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.541958][ T7029] loop4: detected capacity change from 0 to 1024 [ 216.615382][ T7029] EXT4-fs (loop4): Unrecognized mount option "permit_directio" or missing value [ 219.835925][ T7070] loop6: detected capacity change from 0 to 128 [ 220.124121][ T7070] FAT-fs (loop6): bogus sectors per cluster 0 [ 220.130285][ T7070] FAT-fs (loop6): Can't find a valid FAT filesystem [ 220.251817][ T7086] loop4: detected capacity change from 0 to 512 [ 220.308932][ T7086] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 220.415902][ T7086] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 220.494496][ T7086] EXT4-fs (loop4): 1 truncate cleaned up [ 220.508305][ T7086] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 220.772568][ T7097] loop1: detected capacity change from 0 to 512 [ 221.122247][ T7097] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 221.511799][ T7097] EXT4-fs error (device loop1): ext4_init_orphan_info:621: comm syz.1.723: orphan file block 0: bad magic [ 221.568118][ T7097] EXT4-fs (loop1): mount failed [ 221.734240][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 223.354951][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.397947][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.418138][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.432836][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.448319][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.555079][ T23] usb 4-1: config 0 descriptor?? [ 224.470508][ T7154] loop3: detected capacity change from 0 to 128 [ 224.504209][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 224.523246][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 224.624119][ T23] usb 4-1: USB disconnect, device number 3 [ 224.968326][ T7165] loop1: detected capacity change from 0 to 512 [ 225.058846][ T7165] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 225.183905][ T7170] loop6: detected capacity change from 0 to 512 [ 226.305638][ T7165] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 226.334811][ T7165] EXT4-fs (loop1): 1 truncate cleaned up [ 226.340576][ T7165] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 229.021004][ T7209] loop4: detected capacity change from 0 to 512 [ 229.073036][ T7205] loop6: detected capacity change from 0 to 512 [ 229.094066][ T7209] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 229.158347][ T7205] EXT4-fs (loop6): Mount option "journal_checksum" incompatible with ext3 [ 229.177588][ T7209] EXT4-fs error (device loop4): ext4_init_orphan_info:621: comm syz.4.741: orphan file block 0: bad magic [ 229.309301][ T7209] EXT4-fs (loop4): mount failed [ 229.337120][ T7215] input: syz1 as /devices/virtual/input/input7 [ 229.880782][ T7225] loop4: detected capacity change from 0 to 512 [ 230.069890][ T7225] EXT4-fs (loop4): Unsupported blocksize for fs-verity [ 230.667705][ T7230] loop6: detected capacity change from 0 to 512 [ 230.714237][ T7232] loop4: detected capacity change from 0 to 512 [ 230.817229][ T7230] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 230.912164][ T7230] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 230.965613][ T7230] EXT4-fs (loop6): 1 truncate cleaned up [ 231.025028][ T7230] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 231.148772][ T7232] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.360883][ T7232] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.258429][ T7260] loop6: detected capacity change from 0 to 512 [ 233.413987][ T7260] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 233.468178][ T7260] EXT4-fs error (device loop6): ext4_init_orphan_info:621: comm syz.6.761: orphan file block 0: bad magic [ 233.560793][ T7260] EXT4-fs (loop6): mount failed [ 234.329943][ T7273] loop1: detected capacity change from 0 to 128 [ 234.387997][ T7273] FAT-fs (loop1): bogus number of reserved sectors [ 234.423501][ T7273] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 234.485622][ T7273] FAT-fs (loop1): Can't find a valid FAT filesystem [ 235.834078][ T4244] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 236.047504][ T7306] loop1: detected capacity change from 0 to 2048 [ 236.161305][ T7306] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.234021][ T4244] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 236.253474][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.294855][ T4244] usb 4-1: config 0 descriptor?? [ 236.335218][ T4244] cp210x 4-1:0.0: cp210x converter detected [ 236.556645][ T4244] usb 4-1: cp210x converter now attached to ttyUSB0 [ 236.757995][ T23] usb 4-1: USB disconnect, device number 4 [ 236.785070][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 236.793440][ T23] cp210x 4-1:0.0: device disconnected [ 237.697933][ T7324] input: syz1 as /devices/virtual/input/input8 [ 240.335551][ T7357] loop1: detected capacity change from 0 to 256 [ 240.512006][ T7357] netlink: 32 bytes leftover after parsing attributes in process `syz.1.796'. [ 241.226996][ T7368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.240817][ T7368] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 241.252471][ T7368] loop1: detected capacity change from 0 to 128 [ 242.015648][ T4201] Bluetooth: Wrong link type (-71) [ 243.195215][ T7376] loop4: detected capacity change from 0 to 1024 [ 243.259507][ T7379] loop6: detected capacity change from 0 to 1024 [ 243.266601][ T7376] EXT4-fs (loop4): Ignoring removed bh option [ 243.289278][ T7379] EXT4-fs (loop6): inline encryption not supported [ 243.296007][ T7379] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 243.363978][ T7379] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,noblock_validity,jqfmt=vfsv1,bsddf,journal_dev=0x0000000000000001,max_batch_time=0x0000000000000006,inlinecrypt,noinit_itable,,errors=continue. Quota mode: none. [ 243.391458][ T7376] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000000,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 243.438941][ T7379] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 244.215138][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 244.325900][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 244.332480][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 33: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 244.384440][ T7396] loop6: detected capacity change from 0 to 512 [ 244.400876][ T7396] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 244.408297][ T7396] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 244.431799][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 244.443858][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 244.475925][ T7396] EXT4-fs (loop6): mount failed [ 244.483012][ T7395] loop3: detected capacity change from 0 to 4096 [ 244.546594][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 244.553179][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 35: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 244.595408][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 244.603095][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 36: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 244.695831][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 244.705336][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 244.730155][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 244.798262][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 38: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 244.834149][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 244.995234][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 39: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 245.293024][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 245.400929][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 40: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 246.087804][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 246.104018][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 41: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 248.345830][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 248.416097][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 248.443678][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 248.491426][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 248.521953][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 248.571716][ T7416] device wlan0 entered promiscuous mode [ 248.581547][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 248.652290][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 248.716550][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 248.756448][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 248.796792][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 248.852622][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 249.274010][ T4185] EXT4-fs error: 853 callbacks suppressed [ 249.274028][ T4185] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 249.375247][ T4185] EXT4-fs: 853 callbacks suppressed [ 249.375266][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 249.388081][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 249.846261][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 249.868738][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 33: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 249.896654][ T7435] input: syz1 as /devices/virtual/input/input10 [ 249.930275][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 249.942973][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 249.980386][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 250.125658][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 35: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 250.149946][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 250.157034][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 36: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 250.997069][ T7445] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 251.919182][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 251.926314][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 253.008586][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 253.026100][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 38: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 254.193846][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 254.200455][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 39: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 254.335125][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 254.341799][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 40: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 254.711501][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 254.749927][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 41: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 254.864862][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 254.871529][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 42: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 254.929333][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 254.944259][ T4185] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 255.006455][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 255.013000][ T4185] EXT4-fs warning: 62 callbacks suppressed [ 255.013014][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 255.076314][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 255.133237][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 255.178334][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 33: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 256.267860][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.274302][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.309301][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 256.333919][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 256.385057][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 256.391660][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 35: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 256.521819][ T7480] loop1: detected capacity change from 0 to 128 [ 256.538440][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 256.560719][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 36: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 257.015825][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 257.094802][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 257.315226][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 257.372998][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 257.398322][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 257.442615][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 257.476946][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 257.510689][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 257.545875][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 257.575695][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 257.601174][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 258.758892][ T4185] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 259.493992][ T4185] EXT4-fs error: 251 callbacks suppressed [ 259.494018][ T4185] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /168/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 261.456608][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.621007][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.742072][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.887769][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.954199][ T7505] chnl_net:caif_netlink_parms(): no params data found [ 262.044763][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 263.341131][ T7505] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.348382][ T7505] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.357012][ T7505] device bridge_slave_0 entered promiscuous mode [ 263.369685][ T7505] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.412480][ T7505] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.421055][ T7505] device bridge_slave_1 entered promiscuous mode [ 263.434845][ T154] tipc: Left network mode [ 263.459812][ T7505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.472396][ T7505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.563772][ T7505] team0: Port device team_slave_0 added [ 263.591479][ T7505] team0: Port device team_slave_1 added [ 264.651903][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 264.787174][ T7505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.804755][ T7505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.914232][ T7505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.034404][ T7505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.071006][ T7505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.357619][ T7505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.689011][ T7505] device hsr_slave_0 entered promiscuous mode [ 265.830388][ T7505] device hsr_slave_1 entered promiscuous mode [ 265.873694][ T7573] loop3: detected capacity change from 0 to 1024 [ 266.472498][ T7576] loop6: detected capacity change from 0 to 764 [ 266.532679][ T7505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.714932][ T7505] Cannot create hsr debugfs directory [ 266.754042][ T4351] Bluetooth: hci2: command 0x040f tx timeout [ 268.268284][ T7591] loop6: detected capacity change from 0 to 1024 [ 268.327576][ T7591] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 269.407980][ T7591] hfsplus: failed to load root directory [ 269.414338][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 269.781335][ T154] device hsr_slave_0 left promiscuous mode [ 269.792304][ T154] device hsr_slave_1 left promiscuous mode [ 269.821173][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.853973][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.881554][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.889233][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.908391][ T7610] loop6: detected capacity change from 0 to 512 [ 269.927106][ T154] device bridge_slave_1 left promiscuous mode [ 269.942790][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.958148][ T7610] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 269.995343][ T7610] EXT4-fs (loop6): 1 truncate cleaned up [ 270.001064][ T7610] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,barrier=0x0000000000000000,stripe=0x0000000000004000,errors=remount-ro,i_version,. Quota mode: none. [ 270.027353][ T154] device bridge_slave_0 left promiscuous mode [ 270.044118][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.121606][ T154] device veth1_macvtap left promiscuous mode [ 270.162263][ T154] device veth0_macvtap left promiscuous mode [ 270.177041][ T154] device veth1_vlan left promiscuous mode [ 270.182965][ T154] device veth0_vlan left promiscuous mode [ 271.818097][ T154] bond1 (unregistering): Released all slaves [ 272.873256][ T7645] loop6: detected capacity change from 0 to 128 [ 272.880586][ T7647] loop3: detected capacity change from 0 to 128 [ 273.166613][ T154] team0 (unregistering): Port device team_slave_1 removed [ 273.211479][ T154] team0 (unregistering): Port device team_slave_0 removed [ 273.242228][ T7647] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.261084][ T7647] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.288375][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.328150][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.405250][ T7647] syz.3.870 (pid 7647) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 274.556733][ T7645] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 274.624267][ T7645] ext4 filesystem being mounted at /mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 275.964413][ T154] bond0 (unregistering): Released all slaves [ 276.080351][ T7505] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 276.090841][ T26] audit: type=1326 audit(1769156464.455:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ec09cb9 code=0x7ffc0000 [ 276.095169][ T7505] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 276.153905][ T26] audit: type=1326 audit(1769156464.495:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ec09cb9 code=0x7ffc0000 [ 276.198018][ T7505] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 276.241576][ T7505] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 276.241665][ T26] audit: type=1326 audit(1769156464.495:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff44ec09cb9 code=0x7ffc0000 [ 276.358860][ T26] audit: type=1326 audit(1769156464.495:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff44ec09a22 code=0x7ffc0000 [ 276.413862][ T26] audit: type=1326 audit(1769156464.495:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff44ebca58e code=0x7ffc0000 [ 276.501391][ T26] audit: type=1326 audit(1769156464.495:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff44ec09ae7 code=0x7ffc0000 [ 276.666892][ T26] audit: type=1326 audit(1769156464.495:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff44ebca58e code=0x7ffc0000 [ 276.689697][ T26] audit: type=1326 audit(1769156464.495:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff44ebca58e code=0x7ffc0000 [ 276.723828][ T26] audit: type=1326 audit(1769156464.525:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ec09cb9 code=0x7ffc0000 [ 276.756712][ T7505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.822398][ T7505] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.835609][ T26] audit: type=1326 audit(1769156464.525:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ec09cb9 code=0x7ffc0000 [ 276.870096][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.889861][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.116093][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.443424][ T7696] loop1: detected capacity change from 0 to 512 [ 277.491307][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.541924][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.549062][ T6197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.557314][ T7696] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 277.574781][ T7696] UDF-fs: Scanning with blocksize 512 failed [ 277.621345][ T7696] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 277.628664][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.644081][ T7696] UDF-fs: Scanning with blocksize 1024 failed [ 277.653529][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.665428][ T7696] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 277.672146][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.680044][ T6197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.683933][ T7696] UDF-fs: Scanning with blocksize 2048 failed [ 277.709764][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.725856][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.740756][ T7696] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 277.778916][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.794831][ T7696] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.835863][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.860108][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.916591][ T4244] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 277.972608][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.490535][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.514734][ T7719] loop3: detected capacity change from 0 to 128 [ 278.515481][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.562089][ T7719] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 278.598351][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.623145][ T7719] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 278.627146][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.681931][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.718917][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.763890][ T7505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.838708][ T7738] loop1: detected capacity change from 0 to 512 [ 279.949505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.968766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.024550][ T7738] loop1: detected capacity change from 0 to 2048 [ 280.044961][ T7505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.231224][ T7738] EXT4-fs (loop1): Ignoring removed bh option [ 280.299153][ T7738] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 280.339901][ T7738] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 280.416722][ T7738] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 280.438552][ T7738] EXT4-fs (loop1): This should not happen!! Data will be lost [ 280.438552][ T7738] [ 280.456255][ T7738] EXT4-fs (loop1): Total free blocks count 0 [ 280.494211][ T7738] EXT4-fs (loop1): Free/Dirty block details [ 280.513960][ T7738] EXT4-fs (loop1): free_blocks=2415919104 [ 280.519737][ T7738] EXT4-fs (loop1): dirty_blocks=32 [ 280.594144][ T7738] EXT4-fs (loop1): Block reservation details [ 280.604384][ T7738] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 280.656822][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.870231][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.969203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.984973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.014571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.055552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.066334][ T7505] device veth0_vlan entered promiscuous mode [ 282.099077][ T7505] device veth1_vlan entered promiscuous mode [ 282.192781][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.222616][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.248879][ T7505] device veth0_macvtap entered promiscuous mode [ 282.274529][ T7505] device veth1_macvtap entered promiscuous mode [ 283.386459][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.397122][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.407268][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.418336][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.429188][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.440458][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.450575][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.461381][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.473049][ T7505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.487261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.513450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 283.549596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.568808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.589371][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.623788][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.671290][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.712904][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.744511][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.778766][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.799725][ T4933] Bluetooth: hci0: command 0x0406 tx timeout [ 283.807835][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.841936][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.866209][ T7505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.903855][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 283.912823][ T7799] netlink: 48 bytes leftover after parsing attributes in process `syz.2.904'. [ 283.925452][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.009761][ T7505] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.024405][ T7803] loop6: detected capacity change from 0 to 512 [ 285.120056][ T7505] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.160558][ T7505] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.191063][ T7505] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.298608][ T7803] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 285.512594][ T7803] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 285.542150][ T7803] EXT4-fs (loop6): 1 truncate cleaned up [ 285.550828][ T7803] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 285.601607][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.616336][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.687955][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.704286][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.712555][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.797852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 286.415127][ T7826] Bluetooth: hci0: unsupported parameter 255 [ 286.508323][ T7826] Bluetooth: hci0: unsupported parameter 255 [ 286.988421][ T7834] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 288.705227][ T7860] loop3: detected capacity change from 0 to 128 [ 288.873324][ T7860] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.034224][ T7860] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.426686][ T7860] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 290.839323][ T7888] loop3: detected capacity change from 0 to 1024 [ 290.938133][ T7888] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nogrpid,noinit_itable,nogrpid,block_validity,max_dir_size_kb=0x00000000000007b1,nojournal_checksum,errors=remount-ro,jqfmt=vfsold,jqfmt=vfsv0,data_err=ignore,. Quota mode: none. [ 292.777669][ T7909] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 293.710807][ T7919] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 296.030881][ T7938] loop6: detected capacity change from 0 to 512 [ 296.239231][ T7938] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 296.934954][ T7938] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 297.092923][ T7938] EXT4-fs (loop6): 1 truncate cleaned up [ 297.143574][ T7938] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 297.553947][ T4935] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 299.574099][ T4935] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.624469][ T4935] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.734046][ T4935] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 299.753692][ T4935] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 299.784003][ T4935] usb 8-1: SerialNumber: syz [ 299.957842][ T4351] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 300.087349][ T4935] usb 8-1: 0:2 : does not exist [ 300.105986][ T4935] usb 8-1: unit 5: unexpected type 0x03 [ 300.222877][ T4935] usb 8-1: USB disconnect, device number 2 [ 300.876322][ T8005] loop1: detected capacity change from 0 to 16 [ 301.328783][ T8005] erofs: (device loop1): mounted with root inode @ nid 36. [ 301.585165][ T8005] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 301.661114][ T8005] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 301.855956][ T8005] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 301.865622][ T8005] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 307.905310][ T8066] loop3: detected capacity change from 0 to 8 [ 308.549520][ T8068] SQUASHFS error: Failed to read block 0x1ec: -5 [ 308.624063][ T8068] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 309.124039][ T4594] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 311.949646][ T8109] loop6: detected capacity change from 0 to 512 [ 311.992816][ T8107] loop3: detected capacity change from 0 to 512 [ 312.046909][ T8109] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 312.104918][ T8107] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 312.154737][ T8109] EXT4-fs error (device loop6): ext4_init_orphan_info:621: comm syz.6.969: orphan file block 0: bad magic [ 312.278124][ T8107] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 312.308186][ T8109] EXT4-fs (loop6): mount failed [ 312.410184][ T8107] EXT4-fs (loop3): 1 truncate cleaned up [ 312.448482][ T8107] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 315.223289][ T8141] kthread_run failed with err -4 [ 315.692900][ T8156] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 316.252448][ T8156] loop3: detected capacity change from 0 to 1024 [ 317.292962][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.299324][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.344214][ T8156] hfsplus: request for non-existent node 211 in B*Tree [ 317.384224][ T8156] hfsplus: request for non-existent node 211 in B*Tree [ 317.551605][ T4386] hfsplus: b-tree write err: -5, ino 8 [ 321.487715][ T8238] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 321.567711][ T8244] loop6: detected capacity change from 0 to 1024 [ 321.668810][ T4252] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 322.427762][ T8238] hfsplus: request for non-existent node 211 in B*Tree [ 323.504364][ T8238] hfsplus: request for non-existent node 211 in B*Tree [ 323.614072][ T4252] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.644765][ T4252] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.744152][ T4252] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 323.763660][ T4252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 323.817871][ T4252] usb 2-1: SerialNumber: syz [ 324.156253][ T4252] usb 2-1: 0:2 : does not exist [ 324.166368][ T4252] usb 2-1: unit 5: unexpected type 0x03 [ 325.315397][ T4252] usb 2-1: USB disconnect, device number 5 [ 325.365674][ T6199] hfsplus: b-tree write err: -5, ino 8 [ 326.215506][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.526293][ T8290] loop6: detected capacity change from 0 to 1024 [ 327.343828][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 327.343847][ T26] audit: type=1800 audit(1769156515.355:28): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1014" name="file1" dev="loop6" ino=2 res=0 errno=0 [ 329.553848][ T4369] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 329.844043][ T4369] usb 4-1: Using ep0 maxpacket: 32 [ 329.964545][ T4369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.996199][ T4369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.050162][ T4369] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 330.099060][ T4369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.153210][ T4369] usb 4-1: config 0 descriptor?? [ 330.299202][ T8338] loop6: detected capacity change from 0 to 128 [ 330.319293][ T26] audit: type=1800 audit(1769156518.685:29): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1020" name="file2" dev="loop6" ino=1048637 res=0 errno=0 [ 330.323228][ T8338] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 330.349546][ T8338] FAT-fs (loop6): Filesystem has been set read-only [ 330.360401][ T8338] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 330.369315][ T8338] attempt to access beyond end of device [ 330.369315][ T8338] loop6: rw=2049, want=2073, limit=128 [ 330.682882][ T4369] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 331.503601][ T4252] usb 4-1: USB disconnect, device number 6 [ 331.531776][ T8357] loop6: detected capacity change from 0 to 512 [ 331.632692][ T8357] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 331.768987][ T8357] EXT4-fs (loop6): 1 truncate cleaned up [ 331.774777][ T8357] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,barrier=0x0000000000000000,stripe=0x0000000000004000,errors=remount-ro,i_version,. Quota mode: none. [ 333.490639][ T8375] kthread_run failed with err -4 [ 333.735186][ T8386] loop3: detected capacity change from 0 to 512 [ 333.773057][ T8386] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 333.995971][ T8386] EXT4-fs (loop3): 1 truncate cleaned up [ 334.782271][ T8386] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 338.290459][ T8432] loop1: detected capacity change from 0 to 512 [ 338.380054][ T8434] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 338.610312][ T8432] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 338.658173][ T8432] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 339.300487][ T8432] EXT4-fs (loop1): 1 truncate cleaned up [ 339.361273][ T8432] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 340.927140][ T8464] mmap: syz.1.1046 (8464) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 345.254094][ T7] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 345.494131][ T8499] loop3: detected capacity change from 0 to 1024 [ 345.634071][ T7] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 345.676112][ T7] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.974022][ T26] audit: type=1800 audit(2000000004.830:30): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1050" name="file1" dev="loop3" ino=3 res=0 errno=0 [ 346.308927][ T7] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 346.349390][ T7] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 346.358349][ T7] usb 7-1: Product: syz [ 346.362680][ T7] usb 7-1: Manufacturer: syz [ 346.444397][ T6197] hfsplus: b-tree write err: -5, ino 3 [ 346.487290][ T8512] loop7: detected capacity change from 0 to 512 [ 346.515706][ T7] hub 7-1:4.0: USB hub found [ 346.701588][ T8512] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 347.496885][ T7] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 348.479498][ T8512] EXT4-fs error (device loop7): ext4_init_orphan_info:621: comm syz.7.1055: orphan file block 0: bad magic [ 349.087967][ T7] usb 7-1: USB disconnect, device number 3 [ 349.113676][ T8512] EXT4-fs (loop7): mount failed [ 350.016889][ T8550] loop1: detected capacity change from 0 to 1024 [ 351.908374][ T8579] loop7: detected capacity change from 0 to 4096 [ 351.980248][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 352.093362][ T8579] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 354.186973][ T8613] loop3: detected capacity change from 0 to 512 [ 354.374021][ T8613] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 354.678370][ T8617] loop7: detected capacity change from 0 to 1024 [ 354.794900][ T8613] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 354.913837][ T8613] EXT4-fs (loop3): 1 truncate cleaned up [ 354.919532][ T8613] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 355.532999][ T26] audit: type=1800 audit(2000000014.400:31): pid=8631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1083" name="file1" dev="loop7" ino=3 res=0 errno=0 [ 356.097190][ T154] hfsplus: b-tree write err: -5, ino 3 [ 358.701716][ T8658] loop6: detected capacity change from 0 to 128 [ 358.780757][ T8663] loop1: detected capacity change from 0 to 512 [ 358.935360][ T8663] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 360.144469][ T8658] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 360.161509][ T8663] EXT4-fs error (device loop1): ext4_init_orphan_info:621: comm syz.1.1078: orphan file block 0: bad magic [ 360.197907][ T8658] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 360.286195][ T8663] EXT4-fs (loop1): mount failed [ 361.479434][ T8694] loop6: detected capacity change from 0 to 1024 [ 362.617272][ T6212] hfsplus: b-tree write err: -5, ino 4 [ 362.732775][ T8713] loop3: detected capacity change from 0 to 512 [ 362.841800][ T8721] loop6: detected capacity change from 0 to 512 [ 362.858657][ T8713] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 362.892914][ T8721] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 362.914309][ T8713] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 362.943990][ T8713] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 362.963120][ T8713] EXT4-fs (loop3): orphan cleanup on readonly fs [ 362.983574][ T8713] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1113: bg 0: block 361: padding at end of block bitmap is not set [ 363.031302][ T8713] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 363.051497][ T8727] fuse: Bad value for 'fd' [ 363.085247][ T8721] EXT4-fs error (device loop6): ext4_init_orphan_info:621: comm syz.6.1116: orphan file block 0: bad magic [ 363.124539][ T8713] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1113: attempt to clear invalid blocks 33619980 len 1 [ 363.804743][ T8721] EXT4-fs (loop6): mount failed [ 363.826602][ T8713] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1113: invalid indirect mapped block 1811939328 (level 0) [ 363.936434][ T8713] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1113: invalid indirect mapped block 2185560079 (level 1) [ 364.016369][ T8713] EXT4-fs (loop3): 1 truncate cleaned up [ 364.022358][ T8713] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,noblock_validity,discard,dioread_nolock,inode_readahead_blks=0x0000000000000000,errors=continue. Quota mode: none. [ 364.859333][ T8746] loop6: detected capacity change from 0 to 1024 [ 366.134006][ T8754] ODEBUG: Out of memory. ODEBUG disabled [ 366.332098][ T6199] hfsplus: b-tree write err: -5, ino 4 [ 368.657365][ T8781] loop1: detected capacity change from 0 to 512 [ 370.728354][ T8781] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 370.884726][ T8800] loop7: detected capacity change from 0 to 256 [ 370.894593][ T8781] EXT4-fs error (device loop1): ext4_init_orphan_info:621: comm syz.1.1132: orphan file block 0: bad magic [ 370.900025][ T8795] loop6: detected capacity change from 0 to 1024 [ 371.040228][ T8781] EXT4-fs (loop1): mount failed [ 371.088657][ T8800] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 372.435637][ T9] hfsplus: b-tree write err: -5, ino 4 [ 373.630177][ T8815] loop6: detected capacity change from 0 to 512 [ 373.704001][ T8815] EXT4-fs (loop6): Unrecognized mount option "mb_optimize_scan=0x0000000000000000"fowner<00000000000000000000" or missing value [ 374.404666][ T8825] loop1: detected capacity change from 0 to 512 [ 374.514824][ T8825] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 374.588869][ T8825] EXT4-fs (loop1): 1 truncate cleaned up [ 374.594699][ T8825] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,barrier=0x0000000000000000,stripe=0x0000000000004000,errors=remount-ro,i_version,. Quota mode: none. [ 375.286018][ T8843] loop6: detected capacity change from 0 to 512 [ 375.377472][ T8843] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 375.420994][ T8843] EXT4-fs error (device loop6): ext4_init_orphan_info:621: comm syz.6.1149: orphan file block 0: bad magic [ 375.453514][ T8843] EXT4-fs (loop6): mount failed [ 375.642430][ T8850] loop1: detected capacity change from 0 to 1024 [ 376.821688][ T510] hfsplus: b-tree write err: -5, ino 4 [ 377.023830][ T4243] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 377.457115][ T4243] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.714406][ T4243] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.824070][ T4243] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 377.845192][ T4243] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 377.863330][ T4243] usb 7-1: SerialNumber: syz [ 378.179549][ T4243] usb 7-1: 0:2 : does not exist [ 378.604527][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.611519][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.736979][ T4243] usb 7-1: unit 49 not found! [ 378.803483][ T4243] usb 7-1: USB disconnect, device number 4 [ 378.853609][ T8881] loop6: detected capacity change from 0 to 512 [ 378.982970][ T8881] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 379.000121][ T8888] loop7: detected capacity change from 0 to 512 [ 379.020844][ T8881] EXT4-fs (loop6): 1 truncate cleaned up [ 379.026667][ T8881] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,barrier=0x0000000000000000,stripe=0x0000000000004000,errors=remount-ro,i_version,. Quota mode: none. [ 379.181434][ T8888] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 379.816003][ T8888] EXT4-fs error (device loop7): ext4_init_orphan_info:621: comm syz.7.1164: orphan file block 0: bad magic [ 379.837208][ T8888] EXT4-fs (loop7): mount failed [ 379.935666][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.064639][ T8914] loop6: detected capacity change from 0 to 7 [ 381.084663][ T6191] Dev loop6: unable to read RDB block 7 [ 381.778459][ T6191] loop6: unable to read partition table [ 381.930016][ T6191] loop6: partition table beyond EOD, truncated [ 382.612084][ T8914] Dev loop6: unable to read RDB block 7 [ 382.619307][ T8914] loop6: unable to read partition table [ 382.779912][ T8914] loop6: partition table beyond EOD, truncated [ 382.791523][ T8914] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 384.773788][ T26] audit: type=1107 audit(2000000043.500:32): pid=8927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 385.099886][ T8939] loop3: detected capacity change from 0 to 512 [ 385.135267][ T8935] loop7: detected capacity change from 0 to 4096 [ 385.156286][ T8939] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 385.220859][ T8939] EXT4-fs (loop3): 1 truncate cleaned up [ 385.226680][ T8939] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,barrier=0x0000000000000000,stripe=0x0000000000004000,errors=remount-ro,i_version,. Quota mode: none. [ 386.137506][ T8952] loop3: detected capacity change from 0 to 512 [ 386.171223][ T8952] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 386.227850][ T8953] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 386.260006][ T8952] EXT4-fs error (device loop3): ext4_init_orphan_info:621: comm syz.3.1184: orphan file block 0: bad magic [ 386.295627][ T8952] EXT4-fs (loop3): mount failed [ 386.523963][ T4935] Bluetooth: hci2: command 0x0406 tx timeout [ 387.640488][ T8965] loop7: detected capacity change from 0 to 4096 [ 387.704949][ T8973] device bridge1 entered promiscuous mode [ 387.713390][ T8973] team0: Port device bridge1 added [ 387.727163][ T8973] bridge0: port 3(team0) entered blocking state [ 387.734303][ T8973] bridge0: port 3(team0) entered disabled state [ 387.743419][ T8973] device team0 entered promiscuous mode [ 387.749159][ T8973] device team_slave_0 entered promiscuous mode [ 387.756041][ T8973] device team_slave_1 entered promiscuous mode [ 387.764558][ T8973] bridge0: port 3(team0) entered blocking state [ 387.771109][ T8973] bridge0: port 3(team0) entered forwarding state [ 389.305217][ T8965] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,,errors=continue. Quota mode: writeback. [ 389.477123][ T8982] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 389.563809][ T8982] EXT4-fs error (device loop7): ext4_ext_tree_init:872: inode #18: comm syz.7.1186: mark_inode_dirty error [ 389.588318][ T8982] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 389.649626][ T8982] EXT4-fs error (device loop7): __ext4_new_inode:1350: inode #18: comm syz.7.1186: mark_inode_dirty error [ 389.681385][ T8982] EXT4-fs error (device loop7) in __ext4_new_inode:1352: Corrupt filesystem [ 389.720694][ T8982] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 389.767374][ T8982] EXT4-fs error (device loop7): ext4_evict_inode:282: inode #18: comm syz.7.1186: mark_inode_dirty error [ 389.787184][ T8982] EXT4-fs warning (device loop7): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 389.920136][ T8987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1192'. [ 390.058244][ T8991] loop1: detected capacity change from 0 to 256 [ 390.175264][ T8991] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d) [ 390.913265][ T8999] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1196'. [ 390.938948][ T8997] loop6: detected capacity change from 0 to 512 [ 390.978162][ T8997] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 391.001803][ T8997] EXT4-fs (loop6): 1 truncate cleaned up [ 391.007663][ T8997] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,barrier=0x0000000000000000,stripe=0x0000000000004000,errors=remount-ro,i_version,. Quota mode: none. [ 391.947877][ T9008] loop6: detected capacity change from 0 to 512 [ 391.977128][ T9008] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 392.029428][ T9008] EXT4-fs error (device loop6): ext4_init_orphan_info:621: comm syz.6.1197: orphan file block 0: bad magic [ 392.159966][ T9008] EXT4-fs (loop6): mount failed [ 393.991004][ T9033] loop6: detected capacity change from 0 to 4096 [ 394.040003][ T9041] loop3: detected capacity change from 0 to 512 [ 394.078996][ T9041] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 394.106891][ T9041] EXT4-fs (loop3): 1 truncate cleaned up [ 394.112653][ T9041] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,barrier=0x0000000000000000,stripe=0x0000000000004000,errors=remount-ro,i_version,. Quota mode: none. [ 394.169970][ T9033] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,,errors=continue. Quota mode: writeback. [ 394.988092][ T9054] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 395.069155][ T9054] EXT4-fs error (device loop6): ext4_ext_tree_init:872: inode #18: comm syz.6.1205: mark_inode_dirty error [ 395.083050][ T9054] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 395.107185][ T9054] EXT4-fs error (device loop6): __ext4_new_inode:1350: inode #18: comm syz.6.1205: mark_inode_dirty error [ 395.781431][ T9054] EXT4-fs error (device loop6) in __ext4_new_inode:1352: Corrupt filesystem [ 395.795468][ T9054] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 395.800508][ T9067] loop3: detected capacity change from 0 to 512 [ 395.810939][ T9054] EXT4-fs error (device loop6): ext4_evict_inode:282: inode #18: comm syz.6.1205: mark_inode_dirty error [ 395.835855][ T9054] EXT4-fs warning (device loop6): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 395.905819][ T9067] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 395.987213][ T9067] EXT4-fs error (device loop3): ext4_init_orphan_info:621: comm syz.3.1211: orphan file block 0: bad magic [ 396.126666][ T9070] loop1: detected capacity change from 0 to 1024 [ 396.158132][ T9067] EXT4-fs (loop3): mount failed [ 396.891089][ T9072] loop7: detected capacity change from 0 to 32768 [ 396.944791][ T9072] XFS: ikeep mount option is deprecated. [ 397.042944][ T9] hfsplus: b-tree write err: -5, ino 4 [ 397.264523][ T9072] XFS (loop7): Mounting V5 Filesystem [ 397.644699][ T9072] XFS (loop7): Ending clean mount [ 397.678145][ T9072] XFS (loop7): Quotacheck needed: Please wait. [ 398.726624][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 398.749160][ T9112] loop3: detected capacity change from 0 to 1024 [ 398.795952][ T9072] XFS (loop7): Quotacheck: Done. [ 398.981509][ T7505] XFS (loop7): Unmounting Filesystem [ 399.466872][ T26] audit: type=1800 audit(2000000058.270:33): pid=9126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1227" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 399.642266][ T9128] device syzkaller0 entered promiscuous mode [ 401.142927][ T9161] loop1: detected capacity change from 0 to 512 [ 401.230470][ T9161] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 401.567333][ T9161] EXT4-fs error (device loop1): ext4_init_orphan_info:621: comm syz.1.1243: orphan file block 0: bad magic [ 401.905773][ T9161] EXT4-fs (loop1): mount failed [ 401.996429][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1244'. [ 402.074427][ T9146] loop3: detected capacity change from 0 to 32768 [ 402.078588][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1244'. [ 402.139922][ T9177] loop7: detected capacity change from 0 to 1024 [ 402.154412][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1244'. [ 402.276774][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1244'. [ 402.682877][ T9146] XFS (loop3): Mounting V5 Filesystem [ 403.050557][ T9146] XFS (loop3): Ending clean mount [ 403.138158][ T26] audit: type=1800 audit(2000000062.010:34): pid=9196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1246" name="file1" dev="loop7" ino=2 res=0 errno=0 [ 403.547905][ T9200] loop6: detected capacity change from 0 to 512 [ 403.578215][ T9200] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 403.595911][ T9200] EXT4-fs (loop6): 1 truncate cleaned up [ 403.601615][ T9200] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,barrier=0x0000000000000000,stripe=0x0000000000004000,errors=remount-ro,i_version,. Quota mode: none. [ 403.643558][ T4186] XFS (loop3): Unmounting Filesystem [ 404.596274][ T9217] loop6: detected capacity change from 0 to 512 [ 405.518906][ T9217] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 405.536266][ T9217] EXT4-fs (loop6): 1 truncate cleaned up [ 405.541970][ T9217] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,barrier=0x0000000000000000,stripe=0x0000000000004000,errors=remount-ro,i_version,. Quota mode: none. [ 406.082538][ T9228] loop1: detected capacity change from 0 to 512 [ 406.250638][ T9228] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 407.021438][ T9228] EXT4-fs error (device loop1): ext4_init_orphan_info:621: comm syz.1.1259: orphan file block 0: bad magic [ 407.175213][ T9228] EXT4-fs (loop1): mount failed [ 407.547896][ T9250] loop6: detected capacity change from 0 to 764 [ 407.648463][ T26] audit: type=1326 audit(2000000066.510:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ec09cb9 code=0x7ffc0000 [ 407.971939][ T26] audit: type=1326 audit(2000000066.510:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ec09cb9 code=0x7ffc0000 [ 408.024508][ T26] audit: type=1326 audit(2000000066.510:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff44ec09cb9 code=0x7ffc0000 [ 408.254975][ T26] audit: type=1326 audit(2000000066.510:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ec09cb9 code=0x7ffc0000 [ 408.283984][ T26] audit: type=1326 audit(2000000066.510:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ec09cb9 code=0x7ffc0000 [ 408.819626][ T26] audit: type=1326 audit(2000000066.510:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff44ec09cb9 code=0x7ffc0000 [ 408.935054][ T26] audit: type=1326 audit(2000000066.510:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ec09cb9 code=0x7ffc0000 [ 408.968870][ T26] audit: type=1326 audit(2000000066.520:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ec09cb9 code=0x7ffc0000 [ 409.006092][ T26] audit: type=1326 audit(2000000066.520:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff44ec09cb9 code=0x7ffc0000 [ 409.040601][ T9265] loop7: detected capacity change from 0 to 512 [ 409.053961][ T26] audit: type=1326 audit(2000000066.520:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44ec09cb9 code=0x7ffc0000 [ 409.154028][ T9265] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 410.115226][ T9265] EXT4-fs (loop7): 1 truncate cleaned up [ 410.121116][ T9265] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,barrier=0x0000000000000000,stripe=0x0000000000004000,errors=remount-ro,i_version,. Quota mode: none. [ 410.550663][ T9279] loop1: detected capacity change from 0 to 4096 [ 411.562528][ T9271] loop3: detected capacity change from 0 to 32768 [ 411.626256][ T9292] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 411.652833][ T9271] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1272 (9271) [ 412.464200][ T9271] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 412.472941][ T9271] BTRFS info (device loop3): turning off barriers [ 412.484078][ T9271] BTRFS info (device loop3): setting nodatasum [ 412.502587][ T9271] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 412.621890][ T9304] loop7: detected capacity change from 0 to 1024 [ 413.298825][ T9271] BTRFS info (device loop3): use zstd compression, level 3 [ 413.391761][ T9271] BTRFS info (device loop3): using free space tree [ 413.724853][ T9271] BTRFS info (device loop3): has skinny extents [ 413.747513][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1286'. [ 413.748864][ T9312] loop6: detected capacity change from 0 to 512 [ 413.797137][ T510] hfsplus: b-tree write err: -5, ino 4 [ 414.437647][ T9312] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 414.697820][ T9271] BTRFS error (device loop3): open_ctree failed: -12 [ 414.705522][ T4176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4176) [ 414.827087][ T9312] EXT4-fs error (device loop6): ext4_init_orphan_info:621: comm syz.6.1284: orphan file block 0: bad magic [ 414.981765][ T9312] EXT4-fs (loop6): mount failed [ 415.642844][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1288'. [ 415.718967][ T9355] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1288'. [ 415.740348][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1288'. [ 416.687750][ T9362] kthread_run failed with err -4 [ 416.902154][ T9373] loop7: detected capacity change from 0 to 1024 [ 417.414538][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 417.414736][ T26] audit: type=1800 audit(2000000076.230:68): pid=9385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1293" name="file1" dev="loop7" ino=2 res=0 errno=0 [ 417.855743][ T9388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1298'. [ 419.148964][ T9409] loop6: detected capacity change from 0 to 512 [ 419.259467][ T9409] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 419.290921][ T9391] loop7: detected capacity change from 0 to 32768 [ 419.344633][ T9409] EXT4-fs error (device loop6): ext4_init_orphan_info:621: comm syz.6.1304: orphan file block 0: bad magic [ 419.369119][ T9409] EXT4-fs (loop6): mount failed [ 419.387854][ T9391] XFS (loop7): Mounting V5 Filesystem [ 419.471198][ T9395] loop3: detected capacity change from 0 to 40427 [ 419.487959][ T9391] XFS (loop7): Ending clean mount [ 419.582568][ T9395] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 419.683801][ T9395] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 419.735033][ T9395] F2FS-fs (loop3): invalid crc value [ 419.787547][ T9395] F2FS-fs (loop3): Found nat_bits in checkpoint [ 421.300303][ T9425] syz.7.1300 (9425) used greatest stack depth: 20944 bytes left [ 421.390290][ T7505] XFS (loop7): Unmounting Filesystem [ 421.484797][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1307'. [ 421.543551][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1307'. [ 421.586366][ T9395] F2FS-fs (loop3): Start checkpoint disabled! [ 421.627181][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1307'. [ 421.755368][ T9395] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 421.807823][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1307'. [ 421.934839][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1307'. [ 422.098669][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1307'. [ 422.189090][ T9448] loop7: detected capacity change from 0 to 2048 [ 422.301673][ T9451] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 422.445905][ T9448] syz.7.1309 (9448) used greatest stack depth: 20056 bytes left [ 422.567380][ T9454] loop6: detected capacity change from 0 to 4096 [ 422.618669][ T9454] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 422.654892][ T9456] loop7: detected capacity change from 0 to 512 [ 422.757989][ T9456] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 423.013076][ T9456] EXT4-fs error (device loop7): ext4_init_orphan_info:621: comm syz.7.1315: orphan file block 0: bad magic [ 423.849359][ T9467] netlink: 'syz.3.1317': attribute type 1 has an invalid length. [ 423.869053][ T9456] EXT4-fs (loop7): mount failed [ 423.967412][ T9470] bond1: (slave gretap1): making interface the new active one [ 423.975631][ T9470] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 424.177131][ T6191] ntfs3: loop6: ntfs_evict_inode r=3 failed, -22. [ 424.249251][ T6191] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 424.379550][ T6191] ntfs3: loop6: ntfs_set_state r=3 failed, -22. [ 424.919143][ T9479] loop1: detected capacity change from 0 to 64 [ 425.987381][ T9492] loop3: detected capacity change from 0 to 64 [ 426.162100][ T9498] loop7: detected capacity change from 0 to 256 [ 426.405604][ T9500] device bridge0 entered promiscuous mode [ 426.638244][ T9498] exfat: Deprecated parameter 'namecase' [ 426.803855][ T9498] exfat: Bad value for 'fmask' [ 427.194464][ T9509] loop1: detected capacity change from 0 to 512 [ 427.382133][ T9509] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 427.648563][ T9512] loop3: detected capacity change from 0 to 4096 [ 427.676301][ T9509] EXT4-fs error (device loop1): ext4_init_orphan_info:621: comm syz.1.1330: orphan file block 0: bad magic [ 427.937517][ T9512] ntfs3: loop3: ino=3, Correct links count -> 2. [ 428.414365][ T9509] EXT4-fs (loop1): mount failed [ 430.719307][ T9549] device bridge1 entered promiscuous mode [ 430.765521][ T9549] team0: Port device bridge1 added [ 433.424135][ T9560] loop7: detected capacity change from 0 to 512 [ 433.456336][ T9560] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 433.624383][ T9560] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 434.479379][ T9560] EXT4-fs (loop7): 1 truncate cleaned up [ 435.185264][ T9560] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 435.213315][ T9574] loop3: detected capacity change from 0 to 512 [ 435.348099][ T9574] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 435.422831][ T9574] EXT4-fs (loop3): 1 truncate cleaned up [ 435.428652][ T9574] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,barrier=0x0000000000000000,stripe=0x0000000000004000,errors=remount-ro,i_version,. Quota mode: none. [ 435.610443][ T9587] loop7: detected capacity change from 0 to 512 [ 436.030328][ T9587] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 436.769952][ T9587] EXT4-fs error (device loop7): ext4_init_orphan_info:621: comm syz.7.1351: orphan file block 0: bad magic [ 436.803185][ T9587] EXT4-fs (loop7): mount failed [ 439.320971][ T9608] loop7: detected capacity change from 0 to 4096 [ 439.331419][ T9612] loop6: detected capacity change from 0 to 1024 [ 439.390074][ T9608] ntfs3: loop7: ino=3, Correct links count -> 2. [ 439.763942][ T26] audit: type=1800 audit(2000000098.570:69): pid=9616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1359" name="file1" dev="loop6" ino=2 res=0 errno=0 [ 440.166508][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.172828][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.329303][ T9618] loop7: detected capacity change from 0 to 1024 [ 440.484155][ T4214] hfsplus: b-tree write err: -5, ino 4 [ 440.578912][ T9628] loop6: detected capacity change from 0 to 1024 [ 440.700705][ T9628] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 440.709712][ T9628] EXT4-fs (loop6): orphan cleanup on readonly fs [ 440.725078][ T9631] loop7: detected capacity change from 0 to 512 [ 440.744528][ T9628] EXT4-fs warning (device loop6): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 440.808612][ T9622] loop1: detected capacity change from 0 to 32768 [ 440.808874][ T9631] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 440.825656][ T9628] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 440.973995][ T9628] EXT4-fs (loop6): 1 truncate cleaned up [ 440.979683][ T9628] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 441.111035][ T9631] EXT4-fs error (device loop7): ext4_init_orphan_info:621: comm syz.7.1368: orphan file block 0: bad magic [ 441.166715][ T9631] EXT4-fs (loop7): mount failed [ 441.199512][ T9628] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 443.883598][ T9655] loop1: detected capacity change from 0 to 2048 [ 445.576893][ T9658] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 446.724215][ T9665] loop1: detected capacity change from 0 to 4096 [ 449.096629][ T9694] loop7: detected capacity change from 0 to 512 [ 449.199230][ T9694] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 449.219761][ T4184] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 449.257007][ T4184] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 449.265559][ T9694] EXT4-fs (loop7): 1 truncate cleaned up [ 449.271561][ T9694] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,barrier=0x0000000000000000,stripe=0x0000000000004000,errors=remount-ro,i_version,. Quota mode: none. [ 450.008665][ T9706] kthread_run failed with err -4 [ 450.232017][ T9717] loop7: detected capacity change from 0 to 512 [ 450.311069][ T9717] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 450.329790][ T9717] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 450.351571][ T9717] EXT4-fs (loop7): 1 truncate cleaned up [ 450.357421][ T9717] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 452.735732][ T9745] loop6: detected capacity change from 0 to 512 [ 452.788778][ T9745] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 452.838627][ T9745] EXT4-fs (loop6): 1 truncate cleaned up [ 452.845025][ T9745] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,barrier=0x0000000000000000,stripe=0x0000000000004000,errors=remount-ro,i_version,. Quota mode: none. [ 453.302801][ T4351] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 453.687581][ T9760] loop3: detected capacity change from 0 to 128 [ 453.743525][ T9762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1404'. [ 453.757300][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.771820][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.798403][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.883922][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.962549][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.998968][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.009063][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.019893][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.032156][ T9762] device batadv_slave_1 entered promiscuous mode [ 454.111008][ T4351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 454.288662][ T9765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1406'. [ 454.290439][ T4351] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 454.378391][ T4351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.411879][ T4351] usb 8-1: config 0 descriptor?? [ 454.434026][ T9753] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 454.943937][ T4351] usbhid 8-1:0.0: can't add hid device: -71 [ 454.951577][ T4351] usbhid: probe of 8-1:0.0 failed with error -71 [ 455.503963][ T4351] usb 8-1: USB disconnect, device number 3 [ 455.745350][ T9786] loop3: detected capacity change from 0 to 1764 [ 455.893920][ T9783] loop1: detected capacity change from 0 to 1024 [ 456.089703][ T26] audit: type=1800 audit(2000000114.980:70): pid=9783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1409" name="file1" dev="loop1" ino=3 res=0 errno=0 [ 456.213132][ T6209] hfsplus: b-tree write err: -5, ino 3 [ 456.602217][ T9796] loop3: detected capacity change from 0 to 1024 [ 456.621268][ T9778] loop6: detected capacity change from 0 to 32768 [ 456.901021][ T9778] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop6 scanned by syz.6.1410 (9778) [ 456.917201][ T26] audit: type=1800 audit(2000000115.810:71): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1414" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 457.040297][ T9778] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 457.053978][ T9778] BTRFS info (device loop6): using free space tree [ 457.077119][ T9778] BTRFS info (device loop6): has skinny extents [ 457.279014][ T9778] BTRFS info (device loop6): enabling ssd optimizations [ 458.573435][ T9829] loop3: detected capacity change from 0 to 512 [ 458.658914][ T9829] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 458.693965][ T9829] EXT4-fs (loop3): 1 truncate cleaned up [ 458.699651][ T9829] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,barrier=0x0000000000000000,stripe=0x0000000000004000,errors=remount-ro,i_version,. Quota mode: none. [ 460.187170][ T9847] loop3: detected capacity change from 0 to 128 [ 461.413769][ T9845] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 461.680774][ T9861] loop6: detected capacity change from 0 to 1024 [ 461.723984][ T9845] usb 2-1: Using ep0 maxpacket: 32 [ 461.811686][ T26] audit: type=1800 audit(2000000120.700:72): pid=9861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1424" name="file1" dev="loop6" ino=3 res=0 errno=0 [ 461.869600][ T6209] hfsplus: b-tree write err: -5, ino 3 [ 461.884035][ T9845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.928397][ T9845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.948569][ T9845] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 461.999784][ T9845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.049950][ T9845] usb 2-1: config 0 descriptor?? [ 462.590325][ T9845] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 464.015969][ T9343] usb 2-1: USB disconnect, device number 6 [ 464.087801][ T9874] fido_id[9874]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 464.552004][ T9887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1432'. [ 465.862609][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1435'. [ 465.873279][ T9897] device bridge_slave_1 left promiscuous mode [ 465.880358][ T9897] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.918003][ T9897] device bridge_slave_0 left promiscuous mode [ 465.924927][ T9897] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.964082][ T9891] loop1: detected capacity change from 0 to 32768 [ 467.152535][ T9891] XFS (loop1): Mounting V5 Filesystem [ 467.198169][ T9905] kernel read not supported for file /e_1 (pid: 9905 comm: syz.6.1437) [ 467.217624][ T9905] loop6: detected capacity change from 0 to 256 [ 467.233747][ T26] audit: type=1800 audit(2000000126.110:73): pid=9905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1437" name="e_1" dev="mqueue" ino=48126 res=0 errno=0 [ 467.375344][ T9905] FAT-fs (loop6): Directory bread(block 64) failed [ 467.422007][ T9891] XFS (loop1): Ending clean mount [ 467.427235][ T9905] FAT-fs (loop6): Directory bread(block 65) failed [ 467.482832][ T9905] FAT-fs (loop6): Directory bread(block 66) failed [ 467.610709][ T9905] FAT-fs (loop6): Directory bread(block 67) failed [ 467.643815][ T9905] FAT-fs (loop6): Directory bread(block 68) failed [ 468.105668][ T4184] XFS (loop1): Unmounting Filesystem [ 468.133784][ T9905] FAT-fs (loop6): Directory bread(block 69) failed [ 468.140454][ T9905] FAT-fs (loop6): Directory bread(block 70) failed [ 468.213827][ T9905] FAT-fs (loop6): Directory bread(block 71) failed [ 468.220466][ T9905] FAT-fs (loop6): Directory bread(block 72) failed [ 468.263812][ T9905] FAT-fs (loop6): Directory bread(block 73) failed [ 468.701555][ T9929] loop6: detected capacity change from 0 to 1024 [ 468.826406][ T9932] loop1: detected capacity change from 0 to 1024 [ 468.967194][ T26] audit: type=1800 audit(2000000127.860:74): pid=9934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1440" name="file1" dev="loop6" ino=2 res=0 errno=0 [ 469.451901][ T26] audit: type=1800 audit(2000000128.000:75): pid=9932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1449" name="file1" dev="loop1" ino=3 res=0 errno=0 [ 469.767581][ T6197] hfsplus: b-tree write err: -5, ino 3 [ 470.073218][ T9946] loop3: detected capacity change from 0 to 512 [ 470.187196][ T9946] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 470.265998][ T9938] loop6: detected capacity change from 0 to 32768 [ 470.289196][ T9938] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1442 (9938) [ 470.340826][ T9946] EXT4-fs error (device loop3): ext4_init_orphan_info:621: comm syz.3.1445: orphan file block 0: bad magic [ 470.360487][ T9946] EXT4-fs (loop3): mount failed [ 470.363777][ T9345] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 470.415048][ T9938] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 470.451705][ T9938] BTRFS info (device loop6): force clearing of disk cache [ 470.473795][ T9938] BTRFS info (device loop6): enabling auto defrag [ 470.503773][ T9938] BTRFS info (device loop6): disabling tree log [ 470.510117][ T9938] BTRFS info (device loop6): turning on sync discard [ 470.559151][ T9938] BTRFS info (device loop6): enabling disk space caching [ 470.596834][ T9938] BTRFS info (device loop6): disk space caching is enabled [ 470.643722][ T9345] usb 2-1: Using ep0 maxpacket: 32 [ 470.664283][ T9938] BTRFS info (device loop6): has skinny extents [ 470.763980][ T9345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.803748][ T9345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.823788][ T9345] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 470.872800][ T9345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.922451][ T9345] usb 2-1: config 0 descriptor?? [ 471.057183][ T9938] BTRFS info (device loop6): enabling ssd optimizations [ 471.712659][ T9938] BTRFS info (device loop6): clearing free space tree [ 471.723963][ T9938] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 471.751995][ T9938] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 471.960459][ T9345] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 472.503995][ T9345] usb 2-1: USB disconnect, device number 7 [ 474.098348][ T9999] loop7: detected capacity change from 0 to 512 [ 474.133960][ T9999] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 474.244605][ T9999] EXT4-fs (loop7): 1 truncate cleaned up [ 474.250348][ T9999] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,barrier=0x0000000000000000,stripe=0x0000000000004000,errors=remount-ro,i_version,. Quota mode: none. [ 474.490696][T10005] loop3: detected capacity change from 0 to 1024 [ 474.564187][ T9990] loop6: detected capacity change from 0 to 32768 [ 474.727729][ T9990] ERROR: (device loop6): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 474.727729][ T9990] [ 474.810874][ T26] audit: type=1800 audit(2000000133.700:76): pid=10005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1455" name="file1" dev="loop3" ino=3 res=0 errno=0 [ 474.955164][ T9990] ERROR: (device loop6): remounting filesystem as read-only [ 474.973084][ T9990] ERROR: (device loop6): jfs_unlink: [ 474.973084][ T9990] [ 474.982153][ T6207] hfsplus: b-tree write err: -5, ino 3 [ 474.989339][ T276] BUG: Bad page state in process jfsCommit pfn:67c86 [ 474.996181][ T26] audit: type=1800 audit(2000000133.880:77): pid=10007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1451" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 475.021109][ T276] page:ffffea00019f2180 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x67c86 [ 475.044272][ T6191] ERROR: (device loop6): xtTruncate: XT_GETPAGE: xtree page corrupt [ 475.044272][ T6191] [ 475.073616][ T6191] ERROR: (device loop6): remounting filesystem as read-only [ 475.079545][ T276] flags: 0xfff00000002007(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 475.198852][ T276] raw: 00fff00000002007 dead000000000100 dead000000000122 0000000000000000 [ 475.213679][ T276] raw: 000000000000001c ffff888074a8a3e0 00000000ffffffff 0000000000000000 [ 475.233262][ T276] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 475.313710][ T276] page_owner tracks the page as allocated [ 475.319471][ T276] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 9990, ts 474641745961, free_ts 474212935308 [ 475.520961][ T276] get_page_from_freelist+0x1bbd/0x1ca0 [ 475.532299][ T276] __alloc_pages+0x1ee/0x480 [ 475.543754][ T276] __page_cache_alloc+0xce/0x440 [ 475.543784][ T276] do_read_cache_page+0x1da/0x1030 [ 475.543798][ T276] __get_metapage+0x35d/0x1060 [ 475.543814][ T276] diRead+0x6f7/0xbb0 [ 475.543825][ T276] jfs_iget+0x89/0x3f0 [ 475.543838][ T276] jfs_fill_super+0x73b/0xb00 [ 475.602821][ T276] mount_bdev+0x287/0x3c0 [ 475.607457][ T276] legacy_get_tree+0xe6/0x180 [ 475.612147][ T276] vfs_get_tree+0x88/0x270 [ 475.633677][ T276] do_new_mount+0x24a/0xa40 [ 475.638262][ T276] __se_sys_mount+0x2e3/0x3d0 [ 475.642952][ T276] do_syscall_64+0x4c/0xa0 [ 475.663682][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 475.669858][ T276] page last free stack trace: [ 475.686179][ T276] free_unref_page_prepare+0x637/0x6c0 [ 475.691684][ T276] free_unref_page_list+0x119/0x820 [ 475.700834][ T276] release_pages+0x186c/0x1be0 [ 475.706193][ T276] tlb_finish_mmu+0x176/0x300 [ 475.710885][ T276] exit_mmap+0x3d0/0x640 [ 475.718892][ T276] __mmput+0x115/0x3b0 [ 475.723004][ T276] exit_mm+0x588/0x6e0 [ 475.727559][ T276] do_exit+0x5a9/0x20c0 [ 475.731723][ T276] do_group_exit+0x12e/0x300 [ 475.739599][ T276] get_signal+0x6ca/0x12c0 [ 475.745877][ T276] arch_do_signal_or_restart+0xe7/0x12c0 [ 475.751753][ T276] exit_to_user_mode_loop+0x9e/0x130 [ 475.762492][ T276] exit_to_user_mode_prepare+0xee/0x180 [ 475.768238][ T276] irqentry_exit_to_user_mode+0x5/0x30 [ 475.778984][ T276] exc_page_fault+0x88/0x100 [ 475.783706][ T276] asm_exc_page_fault+0x22/0x30 [ 475.788733][ T276] Modules linked in: [ 475.792709][ T276] CPU: 0 PID: 276 Comm: jfsCommit Not tainted syzkaller #0 [ 475.799991][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 475.810254][ T276] Call Trace: [ 475.813551][ T276] [ 475.816488][ T276] dump_stack_lvl+0x188/0x250 [ 475.821177][ T276] ? show_regs_print_info+0x20/0x20 [ 475.826557][ T276] ? clockevents_increase_min_delta+0x130/0x130 [ 475.832816][ T276] bad_page+0x14b/0x170 [ 475.837330][ T276] free_unref_page_prepare+0x383/0x6c0 [ 475.842804][ T276] free_unref_page+0x8f/0x2a0 [ 475.847498][ T276] ? mark_free_pages+0x5c0/0x5c0 [ 475.852541][ T276] ? __mem_cgroup_uncharge+0xab/0xe0 [ 475.857925][ T276] txUnlock+0x27e/0xcb0 [ 475.862101][ T276] jfs_lazycommit+0x581/0xb40 [ 475.866883][ T276] ? txFreelock+0x5a0/0x5a0 [ 475.871387][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 475.877294][ T276] ? sched_dynamic_update+0x210/0x210 [ 475.882759][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 475.888746][ T276] ? __kthread_parkme+0x157/0x1b0 [ 475.894130][ T276] kthread+0x436/0x520 [ 475.898213][ T276] ? txFreelock+0x5a0/0x5a0 [ 475.902719][ T276] ? kthread_blkcg+0xd0/0xd0 [ 475.907404][ T276] ret_from_fork+0x1f/0x30 [ 475.911846][ T276] [ 475.914982][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.926919][ T276] Disabling lock debugging due to kernel taint [ 475.933501][ T276] page:ffffea00019f2180 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x67c86 [ 475.944808][ T276] flags: 0xfff00000002007(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 475.955662][ T276] raw: 00fff00000002007 dead000000000100 dead000000000122 0000000000000000 [ 475.964652][ T276] raw: 000000000000001c ffff888074a8a3e0 00000000ffffffff 0000000000000000 [ 475.973446][ T276] page dumped because: VM_BUG_ON_PAGE(((unsigned int) page_ref_count(page) + 127u <= 127u)) [ 475.983961][ T276] page_owner tracks the page as allocated [ 475.989755][ T276] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 9990, ts 474641745961, free_ts 474212935308 [ 476.005887][ T276] get_page_from_freelist+0x1bbd/0x1ca0 [ 476.011515][ T276] __alloc_pages+0x1ee/0x480 [ 476.017561][ T276] __page_cache_alloc+0xce/0x440 [ 476.022656][ T276] do_read_cache_page+0x1da/0x1030 [ 476.027837][ T276] __get_metapage+0x35d/0x1060 [ 476.032601][ T276] diRead+0x6f7/0xbb0 [ 476.036713][ T276] jfs_iget+0x89/0x3f0 [ 476.040777][ T276] jfs_fill_super+0x73b/0xb00 [ 476.045810][ T276] mount_bdev+0x287/0x3c0 [ 476.050150][ T276] legacy_get_tree+0xe6/0x180 [ 476.054856][ T276] vfs_get_tree+0x88/0x270 [ 476.059294][ T276] do_new_mount+0x24a/0xa40 [ 476.064043][ T276] __se_sys_mount+0x2e3/0x3d0 [ 476.068779][ T276] do_syscall_64+0x4c/0xa0 [ 476.073903][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 476.079926][ T276] page last free stack trace: [ 476.084912][ T276] free_unref_page_prepare+0x637/0x6c0 [ 476.090479][ T276] free_unref_page_list+0x119/0x820 [ 476.096007][ T276] release_pages+0x186c/0x1be0 [ 476.100819][ T276] tlb_finish_mmu+0x176/0x300 [ 476.105835][ T276] exit_mmap+0x3d0/0x640 [ 476.110097][ T276] __mmput+0x115/0x3b0 [ 476.114999][ T276] exit_mm+0x588/0x6e0 [ 476.119122][ T276] do_exit+0x5a9/0x20c0 [ 476.123270][ T276] do_group_exit+0x12e/0x300 [ 476.127983][ T276] get_signal+0x6ca/0x12c0 [ 476.132397][ T276] arch_do_signal_or_restart+0xe7/0x12c0 [ 476.138070][ T276] exit_to_user_mode_loop+0x9e/0x130 [ 476.143351][ T276] exit_to_user_mode_prepare+0xee/0x180 [ 476.149406][ T276] irqentry_exit_to_user_mode+0x5/0x30 [ 476.154958][ T276] exc_page_fault+0x88/0x100 [ 476.159995][ T276] asm_exc_page_fault+0x22/0x30 [ 476.165322][ T276] ------------[ cut here ]------------ [ 476.170865][ T276] kernel BUG at include/linux/mm.h:1224! [ 476.176723][ T276] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 476.182965][ T276] CPU: 0 PID: 276 Comm: jfsCommit Tainted: G B syzkaller #0 [ 476.191551][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.201704][ T276] RIP: 0010:put_metapage+0x278/0x280 [ 476.207095][ T276] Code: 38 c1 0f 8c 00 ff ff ff 4c 89 ef e8 12 bf ec fe e9 f3 fe ff ff e8 f8 ba a7 fe 48 8b 3c 24 48 c7 c6 e0 52 62 8a e8 58 a1 da fe <0f> 0b 66 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 70 [ 476.226690][ T276] RSP: 0018:ffffc90002c9fce0 EFLAGS: 00010246 [ 476.232825][ T276] RAX: 4728a8293f0b9c00 RBX: ffff888074a8a3e0 RCX: 0000000000000000 [ 476.240781][ T276] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff52000593f90 [ 476.248734][ T276] RBP: 000000000000007f R08: ffffc90002c9f407 R09: fffff52000593f4c [ 476.256689][ T276] R10: dffffc0000000000 R11: fffff52000593e81 R12: ffff888074a8a408 [ 476.264640][ T276] R13: ffffea00019f21b4 R14: 1ffff1100e951481 R15: 1ffff1100e95148e [ 476.272588][ T276] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 476.281579][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.288139][ T276] CR2: 0000555589ba7a28 CR3: 000000002c99a000 CR4: 00000000003506f0 [ 476.296086][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 476.304033][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 476.311984][ T276] Call Trace: [ 476.315249][ T276] [ 476.318172][ T276] txUnlock+0x427/0xcb0 [ 476.322308][ T276] jfs_lazycommit+0x581/0xb40 [ 476.326964][ T276] ? txFreelock+0x5a0/0x5a0 [ 476.331442][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 476.337476][ T276] ? sched_dynamic_update+0x210/0x210 [ 476.342835][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 476.348705][ T276] ? __kthread_parkme+0x157/0x1b0 [ 476.353826][ T276] kthread+0x436/0x520 [ 476.357885][ T276] ? txFreelock+0x5a0/0x5a0 [ 476.362363][ T276] ? kthread_blkcg+0xd0/0xd0 [ 476.366929][ T276] ret_from_fork+0x1f/0x30 [ 476.371321][ T276] [ 476.374312][ T276] Modules linked in: [ 476.378239][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.386083][ T276] ---[ end trace 9337d50f3d73f4ae ]--- [ 476.391567][ T276] RIP: 0010:put_metapage+0x278/0x280 [ 476.397155][ T276] Code: 38 c1 0f 8c 00 ff ff ff 4c 89 ef e8 12 bf ec fe e9 f3 fe ff ff e8 f8 ba a7 fe 48 8b 3c 24 48 c7 c6 e0 52 62 8a e8 58 a1 da fe <0f> 0b 66 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 70 [ 476.416917][ T276] RSP: 0018:ffffc90002c9fce0 EFLAGS: 00010246 [ 476.423113][ T276] RAX: 4728a8293f0b9c00 RBX: ffff888074a8a3e0 RCX: 0000000000000000 [ 476.431327][ T276] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff52000593f90 [ 476.439971][ T276] RBP: 000000000000007f R08: ffffc90002c9f407 R09: fffff52000593f4c [ 476.448095][ T276] R10: dffffc0000000000 R11: fffff52000593e81 R12: ffff888074a8a408 [ 476.456389][ T276] R13: ffffea00019f21b4 R14: 1ffff1100e951481 R15: 1ffff1100e95148e [ 476.464438][ T276] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 476.473406][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.480021][ T276] CR2: 0000555589ba7a28 CR3: 000000002b99c000 CR4: 00000000003506f0 [ 476.488030][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 476.497138][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 476.505168][ T276] Kernel panic - not syncing: Fatal exception [ 476.511318][ T276] Kernel Offset: disabled [ 476.515633][ T276] Rebooting in 86400 seconds..