last executing test programs: 3m17.207938403s ago: executing program 2 (id=163): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) 3m17.059031976s ago: executing program 2 (id=164): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x200, 0x5, 0x2, 0xffffff40}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2a1101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) pipe(0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x12be, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0xfffffffc, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) close(0x3) 3m14.618875703s ago: executing program 2 (id=166): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(&(0x7f0000000540)='.\x00', 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) utimes(0x0, 0x0) 3m10.837747775s ago: executing program 2 (id=174): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x200, 0x5, 0x2, 0xffffff40}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2a1101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) pipe(0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x12be, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0xfffffffc, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) close(0x3) 3m8.956520811s ago: executing program 2 (id=178): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x517, &(0x7f00000002c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x10000) sendmsg$alg(r2, 0x0, 0x20008040) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0xc001, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f00000000c0), 0x4) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 3m4.447047798s ago: executing program 2 (id=190): r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x100000161, 0x800) read$hidraw(r0, 0x0, 0x3f) 2m50.986080937s ago: executing program 3 (id=226): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x11, 0x17e, &(0x7f00000004c0)="$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") syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@nojournal_checksum}, {@nomblk_io_submit}, {@prjquota}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) 2m49.580015954s ago: executing program 3 (id=230): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file1\x00', 0x8, &(0x7f0000002500)=ANY=[], 0x1, 0x1f1, &(0x7f0000000440)="$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") r1 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendfile(r0, r1, &(0x7f0000000100)=0x100000000, 0xffff) 2m49.318273358s ago: executing program 32 (id=190): r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x100000161, 0x800) read$hidraw(r0, 0x0, 0x3f) 2m49.310342939s ago: executing program 3 (id=232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x1, 0x7f, 0x1, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m49.051965764s ago: executing program 3 (id=233): syz_mount_image$xfs(&(0x7f0000022f80), &(0x7f0000009640)='./file0\x00', 0x2000400, &(0x7f00000000c0), 0x1, 0x978f, &(0x7f0000022fc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000180)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x10042, 0x80) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_evm(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000300)=@v2={0x3, 0x1, 0xe, 0x3ff}, 0x9, 0x0) truncate(&(0x7f0000000140)='./file0/file1\x00', 0x1) 2m47.059859032s ago: executing program 3 (id=236): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000200)={[{@noquota}, {@nointegrity}, {@grpquota}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@nodiscard}, {@quota}, {@noquota}, {@nointegrity}]}, 0x1, 0x614f, &(0x7f000000ccc0)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x10010) getpid() r4 = socket(0x23, 0x5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x88, 0x0, @remote, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x113, 0x2, 0x0, 0x0) 2m43.828105094s ago: executing program 3 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x23b) 2m43.283604704s ago: executing program 33 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x23b) 14.855582862s ago: executing program 5 (id=538): r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x400001) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f0000000940)=""/37, &(0x7f0000000980)=0x25) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e6c733d6575632d6a702c6e6f626172726965722c63726561746f723dbd3c66f52c756d61736b3d30303137373737372c666f7263652c6e6f626172726965722c00"/81, @ANYBLOB="7e470ec52ef30c5ac72e1072e77aee1fff5388f306186de2b71167f738c95488f2dfab0487b84972924808fdcdaea358445ecd3928291cb81d39aed37e6e3254b0b86c0ae79d733234ae08d4b97ca8bcb50071d6dd338d153e4bb342d1be670f992a30db0a23e13aff5ce6794f62eb47e59796c3acc9fd1842606adb0c4e8646c1ac44a2a0f98b7a2d", @ANYRES64, @ANYRES16], 0x3, 0x6b2, &(0x7f0000000280)="$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") chdir(0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000b40)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x2004, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) 12.108126135s ago: executing program 0 (id=541): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x1, 0x7f, 0x1, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 11.683000353s ago: executing program 0 (id=543): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 11.272347591s ago: executing program 5 (id=544): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000180)={[{@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@nouser_xattr}]}, 0xfe, 0x25c, &(0x7f0000000400)="$eJzs3T1oJGUcBvBnZne9y90ifjSK+AEihwbC2Qk2Z6NwIMchIqhwImKjXITzDruLlY2F1ipX2QSxM1pKmmCjCFZRU8RG0CBisNBiZXcSiZuNH7ubHS/z+8Fkvt6Z/ztknjdDYHYDNNZNSc4kaSWZT9JJUuxtcE817W67Nrd2Ien1nvipGGyr1iu7bU4mWUryUJLVsshL7eTKyjObv64/durNy5373l95em6mF7lja3Pj8e33zr3x0dkHr3zx1Q/nipxJ9y/XNX3FiG3tIrnlMIr9TxTtunvAv3H+tQ+/7uf+1iT3DvLfSZnql/fWpRtWO3ng3YOOffvHL++YZV+B6ev1Ov2/gUs9oHHKJN0U5UKSarksFxaqZ/hvWifKlxcvvTr/4uLliy/UPVIB09JNNh795NjHJ4fy/32ryj9wdPXz/+T55W/7y9utunsDzMSd1ayf//nnrt4f+YfGmTD/i/4dANevcfJ/6vZD7hQwE57/obnkH5pL/qG55B+OsM7f75Z/aC75h+aSf2iuvfkHAJqld6zuN5CButQ9/gAAAAAAAAAAAAAAAAAAAPtdm1u7sDvNquZn7yRbjyRpj6rfGnwfcXJ88PPEL0W/2Z+K6rCJPHv3hCeY0Ac1v31943f11v/8rnrrX72YLL2e5HS7vf/+K3buv/HdXM2OH7S/8/yEBf6jYmj94admW3/Y78tTOtGYA8HZ9eTT/vhzetT4U+a2wXz0+NP9549YHvLzvuav/DZevwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJi9PwIAAP//OXhvUg==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_GET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) userfaultfd(0x80801) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) r3 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(r3, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) 10.885668079s ago: executing program 0 (id=545): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)={[{@discard_unit_segment}, {@jqfmt_vfsold}, {@six_active_logs}, {@nodiscard}, {@checkpoint_enable}, {@segment_mode}, {@prjjquota={'prjjquota', 0x3d, 'uX\xc2ser_xat'}}, {@gc_merge}, {@jqfmt_vfsold}, {@jqfmt_vfsold}, {@fsync_mode_strict}, {@background_gc_on}, {@lfs_mode}, {@noinline_dentry}]}, 0x0, 0x554d, &(0x7f0000000380)="$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") r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x24, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xd, 0x2, 0x3}, 0x10, 0x6ca5, 0xffffffffffffffff, 0x4, &(0x7f0000000780)=[r0, r0, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x5, 0x5, 0x7, 0x2}, {0x2, 0x1, 0x10}, {0x3, 0x1, 0x7, 0xa}, {0x5, 0x5, 0xfffffffe, 0x3}], 0x10, 0x400}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) fchdir(0xffffffffffffffff) add_key(&(0x7f0000000200)='pkcs7_test\x00', 0x0, &(0x7f0000000180)="100c060826d775bb1aeca7ca3792", 0xe, 0xfffffffffffffffc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d007a0001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 9.832093789s ago: executing program 5 (id=547): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d", 0x8, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fsmount(r0, 0x1, 0x2) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x181401, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 9.2464563s ago: executing program 4 (id=548): gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x3, 0x202, 0x10001, 0xffffffffffffffff, 0x8, 0xeaea, 0x200, 0x4, 0x2d, 0x80000005}) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000001c0)=0x7) 9.019098575s ago: executing program 1 (id=549): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x24000000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000680)={0xa, 0x4e1e, 0xffff198c, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000a00)="af", 0x1}], 0x1}}], 0x1, 0x4c040) 8.653894502s ago: executing program 1 (id=550): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file1\x00', 0x8, &(0x7f0000002500)=ANY=[], 0x1, 0x1f1, &(0x7f0000000440)="$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") r1 = open(0x0, 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r1, &(0x7f0000000100)=0x100000000, 0xffff) 8.116058962s ago: executing program 1 (id=551): pipe2$watch_queue(0x0, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000940)='./file0\x00', 0x10017, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0xf5, 0x316, &(0x7f0000000980)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090008000000000000000a100000000000000000000008001e0001"], 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x46}) 8.093832133s ago: executing program 4 (id=552): r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x400001) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f0000000940)=""/37, &(0x7f0000000980)=0x25) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e6c733d6575632d6a702c6e6f626172726965722c63726561746f723dbd3c66f52c756d61736b3d30303137373737372c666f7263652c6e6f626172726965722c00"/81, @ANYBLOB="7e470ec52ef30c5ac72e1072e77aee1fff5388f306186de2b71167f738c95488f2dfab0487b84972924808fdcdaea358445ecd3928291cb81d39aed37e6e3254b0b86c0ae79d733234ae08d4b97ca8bcb50071d6dd338d153e4bb342d1be670f992a30db0a23e13aff5ce6794f62eb47e59796c3acc9fd1842606adb0c4e8646c1ac44a2a0f98b7a2d", @ANYRES64, @ANYRES16], 0x3, 0x6b2, &(0x7f0000000280)="$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") chdir(0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000b40)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x2004, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) 6.643817051s ago: executing program 1 (id=553): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.944033933s ago: executing program 4 (id=554): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000004180)={0x10000008}) bind$llc(r4, &(0x7f0000000180)={0x1a, 0x17, 0xa, 0x6, 0x36, 0x81, @random="6bdb72576b7e"}, 0x10) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) 3.792872396s ago: executing program 0 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB="00000080985785000000000000000000efff0000eb4dc22a030a122e2ad3"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x4000010) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.008151171s ago: executing program 0 (id=556): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000140)='./file0\x00', 0x301c802, &(0x7f0000000f80)=ANY=[], 0x11, 0x5fbc, &(0x7f0000003100)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x50) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) 2.762623746s ago: executing program 4 (id=557): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000440)={0x0, 0x7, {0x8, @usage=0x2, 0x0, 0xfffffffffffffffd, 0x2, 0x7, 0x2, 0x0, 0x0, @struct={0x163, 0xffffffff}, 0xa, 0x8, [0x80000000, 0x80000001, 0x8000000000000001, 0xfffffc, 0x0, 0x13]}, {0x2, @struct={0x5e4386e5, 0x5}, 0x0, 0x1, 0xa, 0x8ddf, 0x100000000000000, 0x0, 0x0, @usage=0x9, 0x0, 0xfffffffc, [0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4]}, {0x5, @usage, 0x0, 0x0, 0x40003, 0x6277, 0x8001, 0xb, 0xe953a8d364eaa9e4, @usage=0x10001, 0xfffffffc, 0x7ffb, [0x0, 0x6, 0x5, 0x7f, 0xd451, 0x6]}, {0x0, 0xfffffffffffc, 0x400000}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.54075551s ago: executing program 4 (id=558): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x8000c6, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) 2.372656774s ago: executing program 5 (id=559): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file1\x00', 0x8, &(0x7f0000002500)=ANY=[], 0x1, 0x1f1, &(0x7f0000000440)="$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") r1 = open(0x0, 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r1, &(0x7f0000000100)=0x100000000, 0xffff) 2.132046429s ago: executing program 5 (id=560): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x3, 0x202, 0x10001, 0xffffffffffffffff, 0x8, 0xeaea, 0x200, 0x4, 0x2d, 0x80000005}) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000001c0)=0x7) 2.07350287s ago: executing program 1 (id=561): pipe2$watch_queue(0x0, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000940)='./file0\x00', 0x10017, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0xf5, 0x316, &(0x7f0000000980)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090008000000000000000a100000000000000000000008001e0001"], 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x46}) 1.970619571s ago: executing program 4 (id=562): r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x400001) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f0000000940)=""/37, &(0x7f0000000980)=0x25) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e6c733d6575632d6a702c6e6f626172726965722c63726561746f723dbd3c66f52c756d61736b3d30303137373737372c666f7263652c6e6f626172726965722c00"/81, @ANYBLOB="7e470ec52ef30c5ac72e1072e77aee1fff5388f306186de2b71167f738c95488f2dfab0487b84972924808fdcdaea358445ecd3928291cb81d39aed37e6e3254b0b86c0ae79d733234ae08d4b97ca8bcb50071d6dd338d153e4bb342d1be670f992a30db0a23e13aff5ce6794f62eb47e59796c3acc9fd1842606adb0c4e8646c1ac44a2a0f98b7a2d", @ANYRES64, @ANYRES16], 0x3, 0x6b2, &(0x7f0000000280)="$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") chdir(0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000b40)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x2004, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) 722.923746ms ago: executing program 1 (id=563): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)={[{@discard_unit_segment}, {@jqfmt_vfsold}, {@six_active_logs}, {@nodiscard}, {@checkpoint_enable}, {@segment_mode}, {@prjjquota={'prjjquota', 0x3d, 'uX\xc2ser_xat'}}, {@gc_merge}, {@jqfmt_vfsold}, {@jqfmt_vfsold}, {@fsync_mode_strict}, {@background_gc_on}, {@lfs_mode}, {@noinline_dentry}]}, 0x0, 0x554d, &(0x7f0000000380)="$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") r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x24, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xd, 0x2, 0x3}, 0x10, 0x6ca5, 0xffffffffffffffff, 0x4, &(0x7f0000000780)=[r0, r0, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x5, 0x5, 0x7, 0x2}, {0x2, 0x1, 0x10}, {0x3, 0x1, 0x7, 0xa}, {0x5, 0x5, 0xfffffffe, 0x3}], 0x10, 0x400}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0xe9c87a10756735dd) add_key(&(0x7f0000000200)='pkcs7_test\x00', 0x0, &(0x7f0000000180)="100c060826d775bb1aeca7ca3792", 0xe, 0xfffffffffffffffc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d007a0001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 368.120002ms ago: executing program 5 (id=564): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140), 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x1, 0x10, "12292083d584a74b161779b6cfacd7ae"}, 0x0}) 0s ago: executing program 0 (id=565): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000004180)={0x10000008}) bind$llc(r3, &(0x7f0000000180)={0x1a, 0x17, 0xa, 0x6, 0x36, 0x81, @random="6bdb72576b7e"}, 0x10) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) kernel console output (not intermixed with test programs): ed: -110 [ 119.677323][ T6105] loop2: detected capacity change from 0 to 128 [ 119.705134][ T6105] EXT4-fs: Ignoring removed nobh option [ 119.730878][ T6105] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.776547][ T6105] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.899640][ T6110] loop1: detected capacity change from 0 to 512 [ 119.909190][ T6110] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 120.212342][ T6110] EXT4-fs (loop1): 1 orphan inode deleted [ 120.258125][ T6110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.280289][ T6110] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.281554][ T42] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:2: Failed to release dquot type 1 [ 120.307188][ T6118] loop3: detected capacity change from 0 to 128 [ 120.317087][ T6118] FAT-fs (loop3): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 120.354679][ T5801] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.371889][ T6110] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #2: block 3: comm syz.1.68: lblock 0 mapped to illegal pblock 3 (length 1) [ 120.475798][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.734438][ T6122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.722210][ T6132] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.142882][ T28] kauditd_printk_skb: 1359 callbacks suppressed [ 122.142898][ T28] audit: type=1326 audit(1759288008.425:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa3712af79 code=0x7ffc0000 [ 122.196799][ T28] audit: type=1326 audit(1759288008.445:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa3712af79 code=0x7ffc0000 [ 122.262656][ T28] audit: type=1326 audit(1759288008.445:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa3712af79 code=0x7ffc0000 [ 122.319274][ T28] audit: type=1326 audit(1759288008.455:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa3712af79 code=0x7ffc0000 [ 122.382718][ T28] audit: type=1326 audit(1759288008.455:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa3712af79 code=0x7ffc0000 [ 122.462654][ T28] audit: type=1326 audit(1759288008.455:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa3712af79 code=0x7ffc0000 [ 122.685057][ T28] audit: type=1326 audit(1759288008.455:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa3712af79 code=0x7ffc0000 [ 122.776979][ T28] audit: type=1326 audit(1759288008.455:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa3712af79 code=0x7ffc0000 [ 122.800149][ T28] audit: type=1326 audit(1759288008.455:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa3712af79 code=0x7ffc0000 [ 122.829150][ T28] audit: type=1326 audit(1759288008.455:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa3712af79 code=0x7ffc0000 [ 123.940473][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.341956][ T6159] loop2: detected capacity change from 0 to 128 [ 124.350884][ T6159] FAT-fs (loop2): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 124.560957][ T5803] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.016258][ T6167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.792273][ T6179] loop0: detected capacity change from 0 to 128 [ 125.828755][ T6179] EXT4-fs: Ignoring removed nobh option [ 126.422080][ T6179] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.502814][ T6179] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.853364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 127.472726][ T28] kauditd_printk_skb: 408 callbacks suppressed [ 127.472745][ T28] audit: type=1804 audit(1759288013.735:2642): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.86" name="/newroot/24/mnt/bus" dev="loop0" ino=12 res=1 errno=0 [ 128.174510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 128.209056][ T6208] loop1: detected capacity change from 0 to 2048 [ 128.263089][ T6208] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 128.661887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 130.970246][ T6233] loop2: detected capacity change from 0 to 16 [ 131.055473][ T6233] erofs: (device loop2): mounted with root inode @ nid 36. [ 131.212693][ T28] audit: type=1326 audit(1759288017.465:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 131.678999][ T28] audit: type=1326 audit(1759288017.485:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 131.710619][ T28] audit: type=1326 audit(1759288017.535:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 131.785033][ T28] audit: type=1326 audit(1759288017.545:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 131.863476][ T28] audit: type=1326 audit(1759288017.545:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 131.936416][ T28] audit: type=1326 audit(1759288017.555:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 132.023685][ T28] audit: type=1326 audit(1759288017.575:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 132.077738][ T28] audit: type=1326 audit(1759288017.575:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 132.100682][ T28] audit: type=1326 audit(1759288017.575:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 132.155307][ T6241] loop2: detected capacity change from 0 to 16 [ 132.186577][ T6241] erofs: (device loop2): mounted with root inode @ nid 36. [ 132.331798][ T5802] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 0] out[9000] [ 132.372792][ T6241] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 132.390637][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.435137][ T6241] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 132.457821][ T6241] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 132.496600][ T6241] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 132.532817][ T6241] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 133.344474][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.359322][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.702397][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 135.702414][ T28] audit: type=1326 audit(1759288021.975:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 135.794194][ T28] audit: type=1326 audit(1759288021.985:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 135.850255][ T28] audit: type=1326 audit(1759288021.985:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 135.887416][ T28] audit: type=1326 audit(1759288021.985:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 135.910788][ T28] audit: type=1326 audit(1759288021.985:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 135.955222][ T28] audit: type=1326 audit(1759288021.985:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 136.003250][ T6273] loop0: detected capacity change from 0 to 16 [ 136.787255][ T6273] erofs: (device loop0): mounted with root inode @ nid 36. [ 136.802252][ T28] audit: type=1326 audit(1759288021.985:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 136.856899][ T28] audit: type=1326 audit(1759288021.985:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 136.908803][ T28] audit: type=1326 audit(1759288022.045:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 137.044157][ T28] audit: type=1326 audit(1759288022.065:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 137.755818][ T5841] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 138.172933][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 138.197607][ T5841] usb 2-1: config 0 interface 0 has no altsetting 0 [ 138.205544][ T5841] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 138.218599][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.305430][ T5841] usb 2-1: config 0 descriptor?? [ 138.492823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 139.311609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 139.906040][ T6276] loop1: detected capacity change from 0 to 256 [ 140.342677][ T6276] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 140.440127][ T5841] hid (null): unknown global tag 0xe [ 140.774590][ T5841] hid (null): report_id 0 is invalid [ 140.780247][ T5841] hid (null): report_id 41307 is invalid [ 140.786782][ T5841] hid (null): report_id 0 is invalid [ 140.794371][ T5841] hid (null): report_id 3691422075 is invalid [ 140.827172][ T5841] hid (null): invalid report_count 29379 [ 140.836333][ T5841] hid (null): usage index exceeded [ 141.128308][ T5841] usb 2-1: USB disconnect, device number 2 [ 141.983184][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 141.983200][ T28] audit: type=1326 audit(1759288028.245:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 142.107983][ T28] audit: type=1326 audit(1759288028.245:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 142.172777][ T28] audit: type=1326 audit(1759288028.245:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 142.733822][ T6312] loop1: detected capacity change from 0 to 16 [ 142.736257][ T6311] loop0: detected capacity change from 0 to 16 [ 142.747728][ T28] audit: type=1326 audit(1759288028.245:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 142.796920][ T28] audit: type=1326 audit(1759288028.295:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 142.825253][ T6312] erofs: (device loop1): mounted with root inode @ nid 36. [ 142.828924][ T6311] erofs: (device loop0): mounted with root inode @ nid 36. [ 142.877583][ T28] audit: type=1326 audit(1759288028.325:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 143.173111][ T28] audit: type=1326 audit(1759288028.335:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 143.243680][ T28] audit: type=1326 audit(1759288028.355:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 143.295363][ T28] audit: type=1326 audit(1759288028.355:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 143.321158][ T28] audit: type=1326 audit(1759288028.355:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 145.291602][ T6329] loop0: detected capacity change from 0 to 128 [ 145.388904][ T6329] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.460688][ T6329] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.742904][ T6337] loop3: detected capacity change from 0 to 128 [ 145.750555][ T6337] FAT-fs (loop3): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 146.275611][ T6341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.729882][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.993837][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 146.993849][ T28] audit: type=1326 audit(1759288033.275:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86c52af79 code=0x7ffc0000 [ 147.123807][ T28] audit: type=1326 audit(1759288033.275:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c58eec9 code=0x7ffc0000 [ 147.200519][ T28] audit: type=1326 audit(1759288033.315:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86c52af79 code=0x7ffc0000 [ 147.272388][ T6346] loop0: detected capacity change from 0 to 8192 [ 147.292084][ T28] audit: type=1326 audit(1759288033.315:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86c52af79 code=0x7ffc0000 [ 147.374483][ T28] audit: type=1326 audit(1759288033.315:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86c52af79 code=0x7ffc0000 [ 147.432814][ T28] audit: type=1326 audit(1759288033.315:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86c52af79 code=0x7ffc0000 [ 147.496523][ T28] audit: type=1326 audit(1759288033.315:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86c52af79 code=0x7ffc0000 [ 147.578267][ T28] audit: type=1326 audit(1759288033.315:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86c52af79 code=0x7ffc0000 [ 147.690699][ T28] audit: type=1326 audit(1759288033.315:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86c52af79 code=0x7ffc0000 [ 147.715483][ T28] audit: type=1326 audit(1759288033.315:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb86c52af79 code=0x7ffc0000 [ 147.797014][ T6359] loop3: detected capacity change from 0 to 1024 [ 147.973864][ T6359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.990476][ T6359] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.036994][ T6359] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.138: bg 0: block 393: padding at end of block bitmap is not set [ 148.075476][ T6359] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 117 [ 148.088577][ T6359] EXT4-fs (loop3): This should not happen!! Data will be lost [ 148.088577][ T6359] [ 148.231103][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.234813][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 148.510875][ T6370] loop2: detected capacity change from 0 to 128 [ 148.518881][ T6370] FAT-fs (loop2): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 149.949106][ T6388] loop1: detected capacity change from 0 to 512 [ 150.009119][ T6390] loop0: detected capacity change from 0 to 128 [ 150.052948][ T6388] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 150.193907][ T6388] EXT4-fs (loop1): 1 truncate cleaned up [ 150.201442][ T6388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.293548][ T5802] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 151.302229][ T5802] Bluetooth: hci1: Injecting HCI hardware error event [ 151.310550][ T5802] Bluetooth: hci1: hardware error 0x00 [ 151.831621][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.925410][ T5802] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 155.879901][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 155.879917][ T28] audit: type=1326 audit(1759288042.155:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d5d8eec9 code=0x7ffc0000 [ 156.141071][ T28] audit: type=1326 audit(1759288042.195:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d5d8eec9 code=0x7ffc0000 [ 156.170628][ T28] audit: type=1326 audit(1759288042.195:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65d5d8eec9 code=0x7ffc0000 [ 156.228869][ T28] audit: type=1326 audit(1759288042.205:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d5d8eec9 code=0x7ffc0000 [ 156.244551][ T6430] 9pnet: p9_errstr2errno: server reported unknown error 1 [ 156.282080][ T28] audit: type=1326 audit(1759288042.205:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f65d5d8eec9 code=0x7ffc0000 [ 156.318371][ T6429] loop3: detected capacity change from 0 to 128 [ 156.326307][ T6429] FAT-fs (loop3): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 156.358018][ T6432] Bluetooth: MGMT ver 1.22 [ 156.361182][ T28] audit: type=1326 audit(1759288042.205:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d5d8eec9 code=0x7ffc0000 [ 156.555547][ T28] audit: type=1326 audit(1759288042.205:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d5d8eec9 code=0x7ffc0000 [ 157.117663][ T28] audit: type=1326 audit(1759288042.215:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f65d5d8eec9 code=0x7ffc0000 [ 157.312410][ T28] audit: type=1326 audit(1759288042.215:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d5d8eec9 code=0x7ffc0000 [ 159.103968][ T28] audit: type=1326 audit(1759288042.215:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6425 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d5d8eec9 code=0x7ffc0000 [ 162.241195][ T6456] bridge1: entered promiscuous mode [ 162.784700][ T6466] loop0: detected capacity change from 0 to 16 [ 162.805299][ T6466] erofs: (device loop0): mounted with root inode @ nid 36. [ 162.976521][ T5802] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 0] out[9000] [ 163.005706][ T6466] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 163.017475][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 163.017489][ T28] audit: type=1800 audit(1759288049.295:2949): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.172" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 165.028000][ T6480] loop3: detected capacity change from 0 to 16 [ 165.124326][ T6480] erofs: (device loop3): mounted with root inode @ nid 36. [ 166.369252][ T6495] "syz.1.180" (6495) uses obsolete ecb(arc4) skcipher [ 166.386239][ T6495] trusted_key: syz.1.180 sent an empty control message without MSG_MORE. [ 167.172758][ T6497] loop0: detected capacity change from 0 to 16 [ 167.187241][ T6497] erofs: (device loop0): mounted with root inode @ nid 36. [ 167.328006][ T5802] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 0] out[9000] [ 167.341348][ T6497] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 167.373132][ T28] audit: type=1800 audit(1759288053.655:2950): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.184" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 167.395506][ T6497] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 167.443565][ T6497] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 167.467946][ T6497] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 167.482039][ T6497] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 167.509316][ T6504] loop1: detected capacity change from 0 to 512 [ 167.562720][ T6504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 167.586972][ T6504] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.186: Unimplemented hash flags: 0x0001 [ 167.599175][ T6504] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.186: Corrupt directory, running e2fsck is recommended [ 167.616432][ T6504] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.186: path /44/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 167.755334][ T6510] loop2: detected capacity change from 0 to 512 [ 167.774229][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.893406][ T6510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.916759][ T6510] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.226215][ T6510] binfmt_misc: register: failed to install interpreter file ./file2 [ 169.306239][ T6518] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.178: Directory hole found for htree leaf block 0 [ 169.615659][ T6525] loop3: detected capacity change from 0 to 128 [ 169.624513][ T6525] FAT-fs (loop3): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 169.675284][ T5803] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.854653][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 170.033793][ T6529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.176502][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.192885][ T6513] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set [ 170.284186][ T8] usb 1-1: config 0 has no interface number 0 [ 170.386767][ T8] usb 1-1: config 0 interface 1 has no altsetting 0 [ 170.462249][ T8] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 170.495110][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.523247][ T8] usb 1-1: Product: syz [ 170.527492][ T8] usb 1-1: Manufacturer: syz [ 170.532290][ T8] usb 1-1: SerialNumber: syz [ 170.654783][ T8] usb 1-1: config 0 descriptor?? [ 170.812645][ T5890] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 171.017160][ T5890] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 171.035249][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 171.072745][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.099469][ T5890] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.122746][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.124277][ T8] msi2500 1-1:0.1: Registered as swradio24 [ 171.145674][ T6538] loop3: detected capacity change from 0 to 16 [ 171.152137][ T8] msi2500 1-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 171.153991][ T5890] usb 2-1: config 0 descriptor?? [ 171.175107][ T6538] erofs: (device loop3): mounted with root inode @ nid 36. [ 171.191318][ T6528] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 171.205450][ T8] usb 1-1: USB disconnect, device number 2 [ 171.210933][ T5890] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 171.304952][ T5802] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 0] out[9000] [ 171.323596][ T6538] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 171.349770][ T28] audit: type=1800 audit(1759288057.625:2951): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.195" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 171.933744][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 172.042770][ T3370] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 172.122636][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 172.132477][ T8] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 172.152653][ T8] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 172.172702][ T8] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 172.202686][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 172.221556][ T8] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 172.241141][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.259559][ T8] usb 1-1: Product: syz [ 172.262707][ T3370] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.272646][ T8] usb 1-1: Manufacturer: syz [ 172.278740][ T8] usb 1-1: SerialNumber: syz [ 172.291666][ T3370] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 172.303032][ T8] usb 1-1: config 0 descriptor?? [ 172.311332][ T3370] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 172.314710][ T6543] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 172.330001][ T3370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.373101][ T3370] usb 4-1: config 0 descriptor?? [ 172.580398][ T6543] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 172.613070][ T8] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 172.623497][ T3370] usb 4-1: USB disconnect, device number 3 [ 172.868066][ T5890] usb 1-1: USB disconnect, device number 3 [ 173.253197][ T5890] usb 2-1: USB disconnect, device number 3 [ 174.477688][ T6561] loop1: detected capacity change from 0 to 128 [ 174.487153][ T6561] FAT-fs (loop1): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 174.654597][ T6563] loop0: detected capacity change from 0 to 1024 [ 174.697468][ T6563] EXT4-fs: Ignoring removed i_version option [ 174.810553][ T6563] EXT4-fs (loop0): mounted filesystem 00010100-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 175.021220][ T6563] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.200761][ T6569] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 176.223057][ T6569] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 176.246536][ T6569] EXT4-fs (loop0): This should not happen!! Data will be lost [ 176.246536][ T6569] [ 176.262670][ T6569] EXT4-fs (loop0): Total free blocks count 0 [ 176.273027][ T6569] EXT4-fs (loop0): Free/Dirty block details [ 176.282760][ T6569] EXT4-fs (loop0): free_blocks=4293918720 [ 176.311680][ T6569] EXT4-fs (loop0): dirty_blocks=64 [ 176.348981][ T6569] EXT4-fs (loop0): Block reservation details [ 176.375950][ T6569] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 176.420267][ T6573] loop1: detected capacity change from 0 to 16 [ 176.453982][ T6573] erofs: (device loop1): mounted with root inode @ nid 36. [ 176.575468][ T5784] EXT4-fs (loop0): unmounting filesystem 00010100-0000-0006-0000-000000000000. [ 176.592419][ T5802] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 0] out[9000] [ 176.605537][ T6573] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 176.672694][ T28] audit: type=1800 audit(1759288062.935:2952): pid=6573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.204" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 176.936540][ T6578] "syz.1.206" (6578) uses obsolete ecb(arc4) skcipher [ 177.112654][ T5793] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 177.326330][ T5793] usb 1-1: Using ep0 maxpacket: 16 [ 177.344699][ T5793] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 177.360213][ T6584] "syz.3.209" (6584) uses obsolete ecb(arc4) skcipher [ 177.365237][ T5793] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 177.397843][ T5793] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.412708][ T5841] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 177.421742][ T5793] usb 1-1: config 1 interface 0 has no altsetting 0 [ 177.444628][ T5793] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 177.457792][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.484649][ T5793] usb 1-1: Product: syz [ 177.489098][ T5793] usb 1-1: Manufacturer: syz [ 177.502702][ T5793] usb 1-1: SerialNumber: syz [ 177.743314][ T5793] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 177.762750][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 177.774494][ T5841] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 178.404435][ T6576] usblp0:failed reading printer status (-32) [ 178.422912][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.461070][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.498578][ T969] usb 1-1: USB disconnect, device number 4 [ 178.528043][ T969] usblp0: removed [ 178.540989][ T5841] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 178.551367][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.559508][ T5841] usb 2-1: Product: syz [ 178.563755][ T5841] usb 2-1: Manufacturer: syz [ 178.568389][ T5841] usb 2-1: SerialNumber: syz [ 178.579569][ T5841] usb 2-1: config 0 descriptor?? [ 178.587804][ T5841] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 178.603902][ T5841] usb 2-1: Detected FT232R [ 178.747879][ T6593] loop3: detected capacity change from 0 to 4096 [ 178.807891][ T5841] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 178.833857][ T5841] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 178.856315][ T5841] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 178.876999][ T5841] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 178.913849][ T5841] usb 2-1: USB disconnect, device number 4 [ 178.952823][ T5841] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 178.987809][ T5841] ftdi_sio 2-1:0.0: device disconnected [ 179.338500][ T6599] loop3: detected capacity change from 0 to 16 [ 179.365858][ T6599] erofs: (device loop3): mounted with root inode @ nid 36. [ 179.508542][ T5802] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 0] out[9000] [ 179.522075][ T6599] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 179.544295][ T6601] "syz.0.215" (6601) uses obsolete ecb(arc4) skcipher [ 179.573539][ T28] audit: type=1800 audit(1759288065.845:2953): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.214" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 179.951944][ T6609] loop3: detected capacity change from 0 to 128 [ 179.959979][ T6609] FAT-fs (loop3): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 179.996041][ T5803] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.369402][ T6613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.062679][ T969] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 181.264724][ T969] usb 1-1: config 1 interface 0 altsetting 249 endpoint 0x82 is Bulk; changing to Interrupt [ 181.282587][ T969] usb 1-1: config 1 interface 0 altsetting 249 endpoint 0x3 is Bulk; changing to Interrupt [ 181.302986][ T969] usb 1-1: config 1 interface 0 has no altsetting 0 [ 181.314635][ T969] usb 1-1: string descriptor 0 read error: -22 [ 181.321182][ T969] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.342601][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.365865][ T6608] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.373818][ T6608] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.382818][ T3370] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 181.394692][ T969] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 181.594714][ T3370] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 181.612821][ T3370] usb 4-1: config 0 has no interface number 0 [ 181.620136][ T3370] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 181.642802][ T3370] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 181.672835][ T3370] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 181.695506][ T3370] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 181.701830][ T969] usb 1-1: USB disconnect, device number 5 [ 181.710696][ T2972] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 181.761112][ T3370] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 181.780630][ T3370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.790836][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.802078][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.818416][ T3370] usb 4-1: config 0 descriptor?? [ 181.829348][ T6615] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 181.840095][ T6615] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 181.861377][ T3370] ldusb 4-1:0.55: Interrupt in endpoint not found [ 182.114110][ T969] usb 4-1: USB disconnect, device number 4 [ 182.540654][ T6623] loop1: detected capacity change from 0 to 32768 [ 182.756733][ T6623] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 182.846189][ T6632] loop3: detected capacity change from 0 to 16 [ 182.856255][ T6632] erofs: (device loop3): mounted with root inode @ nid 36. [ 182.931289][ T6633] "syz.0.225" (6633) uses obsolete ecb(arc4) skcipher [ 183.860762][ T6636] syz.1.223 (6636) used greatest stack depth: 17808 bytes left [ 183.958715][ T5802] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 0] out[9000] [ 183.971514][ T6632] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 184.013542][ T28] audit: type=1800 audit(1759288070.295:2954): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.226" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 184.179789][ T5785] (syz-executor,5785,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 184.233589][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 184.238288][ T6642] loop3: detected capacity change from 0 to 16 [ 184.262858][ T6642] erofs: (device loop3): mounted with root inode @ nid 36. [ 184.297729][ T28] audit: type=1800 audit(1759288070.575:2955): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.230" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 184.392872][ T3370] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 184.582666][ T3370] usb 1-1: Using ep0 maxpacket: 32 [ 184.608593][ T3370] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.649240][ T3370] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 184.704755][ T3370] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 184.742917][ T3370] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.749630][ T3370] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 184.802655][ T3370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.832430][ T3370] usb 1-1: config 0 descriptor?? [ 184.942845][ T969] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 185.142649][ T969] usb 2-1: Using ep0 maxpacket: 32 [ 185.150300][ T969] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 185.182728][ T969] usb 2-1: config 0 has no interface number 0 [ 185.202876][ T969] usb 2-1: config 0 interface 184 has no altsetting 0 [ 185.228794][ T969] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 185.247219][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.265719][ T969] usb 2-1: Product: syz [ 185.269981][ T969] usb 2-1: Manufacturer: syz [ 185.293465][ T969] usb 2-1: SerialNumber: syz [ 185.307271][ T969] usb 2-1: config 0 descriptor?? [ 185.310916][ T3370] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 185.316521][ T969] smsc75xx v1.0.0 [ 185.325334][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.354624][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.367618][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.376190][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.390970][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.415669][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 185.428497][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.481495][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.530379][ T3370] hid-thrustmaster 0003:044F:B65D.0003: setup data couldn't be sent [ 185.569181][ C1] hid-thrustmaster 0003:044F:B65D.0003: URB to get model id failed with error -71 [ 185.621177][ T3370] usb 1-1: USB disconnect, device number 6 [ 185.688283][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.701357][ T6652] fido_id[6652]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 185.821299][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.851415][ T6649] loop3: detected capacity change from 0 to 32768 [ 185.911416][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.960696][ T969] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 185.979005][ T969] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 185.980080][ T6649] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.193133][ T6649] XFS (loop3): Ending clean mount [ 186.320314][ T6650] chnl_net:caif_netlink_parms(): no params data found [ 186.671834][ T5861] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 186.692972][ T5861] XFS (loop3): Unmount and run xfs_repair [ 186.698875][ T5861] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 186.709579][ T5861] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 186.718985][ T5861] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 186.730014][ T5861] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 186.739392][ T5861] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 186.752236][ T5861] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 186.782387][ T5861] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 186.807012][ T5861] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 186.837696][ T5861] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 186.946074][ T5793] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x14 len 4 error 74 [ 187.563177][ T5791] Bluetooth: hci0: command tx timeout [ 187.753852][ T5793] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x182e/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 187.779858][ T5793] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 188.011358][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.043108][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.050619][ T6650] bridge_slave_0: entered allmulticast mode [ 188.075929][ T6650] bridge_slave_0: entered promiscuous mode [ 188.105144][ T6693] loop0: detected capacity change from 0 to 16 [ 188.170721][ T6693] erofs: (device loop0): mounted with root inode @ nid 36. [ 188.190750][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.225267][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.267873][ T6650] bridge_slave_1: entered allmulticast mode [ 188.285286][ T6650] bridge_slave_1: entered promiscuous mode [ 188.306071][ T5791] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 0] out[9000] [ 188.319510][ T6693] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 188.331057][ T28] audit: type=1800 audit(1759288074.605:2956): pid=6693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.238" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 188.654950][ T6650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.731210][ T6701] loop0: detected capacity change from 0 to 16 [ 188.740090][ T6650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.750693][ T6701] erofs: (device loop0): mounted with root inode @ nid 36. [ 188.798855][ T28] audit: type=1800 audit(1759288075.065:2957): pid=6701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.240" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 189.029712][ T6650] team0: Port device team_slave_0 added [ 189.161469][ T6650] team0: Port device team_slave_1 added [ 189.257255][ T5787] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 189.381732][ T969] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 189.428055][ T969] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read BURST_CAP: -71 [ 189.475201][ T969] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 189.495427][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.502451][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.543244][ T969] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 189.554284][ T5913] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 189.575319][ T969] usb 2-1: USB disconnect, device number 5 [ 189.592750][ T6650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.613283][ T5791] Bluetooth: hci0: command tx timeout [ 189.780851][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 189.814801][ T5913] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 189.835515][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.861307][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.901446][ T5913] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 189.922424][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 189.941098][ T6650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.952180][ T5913] usb 1-1: Product: syz [ 189.952203][ T5913] usb 1-1: Manufacturer: syz [ 189.952217][ T5913] usb 1-1: SerialNumber: syz [ 189.974228][ T5913] usb 1-1: config 0 descriptor?? [ 189.981240][ T6707] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 190.011628][ T5913] hub 1-1:0.0: bad descriptor, ignoring hub [ 190.040434][ T5913] hub: probe of 1-1:0.0 failed with error -5 [ 190.070083][ T6717] bridge1: entered promiscuous mode [ 190.410368][ T6650] hsr_slave_0: entered promiscuous mode [ 190.427695][ T6650] hsr_slave_1: entered promiscuous mode [ 190.434928][ T6650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.445065][ T6650] Cannot create hsr debugfs directory [ 190.559418][ T6728] loop1: detected capacity change from 0 to 16 [ 190.603026][ T42] hsr_slave_0: left promiscuous mode [ 190.605874][ T6728] erofs: (device loop1): mounted with root inode @ nid 36. [ 190.630316][ T42] hsr_slave_1: left promiscuous mode [ 190.659704][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.674661][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.697113][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.710748][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.721832][ T42] bridge_slave_1: left allmulticast mode [ 190.730500][ T5791] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 0] out[9000] [ 190.733722][ T42] bridge_slave_1: left promiscuous mode [ 190.752669][ T6728] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 190.770676][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.786342][ T28] audit: type=1800 audit(1759288077.065:2958): pid=6728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.246" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 190.816841][ T42] bridge_slave_0: left allmulticast mode [ 190.825695][ T42] bridge_slave_0: left promiscuous mode [ 190.831574][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.892472][ T42] veth1_macvtap: left promiscuous mode [ 190.912999][ T42] veth0_macvtap: left promiscuous mode [ 190.918787][ T42] veth1_vlan: left promiscuous mode [ 190.953415][ T42] veth0_vlan: left promiscuous mode [ 191.135956][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.149531][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.158189][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.167870][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.188858][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 191.199259][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.212313][ T6736] loop1: detected capacity change from 0 to 16 [ 191.253566][ T6736] erofs: (device loop1): mounted with root inode @ nid 36. [ 191.304176][ T28] audit: type=1800 audit(1759288077.575:2959): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.248" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 191.346567][ T6707] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 191.392456][ T6707] usb 1-1: device reset changed ep0 maxpacket size! [ 191.426246][ T5841] usb 1-1: USB disconnect, device number 7 [ 191.626434][ T5841] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 191.719479][ T5802] Bluetooth: hci0: command tx timeout [ 191.815112][ T5841] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 191.841313][ T5841] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 191.858707][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 191.867471][ T5841] usb 1-1: Product: syz [ 191.871691][ T5841] usb 1-1: Manufacturer: syz [ 191.883613][ T5841] usb 1-1: SerialNumber: syz [ 191.891810][ T5841] usb 1-1: config 0 descriptor?? [ 191.902999][ T6723] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 192.158544][ T42] team0 (unregistering): Port device team_slave_1 removed [ 192.163648][ T5890] usb 1-1: USB disconnect, device number 8 [ 192.271832][ T42] team0 (unregistering): Port device team_slave_0 removed [ 192.367158][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.405157][ T6741] loop1: detected capacity change from 0 to 32768 [ 192.470550][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.682685][ T6741] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 192.682685][ T6741] [ 192.696684][ T6741] ERROR: (device loop1): remounting filesystem as read-only [ 192.705030][ T6741] ialloc: diAlloc returned -5! [ 193.294433][ T5802] Bluetooth: hci2: command tx timeout [ 193.373927][ T6743] loop0: detected capacity change from 0 to 32768 [ 193.453519][ T42] bond0 (unregistering): Released all slaves [ 193.468031][ T6743] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.628883][ T6743] XFS (loop0): Ending clean mount [ 193.677985][ T5784] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.777625][ T5802] Bluetooth: hci0: command tx timeout [ 193.805336][ T6753] bridge2: entered promiscuous mode [ 194.223790][ T6760] loop1: detected capacity change from 0 to 16 [ 194.257220][ T6760] erofs: (device loop1): mounted with root inode @ nid 36. [ 194.318820][ T28] audit: type=1800 audit(1759288080.585:2960): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.255" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 194.355409][ T6763] loop0: detected capacity change from 0 to 16 [ 194.432965][ T6763] erofs: (device loop0): mounted with root inode @ nid 36. [ 194.765929][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.808968][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.695333][ T5802] Bluetooth: hci2: command tx timeout [ 195.899676][ T6650] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.064251][ T6650] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.085758][ T6650] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.132144][ T6650] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.433022][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.504367][ T6733] chnl_net:caif_netlink_parms(): no params data found [ 196.562037][ T6770] loop0: detected capacity change from 0 to 40427 [ 196.589902][ T6770] F2FS-fs (loop0): Invalid log sectorsize (131081) [ 196.619849][ T6770] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 196.666107][ T6770] F2FS-fs (loop0): invalid crc value [ 196.684488][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.877355][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.889233][ T6783] loop1: detected capacity change from 0 to 40427 [ 196.901182][ T6783] F2FS-fs (loop1): Invalid log sectorsize (131081) [ 196.908297][ T6783] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 196.948476][ T6783] F2FS-fs (loop1): invalid crc value [ 197.012664][ T6770] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 197.020096][ T6770] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 197.050695][ T6650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.155455][ T6783] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 197.168213][ T6783] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 197.206104][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.463708][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.470969][ T6733] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.486732][ T6733] bridge_slave_0: entered allmulticast mode [ 197.497238][ T6733] bridge_slave_0: entered promiscuous mode [ 197.518137][ T6650] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.589852][ T6808] PKCS7: Unknown OID: [4] 0.38.11253.7578(bad) [ 197.596704][ T6808] PKCS7: Only support pkcs7_signedData type [ 197.720591][ T6733] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.817052][ T5802] Bluetooth: hci2: command tx timeout [ 197.837978][ T6733] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.873100][ T6733] bridge_slave_1: entered allmulticast mode [ 197.880688][ T6733] bridge_slave_1: entered promiscuous mode [ 197.981094][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.988358][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.031378][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.038835][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.049061][ T6808] netlink: 5 bytes leftover after parsing attributes in process `syz.0.257'. [ 198.058747][ T6808] macvtap0: entered allmulticast mode [ 198.064285][ T6808] veth0_macvtap: entered allmulticast mode [ 198.159136][ T6650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.182705][ T6650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.332246][ T6733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.386923][ T6733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.740678][ T6733] team0: Port device team_slave_0 added [ 198.764796][ T6733] team0: Port device team_slave_1 added [ 199.339656][ T6733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.352926][ T6733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.394693][ T6733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.450452][ T6830] bridge1: entered promiscuous mode [ 199.529144][ T6733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.547994][ T6733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.591329][ T6733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.614788][ T6837] loop0: detected capacity change from 0 to 16 [ 199.636614][ T6837] erofs: (device loop0): mounted with root inode @ nid 36. [ 199.731271][ T6839] loop0: detected capacity change from 0 to 16 [ 199.781407][ T6839] erofs: (device loop0): mounted with root inode @ nid 36. [ 199.853968][ T5802] Bluetooth: hci2: command tx timeout [ 199.881017][ T6650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.122753][ T5942] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 200.164568][ T6733] hsr_slave_0: entered promiscuous mode [ 200.191362][ T6733] hsr_slave_1: entered promiscuous mode [ 200.322509][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 200.351015][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.378773][ T5942] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 200.397194][ T5942] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 200.414789][ T5942] usb 2-1: Manufacturer: syz [ 200.446406][ T5942] usb 2-1: config 0 descriptor?? [ 200.697690][ T6853] loop0: detected capacity change from 0 to 16 [ 200.707262][ T6853] erofs: (device loop0): mounted with root inode @ nid 36. [ 200.721473][ T6853] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 200.737193][ T6853] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 200.748584][ T6853] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 200.766893][ T6853] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 200.778618][ T6853] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 200.790112][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 200.799360][ T6853] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 200.810330][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 200.819847][ T6853] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 200.831602][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 200.840987][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 200.850404][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 200.861504][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 200.872151][ T6853] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 200.883273][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 200.893412][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 200.902744][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 200.912177][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 200.922912][ T6853] syz.0.266: attempt to access beyond end of device [ 200.922912][ T6853] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 200.938475][ T6853] syz.0.266: attempt to access beyond end of device [ 200.938475][ T6853] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 200.953224][ T6853] syz.0.266: attempt to access beyond end of device [ 200.953224][ T6853] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 200.968557][ T6853] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[2639] [ 200.982173][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 200.991485][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 201.001000][ T6853] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36 [ 201.011683][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 83 @ nid 36 [ 201.021253][ T6853] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36 [ 201.032039][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 82 @ nid 36 [ 201.041487][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 201.050872][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 201.060598][ T6853] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36 [ 201.071340][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 76 @ nid 36 [ 201.080624][ T6853] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36 [ 201.091436][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 75 @ nid 36 [ 201.114658][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 74 @ nid 36 [ 201.123977][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 201.133320][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 201.142596][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 201.153510][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 201.163187][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 201.183917][ T6853] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 201.196352][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 201.205844][ T6853] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 201.216918][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 201.229109][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 201.286572][ T6853] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 201.297832][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 201.307339][ T6853] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 201.318354][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 201.399289][ T6853] erofs: (device loop0): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 201.416521][ T6853] syz.0.266: attempt to access beyond end of device [ 201.416521][ T6853] loop0: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 201.433480][ T6853] syz.0.266: attempt to access beyond end of device [ 201.433480][ T6853] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 201.450284][ T6853] syz.0.266: attempt to access beyond end of device [ 201.450284][ T6853] loop0: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 201.485122][ T6853] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[5297] [ 201.627378][ T5942] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 201.679962][ T5942] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 201.722207][ T5942] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 201.767168][ T5942] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 201.789967][ T5942] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 201.824733][ T5942] cougar 0003:060B:700A.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 201.896950][ T5942] usb 2-1: USB disconnect, device number 6 [ 202.031286][ T6868] loop0: detected capacity change from 0 to 128 [ 202.039119][ T6868] FAT-fs (loop0): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 202.112743][ T5801] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.341211][ T6869] fido_id[6869]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 202.926761][ T6875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.247303][ T6650] veth0_vlan: entered promiscuous mode [ 203.269204][ T6881] bridge3: entered promiscuous mode [ 203.273851][ T6883] loop0: detected capacity change from 0 to 16 [ 203.309802][ T6883] erofs: (device loop0): mounted with root inode @ nid 36. [ 203.417430][ T42] hsr_slave_0: left promiscuous mode [ 203.427393][ T42] hsr_slave_1: left promiscuous mode [ 203.447967][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.468816][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.516073][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.546083][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.557536][ T42] bridge_slave_1: left allmulticast mode [ 203.560036][ T6889] loop0: detected capacity change from 0 to 16 [ 203.564264][ T42] bridge_slave_1: left promiscuous mode [ 203.577824][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.596300][ T42] bridge_slave_0: left allmulticast mode [ 203.602021][ T42] bridge_slave_0: left promiscuous mode [ 203.609750][ T6889] erofs: (device loop0): mounted with root inode @ nid 36. [ 203.624020][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.700452][ T42] veth1_macvtap: left promiscuous mode [ 203.706184][ T42] veth0_macvtap: left promiscuous mode [ 203.711956][ T42] veth1_vlan: left promiscuous mode [ 203.726532][ T42] veth0_vlan: left promiscuous mode [ 203.812796][ T3370] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 203.896615][ T6893] loop0: detected capacity change from 0 to 128 [ 203.934899][ T6893] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.967231][ T6893] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 204.052806][ T3370] usb 2-1: Using ep0 maxpacket: 16 [ 204.071846][ T3370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.090423][ T3370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.106170][ T3370] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 204.121656][ T3370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.141566][ T3370] usb 2-1: config 0 descriptor?? [ 204.518725][ T6896] EXT4-fs warning (device loop0): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 204.736684][ T3370] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 204.770038][ T3370] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 204.791038][ T3370] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 204.818241][ T3370] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 204.858924][ T3370] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 204.886506][ T3370] savu 0003:1E7D:2D5A.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 205.023836][ T3370] usb 2-1: USB disconnect, device number 7 [ 205.069473][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.077782][ T6898] fido_id[6898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 205.405434][ T6902] loop0: detected capacity change from 0 to 1024 [ 206.422806][ T6905] loop1: detected capacity change from 0 to 128 [ 206.430836][ T6905] FAT-fs (loop1): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 206.522534][ C1] sched: RT throttling activated [ 206.529807][ T5803] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 207.606703][ T42] team0 (unregistering): Port device team_slave_1 removed [ 207.700843][ T42] team0 (unregistering): Port device team_slave_0 removed [ 207.809498][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.910818][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.051760][ T3462] hfsplus: b-tree write err: -5, ino 4 [ 208.556606][ T6913] "syz.0.276" (6913) uses obsolete ecb(arc4) skcipher [ 209.260446][ T6915] loop0: detected capacity change from 0 to 16 [ 209.278612][ T6915] erofs: (device loop0): mounted with root inode @ nid 36. [ 209.330457][ T42] bond0 (unregistering): Released all slaves [ 209.407891][ T6917] loop0: detected capacity change from 0 to 16 [ 209.428977][ T6917] erofs: (device loop0): mounted with root inode @ nid 36. [ 209.445808][ T5802] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 0] out[9000] [ 209.461087][ T6917] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 209.477482][ T6917] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 209.482624][ T28] audit: type=1800 audit(1759288095.755:2961): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.278" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 209.489873][ T6917] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 209.520037][ T6917] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 209.531371][ T6917] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 209.632406][ T6908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.639834][ T6908] IPv6: NLM_F_CREATE should be set when creating new route [ 209.647360][ T6908] IPv6: NLM_F_CREATE should be set when creating new route [ 209.753909][ T6650] veth1_vlan: entered promiscuous mode [ 209.897752][ T6650] veth0_macvtap: entered promiscuous mode [ 209.932216][ T6733] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.958004][ T6733] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.974429][ T6650] veth1_macvtap: entered promiscuous mode [ 210.023180][ T6733] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 210.045894][ T6733] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 210.127973][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.178984][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.218816][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.250380][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.284026][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.339895][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.360143][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.372305][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.387384][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.401791][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.449849][ T6650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.487396][ T6650] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.513877][ T6650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.537610][ T6650] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.669966][ T6935] loop0: detected capacity change from 0 to 16 [ 210.781819][ T6935] erofs: (device loop0): mounted with root inode @ nid 36. [ 211.898508][ T6922] loop1: detected capacity change from 0 to 32768 [ 211.923878][ T6922] jfs: Unrecognized mount option "uid=>mF_c'h\We":D{+3D o\4HZ/d- [ 211.923878][ T6922] 0 D0x0000000000000000" or missing value [ 211.992106][ T6942] "syz.0.283" (6942) uses obsolete ecb(arc4) skcipher [ 212.626661][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.683385][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.741804][ T6733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.845689][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.873319][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.880402][ T6733] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.955800][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.963084][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.001255][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.008540][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.186980][ T6953] loop0: detected capacity change from 0 to 128 [ 213.194180][ T6733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.195086][ T6953] FAT-fs (loop0): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 213.326220][ T5801] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.612007][ T6962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.078624][ T6972] loop4: detected capacity change from 0 to 16 [ 215.104156][ T6972] erofs: (device loop4): mounted with root inode @ nid 36. [ 216.288828][ T6733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.356942][ T6989] "syz.0.290" (6989) uses obsolete ecb(arc4) skcipher [ 217.137819][ T6994] loop1: detected capacity change from 0 to 128 [ 217.153806][ T6994] EXT4-fs: Ignoring removed nobh option [ 217.244991][ T6994] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.393060][ T6994] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.763301][ T6733] veth0_vlan: entered promiscuous mode [ 217.817820][ T6733] veth1_vlan: entered promiscuous mode [ 217.894323][ T7013] loop0: detected capacity change from 0 to 16 [ 217.927534][ T7013] erofs: (device loop0): mounted with root inode @ nid 36. [ 218.652583][ T6733] veth0_macvtap: entered promiscuous mode [ 218.692340][ T6733] veth1_macvtap: entered promiscuous mode [ 218.742978][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.762576][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.772478][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.832736][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.852236][ T6990] loop4: detected capacity change from 0 to 32768 [ 218.889323][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.906009][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.930927][ T6990] [ 218.930927][ T6990] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 218.930927][ T6990] [ 218.948786][ T6733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.963017][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.162212][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.185571][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.196983][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.246076][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.261952][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.318649][ T6990] [ 219.318649][ T6990] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.318649][ T6990] [ 219.477995][ T28] audit: type=1804 audit(1759288105.635:2962): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.295" name="/newroot/81/mnt/bus" dev="loop1" ino=12 res=1 errno=0 [ 219.501779][ T6990] [ 219.501779][ T6990] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.501779][ T6990] [ 219.536878][ T6733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.837540][ T6990] [ 219.837540][ T6990] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 219.837540][ T6990] [ 220.374853][ T7029] [ 220.374853][ T7029] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.374853][ T7029] [ 220.387999][ T7029] [ 220.387999][ T7029] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.387999][ T7029] [ 220.435701][ T112] [ 220.435701][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 220.435701][ T112] [ 220.439148][ T6733] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.503188][ T7028] ERROR: (device loop4): diWrite: ixpxd invalid [ 220.503188][ T7028] [ 220.524678][ T7028] ERROR: (device loop4): txCommit: [ 220.524678][ T7028] [ 220.553866][ T6733] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.602689][ T6733] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.621748][ T6733] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.927766][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.976534][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.100026][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.108185][ T6650] [ 221.108185][ T6650] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.108185][ T6650] [ 221.122918][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.136861][ T6650] [ 221.136861][ T6650] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.136861][ T6650] [ 221.506509][ T7037] loop5: detected capacity change from 0 to 128 [ 221.513848][ T7037] FAT-fs (loop5): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 223.912232][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.201544][ T7056] "syz.5.303" (7056) uses obsolete ecb(arc4) skcipher [ 225.256546][ T7070] loop5: detected capacity change from 0 to 16 [ 225.284577][ T7070] erofs: (device loop5): mounted with root inode @ nid 36. [ 226.079341][ T7072] loop0: detected capacity change from 0 to 128 [ 226.087669][ T7072] FAT-fs (loop0): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 226.411847][ T7079] loop4: detected capacity change from 0 to 128 [ 226.624107][ T7079] EXT4-fs: Ignoring removed nobh option [ 226.713563][ T7076] loop1: detected capacity change from 0 to 2048 [ 226.726115][ T7079] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.841118][ T7079] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.081076][ T7086] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.211484][ T7089] loop0: detected capacity change from 0 to 16 [ 227.264746][ T7089] erofs: (device loop0): mounted with root inode @ nid 36. [ 227.904073][ T7098] "syz.0.314" (7098) uses obsolete ecb(arc4) skcipher [ 228.488804][ T28] audit: type=1804 audit(1759288114.765:2963): pid=7099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.312" name="/newroot/9/mnt/bus" dev="loop4" ino=12 res=1 errno=0 [ 228.529774][ T7101] loop1: detected capacity change from 0 to 128 [ 228.537788][ T7101] FAT-fs (loop1): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 228.623919][ T7080] loop5: detected capacity change from 0 to 40427 [ 228.637891][ T5803] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 228.702091][ T7080] F2FS-fs (loop5): Invalid log sectorsize (131081) [ 228.731071][ T7080] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 228.801107][ T7080] F2FS-fs (loop5): invalid crc value [ 229.000614][ T7108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.967270][ T7080] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 229.987056][ T7080] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 230.506860][ T7124] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 231.905083][ T6650] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.334992][ T7139] loop5: detected capacity change from 0 to 16 [ 232.401435][ T7139] erofs: (device loop5): mounted with root inode @ nid 36. [ 232.841415][ T7149] loop5: detected capacity change from 0 to 256 [ 232.885332][ T7149] exfat: Deprecated parameter 'namecase' [ 233.044162][ T7149] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 233.806101][ T7158] "syz.1.324" (7158) uses obsolete ecb(arc4) skcipher [ 234.341084][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.326'. [ 234.462308][ T7164] loop1: detected capacity change from 0 to 128 [ 234.470163][ T7164] FAT-fs (loop1): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 234.624689][ T5803] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.283228][ T7172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.877394][ T7180] loop5: detected capacity change from 0 to 128 [ 235.931935][ T7180] EXT4-fs: Ignoring removed nobh option [ 236.015294][ T7180] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.038744][ T7183] loop0: detected capacity change from 0 to 2048 [ 236.058384][ T7180] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 236.167910][ T7187] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.186465][ T7169] loop4: detected capacity change from 0 to 40427 [ 236.220149][ T7169] F2FS-fs (loop4): Invalid log sectorsize (131081) [ 236.244099][ T7169] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 236.305239][ T7169] F2FS-fs (loop4): invalid crc value [ 236.698252][ T7169] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 236.722632][ T7169] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 237.144908][ T7202] PKCS7: Unknown OID: [4] 0.38.11253.7578(bad) [ 237.151208][ T7202] PKCS7: Only support pkcs7_signedData type [ 237.412676][ T28] audit: type=1804 audit(1759288123.685:2964): pid=7203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.329" name="/newroot/9/mnt/bus" dev="loop5" ino=12 res=1 errno=0 [ 237.449784][ T7177] loop1: detected capacity change from 0 to 40427 [ 237.516427][ T7177] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 237.572794][ T7177] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 237.656215][ T7177] F2FS-fs (loop1): invalid crc value [ 237.751667][ T7177] F2FS-fs (loop1): Found nat_bits in checkpoint [ 237.797746][ T7210] loop0: detected capacity change from 0 to 16 [ 237.842082][ T7210] erofs: (device loop0): mounted with root inode @ nid 36. [ 238.044220][ T7177] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 238.051350][ T7177] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 239.290336][ T28] audit: type=1326 audit(1759288125.565:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4daeb8eec9 code=0x7ffc0000 [ 239.358405][ T28] audit: type=1326 audit(1759288125.565:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4daeb8eec9 code=0x7ffc0000 [ 239.422672][ T28] audit: type=1326 audit(1759288125.565:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4daeb8eec9 code=0x7ffc0000 [ 239.546818][ T28] audit: type=1326 audit(1759288125.565:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4daeb8eec9 code=0x7ffc0000 [ 239.609764][ T28] audit: type=1326 audit(1759288125.565:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4daeb8eec9 code=0x7ffc0000 [ 239.634396][ T28] audit: type=1326 audit(1759288125.635:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4daeb8eec9 code=0x7ffc0000 [ 239.659115][ T28] audit: type=1326 audit(1759288125.635:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4daeb8eec9 code=0x7ffc0000 [ 239.740670][ T7227] loop0: detected capacity change from 0 to 4096 [ 239.780805][ T7228] Bluetooth: MGMT ver 1.22 [ 240.329887][ T28] audit: type=1326 audit(1759288125.635:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4daeb8eec9 code=0x7ffc0000 [ 240.373492][ T7229] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.460147][ T6733] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.468743][ T28] audit: type=1326 audit(1759288125.635:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4daeb8eec9 code=0x7ffc0000 [ 241.159893][ T7237] loop5: detected capacity change from 0 to 128 [ 241.167782][ T7237] FAT-fs (loop5): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 241.416513][ T7239] "syz.4.335" (7239) uses obsolete ecb(arc4) skcipher [ 241.660166][ T7241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.667621][ T7241] IPv6: NLM_F_CREATE should be set when creating new route [ 241.674939][ T7241] IPv6: NLM_F_CREATE should be set when creating new route [ 242.455676][ T7243] loop0: detected capacity change from 0 to 1024 [ 242.471571][ T7249] loop1: detected capacity change from 0 to 16 [ 242.777926][ T7249] erofs: (device loop1): mounted with root inode @ nid 36. [ 243.805765][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 243.805784][ T28] audit: type=1800 audit(1759288130.085:2986): pid=7249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.334" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 243.867582][ T7255] sctp: failed to load transform for md5: -2 [ 244.087390][ T2963] hfsplus: b-tree write err: -5, ino 4 [ 244.402334][ T7270] loop1: detected capacity change from 0 to 16 [ 244.461947][ T7270] erofs: (device loop1): mounted with root inode @ nid 36. [ 244.522042][ T5802] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 0] out[9000] [ 244.542977][ T7270] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 244.667573][ T28] audit: type=1800 audit(1759288130.915:2987): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.341" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 245.778492][ T7284] loop4: detected capacity change from 0 to 1024 [ 246.849626][ T7268] loop0: detected capacity change from 0 to 40427 [ 246.912770][ T7268] F2FS-fs (loop0): Invalid log sectorsize (131081) [ 246.960549][ T7268] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 248.038793][ T7268] F2FS-fs (loop0): invalid crc value [ 248.093492][ T7268] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 248.305801][ T7296] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 248.724440][ T48] hfsplus: b-tree write err: -5, ino 4 [ 248.842034][ T7300] "syz.0.346" (7300) uses obsolete ecb(arc4) skcipher [ 249.580445][ T7302] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 250.587328][ T7310] loop1: detected capacity change from 0 to 16 [ 250.598013][ T7309] loop4: detected capacity change from 0 to 128 [ 250.606075][ T7309] FAT-fs (loop4): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 250.640601][ T7310] erofs: (device loop1): mounted with root inode @ nid 36. [ 250.705022][ T28] audit: type=1800 audit(1759288136.965:2988): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.349" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 250.862323][ T7314] loop5: detected capacity change from 0 to 16 [ 250.883811][ T7314] erofs: (device loop5): mounted with root inode @ nid 36. [ 250.982119][ T7315] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.989557][ T7315] IPv6: NLM_F_CREATE should be set when creating new route [ 250.996989][ T7315] IPv6: NLM_F_CREATE should be set when creating new route [ 251.450067][ T5802] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 0] out[9000] [ 251.470119][ T7314] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 251.601408][ T28] audit: type=1800 audit(1759288137.855:2989): pid=7314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.350" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 254.612882][ T7323] loop4: detected capacity change from 0 to 32768 [ 254.731749][ T7345] loop1: detected capacity change from 0 to 1024 [ 254.868515][ T7323] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop4": -EINTR [ 256.179030][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.209535][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.284470][ T7358] loop4: detected capacity change from 0 to 16 [ 256.355907][ T7358] erofs: (device loop4): mounted with root inode @ nid 36. [ 256.508023][ T28] audit: type=1800 audit(1759288142.715:2990): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.359" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 257.047226][ T48] hfsplus: b-tree write err: -5, ino 4 [ 257.180468][ T7367] loop4: detected capacity change from 0 to 512 [ 257.419478][ T7367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.432642][ T7367] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.766081][ T6650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.539824][ T7403] loop1: detected capacity change from 0 to 164 [ 262.987059][ T5803] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 263.619714][ T7414] loop1: detected capacity change from 0 to 16 [ 263.681647][ T7414] erofs: (device loop1): mounted with root inode @ nid 36. [ 263.746209][ T28] audit: type=1800 audit(1759288150.025:2991): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.368" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 263.962631][ T5890] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 264.302657][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 264.329617][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.028920][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.052871][ T5890] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 265.097629][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.135078][ T5890] usb 6-1: config 0 descriptor?? [ 265.184557][ T28] audit: type=1326 audit(1759288151.455:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 265.589634][ T28] audit: type=1326 audit(1759288151.455:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 266.253043][ T28] audit: type=1326 audit(1759288151.515:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 266.282432][ T5890] usbhid 6-1:0.0: can't add hid device: -71 [ 266.316585][ T5890] usbhid: probe of 6-1:0.0 failed with error -71 [ 266.326879][ T28] audit: type=1326 audit(1759288151.515:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 266.373775][ T5890] usb 6-1: USB disconnect, device number 2 [ 266.444628][ T28] audit: type=1326 audit(1759288151.515:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 266.469441][ T28] audit: type=1326 audit(1759288151.515:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 266.498637][ T28] audit: type=1326 audit(1759288151.515:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 266.521678][ T28] audit: type=1326 audit(1759288151.515:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 266.553087][ T28] audit: type=1326 audit(1759288151.515:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3718eec9 code=0x7ffc0000 [ 267.006077][ T7456] loop4: detected capacity change from 0 to 16 [ 267.035107][ T7456] erofs: (device loop4): mounted with root inode @ nid 36. [ 268.041413][ T7473] block nbd0: shutting down sockets [ 268.750970][ T7452] loop0: detected capacity change from 0 to 32768 [ 268.759155][ T7477] loop4: detected capacity change from 0 to 128 [ 268.801246][ T7477] EXT4-fs: quotafile must be on filesystem root [ 268.813578][ T7452] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.377 (7452) [ 268.844539][ T5803] udevd[5803]: incorrect ext4 checksum on /dev/loop4 [ 268.946249][ T7460] loop1: detected capacity change from 0 to 32768 [ 269.123422][ T7460] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 269.145453][ T7452] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 269.545268][ T7452] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 269.673807][ T7452] BTRFS info (device loop0): turning off barriers [ 269.718717][ T7452] BTRFS info (device loop0): setting nodatasum [ 269.738418][ T7460] XFS (loop1): Ending clean mount [ 269.777791][ T7452] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 269.858015][ T7452] BTRFS info (device loop0): use zstd compression, level 3 [ 269.866009][ T7452] BTRFS info (device loop0): using free space tree [ 269.877949][ T7452] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 269.880204][ T7452] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 269.893966][ T7452] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 269.904242][ T7452] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 269.915090][ T7452] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 269.950178][ T7452] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 270.012155][ T7452] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 270.075537][ T7452] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 270.111388][ T7452] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 270.147252][ T7452] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 270.327342][ T7452] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 270.933480][ T7452] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 271.014960][ T7452] BTRFS error (device loop0): open_ctree failed: -12 [ 271.123221][ T5785] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 271.987569][ T7529] loop5: detected capacity change from 0 to 16 [ 272.008374][ T7529] erofs: (device loop5): mounted with root inode @ nid 36. [ 272.069563][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 272.069580][ T28] audit: type=1800 audit(1759288158.345:3015): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.389" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 272.489410][ T7540] loop0: detected capacity change from 0 to 128 [ 272.563751][ T7540] EXT4-fs: quotafile must be on filesystem root [ 272.707248][ T5801] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.964697][ T7546] loop5: detected capacity change from 0 to 1024 [ 275.562946][ T7404] hfsplus: b-tree write err: -5, ino 4 [ 277.778413][ T7571] loop1: detected capacity change from 0 to 16 [ 277.803253][ T7571] erofs: (device loop1): mounted with root inode @ nid 36. [ 277.868531][ T28] audit: type=1800 audit(1759288164.125:3016): pid=7571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.399" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 278.201349][ T7584] loop5: detected capacity change from 0 to 128 [ 278.205062][ T7584] EXT4-fs: quotafile must be on filesystem root [ 278.564863][ T7588] loop0: detected capacity change from 0 to 1024 [ 279.688886][ T5803] udevd[5803]: incorrect ext4 checksum on /dev/loop5 [ 280.783536][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 281.424618][ T2972] hfsplus: b-tree write err: -5, ino 4 [ 282.582327][ T7627] loop4: detected capacity change from 0 to 16 [ 282.631496][ T7627] erofs: (device loop4): mounted with root inode @ nid 36. [ 282.800369][ T7632] loop0: detected capacity change from 0 to 1024 [ 283.102979][ T28] audit: type=1800 audit(1759288169.325:3017): pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.410" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 284.606193][ T58] hfsplus: b-tree write err: -5, ino 4 [ 284.725937][ T7639] loop0: detected capacity change from 0 to 128 [ 284.733568][ T7639] EXT4-fs: quotafile must be on filesystem root [ 286.139611][ T7658] loop0: detected capacity change from 0 to 1024 [ 286.375699][ T7659] "syz.4.417" (7659) uses obsolete ecb(arc4) skcipher [ 288.120854][ T12] hfsplus: b-tree write err: -5, ino 4 [ 289.550012][ T7682] loop4: detected capacity change from 0 to 16 [ 289.572087][ T7683] loop0: detected capacity change from 0 to 1024 [ 290.814483][ T7682] erofs: (device loop4): mounted with root inode @ nid 36. [ 291.989188][ T28] audit: type=1800 audit(1759288178.265:3018): pid=7682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.422" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 292.024165][ T7404] hfsplus: b-tree write err: -5, ino 4 [ 292.316166][ T7694] loop1: detected capacity change from 0 to 16 [ 293.183626][ T7691] loop0: detected capacity change from 0 to 128 [ 293.196153][ T7694] erofs: (device loop1): mounted with root inode @ nid 36. [ 293.204670][ T7698] loop4: detected capacity change from 0 to 64 [ 293.263257][ T7691] EXT4-fs: quotafile must be on filesystem root [ 293.551796][ T7702] loop1: detected capacity change from 0 to 64 [ 293.748234][ T5801] udevd[5801]: incorrect ext4 checksum on /dev/loop0 [ 295.475915][ T7712] loop5: detected capacity change from 0 to 128 [ 295.486165][ T7712] FAT-fs (loop5): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 296.620833][ T7727] loop4: detected capacity change from 0 to 1024 [ 296.695072][ T7730] loop0: detected capacity change from 0 to 16 [ 296.704713][ T7730] erofs: (device loop0): mounted with root inode @ nid 36. [ 296.730532][ T28] audit: type=1800 audit(1759288183.005:3019): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.433" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 296.790972][ T7727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.940973][ T6650] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.139938][ T7755] loop4: detected capacity change from 0 to 256 [ 299.184842][ T5841] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 299.402753][ T5841] usb 6-1: Using ep0 maxpacket: 32 [ 299.420259][ T7759] loop0: detected capacity change from 0 to 128 [ 299.437037][ T5841] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.463769][ T7759] EXT4-fs: quotafile must be on filesystem root [ 299.477342][ T5841] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 299.899354][ T5803] udevd[5803]: incorrect ext4 checksum on /dev/loop0 [ 300.086521][ T5841] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 300.100699][ T5841] usb 6-1: config 0 interface 0 has no altsetting 0 [ 300.113711][ T5841] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 300.402868][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.090542][ T7772] loop0: detected capacity change from 0 to 128 [ 301.098536][ T7772] FAT-fs (loop0): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 301.195985][ T5803] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 301.207606][ T5841] usb 6-1: config 0 descriptor?? [ 302.442668][ T5841] usbhid 6-1:0.0: can't add hid device: -71 [ 302.448804][ T5841] usbhid: probe of 6-1:0.0 failed with error -71 [ 302.530517][ T5841] usb 6-1: USB disconnect, device number 3 [ 302.598746][ T7788] loop0: detected capacity change from 0 to 128 [ 302.817897][ T7795] loop4: detected capacity change from 0 to 16 [ 303.503169][ T7795] erofs: (device loop4): mounted with root inode @ nid 36. [ 303.805067][ T5803] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.168644][ T7807] loop5: detected capacity change from 0 to 128 [ 304.187823][ T5802] Bluetooth: Wrong link type (-71) [ 304.219234][ T7807] EXT4-fs: quotafile must be on filesystem root [ 304.292292][ T7810] loop1: detected capacity change from 0 to 512 [ 304.331506][ T5788] udevd[5788]: incorrect ext4 checksum on /dev/loop5 [ 305.384629][ T7810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 305.466244][ T7810] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.450: Unimplemented hash flags: 0x0001 [ 305.522716][ T7810] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.450: Corrupt directory, running e2fsck is recommended [ 305.552173][ T7825] loop0: detected capacity change from 0 to 128 [ 305.560147][ T7825] FAT-fs (loop0): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 305.582922][ T7810] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.450: path /119/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 305.871099][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.914976][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 306.371580][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 306.443164][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.512113][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 306.585681][ T9] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 306.684932][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 306.722328][ T9] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 306.745154][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.776067][ T9] usb 5-1: config 0 descriptor?? [ 307.009023][ T7848] loop0: detected capacity change from 0 to 16 [ 307.551562][ T7848] erofs: (device loop0): mounted with root inode @ nid 36. [ 308.047201][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 308.086033][ T9] usbhid: probe of 5-1:0.0 failed with error -71 [ 308.450573][ T9] usb 5-1: USB disconnect, device number 3 [ 309.619198][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 310.601049][ T7889] loop4: detected capacity change from 0 to 128 [ 310.609442][ T7889] FAT-fs (loop4): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 310.645147][ T5803] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 311.584820][ T7868] loop5: detected capacity change from 0 to 32768 [ 311.726104][ T7868] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 311.814898][ T7912] loop1: detected capacity change from 0 to 512 [ 311.842744][ T7912] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 311.857630][ T7912] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 311.880615][ T7912] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 311.945739][ T7916] loop4: detected capacity change from 0 to 16 [ 311.963448][ T7916] erofs: (device loop4): mounted with root inode @ nid 36. [ 311.984598][ T7912] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 312.559030][ T7912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.778857][ T7868] XFS (loop5): Ending clean mount [ 312.870991][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.983871][ T7868] XFS (loop5): Quotacheck needed: Please wait. [ 313.244762][ T7868] XFS (loop5): Quotacheck: Done. [ 313.366713][ T6733] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 313.483635][ T7936] loop4: detected capacity change from 0 to 128 [ 313.491395][ T7936] FAT-fs (loop4): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 314.576147][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 314.848190][ T7952] loop4: detected capacity change from 0 to 16 [ 314.967187][ T7952] erofs: (device loop4): mounted with root inode @ nid 36. [ 315.393653][ T7949] loop0: detected capacity change from 0 to 2048 [ 315.606970][ T7949] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 315.657366][ T7949] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.395371][ T7971] loop4: detected capacity change from 0 to 4096 [ 317.619876][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.632669][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.027885][ T7987] loop0: detected capacity change from 0 to 128 [ 318.035737][ T7987] FAT-fs (loop0): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 318.092686][ T5801] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 319.225479][ T7998] loop0: detected capacity change from 0 to 128 [ 319.264923][ T7998] EXT4-fs: quotafile must be on filesystem root [ 319.309969][ T5801] udevd[5801]: incorrect ext4 checksum on /dev/loop0 [ 320.330876][ T7986] loop1: detected capacity change from 0 to 32768 [ 320.352690][ T7986] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.488 (7986) [ 320.678586][ T7986] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 320.778292][ T7986] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 321.002325][ T7986] BTRFS info (device loop1): using free space tree [ 321.302763][ T7986] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 321.313543][ T7986] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 321.398753][ T7986] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 321.478139][ T7986] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 321.499419][ T7986] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 321.510904][ T7986] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 321.573286][ T7986] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 321.605049][ T7986] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 321.663358][ T7986] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 321.726644][ T7986] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 321.840344][ T7986] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 321.888045][ T7986] BTRFS error (device loop1): open_ctree failed: -12 [ 321.925453][ T8043] loop0: detected capacity change from 0 to 128 [ 321.934017][ T8043] FAT-fs (loop0): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 323.299031][ T8054] loop1: detected capacity change from 0 to 256 [ 323.654735][ T8067] loop1: detected capacity change from 0 to 128 [ 323.664793][ T8067] EXT4-fs: quotafile must be on filesystem root [ 324.017716][ T5803] udevd[5803]: incorrect ext4 checksum on /dev/loop1 [ 326.328200][ T8096] loop0: detected capacity change from 0 to 16 [ 326.342703][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 326.363065][ T8096] erofs: (device loop0): mounted with root inode @ nid 36. [ 326.402775][ T28] audit: type=1800 audit(1759288212.685:3020): pid=8096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.509" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 326.716363][ T8102] loop0: detected capacity change from 0 to 256 [ 327.176564][ T8118] loop5: detected capacity change from 0 to 128 [ 327.217017][ T8118] EXT4-fs: quotafile must be on filesystem root [ 327.287576][ T5803] udevd[5803]: incorrect ext4 checksum on /dev/loop5 [ 327.481463][ T8092] loop4: detected capacity change from 0 to 32768 [ 327.545630][ T8092] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.508 (8092) [ 327.614411][ T8092] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 327.651579][ T8092] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 327.688461][ T8092] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 327.718837][ T8092] BTRFS info (device loop4): use lzo compression, level 0 [ 327.745490][ T8092] BTRFS info (device loop4): using free space tree [ 327.951073][ T8092] BTRFS info (device loop4): enabling ssd optimizations [ 327.992646][ T8092] BTRFS info (device loop4): auto enabling async discard [ 328.251641][ T8099] loop1: detected capacity change from 0 to 40427 [ 328.323924][ T8099] F2FS-fs (loop1): Invalid log sectorsize (131081) [ 328.330536][ T8099] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 328.365043][ T8099] F2FS-fs (loop1): invalid crc value [ 328.452899][ T6650] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 328.651935][ T8099] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 328.662442][ T8099] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 329.324091][ T8160] PKCS7: Unknown OID: [4] 0.38.11253.7578(bad) [ 329.330791][ T8160] PKCS7: Only support pkcs7_signedData type [ 329.339795][ T8160] netlink: 5 bytes leftover after parsing attributes in process `syz.1.510'. [ 329.348925][ T8160] macvtap0: entered allmulticast mode [ 329.354591][ T8160] veth0_macvtap: entered allmulticast mode [ 329.930500][ T8147] loop5: detected capacity change from 0 to 32768 [ 329.944292][ T8147] XFS: ikeep mount option is deprecated. [ 330.117751][ T8147] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 330.392291][ T8173] loop0: detected capacity change from 0 to 16 [ 330.457583][ T8173] erofs: (device loop0): mounted with root inode @ nid 36. [ 330.479873][ T28] audit: type=1800 audit(1759288216.755:3021): pid=8173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.519" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 330.536246][ T8147] XFS (loop5): Ending clean mount [ 330.565338][ T8147] XFS (loop5): Quotacheck needed: Please wait. [ 330.861978][ T8147] XFS (loop5): Quotacheck: Done. [ 331.829273][ T6733] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 332.327346][ T8196] loop4: detected capacity change from 0 to 128 [ 332.350981][ T8196] EXT4-fs: quotafile must be on filesystem root [ 332.390721][ T5803] udevd[5803]: incorrect ext4 checksum on /dev/loop4 [ 332.942708][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 333.142588][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 333.864449][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.976740][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.015030][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 334.045727][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.086386][ T9] usb 6-1: config 0 descriptor?? [ 334.548930][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 334.572716][ T9] usbhid: probe of 6-1:0.0 failed with error -71 [ 334.614526][ T9] usb 6-1: USB disconnect, device number 4 [ 334.958410][ T8226] loop0: detected capacity change from 0 to 16 [ 335.019432][ T8226] erofs: (device loop0): mounted with root inode @ nid 36. [ 336.069711][ T8235] loop0: detected capacity change from 0 to 16 [ 336.110517][ T8235] erofs: (device loop0): mounted with root inode @ nid 36. [ 336.126810][ T28] audit: type=1800 audit(1759288222.405:3022): pid=8235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.528" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 336.274054][ T8214] loop4: detected capacity change from 0 to 40427 [ 336.303831][ T8214] F2FS-fs (loop4): Invalid log sectorsize (131081) [ 336.336109][ T8214] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 336.370656][ T8242] loop0: detected capacity change from 0 to 256 [ 336.613742][ T8214] F2FS-fs (loop4): invalid crc value [ 336.946800][ T8255] loop5: detected capacity change from 0 to 128 [ 336.972584][ T8255] EXT4-fs: quotafile must be on filesystem root [ 337.013560][ T5962] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 338.127413][ T8272] loop5: detected capacity change from 0 to 16 [ 338.302964][ T8272] erofs: (device loop5): mounted with root inode @ nid 36. [ 339.151101][ T8284] loop5: detected capacity change from 0 to 1024 [ 341.501527][ T8290] loop4: detected capacity change from 0 to 16 [ 341.533589][ T5861] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 341.558358][ T8290] erofs: (device loop4): mounted with root inode @ nid 36. [ 341.754111][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 341.785198][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.850172][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.930482][ T5861] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 341.985962][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.322382][ T5861] usb 2-1: config 0 descriptor?? [ 342.454699][ T42] hfsplus: b-tree write err: -5, ino 4 [ 342.581516][ T8301] overlayfs: upper fs does not support file handles, falling back to index=off. [ 342.619706][ T8307] loop5: detected capacity change from 0 to 128 [ 342.627891][ T8307] EXT4-fs: quotafile must be on filesystem root [ 342.681746][ T5803] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 343.147927][ T5861] usbhid 2-1:0.0: can't add hid device: -71 [ 343.162882][ T5861] usbhid: probe of 2-1:0.0 failed with error -71 [ 343.414163][ T5861] usb 2-1: USB disconnect, device number 8 [ 345.177093][ T8335] loop1: detected capacity change from 0 to 16 [ 345.241423][ T8316] loop0: detected capacity change from 0 to 40427 [ 345.272257][ T8335] erofs: (device loop1): mounted with root inode @ nid 36. [ 345.279746][ T8316] F2FS-fs (loop0): Invalid log sectorsize (131081) [ 345.297983][ T8316] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 345.336237][ T8316] F2FS-fs (loop0): invalid crc value [ 345.816971][ T8346] loop1: detected capacity change from 0 to 128 [ 345.824799][ T8346] FAT-fs (loop1): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 346.419049][ T8350] loop4: detected capacity change from 0 to 1024 [ 346.543442][ T8352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 347.794666][ T8316] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 348.803035][ T8350] hfsplus: failed to load catalog file [ 349.707329][ T8316] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 349.805752][ T5962] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 350.012628][ T6781] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 350.232661][ T6781] usb 2-1: Using ep0 maxpacket: 16 [ 350.254671][ T6781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.295059][ T6781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.312895][ T6781] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 350.322288][ T6781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.338129][ T6781] usb 2-1: config 0 descriptor?? [ 350.963448][ T6781] usbhid 2-1:0.0: can't add hid device: -71 [ 350.969527][ T6781] usbhid: probe of 2-1:0.0 failed with error -71 [ 351.062188][ T6781] usb 2-1: USB disconnect, device number 9 [ 351.291943][ T8368] loop4: detected capacity change from 0 to 16 [ 351.318599][ T8368] erofs: (device loop4): mounted with root inode @ nid 36. [ 351.425062][ T8370] loop5: detected capacity change from 0 to 16 [ 351.464764][ T8370] erofs: (device loop5): mounted with root inode @ nid 36. [ 351.482784][ T5802] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 351.510942][ T8368] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 351.585321][ T28] audit: type=1800 audit(1759288237.865:3023): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.558" name="file2" dev="overlay" ino=89 res=0 errno=0 [ 351.779356][ T8376] loop1: detected capacity change from 0 to 128 [ 351.787836][ T8376] FAT-fs (loop1): Unrecognized mount option "uni_xl%PB^cwiet" or missing value [ 351.825503][ T5801] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 352.057161][ T8383] loop4: detected capacity change from 0 to 1024 [ 352.186095][ T8384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.808280][ T8363] loop0: detected capacity change from 0 to 32768 [ 353.491929][ T8387] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 353.491929][ T8387] [ 353.586161][ T8387] ERROR: (device loop0): remounting filesystem as read-only [ 353.612898][ T8387] ialloc: diAlloc returned -5! [ 353.801745][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 353.838300][ T5784] ------------[ cut here ]------------ [ 353.845207][ T5784] kernel BUG at fs/jfs/inode.c:169! [ 353.870964][ T5784] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 353.877302][ T5784] CPU: 0 PID: 5784 Comm: syz-executor Not tainted syzkaller #0 [ 353.885312][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.895617][ T5784] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 353.901224][ T5784] Code: e3 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 a9 80 e3 fe e9 16 fe ff ff e8 9f 35 8c fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 353.920883][ T5784] RSP: 0018:ffffc9000446fac0 EFLAGS: 00010293 [ 353.927000][ T5784] RAX: ffffffff82f96201 RBX: ffff88805884c4f0 RCX: ffff888021293c00 [ 353.935013][ T5784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805884c4f0 [ 353.943025][ T5784] RBP: 0000000000000001 R08: ffffffff90da664f R09: 1ffffffff21b4cc9 [ 353.951293][ T5784] R10: dffffc0000000000 R11: fffffbfff21b4cca R12: dffffc0000000000 [ 353.959300][ T5784] R13: dffffc0000000000 R14: ffff88805884c178 R15: ffff88805884c6c0 [ 353.967313][ T5784] FS: 000055555c609500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 353.976280][ T5784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.982896][ T5784] CR2: 00007fe9fb362000 CR3: 0000000060ce3000 CR4: 00000000003506f0 [ 353.990999][ T5784] Call Trace: [ 353.994313][ T5784] [ 353.997269][ T5784] ? evict+0x480/0x870 [ 354.001495][ T5784] ? jfs_write_inode+0x220/0x220 [ 354.006589][ T5784] evict+0x486/0x870 [ 354.010529][ T5784] ? proc_nr_inodes+0x230/0x230 [ 354.015424][ T5784] ? do_raw_spin_unlock+0x121/0x230 [ 354.020680][ T5784] ? do_raw_spin_unlock+0x121/0x230 [ 354.025924][ T5784] evict_inodes+0x5fe/0x690 [ 354.030599][ T5784] ? clear_inode+0x150/0x150 [ 354.035229][ T5784] generic_shutdown_super+0x97/0x2b0 [ 354.040563][ T5784] kill_block_super+0x44/0x90 [ 354.045278][ T5784] deactivate_locked_super+0x97/0x100 [ 354.050800][ T5784] cleanup_mnt+0x429/0x4c0 [ 354.055326][ T5784] task_work_run+0x1ce/0x250 [ 354.059966][ T5784] ? task_work_cancel+0x240/0x240 [ 354.065037][ T5784] ? exit_to_user_mode_loop+0x3b/0x110 [ 354.070544][ T5784] exit_to_user_mode_loop+0xe6/0x110 [ 354.075911][ T5784] exit_to_user_mode_prepare+0xf6/0x180 [ 354.081633][ T5784] syscall_exit_to_user_mode+0x1a/0x50 [ 354.087236][ T5784] do_syscall_64+0x61/0xb0 [ 354.091692][ T5784] ? clear_bhb_loop+0x40/0x90 [ 354.096408][ T5784] ? clear_bhb_loop+0x40/0x90 [ 354.101134][ T5784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.107084][ T5784] RIP: 0033:0x7f65d5d901f7 [ 354.111550][ T5784] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 354.131200][ T5784] RSP: 002b:00007ffe73c37208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 354.139659][ T5784] RAX: 0000000000000000 RBX: 00007f65d5e11d7d RCX: 00007f65d5d901f7 [ 354.147678][ T5784] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe73c372c0 [ 354.155698][ T5784] RBP: 00007ffe73c372c0 R08: 0000000000000000 R09: 0000000000000000 [ 354.163710][ T5784] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe73c38350 [ 354.171715][ T5784] R13: 00007f65d5e11d7d R14: 00000000000564fb R15: 00007ffe73c38390 [ 354.179730][ T5784] [ 354.182788][ T5784] Modules linked in: [ 354.384808][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 354.436348][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.473816][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.486177][ T5784] ---[ end trace 0000000000000000 ]--- [ 354.491817][ T5784] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 354.492578][ T11] hfsplus: b-tree write err: -5, ino 4 [ 354.497499][ T5784] Code: e3 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 a9 80 e3 fe e9 16 fe ff ff e8 9f 35 8c fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 354.522850][ T5784] RSP: 0018:ffffc9000446fac0 EFLAGS: 00010293 [ 354.528968][ T5784] RAX: ffffffff82f96201 RBX: ffff88805884c4f0 RCX: ffff888021293c00 [ 354.529785][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 354.537130][ T5784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805884c4f0 [ 354.537150][ T5784] RBP: 0000000000000001 R08: ffffffff90da664f R09: 1ffffffff21b4cc9 [ 354.537164][ T5784] R10: dffffc0000000000 R11: fffffbfff21b4cca R12: dffffc0000000000 [ 354.537179][ T5784] R13: dffffc0000000000 R14: ffff88805884c178 R15: ffff88805884c6c0 [ 354.537194][ T5784] FS: 000055555c609500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 354.537212][ T5784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.537226][ T5784] CR2: 0000200001000000 CR3: 0000000060ce3000 CR4: 00000000003506e0 [ 354.537245][ T5784] Kernel panic - not syncing: Fatal exception [ 354.546858][ T5784] Kernel Offset: disabled