last executing test programs: 1m48.854742362s ago: executing program 4 (id=5): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xff}]}]}, 0x34}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4428, &(0x7f0000008940)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r6, 0x1c17a) socket$nl_generic(0x10, 0x3, 0x10) 1m45.117151771s ago: executing program 4 (id=14): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x2, 0x0, &(0x7f0000000000)=0x8328be7a30208093) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) r2 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000000c0), 0x4) r4 = openat$cgroup_int(r3, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0xff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9, 0x20010, 0xffffffffffffffff, 0x180000000) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0, 0x6b2, &(0x7f0000000f80)="$eJzs3UtsHGcdAPD/zK7X3iClTpu0ASHVakRBtUj8kAtGQjUckA8RqsKhQuKySpzGysatbBc5EQLzPnDhUO7l4AMSJyTukYrEiXLr1SdUCcElJ1+Q0czOvrLZ9a7tZGP4/azZ+Wa/939e+5C1AfzfWp2N8sNIYnX2+k62vb+3WN/fW5wssusRkaXTiHJjFclGRPJxxEo0lvh89mRRPunXz4fryzc+fbT/WWOrXCx5+XRQveHsFkvMRESpWPea6N5MykO1d7Nve4PV2h21ZpgF7EozcDBuhz12R6l+wvMWeB4kjftmj+mIcxExVbwOiOLqkD7b0Z2+ka5yAAAAcEa9cBAHsRPnxz0OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEuK3/9PiiVtpmciaf7+f6V4Lor0jXTMYz6Jh+MeAAAAAAAAAACcglcP4iB24nxz+7Dxzf5r+ePF/PFz8UFsxVpsxtXYiVpsx3ZsxnxETHc0VNmpbW9vzg9Rc+GJNRcaG8ng4b5xOrMGAAAAAAAAgP85P4vV9vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPEgiSo1VvlxspqcjLUfEVERUsnK7EX9vps+IpJ1caaUejmcsAAAAcGxTx8h74SAOYifON7cPk/w9/8v5++Wp+CA2YjvWYzvqsRa3ivfQ2bv+dH9vsb6/t3hvf28xb/wHhw2Ndr7175GGnrcYjc8entzz5bxENW7Hev7M1biZD+ZWpHnNzOViPK2lu5OfZmOqvlUYcmS3inXW2W+7P0U4XWlXr58cXWE6rzTRishcMbasoQuDI9Gxd6rxpGT5S6UBPc1H2vrk5+KAnppTSoqQXz96UrlzzXoR8avHYv7WP/7w/SGbeQpakUgjj8RCx9H38uCYR3z5z39850594+6d21uzT+0welYePyYWOyLxypmORHnE8nN5JC61tlfjO/G9mI2ZeDs2Yz1+GLXYjrUoroxRK47n7HG6I0oRPZFa6dp6+6iRVIr90jh3hxnTTEzmqVq8ltc9H+uRxHtxK9bizfxvIebja7EUS7HcsYcv9d3D+dzyK2062pX2yleifar/uvtyNNhfhy04usZtM4vrhY64dl5zp/O8zmfaUXpxiPtRMlqUyl8oElkfP3+uPoAvIvGbzrtEMxIvDY7E7/NzY6u+cXfzTu39Pu3vPrb9+kQ7/cvTnMixNY/YbKe8GFPFlaT76MjyXmpdZS503VUrxTcujby0J+9Sx60wO1O/2/dMrRSv4XpbWsjzXunNKzVHfrkjr+v1Vrz3t2caTgCO69wb5yrVf1Y/qX5U/UX1TvX61Lcnvz75xUpM/GXiG+W50utpmvwpPooft9//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx7d1/8HdWr2+tvnkRNo/63QTSfEbUP3KlKMaQzf4k8PDw2cw5pNPeffIwjMjthzjn9cQieavV520nXdWTjqeySPKpMMfdV2J0vjjnAwX3lJENJ8pRTur2EWDflwUONOubd97/9rW/QdfXb9Xe3ft3bWNiaWl5bnlpTcXr91er6/NNR7HPUrgaWi/Hhj3SAAAAAAAAAAAAIBhDf3vBN/83X/+tXX/wasx+n8jdHQ3M8apAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfU6myUJyKJ+bmrc9n2/t5iPVua6XbJckSkaUTyo4jk44iVmIiVLGO6o7mkXz8fri/f+PTR/mfttsrN8umgesPZLZaYiYhSse5ROV57N/u1N7SkNcMsYFeKNYzdfwMAAP//buwG4w==") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r6, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1m41.39741862s ago: executing program 4 (id=21): ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendto$packet(r0, &(0x7f0000002540)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x11, 0x6, @broadcast}, 0x14) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000004c0)='./file0/file0/file0\x00', 0x1000a05, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x0, 0xc55, &(0x7f0000004100)="$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") r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000640)={0x9, {{0x2, 0x0, @multicast2}}, 0x11000000}, 0x90) chdir(&(0x7f0000000380)='./file0\x00') r3 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) fstatfs(r3, &(0x7f0000000140)=""/102) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='mm_page_alloc\x00', r3}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000d34144909e58017bc29dded23bf72397c40b27a0515b5d58f5116f182327536738a24662c0d74c27f1ad5f434298e9bf887235fab81f6083212320708c820e0129ad7b3a08d1b9709a0cba935cd9f3a01237ee9bd180da993da8b9785afa7804ca063f205aaba3cb9c7d3b9480b7cd9ee9b8d32815023465f795bbf78387886f9c9ed57eaa7b88c672509b46c705792a71b78a1bd34bd760a43a175480fe9f1d4987aa9222297ae54e9bf6dafe71240f3da1fd1cd223f9c5635577ab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000300)=@arm64={0x5, 0xe9, 0x0, '\x00', 0xf}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xf}}, {@debug}, {@jqfmt_vfsold}, {}, {@nomblk_io_submit}, {@nouid32}]}, 0x1, 0x5f5, &(0x7f0000000bc0)="$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") fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r6, &(0x7f0000000000)=ANY=[], 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) 1m39.972058777s ago: executing program 4 (id=25): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x28, r2, 0xc17, 0x0, 0x0, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0x9, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000a9f850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='netlink_extack\x00', r5}, 0xb3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getnexthop={0x18, 0x76, 0xb0d, 0x0, 0x0, {0x3, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) r7 = eventfd(0x0) r8 = eventfd(0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000240)={r7, 0x0, 0x2, r8}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x81, 0x0}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3aac1373788c1231, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="1818000006000020000000000002000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000002000000fe12ff0f080000008f600400f0ffffff4306f0fff0ffffff18180000", @ANYRES32, @ANYBLOB="00000000000000008500000051000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0x0, 0x8, 0x4}, 0x10, r9, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000002c0)=[{0x1, 0x1, 0xb, 0x7}, {0x2, 0x4, 0x2, 0x2}], 0x10, 0x1, @void, @value}, 0x90) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r11, &(0x7f0000009700)=[{{&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=[{0x10, 0x1}], 0x10}}], 0x1, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000c4000000c4000000030000000e00000000000009000000000b00000009000004010100000300000005000000010000800c00000001000000020000000500000000000000000000000200000002000000090002000d00000004000000000000000800000002000000000000000600000005000000008000000300000000000000030000000600000004000000ff0f000002000000000000010000000015002501010000000000000203000000000000000000000300000000020000000400000001000000000000000000000200000000009300"], &(0x7f0000000700)=""/4096, 0xdf, 0x1000, 0x0, 0xa73, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x20000000000000a9, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, r10, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x10) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000001c0)={r7, 0x100000, 0x2, r8}) statfs(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)=""/235) 1m39.392245111s ago: executing program 4 (id=30): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c) write$binfmt_misc(r0, &(0x7f00000000c0), 0xfff7) 1m39.209682572s ago: executing program 32 (id=30): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c) write$binfmt_misc(r0, &(0x7f00000000c0), 0xfff7) 1m37.42483495s ago: executing program 1 (id=43): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x208002, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x1, r1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)={0x35}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fd, &(0x7f0000000600)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrabZDfdttmdNPP5wGTnvZnd9747eZn3dvJ2Aiit8exHGrEj4taJJGKsZdtoNDaO5/vd/OPKyWxJolZ78/ckkjyvuX+SP27NE8MR8f3hiMcrq8tduHT59HS11vBBxN7FM+f3Lly6vGf+zPSp2VOzZ6f2vbT/wOTLU/un1iXOrfnjkaNvPP3ph+++OPdDdU8SB+P44PszsSKO9TIe43ErD7E1fyAiDmQrbd6Xh80mCKHUKvnv42BEPBljUamnGsZi/pNCKwf0VK0SUQNKKtH+oaSa/YDm2L67cfDxHvdK+ufGocYAaHX8A43PRmK4PjbacjNpGRk1PtvYtg7lZ2X8d2Xnl9kSyz6H+Pv20RlYh3I6WboaEU+1iz+p121bPdIs/nTZWD+JiMmIGMrr99oD1CFpWe/F5zBruZf4W49DGhEH88cs//B9lj++It3v+AEop+uH8hP5Upa6c/7L+h7N/k+06f+Mtjl33Y+iz3+d+3/N8/1wvd+TruiHZX2WY+1fcnBlxi8fH/m8U/mt/b9sycpv9gX74cbViJ0r4v8oCzbv/2TxJ22Of7bLiYPdlfH6j78d6bSt6Phr1yJ2tR3/3OmVZmtrXJ/cOzdfnZ1s/GxbxrffvfN1p/KLjj87/ls6xN9y/NOVz8vek/NdlvHNsWtnOm0bvWv86a9DSWO8OZTnvDe9uHhhKmIoOZrv0pK/b+26NPdpvkYW/+7n2rf/Zb//V5e/zkjzT2YXzr91+manbfdz/FsuJt+qdVmHTrL4Z+5+/Fe1/yzvsy7L+Ovti8902rZW/CMPEhgAAAAAAACUUFq/BpukE7fX03RiojFf9onYklbPLSw+P3fu4tmZiN31/4ccTJtXusca6SRLT+X/D9tM71uRfiEitkfEF5WRenri5LnqTNHBAwAAAAAAAAAAAAAAAAAAwAaxNZ//37xP9Z+Vxvx/oCR6eYM5YGPT/qG86u1/1S2egDJw/ofy0v6hvLR/KC/tH8pL+4fy0v6hvLR/KC/tHwAAAAA2pe3PXv85iYilV0bqS2Yo32ZGEGxug0VXAChMpegKAIW5felfZx9Kp6v+/z/5lwP2vjpAAZJ2mfXOQW3txn+97TMBAAAAAAAAAAAAgB7YtaPz/H9zg2FzM+0PyusB5v/76gB4yPnqfygvY3zgbrP4hzttMP8fAAAAAAAAAAAAAPpmtL4k6UQ+F3g00nRiIuLRiNgWg8ncfHV2MiIei4ifKoOPZOmpoisNAAAAAAAAAAAAAAAAAAAAm8zCpcunp6vV2QutK/+uytncK827oPahrFfjHp8VSf/flpGIKPyg9GxloCUniVjKjvyGqNiFhdgY1aivFPyHCQAAAAAAAAAAAAAAAAAASqhl7nF7O7/qc40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoP/u3P+/dytFxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJz+DwAA///LLUAr") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 1m34.758458905s ago: executing program 1 (id=50): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='|', 0x1, 0x400fc3b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) 1m32.737458385s ago: executing program 1 (id=54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101582, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x5000, 0xdddd1000}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mlockall(0x1) 1m29.986381819s ago: executing program 1 (id=61): syz_mount_image$ocfs2(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x8008c4, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRES32], 0x1, 0x4436, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) mount_setattr(0xffffffffffffff9c, 0x0, 0x8800, &(0x7f0000000300)={0x0, 0x0, 0x140000}, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000072003303000000000000000007"], 0x20}}, 0xc8) r2 = syz_clone(0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000140)='mountstats\x00') socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x2000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f00000000c0)={0x4, 0x4, 0x2, 0x0, '\x00', '\x00', '\x00', 0x6, 0x7, 0x1a8c, 0x9, "b3b1efa80cc7a797e775a2fe73d4ee2b"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1m26.541998427s ago: executing program 1 (id=69): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) futex(0x0, 0x6, 0x2, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x20) 1m24.268174408s ago: executing program 1 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 1m23.91822281s ago: executing program 33 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 2.948264557s ago: executing program 3 (id=1020): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000)={[{@norecovery}, {@grpquota}, {@nombcache}, {@user_xattr}, {@nomblk_io_submit}]}, 0x1, 0xbbc, &(0x7f00000017c0)="$eJzs3N9rW2UYAOD3nKZZu3WmExHnjRWRDcSsnXS4IbjJxBsvBL0VVrp0lGY/aCuzXS9S/QdEvRa8EdSheOGud6PorTc6bxUvhCF1VRDRykmTtq5N17lkp3bPA1/O950vyfu+OSTnfJAkgHvWQHaTRuyPiFNJRKmxP42IYr3XE1Fbvt/iwtzo7wtzo0ksLb38SxJJRNxYmBttPlfS2O5pDHoi4pvnkrj/zfVxp2ZmJ0aq1cpkY3xo+uyFQ1Mzs0+Onx05UzlTOTd05Onhw8NHBo8Ot63WP344fuW3R1/4qfbnR39d/vWdD5I4Hn2NubV1tMtADKy8JmsVImKk3cFy0tWoZ22dSeEWD0o7nBQAAC2la67hHoxSdMXqxVspvvg21+QAAACAtljqilgCAAAAdrjE+h8AAAB2uOb3AG4szI02W77fSLi7rp+IiP7l+hcbbXmmELX6tie6I2L3jSTW/qw1WX7YHRuIiB+/P/pp1qJDv0PeTG0+Ih7a6Pgn9fr767/iXl9/GhGDbYg/cNP4/1T/8TbEz7t+AO5NV08sn8jWn//Sleuf2OD8V9jg3PVf5H3+a17/La67/lutv6vF9d9LW4xx6cP3Lraay+p/5srznzRbFj/b3lFRt+H6fMTDhY3qT1bqT1rUf2qLMUp/X6y0msu7/qX3Iw7ExvU3JZv/P9GhsfFqZXD5dsMY818Pf9wqft71Z8d/d4v6m///1Or4X9hijFdPnvys1dzA3sZCtGX96c/F5JV6r9jY8/rI9PTkUEQxeXH9/sOb59K8T/M5svoPPrb5+3+j+rPPhFrjdcjWAvONbTZ+46aYz16+9HmLdOr/hJSt/fI8/qdbHP+19X9VWH/839pijMe/fPtgq7m169+sZfGba2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaEojoi+StLzST9NyOWJPRDwQu9Pq+anpJ8bOv3budDYX0R/d6dh4tTIYEaXlcZKNh+r91fHhm8ZPRcS+iHi31Fsfl0fPV0/nXTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAr9kREXyRpOSLSiFgspWm5nHdWAAAAQNv1550AAAAA0HHW/wAAALDzWf8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQYfseuXotiYjasd56yxQbc925ZgZ0Wpp3AkBuuvJOAMhNIe8EgNzc5hrf5QLsQMkt5ntazuxqey4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbF8H9l+9lkRE7VhvvWWKjbnuXDMDOi3NOwEgN12bTRbuXh7A3ectDvcua3wgucV8z+p9av+e2dWxnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrqLUnLEVFs7CuXI/ZGRH90J2Pj1cpgRNwXEd+Vundl46GccwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKD9pmZmJ0aq1cpk1kmj0VnZo7MtOpFEbIM0dlinGDlG743t8SK07OT9yQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB6mZmYnRqrVyuRU3pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeZuamZ0YqVYrkx3s5F0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5+ScAAP//u5IOww==") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x4, @auto="0da5466d630a1d6d"}) 2.343744492s ago: executing program 3 (id=1032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002340)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x23}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c041}, 0x4000044) 2.087121994s ago: executing program 5 (id=1034): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) creat(0x0, 0xecf86c37d53049cc) 1.999201525s ago: executing program 0 (id=1036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000000101044694087d6155c23e02000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x48}}, 0x0) 1.975833725s ago: executing program 3 (id=1038): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fallocate(r0, 0x10, 0x7fff, 0x5) 1.941043175s ago: executing program 5 (id=1039): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x8) 1.919067276s ago: executing program 0 (id=1040): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x150c, &(0x7f0000002d40)="$eJzs3Am4jlX3MPC19t43x8nwJJnvtdfNkwybJAklyZAkSUjmhCRJkiRxyJSEJGQ8ScYTkimddMzzkDnp5JUkSUhIsr/rNHz+vcPX+75//8/7fWf9ruu+7OW+177XPut6zj1c13m+6T6iZpNa1RoyM/w79O8D/PWfJABIAIDBAJALAAIAKJ+7fO6M/dk0Jv1bJxH/QxrNutIViCtJ+p+5Sf8zN+l/5ib9z9yk/5mb9D9zk/5nbtJ/ITK1lAJXy5Z5N3n///849d9Jlut/poD/aIf0//83+l86WvqfuUn/Mzfpf+Ym/c/MgitdgLjC5POfuUn/hcjULvs75Q3nrvQ7bdn+hU0IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhPi/4Jy/xADA7+MrXZcQQgghhBBCCCEuH//ula5ACCGEEEIIIYQQ//MQFGgwEEAWyAoJkA0S4SrIDjkgJ+SCGFwNueEayAPXQl7IB/mhABSEQlAYQiCwwBBBESgKcbgOisH1UBxKQEkoBQ5KQxm4AcrCjVAOboLycDNUgFugIlT65ZwZboeqcAdUgzuhOtSAmlAL7oLacDfUgXugLtwL9eA+qA/3QwN4ABpCI2gMD0ITeAiaQjNoDi2gJbSC1n+Sn5zr7+U/D73gBegNfSAJ+kI/eBH6wwAYCINgMLwEQ+BlGAqvwDAYDiPgVRgJr8EoeB1GwxgYC2/AOBgPE2AiTILJkAxvwhR4C6bC2w/lgOkwA2bCLJgNKfAOzIG5MA/ehfnwHiyA5GyLYDEsgfdhKXwAqfAhLIOPIA2WwwpYCatgNayBtbAO1sMG2AibYDNsga2wDT6G7bADdsIu2A17YC98AvvgU9gPn0E6fv4v5p/9Yz70QEBAhQoNGsyCWTABEzAREzE7ZsecmBNjGMPcmBvzYB7Mi3kxP+bHJCyIhbEwEhIyMhbBIhjHOBbDYlgci2NJLIkOHZbBMlgWb8RyWA7LY3msgBWwIlbCSngr3opVsApWxapYDathdayONbEm3oV34d1YB+tgXayL9bAe1sf62AAbYENsiI2xMTbBJtgUm2JzbI4tsSW2xtbYBttgW2yL7bE9dsAO2BE7YifshJ2xM3bBLtgVu2I37IbdsTv2wOfwOXwen8cX8AXsg9VVX+yH/bA/9seBOAgH4Us4BF/Gl/EVHIbDcQS+iq/iazgKz+BoHINjcSxWUeNxAk5EVpMxGZMxK0zBqTgVp+F0nI4zcRbOxhRMwTk4F+fiuzgf38P3cCEuxMW4BJfgUvwAUzEVl+FZTMPluAJX4ipcjatwLa7DtbgBN+IG3IybcStuxY/xY9yBO3AX7sI9uAc/wU/wU/wUh2E6puMBPIAH8SAewkN4GA/jETyCR/EoHsNjeByP4wk8iafwJJ7G03gGz+I5ADiP5/ECXsCLeDHjw68yGGVUFpVFJagElagSVXaVXeVUOVVMxVRulVvlUXlUXpVX5Vf5VUFVUBVWhRUpUqwiVUQVUXEVV8VUMVVcFVclVUnllFNlVBlVVpVV5VQ5VV7drCqoW1RFVUm1c7eqW1UV1d5VVXeoaqqaqq5qqJqqlqqlaqvaqo6qo+qquqqeqqfqq/tVA9UXB2IjldGZJmo4NlUjsLlqoVqqVuo1fFi1UaOwrWqn2qtH1RgcjR1VG9dJPaE6qwnYRT2lJuLTqpuajN3Vs6qHek71VM+rXqqt6636qGlZ+6p+aib2VwPUQDVIzcEaKqNjNdUr6vmsw9UI9apajK+pUep1NVqNUWPVG2qcGq8mqIlqkpqsktWbaop6S01Vb6tparqaoWaqWWq2SlHvqDlqrpqn3lXz1XtqgVqoFqnFaol6Xy1VH6hU9aFapj5SaWq5WqFWqlVqtVqj1qp1ar3aoDaqTWqz2qK2qm3qY7Vd7VA71S61W+1Re9Unap/6VO1Xn6l09bk6oP6iDqov1CH1pTqsvlJH1NfqqPpGHVPfquPqO3VCnVSn1PfqtPpBnVFn1Tn1ozqvflIX1M/qovIKNGqltTY60Fl0Vp2gs+lEfZXOrnPonDqXjumrdW59jc6jr9V5dT6d3xTQBXUhXViHmrTVrCNdRBfVcX2dLqav18V1CV1Sl9JOl9Zl9A26rL5Rl9M36fL6Zl1B36Ir6kq6sgd9m66ib9dV9R26mr5TV9c1dE1dS9+la+u7dR19j66r79X19H26vr5fN9AP6Ia6kW6sH9RN9EO6qW6mm+sWuqVupVvrh3Ub/Yhuq9vp9vpR3UE/pjvqx3Un/YTurJ/UXfRTuqt+WnfTz+ju+lndQz+ne+qf9UXtdW/dRyfpvrqfflH31wP0QD1ID9Yv6SH6ZT1Uv6KH6eF6hH5Vj9Sv6VH6dT1aj9Fj9Rt6nB6vJ+iJepKerJP1m3qKfktP1W/raXq6nqFn6ll6th7420zz/on8t/5O/tBfzr5Vb9Mf6+16h96pd+ndeo/eq/fqfXqf3q/363Sdrg/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6JP6R/29Pq1/0Gf0WX1W/6jP6/P6wm8/AzBolNHGmMBkMVlNgslmEs1VJrvJYXKaXCZmrja5zTUmj7nW5DX5TH5TwBQ0hUxhExoy1rCJTBFT1MTNdaaYud4UNyVMSVPKOFPalDE3/Lfz/6y+1qa1aWPamLamrWlv2psOpoPpaDqaTqaT6Ww6my6mi+lquppuppvpbrqbHqaH6Wl6ml6ml+ltepskk2T6mRdNfzPADDSDzGDzkhlihpihZqgZZoaZEWaEGWlGmlFmlBltRpuxZqwZZ8aZCWaCmWQmmWSfy0wxU8xUM9VMM9PMjMG5zCwzy6SYFDPHzDHzzDwz38w3C8wCs8gsMkvMErPULDWpJtUsM8tMmllulpuVZqVZbVabtWatWW/Wm41mo9lsNps0s81sM9vNdrPT7DS7zW6z1+w1+8w+s9/sN+km3RwwB8xBc9AcMofMYXPYHDFHzFFz1Bwzx8xxc9ycMCfMKXPKnDanzRlzxpwz58x5c95cMBfMRXMx47YvUIEKTGCCLEGWICFICBKDxCB7kD3IGeQMYkEsyB3kDvIE1wZ5g3xB/qBAUDAoFBQOwoACG3AQBUWCokE8uC4oFlwfFA9KBCWDUoELSgdlghuCssGNQbngpqB8cHNQIbglqBhUCioHtwa3BVWC24OqwR1BteDOoHpQI6gZ1AruCmoHdwd1gnuCusG9Qb3gvqB+cH/QIHggaBg0ChoHDwZNgoeCpkGzoHnQImgZtApaX9b5vT+T7xHXO+wTJoV9w37hi2H/cEA4MBwUDg5fCoeEL4dDw1fCYeHwcET4ajgyfC0cFb4ejg7HhGPDN8Jx4fhwQjgxnBRODpPDN8Mp4Vvh1PDtcFo4PZwRzAxnhbPDlPCdcE44N5wXvhvOD98LF4QLw0Xh4hB/vSWG1PDDcFn4UZgWLg9XhCvDVeHqcE24NlwXrg83hBvDTeHm8kN+PTTcHu4Id4a7wt3hnnBv+Em4L/w03B9+FqaHn4cHwr+EB8MvwkPhl+Hh8KvwSPh1eDT8JjwWfhseD78LT4Qnw1Ph9+Hp8IfwTHg2PBf+GJ4PfwovhD+HF0OfcXOfcXknQ4ayUBZKoARKpETKTtkpJ+WkGMUoN+WmPJSH8lJeyk/5qSAVpMJUmDIwMRWhIhSnOBWjYlScilNJKkmOHJWhMlSWylI5KkflqTxVoApUkSpSZapMt9FtdDvdTnfQHXQn3Uk1qAbVolpUm2pTHapDdaku1aN6VJ/qUwNqQA2pITWmxtSEmlBTakrNqTm1pJbUmlpTG2pDbakttaf21IE6UEfqSJ2oE3WmztSFulBX6krdqBt1p+7Ug3pQT+pJvagX9abelERJ1I/6UX/qTwNpIA2mwTSEhtBQGkrDaBiNoBE0kkbSKBpFo2kMjaU3aByNpwk0kSbRZEqmZJpCU2gqTaVpNI1m0AyaRbMohVJoDs2heTSP5tN8WkALaBEtoiW0hJbSUkqlVFpGyyiN0mgFraBVtIrW0BpaR+toA22gTbSJttAW2kbbaDttp520k3bTbtpLe2kf7aP9tJ/SKZ0O0AFEOkiH6BAdpsN0hI7QUTpKx+gYHafjdIJO0Ck6RafpNJ2hM3SOztF5+oku0M90kTwl2Gw20V5ls9scNqfNZf86zm8L2IK2kC1sQ5vX5vtDTNba4raELWlLWWdL2zL2hr+JK9pKtrK91d5mq9jbbVVb0WaD/xrXtnfbOvYeW9fea2vZu/4Q17P32fr2IdvANrMNbQvb2LayTexDtqltZpvbFralbWU72MdsR/u47WSfsJ3tk38TL7Uf2HV2vd1gN9p99lN7zv5oj9pv7Hn7k+1t+9jB9iU7xL5sh9pX7DA7/I8xgB1r37Dj7Hg7wU60k+zkv4ln2Jl2lp1tU+w7do6d+zfxEvu+nW9T7QK70C6yi3+JM2pKtR/aZfYjm2aX2xV2pV1lV9s1du3/rnWl3Wy32K12r/3Ebrc77E67y+62e36JM9ax335m0+3n9oj92h60X9hD9pg9bL/6Jc5Y3zH7rT1uv7Mn7El7yn5vT9sf7Bl79pf1Z6z9e/uzvWi9BUZWrNlwwFk4KydwNk7kqzg75+CcnItjfDXn5ms4D1/LeTkf5+cCXJALcWEOmdgyc8RFuCjH+TouxtdzcS7BJbkUOy7NZfgGLss3cjm+icvzzVyBb+GKXIkr8618G1fh27kq38HV+E6uzjW4Jtfiu7g23811+B6uy/dyPb6P6/P93IAf4IbciBvzg9yEH+Km3Iybcwtuya24NT/MbfgRbsvtuD0/yh34Me7Ij3MnfoI785PchZ/irvw0d+NnuDs/yz34Oe7Jz3MvfoF7cx9O4r7cj1/k/jyAB/IgHswv8RB+mYfyKzyMh/MIfpVH8ms8il/n0TyGx/IbPI7H8wSeyJN4Mifzm+2m8Fs8ld/maTydZ/BMnsWzOYXf4Tk8l+fxuzyf3+MFvJAX8WJewu/z0oueU/lDXsYfcRov5xW8klfxal7Da3kdr+cNvJE38Wbewlt5G3/M23kH7+RdvJv38F7+hPfxp7yfP+N0/pwP8F/4IH/Bh/hLPsxf8RH+mo/yN3yMv+Xj/B2f4JN8ir/n0/wDn+GzfI5/5PP8E1/gn/kie4YIIxXpyERBlCXKGiVE2aLE6Kooe5QjyhnlimLR1VHu6JooT3RtlDfKF+WPCkQFo0JR4SiMKLIRR1FUJCoaxaPromLR9VHxqERUMioVuah0VCa6ISob3RiVi26Kykc3RxWiW6KKUaWocnRrdFtUJbo9qhrdEVWL7oyqRzWimlGt6K6odnR3VCe6J6ob3RuVi+6L6kf3Rw2iB6KGUaOocfRg1CR6KGoaNYuaRy2illGrqHX0cNQmeiRqG7WL2kePRh2ix6KO0eNRp+iJqHP05KX9JYJfr6Z/tT8p6hvp396Q3aMXxRfHl8Tfjy+NfxBPjX8YXxb/KJ4WXx5fEV8ZXxVfHV8TXxtfF18f3xDfGN8U3xzfEt8a975WVnCY8SAMxgUui8vqElw2l+iuctldDpfT5XIxd7XL7a5xedy1Lq/L5/K7Aq6gK+QKu9CRs45d5Iq4oi7urnPF3PWuuCvhSrpSzrnSroxr5Vq71q6Ne8S1de1ce/eoe9Q95h5zjyf8Vrjr4p5yXd3Trpt7xj3jnnU93HOup3ve9XIvuN6uj0tySa6f6+f6u/5uoBvoBrvBbogb4oa6oW6YG+ZGuBFupBvpRrlRbrQb7ca6sW6cG+cmuAlukpvkkl2ym+KmuKluqpvmprkZboab5Wa5FJfi5rg5bp6b5+a7+W6BW+AWuUVuiVvilrqlLtWlumVumUtzaW6FW+FWuVVujVvj1rl1boPb4Da5TW6L2+K2uW1uu9vudrqdbrfb7fa6vW6f2+f2u/0u3aW7A+6AO+gOukPuS3fYfeWOuK/dUfeNO+a+dcfdd+6EO+lOOa9Pux/cGXfWnXM/uvPuJ3fB/ewuOu+SY2/GpsTeik2NvR2bFpsemxGbGZsVmx1Lib0TmxObG5sXezc2PxfEFsQWxhYFEFsSez+2NPZBLDX2YWxZ7KNYWmx5bEVsZWxVbHXM+0LbI1/EF/Vxf50v5q/3xX0JX9KX8s6X9mX8Db6sv9GX8zf58v5mX8Hf4iv6Sr6yb+ab+xa+pW/lW/uHfRv/iG/r2/n2/lHfwT/mO/rHfSf/hO/sn/Rd/FO+q3/ad/PP+O7+2fd+67Lv5V/wvX0fn+T7+n7+Rd/fD/AD/SA/2L/kh/iX/VD/ih/mh/sR/lU/0r/mR/nX/Wg/xo/1b/hxfryf4Cf6SX6yT/Zv+in+LT/Vv+2n+el+hp/pZ/nZPsW/4+f4uX6ef9fP9+/5BX6hX+QX+yX+fb/Uf+BT/Yd+mf/Ip/nlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/12v8Pv9Lv8br/H7/Wf+H3+U7/ff+bT/ef+gP+LP+i/8If8l/6w/8of8V/7o/4bf8x/64/77/wJf9Kf8t/70/4Hf8af9ef8j/68/8lf8D/7i/I3a0IIIYQQ/xT9J/v7/p3/U79tGfoBQI4dBQ7/9Zyb8v46HqD2dY4BwBN9ujf6fWvUKCkp6bdj09pAUHQhAMQu5f/y/QO/xcuhPTwGnaAdlP279Q1QlX+57/uH82sI4jcDJAJk+z0n4/EoEf56/hv/wfzN3uc/m38hQPGil3IyTvR7fGn+cv9g/j0d/mT+bF8kA7T9LznZ4VJ8af4y8Ag8CZ3+cKQQQgghhBBCCPGrAep8jz97vs14Pi9oLuVkhUvxnz2f/4mql2MNQgghhBBCCCGE+D97+rmejz/cqVO7rpdl0BYALuuEl2eQ9T+jjP+AAQLAf0AZMvjPH1zp30xCCCGEEEKIy+3STf+VrkQIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhMi8/v1vCFP/9MFXeo1CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfa/AgAA///mhlPZ") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 1.842324076s ago: executing program 3 (id=1042): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000)={[{@norecovery}, {@grpquota}, {@nombcache}, {@user_xattr}, {@nomblk_io_submit}]}, 0x1, 0xbbc, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x4, @auto="0da5466d630a1d6d"}) 1.775938147s ago: executing program 5 (id=1044): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0}]) 1.580559618s ago: executing program 0 (id=1046): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000820000001800000000000000000000000000000095000000000000008a138db907014317bdc86399003ef279bcf4438908fb119c3434377c5416c3cb37b84568575efdf19a281703ec0ebd66879d0d95516f52a13ea385c52fad4aff77dd304e6a8961cc72e8fb09"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) sendmsg(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 1.488687579s ago: executing program 5 (id=1048): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.35470687s ago: executing program 6 (id=1050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000000101044694087d6155c23e02000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x48}}, 0x0) 1.34340616s ago: executing program 3 (id=1051): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) epoll_create1(0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x10000000000}, 0x0, &(0x7f0000002840)={0xff, 0xffff, 0x0, 0x0, 0xfffffffffffffffd, 0x4c, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) 1.280445751s ago: executing program 2 (id=1052): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000440)="c4", 0x1}], 0x1) 1.128256442s ago: executing program 2 (id=1053): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.121404492s ago: executing program 6 (id=1054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x1000000, 0xffffffffffffffff, 0x1}) 1.035453953s ago: executing program 2 (id=1055): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 988.034553ms ago: executing program 5 (id=1056): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x150c, &(0x7f0000002d40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 919.179593ms ago: executing program 6 (id=1057): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000081a000085000000160000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 919.072133ms ago: executing program 2 (id=1058): creat(&(0x7f0000000080)='./file0\x00', 0x2a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) 867.404764ms ago: executing program 6 (id=1059): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'syz2', 0x3a, 'Y$*@', 0x3a, './file0', 0x3a, [0x46]}, 0x30) 768.569965ms ago: executing program 6 (id=1060): pipe(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 740.304355ms ago: executing program 5 (id=1061): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000)={[{@norecovery}, {@grpquota}, {@nombcache}, {@user_xattr}, {@nomblk_io_submit}]}, 0x1, 0xbbc, &(0x7f00000017c0)="$eJzs3N9rW2UYAOD3nKZZu3WmExHnjRWRDcSsnXS4IbjJxBsvBL0VVrp0lGY/aCuzXS9S/QdEvRa8EdSheOGud6PorTc6bxUvhCF1VRDRykmTtq5N17lkp3bPA1/O950vyfu+OSTnfJAkgHvWQHaTRuyPiFNJRKmxP42IYr3XE1Fbvt/iwtzo7wtzo0ksLb38SxJJRNxYmBttPlfS2O5pDHoi4pvnkrj/zfVxp2ZmJ0aq1cpkY3xo+uyFQ1Mzs0+Onx05UzlTOTd05Onhw8NHBo8Ot63WP344fuW3R1/4qfbnR39d/vWdD5I4Hn2NubV1tMtADKy8JmsVImKk3cFy0tWoZ22dSeEWD0o7nBQAAC2la67hHoxSdMXqxVspvvg21+QAAACAtljqilgCAAAAdrjE+h8AAAB2uOb3AG4szI02W77fSLi7rp+IiP7l+hcbbXmmELX6tie6I2L3jSTW/qw1WX7YHRuIiB+/P/pp1qJDv0PeTG0+Ih7a6Pgn9fr767/iXl9/GhGDbYg/cNP4/1T/8TbEz7t+AO5NV08sn8jWn//Sleuf2OD8V9jg3PVf5H3+a17/La67/lutv6vF9d9LW4xx6cP3Lraay+p/5srznzRbFj/b3lFRt+H6fMTDhY3qT1bqT1rUf2qLMUp/X6y0msu7/qX3Iw7ExvU3JZv/P9GhsfFqZXD5dsMY818Pf9wqft71Z8d/d4v6m///1Or4X9hijFdPnvys1dzA3sZCtGX96c/F5JV6r9jY8/rI9PTkUEQxeXH9/sOb59K8T/M5svoPPrb5+3+j+rPPhFrjdcjWAvONbTZ+46aYz16+9HmLdOr/hJSt/fI8/qdbHP+19X9VWH/839pijMe/fPtgq7m169+sZfGba2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaEojoi+StLzST9NyOWJPRDwQu9Pq+anpJ8bOv3budDYX0R/d6dh4tTIYEaXlcZKNh+r91fHhm8ZPRcS+iHi31Fsfl0fPV0/nXTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAr9kREXyRpOSLSiFgspWm5nHdWAAAAQNv1550AAAAA0HHW/wAAALDzWf8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQYfseuXotiYjasd56yxQbc925ZgZ0Wpp3AkBuuvJOAMhNIe8EgNzc5hrf5QLsQMkt5ntazuxqey4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbF8H9l+9lkRE7VhvvWWKjbnuXDMDOi3NOwEgN12bTRbuXh7A3ectDvcua3wgucV8z+p9av+e2dWxnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrqLUnLEVFs7CuXI/ZGRH90J2Pj1cpgRNwXEd+Vundl46GccwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKD9pmZmJ0aq1cpk1kmj0VnZo7MtOpFEbIM0dlinGDlG743t8SK07OT9yQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB6mZmYnRqrVyuRU3pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeZuamZ0YqVYrkx3s5F0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5+ScAAP//u5IOww==") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x4, @auto="0da5466d630a1d6d"}) 660.203386ms ago: executing program 6 (id=1062): r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffed9) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000600)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xcc, &(0x7f0000000500)=""/204, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xa1a) fcntl$lock(r0, 0x26, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2}) r4 = socket$inet6(0xa, 0x0, 0xffff7ffd) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000c000000000000000000000005000600000000000a00"/47], 0x60}}, 0x0) unshare(0x8000400) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000280), 0x6e) 512.253397ms ago: executing program 0 (id=1063): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x74, r1, 0x0, 0x1223}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4b0c}]}, 0x28}}, 0x4000020) 334.961958ms ago: executing program 2 (id=1064): r0 = socket(0x40000000002, 0x3, 0x2) recvmmsg(r0, 0x0, 0x0, 0x12002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x406080, 0x0) mkdir(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x15}, @fda={0x66646185, 0x7, 0x1, 0x4000003a}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000000101044694087d6155c23e02000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x48}}, 0x0) 260.278979ms ago: executing program 3 (id=1065): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800007702"]) 95.09778ms ago: executing program 2 (id=1066): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x2) 43.27867ms ago: executing program 0 (id=1067): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x40}}, 0x0) 0s ago: executing program 0 (id=1068): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r0, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0xfd}, 0x2e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1}, 0xe) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x829a, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, 0x0, 0xb) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x2) write$binfmt_misc(r7, &(0x7f0000000240), 0xfdef) splice(r4, 0x0, r7, 0x0, 0x80, 0x2) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000004) kernel console output (not intermixed with test programs): T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.203404][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.246233][ T4369] device bridge_slave_0 entered promiscuous mode [ 78.311672][ T4368] loop0: detected capacity change from 0 to 32768 [ 78.341218][ T4402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42'. [ 78.354976][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.526772][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.614187][ T4368] JBD2: Ignoring recovery information on journal [ 78.696099][ T4369] device bridge_slave_1 entered promiscuous mode [ 79.319477][ T4413] loop3: detected capacity change from 0 to 512 [ 79.324966][ T4219] Bluetooth: hci4: command 0x0409 tx timeout [ 79.347480][ T4368] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 79.391215][ T4369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.409253][ T4413] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 79.474917][ T4413] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.537365][ T4369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.588332][ T4415] loop1: detected capacity change from 0 to 1024 [ 79.616076][ T4419] 9pnet: Insufficient options for proto=fd [ 79.631843][ T4423] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 79.677388][ T4420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 79.696418][ T4423] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 79.714108][ T4415] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.43: Invalid block bitmap block 0 in block_group 0 [ 79.725621][ T4423] OCFS2: File system is now read-only. [ 79.788212][ T4423] (syz.0.37,4423,0):ocfs2_find_entry_id:407 ERROR: status = -30 [ 79.835426][ T4415] Quota error (device loop1): write_blk: dquota write failed [ 79.844498][ T4415] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 79.858527][ T4415] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.43: Failed to acquire dquot type 0 [ 79.870420][ T4368] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 79.888606][ T4415] EXT4-fs error (device loop1): ext4_free_blocks:6223: comm syz.1.43: Freeing blocks not in datazone - block = 0, count = 4096 [ 79.903346][ T4368] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 79.915349][ T4368] (syz.0.37,4368,0):ocfs2_find_entry_id:407 ERROR: status = -30 [ 79.942763][ T4415] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.43: Invalid inode bitmap blk 0 in block_group 0 [ 79.965604][ T4369] team0: Port device team_slave_0 added [ 79.983708][ T154] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 79.993548][ T4415] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 79.999291][ T4369] team0: Port device team_slave_1 added [ 80.010466][ T154] EXT4-fs error (device loop1): ext4_release_dquot:6220: comm kworker/u4:2: Failed to release dquot type 0 [ 80.031191][ T4415] EXT4-fs (loop1): 1 orphan inode deleted [ 80.064635][ T4415] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 80.069204][ T4165] ocfs2: Unmounting device (7,0) on (node local) [ 80.114739][ T4369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.121744][ T4369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.244735][ T4369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.401497][ T4439] loop3: detected capacity change from 0 to 16 [ 80.555827][ T4439] erofs: (device loop3): mounted with root inode @ nid 36. [ 80.621015][ T4439] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 80.644743][ T4439] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -35 in[64, 4032] out[1851] [ 80.659025][ T4439] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 80.825219][ T4442] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.43: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 80.921707][ T4430] loop2: detected capacity change from 0 to 4096 [ 81.000211][ T4415] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.43: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 81.059890][ T4430] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 81.205987][ T4369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.213161][ T4369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.319713][ T4369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.376500][ T4430] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 81.411297][ T4453] ubi0: attaching mtd0 [ 81.413085][ T4453] ubi0: scanning is finished [ 81.451352][ T4430] ntfs3: loop2: Failed to load $Extend. [ 81.674196][ T1106] Bluetooth: hci4: command 0x041b tx timeout [ 81.837113][ T1109] cfg80211: failed to load regulatory.db [ 81.850928][ T4453] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 82.166050][ T4462] loop3: detected capacity change from 0 to 2048 [ 82.246596][ T4369] device hsr_slave_0 entered promiscuous mode [ 82.339941][ T4462] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.425024][ T4468] program syz.0.52 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.434439][ T4468] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 83.314863][ T4369] device hsr_slave_1 entered promiscuous mode [ 83.355833][ T4369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.363440][ T4369] Cannot create hsr debugfs directory [ 83.518624][ T9] device hsr_slave_0 left promiscuous mode [ 83.642534][ T9] device hsr_slave_1 left promiscuous mode [ 83.690970][ T4478] loop0: detected capacity change from 0 to 512 [ 83.716838][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.764763][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.790000][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.818746][ T4218] Bluetooth: hci4: command 0x040f tx timeout [ 83.824708][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.847304][ T9] device bridge_slave_1 left promiscuous mode [ 83.850200][ T4478] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 83.874961][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.884726][ T4478] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.951667][ T9] device bridge_slave_0 left promiscuous mode [ 84.000852][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.124467][ T9] device veth1_macvtap left promiscuous mode [ 84.163893][ T9] device veth0_macvtap left promiscuous mode [ 84.179335][ T9] device veth1_vlan left promiscuous mode [ 84.213614][ T9] device veth0_vlan left promiscuous mode [ 84.314937][ T4242] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.399039][ T4483] loop0: detected capacity change from 0 to 128 [ 84.575167][ T4242] usb 3-1: Using ep0 maxpacket: 8 [ 84.985162][ T4489] loop3: detected capacity change from 0 to 16 [ 84.994966][ T4242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 85.626032][ T4489] erofs: (device loop3): mounted with root inode @ nid 36. [ 85.734925][ T4242] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 85.753417][ T4242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.823483][ T4242] usb 3-1: Product: syz [ 85.842133][ T4242] usb 3-1: Manufacturer: syz [ 85.869377][ T4242] usb 3-1: SerialNumber: syz [ 85.884870][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 85.914063][ T4242] usb 3-1: config 0 descriptor?? [ 85.959240][ T4242] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0204 [ 86.253319][ T9] team0 (unregistering): Port device team_slave_1 removed [ 86.269435][ T4495] loop0: detected capacity change from 0 to 4096 [ 86.294695][ T4242] usb 3-1: USB disconnect, device number 2 [ 86.297444][ T9] team0 (unregistering): Port device team_slave_0 removed [ 86.344136][ T4495] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 86.353659][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.438925][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.450748][ T4495] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 86.465015][ T4495] ntfs3: loop0: Failed to load $Extend. [ 86.675236][ T9] bond0 (unregistering): Released all slaves [ 86.762844][ T4498] loop1: detected capacity change from 0 to 32768 [ 87.032293][ T4498] JBD2: Ignoring recovery information on journal [ 87.303613][ T4505] loop3: detected capacity change from 0 to 2048 [ 87.324773][ T4498] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 87.464420][ T4369] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.533008][ T4369] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.733009][ T4505] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.980252][ T4505] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.282179][ T4369] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.292443][ T4520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 88.302835][ T4369] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 88.438498][ T4369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.498298][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.521400][ T4498] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (288, expected 74) [ 88.544045][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.560892][ T4498] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 88.606523][ T4369] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.657499][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.744724][ T4498] OCFS2: File system is now read-only. [ 88.750241][ T4498] (syz.1.61,4498,1):ocfs2_search_one_group:1684 ERROR: status = -30 [ 88.789129][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.835517][ T4410] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.842730][ T4410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.856310][ T4242] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 88.858909][ T4498] (syz.1.61,4498,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 88.876361][ T4498] (syz.1.61,4498,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 88.895150][ T4498] (syz.1.61,4498,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 88.906374][ T4498] (syz.1.61,4498,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 88.907485][ T4524] loop0: detected capacity change from 0 to 4096 [ 88.915136][ T4498] (syz.1.61,4498,0):ocfs2_mknod_locked:637 ERROR: status = -30 [ 88.929138][ T4498] (syz.1.61,4498,0):ocfs2_mknod:383 ERROR: status = -30 [ 89.140005][ T4498] (syz.1.61,4498,1):ocfs2_mknod:500 ERROR: status = -30 [ 89.153861][ T4524] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 89.253462][ T4498] (syz.1.61,4498,1):ocfs2_create:674 ERROR: status = -30 [ 89.325132][ T4242] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.358562][ T4242] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.408697][ T4242] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.471500][ T4242] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.542229][ T4524] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 89.571815][ T4242] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 89.582873][ T4524] ntfs3: loop0: Failed to load $Extend. [ 89.644811][ T4242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.732977][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.759857][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.816252][ T4242] hub 3-1:1.0: bad descriptor, ignoring hub [ 89.825345][ T4242] hub: probe of 3-1:1.0 failed with error -5 [ 89.832059][ T4242] cdc_wdm 3-1:1.0: skipping garbage [ 89.845318][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.854155][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.861343][ T4410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.894777][ T4242] cdc_wdm 3-1:1.0: skipping garbage [ 89.916651][ T4242] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 89.922607][ T4242] cdc_wdm 3-1:1.0: Unknown control protocol [ 89.950827][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.005190][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.167237][ T4526] device syz_tun left promiscuous mode [ 90.202911][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.220294][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.256605][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.275711][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.295574][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.337855][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.360985][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.378149][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.393623][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.418407][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.864354][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.883933][ T4532] cdc_wdm 3-1:1.0: Error autopm - -16 [ 90.884076][ T4242] usb 3-1: USB disconnect, device number 3 [ 90.912584][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.958258][ T4369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.165478][ T4242] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.361065][ T4526] ocfs2: Unmounting device (7,1) on (node local) [ 91.414641][ T4242] usb 3-1: Using ep0 maxpacket: 8 [ 91.558172][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.585514][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.654974][ T4242] usb 3-1: unable to read config index 0 descriptor/all [ 91.662085][ T4242] usb 3-1: can't read configurations, error -71 [ 91.713098][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.731220][ T4556] loop0: detected capacity change from 0 to 32768 [ 91.742328][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.743494][ T4557] loop3: detected capacity change from 0 to 32768 [ 91.764688][ T4526] syz.1.61 (4526) used greatest stack depth: 14872 bytes left [ 91.799270][ T4369] device veth0_vlan entered promiscuous mode [ 91.826045][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.857167][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.906749][ T4369] device veth1_vlan entered promiscuous mode [ 91.924692][ T4557] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 91.932833][ T4556] JBD2: Ignoring recovery information on journal [ 91.967358][ T4557] JBD2: Ignoring recovery information on journal [ 92.058903][ T4369] device veth0_macvtap entered promiscuous mode [ 92.075875][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.091482][ T4556] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 92.100138][ T4585] kvm [4583]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa00000000 [ 92.122872][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.125676][ T4585] kvm [4583]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x250000f7ff [ 92.182099][ T4369] device veth1_macvtap entered promiscuous mode [ 92.195558][ T4557] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 92.214696][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.233799][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.243480][ T4585] kvm [4583]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x250000ffff [ 92.273613][ T4369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.344629][ T4369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.378597][ T4369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.395551][ T4585] kvm [4583]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x250000ffff [ 92.424591][ T4369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.438351][ T4585] kvm [4583]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x250000f7ff [ 92.454598][ T4369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.474594][ T4369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.490053][ T4585] kvm [4583]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x250000ffff [ 92.514596][ T4369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.527936][ T4585] kvm [4583]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x250000f7ff, nop [ 92.544594][ T4369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.580178][ T4165] ocfs2: Unmounting device (7,0) on (node local) [ 92.596351][ T4170] ocfs2: Unmounting device (7,3) on (node local) [ 92.597032][ T4369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.669821][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.696957][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.827894][ T4369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.838819][ T4369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.850053][ T4369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.860573][ T4369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.870531][ T4369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.881012][ T4369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.891030][ T4369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.901913][ T4369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.947235][ T4369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.976789][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.018981][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.038686][ T4369] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.064603][ T4369] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.100455][ T4369] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.125003][ T4369] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.302686][ T4609] device syzkaller0 entered promiscuous mode [ 93.827605][ T4602] chnl_net:caif_netlink_parms(): no params data found [ 93.827728][ T4207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.881463][ T4207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.055580][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.077555][ T1208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.111976][ T1208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.249624][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.507826][ T4602] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.531095][ T4602] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.554144][ T4602] device bridge_slave_0 entered promiscuous mode [ 94.612174][ T4602] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.664941][ T4602] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.689552][ T4602] device bridge_slave_1 entered promiscuous mode [ 94.858299][ T4209] Bluetooth: hci3: command 0x0409 tx timeout [ 94.866622][ T4602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.913557][ T4602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.043494][ T4602] team0: Port device team_slave_0 added [ 95.087761][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.157236][ T4602] team0: Port device team_slave_1 added [ 95.233927][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.386305][ T4602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.401224][ T4602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.519185][ T4602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.608313][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.727541][ T4602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.734519][ T4602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.803539][ T4602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.407477][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.578624][ T4602] device hsr_slave_0 entered promiscuous mode [ 96.652109][ T4602] device hsr_slave_1 entered promiscuous mode [ 96.687478][ T4602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.698021][ T4602] Cannot create hsr debugfs directory [ 96.957368][ T4545] Bluetooth: hci3: command 0x041b tx timeout [ 97.479444][ T4602] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 97.622674][ T4602] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 97.702303][ T4602] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 97.751863][ T4602] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 98.246917][ T4602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.320516][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.338688][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.413112][ T4602] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.467645][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.491975][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.521298][ T1208] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.528502][ T1208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.576136][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.620350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.651711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.690972][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.698147][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.731900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.752667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.874921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.907730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.951273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.977296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.997302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.009912][ T1109] Bluetooth: hci3: command 0x040f tx timeout [ 99.053938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.084485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.129361][ T4602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.171467][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.223730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.261986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.314291][ T9] device batadv_slave_0 left promiscuous mode [ 99.435178][ T9] device hsr_slave_0 left promiscuous mode [ 99.508643][ T9] device hsr_slave_1 left promiscuous mode [ 99.613246][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.653946][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.705383][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.712838][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.785365][ T9] device bridge_slave_1 left promiscuous mode [ 99.798761][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.844232][ T9] device bridge_slave_0 left promiscuous mode [ 99.885129][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.944092][ T9] device veth1_macvtap left promiscuous mode [ 99.974759][ T9] device veth0_macvtap left promiscuous mode [ 99.980875][ T9] device veth1_vlan left promiscuous mode [ 100.023373][ T9] device veth0_vlan left promiscuous mode [ 100.063405][ T4832] loop2: detected capacity change from 0 to 1024 [ 100.884526][ T4854] loop2: detected capacity change from 0 to 512 [ 100.903014][ T9] team0 (unregistering): Port device team_slave_1 removed [ 100.944654][ T9] team0 (unregistering): Port device team_slave_0 removed [ 101.003032][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.078386][ T4854] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.150: corrupted inode contents [ 101.084909][ T1109] Bluetooth: hci3: command 0x0419 tx timeout [ 101.097242][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.148910][ T4854] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #16: comm syz.2.150: mark_inode_dirty error [ 101.166206][ T4854] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.150: corrupted inode contents [ 101.182618][ T4854] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.150: mark_inode_dirty error [ 101.204699][ T4854] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.150: corrupted inode contents [ 101.227458][ T4854] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 101.243630][ T4854] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.150: corrupted inode contents [ 101.273605][ T4854] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.150: mark_inode_dirty error [ 101.307043][ T4854] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 101.320575][ T4854] EXT4-fs (loop2): 1 truncate cleaned up [ 101.330737][ T4854] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.333121][ T9] bond0 (unregistering): Released all slaves [ 101.342804][ T4854] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.531910][ T4860] loop2: detected capacity change from 0 to 256 [ 101.625231][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.632749][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.671684][ T4602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.725210][ T4860] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.385001][ T4892] loop3: detected capacity change from 0 to 512 [ 102.391508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.411296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.463359][ T4892] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.581399][ T4892] EXT4-fs (loop3): 1 truncate cleaned up [ 102.587164][ T4892] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,dioread_lock,noauto_da_alloc,lazytime,nombcache,max_batch_time=0x000000000000000a,,errors=continue. Quota mode: none. [ 102.609577][ T4602] device veth0_vlan entered promiscuous mode [ 102.617192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.627299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.640173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.648994][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.691989][ T4602] device veth1_vlan entered promiscuous mode [ 102.907759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.937440][ T4910] loop5: detected capacity change from 0 to 2048 [ 102.956077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.998682][ T4602] device veth0_macvtap entered promiscuous mode [ 103.046305][ T4602] device veth1_macvtap entered promiscuous mode [ 103.065585][ T4910] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 103.304198][ T4602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.367581][ T4602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.465378][ T4602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.514598][ T4602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.553639][ T4602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.615233][ T4602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.644757][ T4602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.675408][ T4602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.712131][ T4602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.751065][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.759964][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.845484][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.854302][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.934334][ T4602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.964762][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.981703][ T4602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.039377][ T4602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.065747][ T4602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.140198][ T4602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.186647][ T4602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.198509][ T4951] loop5: detected capacity change from 0 to 512 [ 104.215212][ T4602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.239341][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 104.244627][ T4602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.246224][ T4602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.254639][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.276015][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.298227][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.319549][ T4602] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.345344][ T4602] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.364332][ T4602] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.373638][ T4242] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 104.391563][ T4602] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.420587][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.441407][ T4951] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 104.471333][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.493787][ T4951] EXT4-fs (loop5): invalid journal inode [ 104.509197][ T4951] EXT4-fs (loop5): can't get journal size [ 104.520973][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.572472][ T4951] EXT4-fs (loop5): 1 truncate cleaned up [ 104.579647][ T13] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.590597][ T4521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.599609][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 104.604937][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.611039][ T4951] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 104.616074][ T13] usb 4-1: config 0 descriptor?? [ 104.649712][ T4521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.718513][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.735252][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.744902][ T4242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 104.754651][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 104.769079][ T1233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.794486][ T1233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.854823][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.934957][ T4242] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 104.964673][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.994747][ T4242] usb 1-1: Product: syz [ 105.003636][ T4242] usb 1-1: Manufacturer: syz [ 105.005186][ T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.017965][ T4242] usb 1-1: SerialNumber: syz [ 105.063030][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.063435][ T4242] usb 1-1: config 0 descriptor?? [ 105.089680][ T7] usb 3-1: Product: syz [ 105.093916][ T7] usb 3-1: Manufacturer: syz [ 105.120235][ T13] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 105.138619][ T7] usb 3-1: SerialNumber: syz [ 105.155137][ T4945] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 105.169257][ T13] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 105.175869][ T4242] hub 1-1:0.0: bad descriptor, ignoring hub [ 105.192705][ T4242] hub: probe of 1-1:0.0 failed with error -5 [ 105.221166][ T4242] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 105.240385][ T13] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 105.272476][ T13] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 105.365554][ T13] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input7 [ 105.476249][ T7] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 105.510744][ T7] usb 3-1: 2:1 : format type 253 is not supported yet [ 105.530712][ T13] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 105.628224][ T13] usb 4-1: USB disconnect, device number 2 [ 105.725007][ T7] usb 3-1: USB disconnect, device number 6 [ 105.920816][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.185'. [ 106.077373][ T4157] udevd[4157]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.210125][ T1106] usb 1-1: USB disconnect, device number 2 [ 106.380753][ T5006] loop2: detected capacity change from 0 to 512 [ 106.455337][ T1106] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.609638][ T5006] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.691244][ T5006] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.821419][ T26] audit: type=1326 audit(1732173559.543:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.2.192" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6406323819 code=0x0 [ 106.905147][ T1106] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.935911][ T1106] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.054779][ T1106] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 107.079489][ T1106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 107.113707][ T1106] usb 1-1: SerialNumber: syz [ 107.392229][ T5045] loop3: detected capacity change from 0 to 8 [ 107.417950][ T1106] usb 1-1: 0:2 : does not exist [ 107.478980][ T1106] usb 1-1: USB disconnect, device number 3 [ 108.060128][ T4280] udevd[4280]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.383112][ T5099] loop0: detected capacity change from 0 to 256 [ 108.475155][ T5099] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 108.518613][ T5108] loop5: detected capacity change from 0 to 512 [ 108.603031][ T5099] exFAT-fs (loop0): error, invalid dentry access beyond EOF (clu : 11, eidx : 128) [ 108.641598][ T5108] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 108.671981][ T5115] loop3: detected capacity change from 0 to 2048 [ 108.695871][ T5099] exFAT-fs (loop0): Filesystem has been set read-only [ 108.752850][ T5108] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 108.782722][ T5108] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.915012][ T5115] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 109.044262][ T5137] loop0: detected capacity change from 0 to 128 [ 109.086540][ T5115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.295972][ T26] audit: type=1800 audit(1732173562.013:4): pid=5115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.230" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 109.397790][ T5158] loop6: detected capacity change from 0 to 256 [ 109.445816][ T5160] netlink: 36 bytes leftover after parsing attributes in process `syz.5.245'. [ 109.529404][ T5158] FAT-fs (loop6): Directory bread(block 64) failed [ 109.563083][ T5158] FAT-fs (loop6): Directory bread(block 65) failed [ 109.588399][ T5158] FAT-fs (loop6): Directory bread(block 66) failed [ 109.623257][ T5158] FAT-fs (loop6): Directory bread(block 67) failed [ 109.647339][ T5158] FAT-fs (loop6): Directory bread(block 68) failed [ 109.666497][ T5158] FAT-fs (loop6): Directory bread(block 69) failed [ 109.691957][ T5158] FAT-fs (loop6): Directory bread(block 70) failed [ 109.713252][ T5158] FAT-fs (loop6): Directory bread(block 71) failed [ 109.741770][ T5158] FAT-fs (loop6): Directory bread(block 72) failed [ 109.763045][ T5158] FAT-fs (loop6): Directory bread(block 73) failed [ 109.800689][ T5176] veth1_virt_wifi: vlans aren't supported yet for dev_uc|mc_add() [ 109.914147][ T26] audit: type=1800 audit(1732173562.633:5): pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.244" name="file1" dev="loop6" ino=1048602 res=0 errno=0 [ 109.942578][ T5158] attempt to access beyond end of device [ 109.942578][ T5158] loop6: rw=0, want=1772, limit=256 [ 109.953146][ T5183] netlink: 72 bytes leftover after parsing attributes in process `syz.5.253'. [ 110.003651][ T5181] loop3: detected capacity change from 0 to 1024 [ 110.004368][ T5183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.253'. [ 110.220202][ T5189] loop2: detected capacity change from 0 to 1024 [ 110.317117][ T5191] loop5: detected capacity change from 0 to 1764 [ 110.373117][ T5194] loop0: detected capacity change from 0 to 2048 [ 110.395126][ T5189] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 110.429697][ T5189] EXT4-fs (loop2): orphan cleanup on readonly fs [ 110.486874][ T5194] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 110.553077][ T5189] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.256: Invalid inode table block 0 in block_group 0 [ 110.592667][ T5194] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.655399][ T5189] EXT4-fs (loop2): Remounting filesystem read-only [ 110.681418][ T5194] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 110.704840][ T5189] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 110.729259][ T5209] loop6: detected capacity change from 0 to 1024 [ 110.752774][ T5189] EXT4-fs (loop2): Remounting filesystem read-only [ 110.779903][ T5189] EXT4-fs error (device loop2): ext4_quota_write:6592: inode #3: comm syz.2.256: mark_inode_dirty error [ 110.842232][ T5189] EXT4-fs (loop2): Remounting filesystem read-only [ 110.892251][ T5189] Quota error (device loop2): write_blk: dquota write failed [ 110.922668][ T5189] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 110.948004][ T5209] hfsplus: extend alloc file! (8192,65536,366) [ 110.973703][ T5189] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.256: Failed to acquire dquot type 0 [ 111.016526][ T5223] loop0: detected capacity change from 0 to 1024 [ 111.023308][ T5189] EXT4-fs (loop2): Remounting filesystem read-only [ 111.049006][ T5189] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.256: Invalid inode table block 0 in block_group 0 [ 111.688980][ T5189] EXT4-fs (loop2): Remounting filesystem read-only [ 111.777205][ T5189] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 111.878449][ T5189] EXT4-fs (loop2): Remounting filesystem read-only [ 111.953008][ T5189] EXT4-fs error (device loop2): ext4_ext_truncate:4454: inode #15: comm syz.2.256: mark_inode_dirty error [ 112.013750][ T5236] loop5: detected capacity change from 0 to 1024 [ 112.058239][ T5189] EXT4-fs (loop2): Remounting filesystem read-only [ 112.131412][ T5189] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.256: Invalid inode table block 0 in block_group 0 [ 112.225623][ T5189] EXT4-fs (loop2): Remounting filesystem read-only [ 112.267299][ T5189] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 112.339949][ T5189] EXT4-fs (loop2): Remounting filesystem read-only [ 112.379668][ T4219] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 112.444906][ T5189] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 112.560459][ T5189] EXT4-fs (loop2): Remounting filesystem read-only [ 112.615058][ T5189] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.256: Invalid inode table block 0 in block_group 0 [ 112.664727][ T4219] usb 7-1: Using ep0 maxpacket: 8 [ 112.685657][ T5189] EXT4-fs (loop2): Remounting filesystem read-only [ 112.692217][ T5189] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 112.777303][ T5189] EXT4-fs (loop2): Remounting filesystem read-only [ 112.784082][ T5189] EXT4-fs error (device loop2): ext4_truncate:4272: inode #15: comm syz.2.256: mark_inode_dirty error [ 112.792929][ T4219] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 112.803540][ T4219] usb 7-1: config 179 has no interface number 0 [ 112.815434][ T4219] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 112.829198][ T5189] EXT4-fs (loop2): Remounting filesystem read-only [ 112.855373][ T5189] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 112.881873][ T4219] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 112.906402][ T5189] EXT4-fs (loop2): Remounting filesystem read-only [ 112.914305][ T4219] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 112.952226][ T5189] EXT4-fs (loop2): 1 truncate cleaned up [ 112.962592][ T26] audit: type=1326 audit(1732173565.693:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 112.975796][ T5189] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,stripe=0x0000000000000000,usrquota,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: writeback. [ 113.008871][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.022377][ T4219] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 113.066782][ T26] audit: type=1326 audit(1732173565.693:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 113.070621][ T4219] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 113.174641][ T4219] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.201916][ T26] audit: type=1326 audit(1732173565.743:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 113.231803][ T5267] loop3: detected capacity change from 0 to 256 [ 113.245126][ T5238] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.313044][ T26] audit: type=1326 audit(1732173565.763:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 113.445624][ T26] audit: type=1326 audit(1732173565.763:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 113.474139][ T5273] loop2: detected capacity change from 0 to 512 [ 113.511009][ T4219] usb 7-1: USB disconnect, device number 2 [ 113.522538][ T26] audit: type=1326 audit(1732173565.763:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 113.550212][ T5276] loop0: detected capacity change from 0 to 1024 [ 113.566321][ T26] audit: type=1326 audit(1732173565.773:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 113.580883][ T5273] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.281: casefold flag without casefold feature [ 113.588329][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.699611][ T26] audit: type=1326 audit(1732173565.773:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 113.721765][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.754750][ T5273] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.281: couldn't read orphan inode 15 (err -117) [ 113.782123][ T5273] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,nombcache,,errors=continue. Quota mode: none. [ 113.805723][ T26] audit: type=1326 audit(1732173565.773:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 113.935848][ T26] audit: type=1326 audit(1732173565.773:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 113.957960][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.169215][ T5305] loop6: detected capacity change from 0 to 256 [ 114.297552][ T5311] loop3: detected capacity change from 0 to 1024 [ 114.320515][ T5313] loop2: detected capacity change from 0 to 8 [ 114.352731][ T5305] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 114.421741][ T5313] SQUASHFS error: zlib decompression failed, data probably corrupt [ 114.439351][ T5305] exFAT-fs (loop6): error, tried to truncate zeroed cluster. [ 114.455630][ T5313] SQUASHFS error: Failed to read block 0x9b: -5 [ 114.492643][ T5313] SQUASHFS error: Unable to read metadata cache entry [99] [ 114.536986][ T5313] SQUASHFS error: Unable to read inode 0x127 [ 114.545334][ T5305] exFAT-fs (loop6): Filesystem has been set read-only [ 114.601085][ T5311] hfsplus: xattr searching failed [ 114.611880][ T5311] hfsplus: xattr searching failed [ 114.897272][ T1233] hfsplus: b-tree write err: -5, ino 3 [ 115.041607][ T5342] netlink: 20 bytes leftover after parsing attributes in process `syz.3.301'. [ 115.141796][ T5345] loop5: detected capacity change from 0 to 256 [ 115.159462][ T5347] loop0: detected capacity change from 0 to 128 [ 115.187194][ T5345] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.244148][ T5347] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.257093][ T5347] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.259653][ T5345] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 115.288984][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.449333][ T5345] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 115.598433][ T5360] loop0: detected capacity change from 0 to 164 [ 116.143794][ T5381] loop6: detected capacity change from 0 to 128 [ 116.239185][ T5387] loop3: detected capacity change from 0 to 512 [ 116.315246][ T5381] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 116.420515][ T5387] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none. [ 116.453374][ T5395] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.496357][ T5387] EXT4-fs warning (device loop3): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed [ 116.849648][ T5408] loop6: detected capacity change from 0 to 256 [ 116.944719][ T5408] FAT-fs (loop6): Directory bread(block 1285) failed [ 116.995597][ T5408] FAT-fs (loop6): Directory bread(block 1285) failed [ 117.003780][ T5408] FAT-fs (loop6): Directory bread(block 1285) failed [ 117.048376][ T5413] loop3: detected capacity change from 0 to 1024 [ 117.061756][ T5408] FAT-fs (loop6): Directory bread(block 1285) failed [ 117.116522][ T4219] kernel write not supported for file [eventfd] (pid: 4219 comm: kworker/1:6) [ 117.142611][ T5418] loop2: detected capacity change from 0 to 512 [ 117.201343][ T5421] loop5: detected capacity change from 0 to 256 [ 117.230291][ T5423] loop6: detected capacity change from 0 to 8 [ 117.256939][ T5421] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 117.322323][ T5418] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 117.392930][ T5418] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.526714][ T5418] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #12: comm syz.2.332: Directory hole found for htree leaf block 0 [ 117.611189][ T5440] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #12: comm syz.2.332: Directory hole found for htree leaf block 0 [ 117.678286][ T5444] loop0: detected capacity change from 0 to 128 [ 117.709986][ T5447] loop5: detected capacity change from 0 to 512 [ 117.787079][ T5444] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.831778][ T5447] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.346: corrupted in-inode xattr [ 117.851466][ T5444] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.886531][ T5447] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.346: couldn't read orphan inode 15 (err -117) [ 118.020205][ T5457] loop2: detected capacity change from 0 to 1024 [ 118.026603][ T5447] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.036405][ T5447] EXT4-fs warning (device loop5): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 118.629280][ T5484] loop5: detected capacity change from 0 to 512 [ 118.755582][ T5484] __quota_error: 10 callbacks suppressed [ 118.755600][ T5484] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (33560576 > 6144). [ 118.777189][ T5492] loop0: detected capacity change from 0 to 1024 [ 118.805097][ T5484] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.832131][ T5484] EXT4-fs (loop5): mount failed [ 119.091763][ T5515] loop6: detected capacity change from 0 to 2048 [ 119.213189][ T5515] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.346799][ T5526] loop0: detected capacity change from 0 to 256 [ 119.441632][ T5526] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 119.464577][ T26] audit: type=1326 audit(1732173572.183:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.6.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 119.533735][ T26] audit: type=1326 audit(1732173572.213:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.6.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 119.612297][ T26] audit: type=1326 audit(1732173572.213:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.6.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 119.690252][ T26] audit: type=1326 audit(1732173572.213:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.6.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 119.764478][ T26] audit: type=1326 audit(1732173572.213:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.6.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 119.829888][ T26] audit: type=1326 audit(1732173572.213:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.6.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 119.904682][ T4545] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 119.952631][ T26] audit: type=1326 audit(1732173572.213:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.6.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 120.002451][ T5559] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 120.023873][ T26] audit: type=1326 audit(1732173572.213:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.6.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 120.133512][ T5569] loop3: detected capacity change from 0 to 1024 [ 120.144672][ T4545] usb 7-1: Using ep0 maxpacket: 16 [ 120.161599][ T26] audit: type=1326 audit(1732173572.883:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5563 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c7a4b819 code=0x7ffc0000 [ 120.257195][ T5569] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,user_xattr,,errors=continue. Quota mode: writeback. [ 120.282303][ T4545] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.294918][ T4545] usb 7-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 120.308235][ T4545] usb 7-1: config 1 interface 0 has no altsetting 0 [ 120.474871][ T4545] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.518676][ T4545] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.568705][ T4545] usb 7-1: Product: syz [ 120.583140][ T4545] usb 7-1: Manufacturer: syz [ 120.620484][ T4545] usb 7-1: SerialNumber: syz [ 120.832261][ T5613] loop3: detected capacity change from 0 to 256 [ 120.881321][ T5615] binder: 5614:5615 ioctl c018620b 200004c0 returned -14 [ 120.903205][ T5613] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.965982][ T4545] usb 7-1: bad CDC descriptors [ 121.009535][ T4545] usb 7-1: USB disconnect, device number 3 [ 121.250018][ T5632] loop0: detected capacity change from 0 to 2048 [ 121.360246][ T5632] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 121.387833][ T5632] UDF-fs: Scanning with blocksize 512 failed [ 121.423461][ T5632] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.648712][ T5647] loop6: detected capacity change from 0 to 4096 [ 121.694244][ T5656] loop2: detected capacity change from 0 to 512 [ 121.751042][ T5647] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 121.779356][ T5647] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 121.890495][ T5656] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000040000,minixdf,,errors=continue. Quota mode: writeback. [ 121.928431][ T5656] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.443581][ T5694] loop6: detected capacity change from 0 to 1024 [ 122.523488][ T5694] EXT4-fs (loop6): Ignoring removed bh option [ 122.559615][ T5694] EXT4-fs error (device loop6): ext4_map_blocks:628: inode #3: block 69: comm syz.6.445: lblock 8 mapped to illegal pblock 69 (length 1) [ 122.578106][ T5694] EXT4-fs error (device loop6): ext4_map_blocks:628: inode #3: block 68: comm syz.6.445: lblock 7 mapped to illegal pblock 68 (length 1) [ 122.592736][ T5694] EXT4-fs error (device loop6): ext4_map_blocks:628: inode #3: block 67: comm syz.6.445: lblock 6 mapped to illegal pblock 67 (length 1) [ 122.608283][ T5694] EXT4-fs error (device loop6): ext4_map_blocks:628: inode #3: block 48: comm syz.6.445: lblock 0 mapped to illegal pblock 48 (length 1) [ 122.648729][ T5694] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.445: Failed to acquire dquot type 0 [ 122.693102][ T5694] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 122.725408][ T5694] EXT4-fs error (device loop6): ext4_evict_inode:282: inode #11: comm syz.6.445: mark_inode_dirty error [ 122.743380][ T5694] EXT4-fs warning (device loop6): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 122.761781][ T5694] EXT4-fs (loop6): 1 orphan inode deleted [ 122.785621][ T1233] EXT4-fs error (device loop6): ext4_map_blocks:628: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 122.794659][ T5694] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,barrier,resuid=0x0000000000000000,noload,dioread_lock,bh,bsddf,bsdgroups,,errors=continue. Quota mode: none. [ 122.845663][ T1233] EXT4-fs error (device loop6): ext4_release_dquot:6220: comm kworker/u4:4: Failed to release dquot type 0 [ 122.872639][ T5712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.447'. [ 122.963216][ T5694] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 123.021564][ T5694] EXT4-fs error (device loop6): ext4_quota_off:6486: inode #3: comm syz.6.445: mark_inode_dirty error [ 123.990922][ T5772] binfmt_misc: register: failed to install interpreter file ./file0 [ 124.171620][ T5779] loop0: detected capacity change from 0 to 1024 [ 124.377840][ T5794] kvm [5791]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x2 [ 124.515517][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 124.515533][ T26] audit: type=1326 audit(1732173577.243:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 124.690838][ T26] audit: type=1326 audit(1732173577.263:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 124.808044][ T26] audit: type=1326 audit(1732173577.273:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 124.900334][ T5816] loop6: detected capacity change from 0 to 1024 [ 124.926495][ T26] audit: type=1326 audit(1732173577.273:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 124.991894][ T5816] hfsplus: request for non-existent node 1024 in B*Tree [ 125.054675][ T5816] hfsplus: request for non-existent node 1024 in B*Tree [ 125.062536][ T5816] hfsplus: failed to load root directory [ 125.064750][ T26] audit: type=1326 audit(1732173577.273:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 125.196942][ T26] audit: type=1326 audit(1732173577.273:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 125.320735][ T26] audit: type=1326 audit(1732173577.273:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 125.384753][ T5832] loop3: detected capacity change from 0 to 1024 [ 125.442264][ T5840] binder: 5839:5840 ioctl 400c620e 0 returned -14 [ 125.460686][ T26] audit: type=1326 audit(1732173577.273:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 125.569096][ T26] audit: type=1326 audit(1732173577.273:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 125.674735][ T26] audit: type=1326 audit(1732173577.273:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5736 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 126.200520][ T5879] loop0: detected capacity change from 0 to 8 [ 126.269745][ T5879] squashfs: Unknown parameter 'ÿÿÿÿ' [ 126.315724][ T5874] loop6: detected capacity change from 0 to 4096 [ 126.404028][ T5874] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.594749][ T4219] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 126.941839][ T5907] loop0: detected capacity change from 0 to 1024 [ 126.955029][ T4219] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 126.974394][ T4219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.020118][ T4219] usb 6-1: config 0 descriptor?? [ 127.036689][ T5907] hfsplus: inconsistency in B*Tree (8,1,255,1,0) [ 127.055164][ T5907] hfsplus: failed to load root directory [ 127.281006][ T5926] loop3: detected capacity change from 0 to 16 [ 127.385353][ T5926] erofs: (device loop3): mounted with root inode @ nid 36. [ 127.442150][ T4179] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 127.470915][ T5926] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 127.735036][ T4219] usb 6-1: Cannot set autoneg [ 127.740170][ T4219] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 127.804413][ T4219] usb 6-1: USB disconnect, device number 2 [ 128.237164][ T5954] loop0: detected capacity change from 0 to 128 [ 128.969993][ T6002] netlink: 'syz.3.541': attribute type 3 has an invalid length. [ 129.048863][ T5998] loop0: detected capacity change from 0 to 4096 [ 129.121580][ T5998] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 129.228725][ T5998] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 129.347426][ T5998] fscrypt (loop0, inode 18): Direct key flag not allowed with different contents and filenames modes [ 129.598836][ T6016] loop5: detected capacity change from 0 to 8192 [ 129.637180][ T26] kauditd_printk_skb: 119 callbacks suppressed [ 129.637196][ T26] audit: type=1326 audit(1732173582.363:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7ffc0000 [ 129.700822][ T6037] loop6: detected capacity change from 0 to 512 [ 129.766016][ T26] audit: type=1326 audit(1732173582.413:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6406323819 code=0x7ffc0000 [ 129.859340][ T6016] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 129.871505][ T26] audit: type=1326 audit(1732173582.413:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7ffc0000 [ 129.931112][ T6037] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 129.958893][ T6016] FAT-fs (loop5): Filesystem has been set read-only [ 129.967463][ T6016] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 2068) [ 129.976593][ T6016] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 2068) [ 129.985019][ T26] audit: type=1326 audit(1732173582.413:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6406323819 code=0x7ffc0000 [ 130.011932][ T26] audit: type=1326 audit(1732173582.413:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7ffc0000 [ 130.051851][ T6037] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.223651][ T6059] loop2: detected capacity change from 0 to 2048 [ 130.329376][ T6059] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.390060][ T6067] loop6: detected capacity change from 0 to 1764 [ 130.402888][ T6062] loop0: detected capacity change from 0 to 4096 [ 130.454101][ T6062] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 130.499788][ T6062] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 130.543718][ T6062] fscrypt (loop0, inode 18): Direct key flag not allowed with different contents and filenames modes [ 130.578995][ T26] audit: type=1326 audit(1732173583.303:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dcf40819 code=0x7ffc0000 [ 130.676400][ T26] audit: type=1326 audit(1732173583.343:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37dcf40819 code=0x7ffc0000 [ 130.786831][ T26] audit: type=1326 audit(1732173583.343:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dcf40819 code=0x7ffc0000 [ 130.885072][ T26] audit: type=1326 audit(1732173583.343:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f37dcf40819 code=0x7ffc0000 [ 131.015934][ T26] audit: type=1326 audit(1732173583.343:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dcf40819 code=0x7ffc0000 [ 131.190186][ T6111] binfmt_misc: register: failed to install interpreter file ./file0 [ 131.822763][ T6143] loop5: detected capacity change from 0 to 1024 [ 131.972184][ T6155] binfmt_misc: register: failed to install interpreter file ./file0 [ 132.277495][ T6170] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 132.699332][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.705701][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.850549][ T4521] hfsplus: b-tree write err: -5, ino 4 [ 133.120601][ T6218] loop0: detected capacity change from 0 to 4096 [ 133.196560][ T6218] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 133.257069][ T6218] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 133.294721][ T4545] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 133.573942][ T6235] loop3: detected capacity change from 0 to 1024 [ 133.694841][ T4545] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.733773][ T4545] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 133.797353][ T6235] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.809252][ T4545] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.837260][ T4545] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.847357][ T4545] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 133.863380][ T4545] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.941879][ T4545] hub 6-1:1.0: bad descriptor, ignoring hub [ 133.967988][ T4545] hub: probe of 6-1:1.0 failed with error -5 [ 133.983273][ T4545] cdc_wdm 6-1:1.0: skipping garbage [ 133.994615][ T4545] cdc_wdm 6-1:1.0: skipping garbage [ 134.029304][ T4545] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 134.045339][ T4545] cdc_wdm 6-1:1.0: Unknown control protocol [ 134.294929][ T4219] usb 6-1: USB disconnect, device number 3 [ 134.419111][ T6264] device syzkaller0 entered promiscuous mode [ 134.686092][ T4219] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 134.938641][ T4219] usb 6-1: Using ep0 maxpacket: 8 [ 135.060948][ T6308] loop0: detected capacity change from 0 to 1024 [ 135.067866][ T4219] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.090513][ T4219] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.121545][ T4219] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.182429][ T4219] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.210003][ T6308] EXT4-fs (loop0): Ignoring removed bh option [ 135.223881][ T4219] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 135.266384][ T6308] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 69: comm syz.0.627: lblock 8 mapped to illegal pblock 69 (length 1) [ 135.286295][ T4219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.328013][ T6308] __quota_error: 8 callbacks suppressed [ 135.328031][ T6308] Quota error (device loop0): write_blk: dquota write failed [ 135.386933][ T4219] hub 6-1:1.0: bad descriptor, ignoring hub [ 135.393098][ T4219] hub: probe of 6-1:1.0 failed with error -5 [ 135.404201][ T6308] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 68: comm syz.0.627: lblock 7 mapped to illegal pblock 68 (length 1) [ 135.408617][ T4219] cdc_wdm 6-1:1.0: skipping garbage [ 135.431623][ T4219] cdc_wdm 6-1:1.0: skipping garbage [ 135.461563][ T4219] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 135.475436][ T4219] cdc_wdm 6-1:1.0: Unknown control protocol [ 135.510475][ T6308] Quota error (device loop0): write_blk: dquota write failed [ 135.520225][ T6308] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 67: comm syz.0.627: lblock 6 mapped to illegal pblock 67 (length 1) [ 135.579659][ T6308] Quota error (device loop0): write_blk: dquota write failed [ 135.607477][ T6308] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 135.657454][ T6308] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 48: comm syz.0.627: lblock 0 mapped to illegal pblock 48 (length 1) [ 135.707594][ T6336] device syzkaller0 entered promiscuous mode [ 135.735129][ T6308] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 135.765533][ T4545] usb 6-1: USB disconnect, device number 4 [ 135.814728][ T6308] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.627: Failed to acquire dquot type 0 [ 135.860909][ T6308] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 135.903927][ T6308] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.627: mark_inode_dirty error [ 135.962845][ T6308] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 136.014991][ T6308] EXT4-fs (loop0): 1 orphan inode deleted [ 136.020781][ T6308] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,barrier,resuid=0x0000000000000000,noload,dioread_lock,bh,bsddf,bsdgroups,,errors=continue. Quota mode: none. [ 136.040615][ T154] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 136.067594][ T154] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 136.102466][ T154] EXT4-fs error (device loop0): ext4_release_dquot:6220: comm kworker/u4:2: Failed to release dquot type 0 [ 136.166250][ T6354] loop6: detected capacity change from 0 to 1024 [ 136.262825][ T4165] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 136.310218][ T4165] EXT4-fs error (device loop0): ext4_quota_off:6486: inode #3: comm syz-executor: mark_inode_dirty error [ 136.398798][ T6361] loop5: detected capacity change from 0 to 1024 [ 136.442753][ T1233] hfsplus: b-tree write err: -5, ino 3 [ 136.568250][ T6361] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.784698][ T4219] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.173614][ T6397] loop6: detected capacity change from 0 to 2048 [ 137.185211][ T4219] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.212132][ T4219] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.280526][ T6397] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.334869][ T4219] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 137.351444][ T6404] loop5: detected capacity change from 0 to 1024 [ 137.358728][ T4219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 137.394315][ T4219] usb 1-1: SerialNumber: syz [ 137.560736][ T6410] loop6: detected capacity change from 0 to 1024 [ 137.704079][ T4219] usb 1-1: 0:2 : does not exist [ 137.719732][ T4219] usb 1-1: unit 255 not found! [ 137.816172][ T4219] usb 1-1: USB disconnect, device number 4 [ 137.885550][ T6418] loop3: detected capacity change from 0 to 1024 [ 138.031763][ T6418] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.086146][ T4280] udevd[4280]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.262519][ T6431] loop5: detected capacity change from 0 to 256 [ 138.404571][ T6438] binfmt_misc: register: failed to install interpreter file ./file0 [ 138.816536][ T6459] loop5: detected capacity change from 0 to 1024 [ 138.901554][ T6465] loop6: detected capacity change from 0 to 1024 [ 138.963511][ T6459] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.980385][ T26] audit: type=1800 audit(1732173591.703:204): pid=6465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.681" name=4006 dev="loop6" ino=25 res=0 errno=0 [ 139.023391][ T6468] loop0: detected capacity change from 0 to 1024 [ 139.041606][ T6471] loop2: detected capacity change from 0 to 1024 [ 139.108914][ T6471] EXT4-fs (loop2): Ignoring removed bh option [ 139.144931][ T6471] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #3: block 69: comm syz.2.683: lblock 8 mapped to illegal pblock 69 (length 1) [ 139.254747][ T6471] Quota error (device loop2): write_blk: dquota write failed [ 139.262205][ T6471] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #3: block 68: comm syz.2.683: lblock 7 mapped to illegal pblock 68 (length 1) [ 139.281385][ T6471] Quota error (device loop2): write_blk: dquota write failed [ 139.290636][ T6471] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #3: block 67: comm syz.2.683: lblock 6 mapped to illegal pblock 67 (length 1) [ 139.312809][ T6471] Quota error (device loop2): write_blk: dquota write failed [ 139.320042][ T6479] binfmt_misc: register: failed to install interpreter file ./file0 [ 139.325868][ T6471] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #3: block 48: comm syz.2.683: lblock 0 mapped to illegal pblock 48 (length 1) [ 139.405181][ T6471] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.683: Failed to acquire dquot type 0 [ 139.460728][ T6471] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 139.486526][ T6488] loop0: detected capacity change from 0 to 128 [ 139.500472][ T6471] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.683: mark_inode_dirty error [ 139.581781][ T6471] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 139.614414][ T6471] EXT4-fs (loop2): 1 orphan inode deleted [ 139.623265][ T6471] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,barrier,resuid=0x0000000000000000,noload,dioread_lock,bh,bsddf,bsdgroups,,errors=continue. Quota mode: none. [ 139.655216][ T154] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.704427][ T154] EXT4-fs error (device loop2): ext4_release_dquot:6220: comm kworker/u4:2: Failed to release dquot type 0 [ 139.723242][ T6496] loop5: detected capacity change from 0 to 1024 [ 139.792995][ T4166] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 139.846384][ T4166] EXT4-fs error (device loop2): ext4_quota_off:6486: inode #3: comm syz-executor: mark_inode_dirty error [ 139.936056][ T6505] loop6: detected capacity change from 0 to 164 [ 140.259440][ T6519] binfmt_misc: register: failed to install interpreter file ./file0 [ 140.741451][ T6540] loop0: detected capacity change from 0 to 256 [ 140.748978][ T6536] loop5: detected capacity change from 0 to 1024 [ 140.829324][ T6536] hfsplus: bad catalog file entry [ 140.857796][ T6540] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 140.872860][ T6536] hfsplus: failed to load root directory [ 140.909009][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 140.909025][ T26] audit: type=1800 audit(1732173593.633:205): pid=6540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.712" name="bus" dev="loop0" ino=1048611 res=0 errno=0 [ 141.109930][ T6548] binfmt_misc: register: failed to install interpreter file ./file0 [ 141.452822][ T6553] loop3: detected capacity change from 0 to 8192 [ 141.481104][ T6562] loop2: detected capacity change from 0 to 512 [ 141.526853][ T6566] loop6: detected capacity change from 0 to 128 [ 141.590044][ T6566] EXT4-fs (loop6): mounted filesystem without journal. Opts: noquota,,errors=continue. Quota mode: none. [ 141.636080][ T6566] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.672018][ T6568] binder: BINDER_SET_CONTEXT_MGR already set [ 141.696932][ T6568] binder: 6567:6568 ioctl 4018620d 20000040 returned -16 [ 141.711827][ T6562] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.728714][ T6562] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.740319][ T6553] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 141.777941][ T6553] FAT-fs (loop3): Filesystem has been set read-only [ 142.290043][ T6585] loop3: detected capacity change from 0 to 1024 [ 142.361213][ T6585] hfsplus: bad catalog file entry [ 142.385901][ T6585] hfsplus: failed to load root directory [ 142.644688][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 142.690457][ T6596] binfmt_misc: register: failed to install interpreter file ./file0 [ 142.740493][ T6599] loop5: detected capacity change from 0 to 1024 [ 142.945842][ T6599] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.074827][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.093119][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.195040][ T13] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 143.209821][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.220856][ T13] usb 3-1: SerialNumber: syz [ 143.534640][ T13] usb 3-1: 0:2 : does not exist [ 143.557120][ T13] usb 3-1: unit 255 not found! [ 143.611067][ T13] usb 3-1: USB disconnect, device number 7 [ 143.876383][ T4280] udevd[4280]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.932215][ T6640] 9pnet: Insufficient options for proto=fd [ 143.955927][ T6636] loop5: detected capacity change from 0 to 1024 [ 143.994136][ T6644] loop6: detected capacity change from 0 to 1024 [ 144.005381][ T6640] binfmt_misc: register: failed to install interpreter file ./file0 [ 144.014254][ T6642] loop0: detected capacity change from 0 to 1024 [ 144.084853][ T6636] hfsplus: bad catalog file entry [ 144.089977][ T6636] hfsplus: failed to load root directory [ 144.172473][ T6644] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.021877][ T26] audit: type=1326 audit(1732173597.743:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6649 comm="syz.3.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f93d819 code=0x7fc00000 [ 145.220735][ T6687] loop2: detected capacity change from 0 to 512 [ 145.258188][ T6688] loop6: detected capacity change from 0 to 1024 [ 145.347608][ T6687] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 145.380667][ T6687] EXT4-fs (loop2): invalid journal inode [ 145.405034][ T6687] EXT4-fs (loop2): can't get journal size [ 145.454625][ T13] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 145.467003][ T6687] EXT4-fs (loop2): 1 truncate cleaned up [ 145.473487][ T6687] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 145.509879][ T6688] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.531130][ T6692] loop0: detected capacity change from 0 to 1024 [ 145.765621][ T6698] ptrace attach of "./syz-executor exec"[6699] was attempted by "./syz-executor exec"[6698] [ 145.890343][ T13] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.923293][ T13] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.015744][ T13] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 146.054766][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.086307][ T13] usb 6-1: SerialNumber: syz [ 146.132831][ T6704] loop0: detected capacity change from 0 to 256 [ 146.195947][ T6705] loop3: detected capacity change from 0 to 1024 [ 146.223533][ T6704] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 146.249653][ T6707] loop6: detected capacity change from 0 to 512 [ 146.413745][ T6707] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.767: corrupted in-inode xattr [ 146.437577][ T13] usb 6-1: 0:2 : does not exist [ 146.462953][ T13] usb 6-1: USB disconnect, device number 5 [ 146.623388][ T6707] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.767: couldn't read orphan inode 15 (err -117) [ 146.781792][ T4280] udevd[4280]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.787662][ T6707] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.231835][ T4521] hfsplus: b-tree write err: -5, ino 4 [ 147.261411][ T26] audit: type=1326 audit(1732173599.983:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 147.380552][ T26] audit: type=1326 audit(1732173599.983:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 147.479234][ T26] audit: type=1326 audit(1732173599.983:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 147.480745][ T6734] loop0: detected capacity change from 0 to 1024 [ 147.608714][ T26] audit: type=1326 audit(1732173599.983:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 147.694677][ T26] audit: type=1326 audit(1732173599.983:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 147.754955][ T6744] ptrace attach of "./syz-executor exec"[6745] was attempted by "./syz-executor exec"[6744] [ 147.764700][ T26] audit: type=1326 audit(1732173599.983:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 147.854659][ T26] audit: type=1326 audit(1732173599.983:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 147.964980][ T26] audit: type=1326 audit(1732173599.983:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 148.056104][ T26] audit: type=1326 audit(1732173599.983:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 148.084759][ T4208] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 148.177215][ T26] audit: type=1326 audit(1732173599.983:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7fc00000 [ 148.287618][ T6759] loop0: detected capacity change from 0 to 1024 [ 148.389816][ T6759] hfsplus: extend alloc file! (8192,65536,366) [ 148.422695][ T6762] loop6: detected capacity change from 0 to 1024 [ 148.998322][ T4208] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.199643][ T6762] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.650612][ T4208] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.054984][ T4208] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 150.064074][ T4208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.123339][ T4208] usb 6-1: SerialNumber: syz [ 150.358506][ T6783] loop0: detected capacity change from 0 to 512 [ 150.458549][ T4208] usb 6-1: 0:2 : does not exist [ 150.522285][ T4208] usb 6-1: USB disconnect, device number 6 [ 150.548758][ T6783] EXT4-fs (loop0): 1 orphan inode deleted [ 150.580737][ T6783] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 150.633971][ T4280] udevd[4280]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 150.646086][ T6783] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.746819][ T6783] 9pnet: Insufficient options for proto=fd [ 150.908792][ T6794] loop2: detected capacity change from 0 to 1024 [ 150.924774][ T6796] ptrace attach of "./syz-executor exec"[6797] was attempted by "./syz-executor exec"[6796] [ 151.607037][ T6803] loop3: detected capacity change from 0 to 8192 [ 151.834770][ T6829] loop2: detected capacity change from 0 to 512 [ 151.961412][ T6803] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 151.969236][ T6829] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 151.970970][ T6803] FAT-fs (loop3): Filesystem has been set read-only [ 151.993066][ T6803] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 2068) [ 152.001756][ T6803] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 2068) [ 152.034687][ T4210] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 152.126415][ T6829] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.513773][ T6840] 9pnet: Insufficient options for proto=fd [ 152.514744][ T4210] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.555980][ T6840] binfmt_misc: register: failed to install interpreter file ./file0 [ 152.580950][ T4210] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.704776][ T4210] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 152.714076][ T4210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.780106][ T4210] usb 7-1: SerialNumber: syz [ 152.792870][ T6843] loop0: detected capacity change from 0 to 1024 [ 152.997603][ T6846] loop2: detected capacity change from 0 to 1024 [ 153.128663][ T4210] usb 7-1: 0:2 : does not exist [ 153.218671][ T4210] usb 7-1: USB disconnect, device number 4 [ 153.515442][ T144] hfsplus: b-tree write err: -5, ino 4 [ 153.541274][ T4280] udevd[4280]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.919874][ T6872] 9pnet: Insufficient options for proto=fd [ 154.003189][ T6872] binfmt_misc: register: failed to install interpreter file ./file0 [ 154.102758][ T6859] loop3: detected capacity change from 0 to 8192 [ 154.353021][ T6884] loop0: detected capacity change from 0 to 1024 [ 154.394681][ T6859] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 154.403873][ T6859] FAT-fs (loop3): Filesystem has been set read-only [ 154.534773][ T6859] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 2068) [ 154.628090][ T6888] loop6: detected capacity change from 0 to 512 [ 154.640657][ T6859] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 2068) [ 155.074076][ T6888] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 155.187158][ T6905] loop0: detected capacity change from 0 to 128 [ 155.196985][ T6902] 9pnet: Insufficient options for proto=fd [ 155.230675][ T6888] EXT4-fs (loop6): invalid journal inode [ 155.259457][ T6905] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 155.306131][ T6902] binfmt_misc: register: failed to install interpreter file ./file0 [ 155.330652][ T6908] loop5: detected capacity change from 0 to 256 [ 155.415415][ T6905] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 155.435272][ T6888] EXT4-fs (loop6): can't get journal size [ 155.506347][ T6888] EXT4-fs (loop6): 1 truncate cleaned up [ 155.512721][ T6888] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 155.588287][ T6913] loop2: detected capacity change from 0 to 128 [ 155.702775][ T6908] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 155.874910][ T6913] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 155.975567][ T6920] loop3: detected capacity change from 0 to 1024 [ 156.211906][ T6919] loop0: detected capacity change from 0 to 8192 [ 156.415113][ T6919] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 156.423934][ T6919] FAT-fs (loop0): Filesystem has been set read-only [ 156.473152][ T6927] loop6: detected capacity change from 0 to 128 [ 156.485346][ T6919] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 2068) [ 156.549323][ T6919] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 2068) [ 156.751409][ T6939] loop3: detected capacity change from 0 to 164 [ 156.910353][ T6941] binfmt_misc: register: failed to install interpreter file ./file0 [ 157.220653][ T6949] loop0: detected capacity change from 0 to 256 [ 157.360062][ T6949] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 157.648769][ T6961] loop0: detected capacity change from 0 to 1024 [ 157.884794][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 157.894595][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 158.171012][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 158.384188][ T6975] loop0: detected capacity change from 0 to 1024 [ 158.518746][ T26] kauditd_printk_skb: 92 callbacks suppressed [ 158.518763][ T26] audit: type=1800 audit(1732173611.243:309): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.869" name="bus" dev="loop0" ino=25 res=0 errno=0 [ 158.676165][ T6977] binfmt_misc: register: failed to install interpreter file ./file0 [ 158.789838][ T6970] loop6: detected capacity change from 0 to 8192 [ 158.863826][ T6985] loop3: detected capacity change from 0 to 256 [ 158.899141][ T26] audit: type=1326 audit(1732173611.623:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7ffc0000 [ 158.980839][ T6985] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 159.002494][ T26] audit: type=1326 audit(1732173611.673:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7ffc0000 [ 159.084463][ T6989] loop2: detected capacity change from 0 to 164 [ 159.141763][ T26] audit: type=1326 audit(1732173611.673:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6406323819 code=0x7ffc0000 [ 159.156595][ T6970] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 159.196218][ T6970] FAT-fs (loop6): Filesystem has been set read-only [ 159.205589][ T6970] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 2068) [ 159.215568][ T6970] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 2068) [ 159.223962][ T26] audit: type=1326 audit(1732173611.673:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7ffc0000 [ 159.271653][ T26] audit: type=1326 audit(1732173611.673:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7ffc0000 [ 159.314255][ T26] audit: type=1326 audit(1732173611.673:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6406323819 code=0x7ffc0000 [ 159.337056][ T26] audit: type=1326 audit(1732173611.673:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7ffc0000 [ 159.354832][ T6992] input: syz0 as /devices/virtual/input/input9 [ 159.462994][ T26] audit: type=1326 audit(1732173611.673:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.2.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6406323819 code=0x7ffc0000 [ 159.934397][ T7005] loop3: detected capacity change from 0 to 512 [ 159.962251][ T7006] loop6: detected capacity change from 0 to 1024 [ 160.089285][ T7005] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 160.344376][ T7005] EXT4-fs (loop3): failed to open journal device unknown-block(11,127) -6 [ 160.710965][ T7018] binfmt_misc: register: failed to install interpreter file ./file0 [ 160.730677][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 160.953356][ T7020] loop0: detected capacity change from 0 to 1024 [ 161.057161][ T7027] loop2: detected capacity change from 0 to 256 [ 161.105401][ T26] audit: type=1326 audit(1732173613.793:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.6.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 161.129210][ T7020] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 161.239756][ T7027] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 161.536366][ T7031] loop3: detected capacity change from 0 to 8192 [ 161.668868][ T7031] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 161.678581][ T7038] loop2: detected capacity change from 0 to 164 [ 161.720455][ T7031] FAT-fs (loop3): Filesystem has been set read-only [ 161.739177][ T7031] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 2068) [ 161.766959][ T7031] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 2068) [ 162.366622][ T7051] loop3: detected capacity change from 0 to 1024 [ 162.499975][ T7054] binfmt_misc: register: failed to install interpreter file ./file0 [ 162.930886][ T7062] loop5: detected capacity change from 0 to 256 [ 162.967011][ T7067] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 163.125579][ T7062] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 163.317290][ T7078] loop3: detected capacity change from 0 to 164 [ 163.391335][ T7071] loop0: detected capacity change from 0 to 8192 [ 163.435932][ T7082] binfmt_misc: register: failed to install interpreter file ./file0 [ 163.454046][ T7084] loop5: detected capacity change from 0 to 8 [ 163.558130][ T7087] netlink: 'syz.2.911': attribute type 4 has an invalid length. [ 163.576006][ T7084] SQUASHFS error: Unable to read directory block [629:0] [ 163.616706][ T7071] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 163.669028][ T7071] FAT-fs (loop0): Filesystem has been set read-only [ 163.701643][ T7089] netlink: 'syz.2.911': attribute type 4 has an invalid length. [ 163.715275][ T7071] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 2068) [ 163.793731][ T7071] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 2068) [ 164.313250][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 164.313267][ T26] audit: type=1326 audit(1732173617.033:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 164.510272][ T26] audit: type=1326 audit(1732173617.073:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 164.604793][ T26] audit: type=1326 audit(1732173617.083:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 164.669387][ T26] audit: type=1326 audit(1732173617.083:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 164.760934][ T26] audit: type=1326 audit(1732173617.093:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 164.764785][ T4210] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 164.862871][ T26] audit: type=1326 audit(1732173617.093:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 164.979375][ T26] audit: type=1326 audit(1732173617.093:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f93d819 code=0x7ffc0000 [ 165.090128][ T7123] loop0: detected capacity change from 0 to 8192 [ 165.096945][ T4210] usb 4-1: Using ep0 maxpacket: 32 [ 165.120618][ T7140] loop5: detected capacity change from 0 to 1024 [ 165.214769][ T4210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.237872][ T4210] usb 4-1: config 0 has no interfaces? [ 165.239159][ T7123] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 165.243391][ T4210] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 165.290400][ T7140] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.304673][ T4210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.318773][ T4210] usb 4-1: config 0 descriptor?? [ 165.323896][ T7123] FAT-fs (loop0): Filesystem has been set read-only [ 165.332713][ T7123] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 2068) [ 165.343345][ T7123] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 2068) [ 165.417102][ T7149] loop6: detected capacity change from 0 to 164 [ 165.964650][ T7176] Dead loop on virtual device ip6_vti0, fix it urgently! [ 166.332786][ T7186] loop5: detected capacity change from 0 to 4096 [ 166.428966][ T7186] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 166.464484][ T7194] loop2: detected capacity change from 0 to 512 [ 166.477659][ T7186] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 166.541338][ T26] audit: type=1326 audit(1732173619.263:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7195 comm="syz.6.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 166.601515][ T7194] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.936: corrupted in-inode xattr [ 166.631362][ T26] audit: type=1326 audit(1732173619.293:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7195 comm="syz.6.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 166.662830][ T26] audit: type=1326 audit(1732173619.293:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7195 comm="syz.6.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 166.684661][ T7194] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.936: couldn't read orphan inode 15 (err -117) [ 166.848964][ T7194] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.903039][ T7211] loop5: detected capacity change from 0 to 512 [ 166.985600][ T7213] loop6: detected capacity change from 0 to 164 [ 167.020323][ T7200] loop0: detected capacity change from 0 to 8192 [ 167.026834][ T7211] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 167.031818][ T7211] EXT4-fs (loop5): invalid journal inode [ 167.114864][ T7211] EXT4-fs (loop5): can't get journal size [ 167.124186][ T7200] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 167.143090][ T7211] EXT4-fs (loop5): 1 truncate cleaned up [ 167.147058][ T7200] FAT-fs (loop0): Filesystem has been set read-only [ 167.164860][ T7211] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 167.170818][ T7200] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 2068) [ 167.208924][ T7200] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 2068) [ 167.544406][ T4545] usb 4-1: USB disconnect, device number 3 [ 167.612093][ T7225] loop2: detected capacity change from 0 to 4096 [ 167.699978][ T7225] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 167.755605][ T7225] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 167.806995][ T7240] loop5: detected capacity change from 0 to 512 [ 167.938730][ T7240] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.955: corrupted in-inode xattr [ 167.986462][ T7225] fscrypt (loop2, inode 18): Direct key flag not allowed with different contents and filenames modes [ 168.047582][ T7240] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.955: couldn't read orphan inode 15 (err -117) [ 168.078350][ T7245] 9pnet: Insufficient options for proto=fd [ 168.095930][ T7245] binfmt_misc: register: failed to install interpreter file ./file0 [ 168.115253][ T7240] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.538498][ T7247] loop6: detected capacity change from 0 to 8192 [ 168.559667][ T7263] loop5: detected capacity change from 0 to 512 [ 168.665708][ T7247] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 168.675471][ T7263] EXT4-fs error (device loop5): __ext4_iget:4872: inode #15: block 1803188595: comm syz.5.966: invalid block [ 168.715364][ T7263] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.966: couldn't read orphan inode 15 (err -117) [ 168.732142][ T7272] binfmt_misc: register: failed to install interpreter file ./file0 [ 168.746897][ T7247] FAT-fs (loop6): Filesystem has been set read-only [ 168.754059][ T7247] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 2068) [ 168.762540][ T7247] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 2068) [ 168.792445][ T7268] loop2: detected capacity change from 0 to 4096 [ 168.813974][ T7263] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000000967,debug_want_extra_isize=0x000000000000005c,usrquota,nombcache,stripe=0x0000000000000008,usrjquota=,,errors=continue. Quota mode: writeback. [ 168.899058][ T7268] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 168.916759][ T7274] loop0: detected capacity change from 0 to 1024 [ 168.944175][ T7263] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.966: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 169.045079][ T7268] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 169.122101][ T7268] fscrypt (loop2, inode 18): Direct key flag not allowed with different contents and filenames modes [ 169.263020][ T7285] loop3: detected capacity change from 0 to 256 [ 169.423618][ T7291] loop0: detected capacity change from 0 to 2048 [ 169.484107][ T7294] loop5: detected capacity change from 0 to 512 [ 169.485237][ T7285] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 169.561758][ T7291] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.579398][ T7294] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 169.617351][ T7294] EXT4-fs (loop5): invalid journal inode [ 169.641467][ T7294] EXT4-fs (loop5): can't get journal size [ 169.731130][ T7303] binfmt_misc: register: failed to install interpreter file ./file0 [ 169.758323][ T7294] EXT4-fs (loop5): 1 truncate cleaned up [ 169.764133][ T7294] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 170.232438][ T7310] loop3: detected capacity change from 0 to 1024 [ 170.444945][ T4219] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 170.470475][ T7316] loop2: detected capacity change from 0 to 4096 [ 170.493567][ T7320] loop0: detected capacity change from 0 to 512 [ 170.571827][ T7316] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 170.613562][ T7316] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 170.656983][ T7320] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.991: corrupted inode contents [ 170.685732][ T7320] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #16: comm syz.0.991: mark_inode_dirty error [ 170.756850][ T7316] fscrypt (loop2, inode 18): Direct key flag not allowed with different contents and filenames modes [ 170.776616][ T7320] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.991: corrupted inode contents [ 170.815036][ T7320] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.991: mark_inode_dirty error [ 170.834949][ T4219] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.856278][ T4219] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.861559][ T7320] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.991: corrupted inode contents [ 170.929028][ T7320] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 170.954879][ T4219] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 170.989982][ T7320] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.991: corrupted inode contents [ 170.993288][ T4219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 171.057403][ T7334] loop3: detected capacity change from 0 to 256 [ 171.062763][ T7320] EXT4-fs error (device loop0): ext4_truncate:4272: inode #16: comm syz.0.991: mark_inode_dirty error [ 171.074027][ T4219] usb 6-1: SerialNumber: syz [ 171.084828][ T7333] binfmt_misc: register: failed to install interpreter file ./file0 [ 171.125044][ T7320] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 171.159490][ T7334] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 171.183099][ T7336] netlink: 32 bytes leftover after parsing attributes in process `syz.6.996'. [ 171.183810][ T7320] EXT4-fs (loop0): 1 truncate cleaned up [ 171.207379][ T7320] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.241912][ T7320] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.261514][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.270580][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.327754][ T7338] netlink: 47 bytes leftover after parsing attributes in process `syz.2.997'. [ 171.344759][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 171.367411][ T4219] usb 6-1: 0:2 : does not exist [ 171.385065][ T4219] usb 6-1: unit 255 not found! [ 171.434372][ T4219] usb 6-1: USB disconnect, device number 7 [ 171.736085][ T4280] udevd[4280]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.845850][ T7352] loop2: detected capacity change from 0 to 4096 [ 171.919539][ T7356] loop0: detected capacity change from 0 to 512 [ 171.931007][ T7352] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 171.943750][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 171.943766][ T26] audit: type=1326 audit(1732173624.663:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 172.029466][ T26] audit: type=1326 audit(1732173624.703:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 172.052453][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 172.155851][ T7352] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 172.172322][ T7356] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.1006: corrupted in-inode xattr [ 172.188283][ T7356] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1006: couldn't read orphan inode 15 (err -117) [ 172.209214][ T7366] loop6: detected capacity change from 0 to 256 [ 172.247318][ T7356] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.270537][ T26] audit: type=1326 audit(1732173624.703:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 172.295406][ T26] audit: type=1326 audit(1732173624.703:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 172.322730][ T26] audit: type=1326 audit(1732173624.703:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 172.347552][ T26] audit: type=1326 audit(1732173624.713:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 172.432291][ T7366] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 172.444924][ T26] audit: type=1326 audit(1732173624.713:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 172.504342][ T7366] FAT-fs (loop6): Filesystem has been set read-only [ 172.543440][ T26] audit: type=1326 audit(1732173624.713:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7357 comm="syz.6.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6259745819 code=0x7ffc0000 [ 172.641508][ T7369] loop2: detected capacity change from 0 to 1024 [ 172.783190][ T7369] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.912055][ T7377] binder: 7376:7377 ioctl c0306201 200003c0 returned -22 [ 173.129225][ T26] audit: type=1326 audit(1732173625.853:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c7a4b819 code=0x7ffc0000 [ 173.193085][ T7394] loop5: detected capacity change from 0 to 512 [ 173.232512][ T26] audit: type=1326 audit(1732173625.883:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7387 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2c7a4b819 code=0x7ffc0000 [ 173.274561][ T7394] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 173.311076][ T7392] loop3: detected capacity change from 0 to 4096 [ 173.344698][ T7394] EXT4-fs (loop5): invalid journal inode [ 173.350449][ T7394] EXT4-fs (loop5): can't get journal size [ 173.402706][ T7394] EXT4-fs (loop5): 1 truncate cleaned up [ 173.408890][ T7392] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 173.412627][ T7394] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 173.572776][ T7392] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 174.209653][ T7438] loop0: detected capacity change from 0 to 256 [ 174.302963][ T7444] loop6: detected capacity change from 0 to 512 [ 174.327639][ T7446] loop5: detected capacity change from 0 to 128 [ 174.362790][ T7442] loop3: detected capacity change from 0 to 4096 [ 174.389298][ T7438] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 174.400638][ T7446] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 174.405963][ T7444] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 174.441030][ T7444] EXT4-fs (loop6): invalid journal inode [ 174.460732][ T7444] EXT4-fs (loop6): can't get journal size [ 174.479475][ T7442] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 174.493180][ T7444] EXT4-fs (loop6): 1 truncate cleaned up [ 174.536237][ T7444] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 174.565321][ T7442] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 174.981195][ T1106] kernel write not supported for file /asound/seq/clients (pid: 1106 comm: kworker/0:2) [ 175.145264][ T7475] loop5: detected capacity change from 0 to 256 [ 175.223020][ T7475] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 175.263443][ T7481] binfmt_misc: register: failed to install interpreter file ./file0 [ 175.565037][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 175.717975][ T7487] loop5: detected capacity change from 0 to 4096 [ 175.739185][ T7490] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.747257][ T7490] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.790406][ T7487] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 175.855114][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 175.936253][ T7487] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 176.060875][ T7487] fscrypt (loop5, inode 18): Unsupported encryption modes (contents 0, filenames 0) [ 176.104148][ T7504] [ 176.106490][ T7504] ====================================================== [ 176.113526][ T7504] WARNING: possible circular locking dependency detected [ 176.120630][ T7504] 5.15.173-syzkaller #0 Not tainted [ 176.125964][ T7504] ------------------------------------------------------ [ 176.132976][ T7504] syz.0.1068/7504 is trying to acquire lock: [ 176.139074][ T7504] ffff8880779c4c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0 [ 176.150149][ T7504] [ 176.150149][ T7504] but task is already holding lock: [ 176.157515][ T7504] ffffffff8dcbe668 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 176.167212][ T7504] [ 176.167212][ T7504] which lock already depends on the new lock. [ 176.167212][ T7504] [ 176.177711][ T7504] [ 176.177711][ T7504] the existing dependency chain (in reverse order) is: [ 176.186718][ T7504] [ 176.186718][ T7504] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 176.194798][ T7504] lock_acquire+0x1db/0x4f0 [ 176.199845][ T7504] __mutex_lock_common+0x1da/0x25a0 [ 176.205581][ T7504] mutex_lock_nested+0x17/0x20 [ 176.210900][ T7504] rfkill_register+0x30/0x880 [ 176.216137][ T7504] hci_register_dev+0x4dd/0xa50 [ 176.221510][ T7504] vhci_create_device+0x310/0x590 [ 176.227050][ T7504] vhci_write+0x382/0x430 [ 176.231893][ T7504] vfs_write+0xacd/0xe50 [ 176.236666][ T7504] ksys_write+0x1a2/0x2c0 [ 176.241628][ T7504] do_syscall_64+0x3b/0xb0 [ 176.246577][ T7504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.252997][ T7504] [ 176.252997][ T7504] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 176.260808][ T7504] lock_acquire+0x1db/0x4f0 [ 176.265829][ T7504] __mutex_lock_common+0x1da/0x25a0 [ 176.271540][ T7504] mutex_lock_nested+0x17/0x20 [ 176.276814][ T7504] vhci_send_frame+0x8a/0xf0 [ 176.281919][ T7504] hci_send_frame+0x1af/0x2f0 [ 176.287104][ T7504] hci_tx_work+0xb2e/0x1a30 [ 176.292116][ T7504] process_one_work+0x8a1/0x10c0 [ 176.297565][ T7504] worker_thread+0xaca/0x1280 [ 176.302760][ T7504] kthread+0x3f6/0x4f0 [ 176.307336][ T7504] ret_from_fork+0x1f/0x30 [ 176.312264][ T7504] [ 176.312264][ T7504] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 176.321458][ T7504] lock_acquire+0x1db/0x4f0 [ 176.326477][ T7504] __flush_work+0xeb/0x1a0 [ 176.331429][ T7504] hci_dev_do_close+0x20a/0x1070 [ 176.336895][ T7504] hci_unregister_dev+0x2d7/0x580 [ 176.342530][ T7504] vhci_release+0x73/0xc0 [ 176.347383][ T7504] __fput+0x3fe/0x8e0 [ 176.351993][ T7504] task_work_run+0x129/0x1a0 [ 176.357110][ T7504] do_exit+0x6a3/0x2480 [ 176.361790][ T7504] do_group_exit+0x144/0x310 [ 176.366907][ T7504] __x64_sys_exit_group+0x3b/0x40 [ 176.372451][ T7504] do_syscall_64+0x3b/0xb0 [ 176.377380][ T7504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.383789][ T7504] [ 176.383789][ T7504] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 176.391594][ T7504] lock_acquire+0x1db/0x4f0 [ 176.396609][ T7504] __mutex_lock_common+0x1da/0x25a0 [ 176.402322][ T7504] mutex_lock_nested+0x17/0x20 [ 176.407601][ T7504] bg_scan_update+0xa1/0x4a0 [ 176.412703][ T7504] process_one_work+0x8a1/0x10c0 [ 176.418150][ T7504] worker_thread+0xaca/0x1280 [ 176.423343][ T7504] kthread+0x3f6/0x4f0 [ 176.427918][ T7504] ret_from_fork+0x1f/0x30 [ 176.432931][ T7504] [ 176.432931][ T7504] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 176.442747][ T7504] validate_chain+0x1649/0x5930 [ 176.448245][ T7504] __lock_acquire+0x1295/0x1ff0 [ 176.453691][ T7504] lock_acquire+0x1db/0x4f0 [ 176.458720][ T7504] __flush_work+0xeb/0x1a0 [ 176.463666][ T7504] __cancel_work_timer+0x519/0x6a0 [ 176.469315][ T7504] hci_request_cancel_all+0xcb/0x300 [ 176.475120][ T7504] hci_dev_do_close+0x51/0x1070 [ 176.480511][ T7504] hci_rfkill_set_block+0x114/0x1a0 [ 176.486249][ T7504] rfkill_set_block+0x1e7/0x430 [ 176.491675][ T7504] rfkill_fop_write+0x5b7/0x790 [ 176.497060][ T7504] vfs_write+0x30c/0xe50 [ 176.501827][ T7504] ksys_write+0x1a2/0x2c0 [ 176.506823][ T7504] do_syscall_64+0x3b/0xb0 [ 176.511904][ T7504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.518326][ T7504] [ 176.518326][ T7504] other info that might help us debug this: [ 176.518326][ T7504] [ 176.528550][ T7504] Chain exists of: [ 176.528550][ T7504] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 176.528550][ T7504] [ 176.544369][ T7504] Possible unsafe locking scenario: [ 176.544369][ T7504] [ 176.551812][ T7504] CPU0 CPU1 [ 176.557171][ T7504] ---- ---- [ 176.562537][ T7504] lock(rfkill_global_mutex); [ 176.567304][ T7504] lock(&data->open_mutex); [ 176.574630][ T7504] lock(rfkill_global_mutex); [ 176.581930][ T7504] lock((work_completion)(&hdev->bg_scan_update)); [ 176.588655][ T7504] [ 176.588655][ T7504] *** DEADLOCK *** [ 176.588655][ T7504] [ 176.596795][ T7504] 1 lock held by syz.0.1068/7504: [ 176.601822][ T7504] #0: ffffffff8dcbe668 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 176.612044][ T7504] [ 176.612044][ T7504] stack backtrace: [ 176.617938][ T7504] CPU: 1 PID: 7504 Comm: syz.0.1068 Not tainted 5.15.173-syzkaller #0 [ 176.626170][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 176.636221][ T7504] Call Trace: [ 176.639507][ T7504] [ 176.642450][ T7504] dump_stack_lvl+0x1e3/0x2d0 [ 176.647124][ T7504] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 176.652767][ T7504] ? print_circular_bug+0x12b/0x1a0 [ 176.657957][ T7504] check_noncircular+0x2f8/0x3b0 [ 176.662893][ T7504] ? add_chain_block+0x850/0x850 [ 176.667841][ T7504] ? lockdep_lock+0x11f/0x2a0 [ 176.672626][ T7504] validate_chain+0x1649/0x5930 [ 176.677474][ T7504] ? mark_lock+0x98/0x340 [ 176.681791][ T7504] ? reacquire_held_locks+0x660/0x660 [ 176.687150][ T7504] ? __lock_acquire+0x1295/0x1ff0 [ 176.692182][ T7504] ? mark_lock+0x98/0x340 [ 176.696524][ T7504] ? look_up_lock_class+0x77/0x120 [ 176.701627][ T7504] ? register_lock_class+0x100/0x9a0 [ 176.706903][ T7504] ? mark_lock+0x98/0x340 [ 176.711228][ T7504] ? is_dynamic_key+0x1f0/0x1f0 [ 176.716073][ T7504] ? __lock_acquire+0x1295/0x1ff0 [ 176.721173][ T7504] ? mark_lock+0x98/0x340 [ 176.725492][ T7504] __lock_acquire+0x1295/0x1ff0 [ 176.730337][ T7504] lock_acquire+0x1db/0x4f0 [ 176.734927][ T7504] ? __flush_work+0xcf/0x1a0 [ 176.739508][ T7504] ? rcu_lock_release+0x5/0x20 [ 176.744282][ T7504] ? read_lock_is_recursive+0x10/0x10 [ 176.749662][ T7504] ? start_flush_work+0x776/0x820 [ 176.754702][ T7504] __flush_work+0xeb/0x1a0 [ 176.759300][ T7504] ? __flush_work+0xcf/0x1a0 [ 176.763892][ T7504] ? flush_work+0x20/0x20 [ 176.768307][ T7504] ? print_irqtrace_events+0x210/0x210 [ 176.773776][ T7504] ? lock_timer_base+0x260/0x260 [ 176.778710][ T7504] ? __cancel_work_timer+0x467/0x6a0 [ 176.783996][ T7504] __cancel_work_timer+0x519/0x6a0 [ 176.789218][ T7504] ? cancel_work_sync+0x20/0x20 [ 176.794058][ T7504] ? lockdep_hardirqs_on+0x94/0x130 [ 176.799247][ T7504] ? __cancel_work+0x2ef/0x380 [ 176.804028][ T7504] ? cancel_work+0x20/0x20 [ 176.808439][ T7504] ? print_irqtrace_events+0x210/0x210 [ 176.813896][ T7504] hci_request_cancel_all+0xcb/0x300 [ 176.819260][ T7504] hci_dev_do_close+0x51/0x1070 [ 176.824119][ T7504] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 176.830040][ T7504] ? _raw_spin_unlock+0x40/0x40 [ 176.834902][ T7504] hci_rfkill_set_block+0x114/0x1a0 [ 176.840095][ T7504] ? rcu_lock_release+0x20/0x20 [ 176.844935][ T7504] rfkill_set_block+0x1e7/0x430 [ 176.849780][ T7504] rfkill_fop_write+0x5b7/0x790 [ 176.854645][ T7504] ? rfkill_fop_read+0x470/0x470 [ 176.859678][ T7504] ? fsnotify_perm+0x64/0x590 [ 176.864357][ T7504] ? security_file_permission+0x75/0xa0 [ 176.869898][ T7504] ? rfkill_fop_read+0x470/0x470 [ 176.874933][ T7504] vfs_write+0x30c/0xe50 [ 176.879347][ T7504] ? file_end_write+0x250/0x250 [ 176.884188][ T7504] ? __fget_files+0x413/0x480 [ 176.888856][ T7504] ? __fdget_pos+0x1e9/0x380 [ 176.893435][ T7504] ? ksys_write+0x77/0x2c0 [ 176.897842][ T7504] ksys_write+0x1a2/0x2c0 [ 176.902163][ T7504] ? print_irqtrace_events+0x210/0x210 [ 176.907613][ T7504] ? __ia32_sys_read+0x80/0x80 [ 176.912374][ T7504] ? syscall_enter_from_user_mode+0x2e/0x240 [ 176.918350][ T7504] ? lockdep_hardirqs_on+0x94/0x130 [ 176.923543][ T7504] ? syscall_enter_from_user_mode+0x2e/0x240 [ 176.929516][ T7504] do_syscall_64+0x3b/0xb0 [ 176.934001][ T7504] ? clear_bhb_loop+0x15/0x70 [ 176.938700][ T7504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.944688][ T7504] RIP: 0033:0x7fc2c7a4b819 [ 176.949096][ T7504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.968781][ T7504] RSP: 002b:00007fc2c58c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.977209][ T7504] RAX: ffffffffffffffda RBX: 00007fc2c7c02fa0 RCX: 00007fc2c7a4b819 [ 176.985268][ T7504] RDX: 000000000000002e RSI: 0000000020000300 RDI: 0000000000000003 [ 176.993320][ T7504] RBP: 00007fc2c7abe75e R08: 0000000000000000 R09: 0000000000000000 [ 177.001281][ T7504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.009245][ T7504] R13: 0000000000000000 R14: 00007fc2c7c02fa0 R15: 00007ffe0afb2348 [ 177.017425][ T7504]