last executing test programs: 3m36.623804547s ago: executing program 4 (id=359): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) shutdown(r0, 0x1) 3m36.601390207s ago: executing program 4 (id=360): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000580)={0x20, 0x3, 0x4, "f089026d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m33.699568634s ago: executing program 4 (id=396): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40786e88, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2401}) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) 3m33.369064458s ago: executing program 4 (id=400): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket(0x28, 0x5, 0x0) pipe(&(0x7f0000000080)) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x2, 0x2, 0xbfdffffc}, 0x0, 0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000010) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 3m33.159508066s ago: executing program 4 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m33.022936723s ago: executing program 4 (id=405): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000180)=[{0x4, 0x1000, 0x0, 0x0}], 0x1}) 3m17.967471554s ago: executing program 32 (id=405): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000180)=[{0x4, 0x1000, 0x0, 0x0}], 0x1}) 2m12.803857721s ago: executing program 5 (id=976): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000540)="$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") pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=']) 2m10.619845706s ago: executing program 5 (id=979): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, 0x0, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f00001e1000/0x1000)=nil, 0x1000, 0x4, 0x10012, r0, 0x40971000) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[], 0x0, 0x21e, &(0x7f00000002c0)="$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") ptrace(0x10, 0x0) ptrace$poke(0x5, 0x0, &(0x7f00000001c0), 0x1) pipe2$9p(&(0x7f00000001c0), 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='8'], 0x138) 2m9.399866178s ago: executing program 5 (id=982): mknodat(0xffffffffffffff9c, 0x0, 0x4804, 0x0) 2m9.251290715s ago: executing program 1 (id=985): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xb8, 0x29, 0x4, {0x4, 0x13, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1f0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m9.063816783s ago: executing program 5 (id=988): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) open$dir(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x2c1) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_mount_image$fuse(0x0, &(0x7f0000000640)='./cgroup.cpu/cgroup.procs\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) 2m8.700394849s ago: executing program 1 (id=992): socket$inet6(0xa, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file7\x00', 0x14444, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0xfe, 0xc22, &(0x7f00000002c0)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu43bTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22YXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkFPAYGbfikuKsmhTpCj7+2zqNzvz3sx7M+sZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/fOnMc+lhtwIAOEhXxr985qznPwB8rFz1//8AAAAAAAAAAAAAAHDYpSji8Ugxf2U9TVafOwYut2dv3Z4YGd252rFU1TxSlS9/Bp47e+78F54fvtDN96//oD0Zr45fvVR/ae7m/EJrcbE1XZ+YbU/NTbd2vYe91t9uqDoB9Zuv3Zq+fn2xfvbZc1s23x58r/+xk4MXh58+/VS37MTI6Oh4T5la34c++l3uNcLjaBRxOlI8890fp2ZEFLH3c3Gf785+O1Z1YqjqxMTIaNWRmXZzdqncONY9EUVEvadSo3uODuBa7EkjYrlsftngobJ74/PNhea1mVZ9rLmw1F5qz82OpU5ry/7Uo4gLKWIlItb6795dXxRRixTfPrGerkXEke55+Hw1MPje7Sj2sY+7ULaz3hexUjwC1+wQ648iXokUP3m7iKnynOWf+FzEK2V+P+LNMl+MSOUX43zEuzt8j3g01aKIvyiv/8X1NB0RGyc660frl79S/9Ls9bmest37yiP/fDhIh/zeNBBFNKs7/nr68L/ZAQAAAAAAAAAAAAAAAOBBOxZFPBkpXv6PP67GFUc1Lv3ExeE/GPzF3jHjT9xnP2XZZyNiudjdmNyjeQjxWBpL6SGPJf44G4gi/iSP//vmw24MAAAAAAAAAAAAAAAAAADAx1oRP4oUL7xzKq1E75zi7dkb9avNazOdWWG7c/9250zf2NjYqKdONnJO5lzOuZJzNedazihy/ZyNnJM5l3Ou5FzNuZYzjuT6ORs5J3Mu51zJuZpzLWfUcv2cjZyTOZdzruRczbmWMw7J3L0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8lRRTxs0jxra+tp0gR0YiYjE6u9nfLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPU38q4nuRov6HjTvrahGRqn87TpW/nI/G0TI/GY3hMl+MxqWczSprjW/e92hpX/rAh9eXivhhpOgfeOvO1cnXv6/zafOavfn1zU+/Uuvkke7Gwff6Hzt54uLw6K89ca/lHa/+0OX27K3b9YmR0dHxntW1fPRP9qwbzMctHkzXiYjF1994rTkz01qw8PFYqHUWanFI2nNQC/l+FYelPdsXGoejGZsLD/nGxIEon//vRorfeec/uw/87vP/Fzqf7jzh46d/uvn8f2H7jvbp+f94z7oX8u9G+moRA0s35/tORgwsvv7G6fbN5o3Wjdbs+TNnvjg8/MVzZ/qORgxcb8+0epb2fKoAAAAAAAAAAAAAAAAADlYq4vciRfOH66keEber8VqDF4efPv3UkThSjbfaMm7r1fGrl+ovzd2cX2gtLram6xOz7am56dZuDzdQDfeaGBndl87c17F9bv+xgZfm5l9faN/4o6Udtx8fuHRtcWmhObXz5jgWRUSjd81Q1eCJkdGq0TPt5mxVdewBvUqhLxXxX5Fi6nw9fTavy+P/to/w3zL+f3n7jvZp/N8netaVx0ypiJ9Git/+yyfis1U7j8dd5yyX+9tIMXThM7lcHC3LddvQea9AZ2RgWfb/IsU//mxr2e54yMc3yz636xP7iCiv/4lI8b0//078Rl639f0PO1//49t3tE/X/1M9645veV/BnrtOvv6nI8WLj78Vv5nXvd/7P4rY2Nj4RsSpXPjO+zn26fp/umfdYHSO+1sPrvsAAAAAAAAAAACPrL5UxN9FiqdGa+n5vG43f/9vevuO9unvf/1yz7rpA5qvaM8nFQAAAAAOib5UxI8ixY2lt+6Mod46/rtn/Ofvbs69PpK2ba3+nO+XqvcGPMg//+s1mI87ufduAwAAAAAAAAAAAAAAAAAAwKGSUhHP5/nUJ+8zn/pqpHj5f57J5dLJslx3HvjB6teBK3Ozpy/NzMxNNZea12Za9fH55lSrrPupSLH+N5/JdYtqfvXufPOdOd4HNrpzsS9EitG/75btzMXenZu8Mx94Zy72suwnIsV//8PWst15rD+9WfZsWfavI8VX/3nnsic3y54ry34nUvzgq/Vu2eNl2e77UTvvJB2oxUzr2am5mbtehQoAAAAAAAAAAAAAAAAAAAAfVF8q4s8ixf/eXInlPOw/z//fnYG/1i375td75vvf5nY1z/9gNf//vZY/zPz/gw+spwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OhIUcQbkWL+ynpa7S8/dwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lzw/fKGb71//QXsyXh2/eqn+0tzN+YXW4mJruj4x256am27teg97rb956jqGqhNQv/narenr1xfrZ589t2Xz7cH3+h87OXhx+OnTT3XLToyMjo73lKn1fYCjf6DGbToaRfxVpHjmuz9O/9IfUcTez8V9vjv77VjViaGqExMjo1VHZtrN2aVy41j3RBQR9Z5Kje45OoBrsSeNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv3t3fVHEa5Hi2yfW07/2RxzpnofPXxn/8pmz925HsY993IWynfW+iJXiEbhmh1h/FPFPkeInb5+Kf+uPqEXnJz4X8UqZ3494s8wXI1KK2PhGxLs7fI94NNWiiP8vr//F9fR2f3k/6N5XLn+l/qXZ63M9Zbv3lV09H3793sd86M+Hg3TI700DUcQPqjv+evp3/10DAAAAAAAAAAAAAAAAHCJF/GqkeOGdU6kaH3xnTHF79kb9avPaTGdYX3fsX3fM9MbGxkY9dbKRczLncs6VnKs513JGkevnbOSczLmccyXnas61nHEk18/ZyDmZcznnSs7VnGs5o5br52zknMy5nHMl52rOtZxxSMbuAQAAAAAAAAAAAAAAAAAAHy1F9U+Kb31tPW30d+aXnoxOrpoP9CPv5wEAAP//N4D+uw==") writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) 2m8.235495149s ago: executing program 5 (id=996): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m8.143107153s ago: executing program 1 (id=1000): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 2m6.707818165s ago: executing program 1 (id=1008): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) open$dir(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x2c1) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_mount_image$fuse(0x0, &(0x7f0000000640)='./cgroup.cpu/cgroup.procs\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) 2m6.701549745s ago: executing program 5 (id=1010): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801000000"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x415c0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB='IS\x00\x00\x00\x00\x00\x00\x00\x00-'], 0x38}}, 0x20008040) 2m6.101926541s ago: executing program 33 (id=1010): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801000000"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x415c0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB='IS\x00\x00\x00\x00\x00\x00\x00\x00-'], 0x38}}, 0x20008040) 2m6.084322082s ago: executing program 1 (id=1012): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a001fff"], 0x24}}, 0x0) 2m4.9797981s ago: executing program 1 (id=1018): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_setup(0x987, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) chdir(0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') r4 = socket(0x11, 0xa, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r4, 0x0, 0x0, 0x40800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 2m4.382850226s ago: executing program 34 (id=1018): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_setup(0x987, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) chdir(0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') r4 = socket(0x11, 0xa, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r4, 0x0, 0x0, 0x40800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 5.10983019s ago: executing program 0 (id=1655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x0, 0x20, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.541766704s ago: executing program 6 (id=1662): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f00000006c0)="$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") openat$sndseq(0xffffffffffffff9c, 0x0, 0x42200) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 3.624275644s ago: executing program 3 (id=1664): syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @random="124726f7871a", @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @random="39ed0ba95737", @loopback}}}}, 0x0) 3.283891558s ago: executing program 3 (id=1666): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x2280, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 3.115675586s ago: executing program 2 (id=1667): ioperm(0x0, 0x40, 0x80) epoll_create1(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000100)={0x19980330, r1}, &(0x7f0000000140)={0x5, 0x3, 0x8, 0xfffffff9, 0x10001, 0x7}) 2.603103508s ago: executing program 7 (id=1668): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113d00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) 2.535946681s ago: executing program 2 (id=1669): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009110feff0000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.509791862s ago: executing program 7 (id=1670): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x5, 0xfffffffffffffe15, 0xffffffb0, 0x0, 0x0, 0xd00, 0x88be, 0x0, 0xfffffffffffffe3c, 0x0, 0x0, 0x5}, 0x50) 2.487204993s ago: executing program 3 (id=1671): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4000004, &(0x7f0000001100)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 2.419831386s ago: executing program 6 (id=1672): syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xd8, @none, "b25ff349362a4516526dfbf318d5f344e56e42134b8d6658a9d4251dd0936365da6d4f1348f9253167b56469e5525db56ceebaace328072844851257cfb614a244bfeec15044344bdce752187d459f1afa793aa338790f218d9cdaef3484c28c726424dda11c130fdabc6261fe393ff74a48d8e3838a0154cbafe1623d049836828a886b8e279ba1fb04dcfc6413b667eed9dab3ecc9c2ff9703757717324d624594cbb8d40df4edc1d9e058cfe9fbf0e65b33c6917bd3f94dd156d9306276078a2b802105b06eb6f0eb28fa5cdc87b55c07a39ee5966ca715e78d6393a3fa7a2da4feeeb9e117fb92c8f30a29c97f7d096a812f748704fc"}}}, 0x102) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 2.373312168s ago: executing program 2 (id=1673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0xb, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x0) 2.302663131s ago: executing program 7 (id=1674): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$eJzs3Au0jtXWOPA511oPm8Sb5L7mmg9vclkkSS4JiSRJjiS5JSRJkoTEJrckJCH3JPeQ3EJyv99yT5IjSZKQkGT9h079nXM63+l83znn842z52+MZ+w19/vO+c5nz733+zxrjL2/7jCoSr2qleowM/xT8E8fUgEgBQD6AkAWAIgAoGTWklkBh0IGjan/3IuIf60Hpl7pDsSVJPNP22T+aZvMP22T+adtMv+0Teaftsn80zaZvxBp2dZpua6RI+0e/3v7/yD7///nyPv/f5DDRUd/vr7odR3/Gyky/7RN5p+2yfzTNpl/2ibzT9tk/v/hIoCKf+dhmX/aJvMXIi270vvPclzZ40p//wkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESBvOhcsMAPy6vtJ9CSGEEEIIIYQQ4l8npP/zKN2Va0QIIYQQQgghhBD/RggKNBiIIB2khxTIABnhKsgEV0NmyAIJuAaywrWQDa6D7JADckIuyA15IC9YIHDAEEM+yA9JuB4KwA1QEApBYSgCHopCMbgRisNNUAJuhpJwC5SCW6E0lIGyUA5ug/JwO1SAilAJ7oDKcCdUgapwF1SDu6E63AM14F6oCfdBLbgfasMfoA48AHXhQagHD0F9eBgaQENoBI2hyf8o/3noAi9AV+gGqdAdesCL0BN6QW/oA33hJegHL0N/eAUGwEAYBK/CYHgNhsDrMBSGwXB4A0bASBgFo2EMjIVx8CaMh7dgArwNE2ESTIYpMBWmwXR4B2bATJgF78JseA/mwFyYB/NhAbwPC2ERLIYPYAl8CEthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW+Ej2AbbYQfshF2wG/bAx7AXPoF98Cnsh8/+Oj/L388/+1f5HREQUKFCgwbTYTpMwRTMiBkxE2bCzJgZE5jArJgVs2E2zI7ZMSfmxNyYG/NiXiQkZGTMh/kwiUksgAWwIBbEwlgYPXoshsWwON6EJbAElsSSWApLYWksg2WwHJbD8lgeK2AFrISVsDJWxipYBe/Cu/BurI7VsQbWwJpYE2thLayNtbEO1sG6WBfrYT2sj/WxATbARtgIm2ATbIpNsRk2wxbYAltiS2yFrbA1tsY22AbbYltsh+2wPbbHDtgBO2In7ITP4/P4Ar6A3bCy6o49sAf2xJ7YG/tgH3wJ++HL+DK+ggNwIA7CV/FVfA2H4BkcisNwOA7H8mokjsLRyGosjsNxOB7H4wScgBNxEk7CKTgVp+F0nI4zcCbOxHdxNr6H7+FcnIvzcQEuwIW4CBfjYlyCZ3EpLsPluAJX4ipciWtwLa7B9bgB1+Mm3IRbcAt+hB/hdtyOO3En7sbd+DF+jJ/gJzgA9+N+PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPIfn8Dyexwv4bO4v6+4utG4AqEuMMiqdSqdSVIrKqDKqTCqTyqwyq4RKqKwqq8qmsqnsKrvKqXKq3Cq3yqvyKlKkWMUqn8qnkiqpCqgCqqAqqAqrwsorr4qpYqq4Kq5KqBKqpLpFlVK3qtKqjGruy6lyqrxq4SuoiqqSqqQqqztVFVVVVVXVVDVVXVVXNVQNVVPVVLXU/aq26o698QF1aTL11ECsrwZhA9VQNVKN1Wv4iGqqhmAz1Vy1UI+pYTgUW6mmvrV6UrVRo7CtelqNxmdUezUWO6jnVEfVSXVWz6suqpnv+ut2p5qCPVUv1Vv1UTPwTnVpYlXUK2qAGqgGqVfVfHxNDVGvq6FqmBqu3lAj1Eg1So1WY9RYNU69qcart9QE9baaqCapyWqKmqqmqenqHTVDzVSz1LtqtnpPzVFz1Tw1Xy1Q76uFapFarD5QS9SHaqlapparFWqlWqVWqzVqrVqn1qsNaqPapDarLWqr+khtU9vVDrVT7VK71R71sdqrPlH71Kdqv/pMHVB/VAfV5+qQ+kIdVl+qI+ordVR9rY6pb9Rx9a06oU6qU+o7dVp9r86os+qc+kGdVz+qC+ondVEFBRq10lobHel0Or1O0Rl0Rn2VBn21zqyz6IS+RmfV1+ps+jqdXefQOXUunVvn0Xm11aSdZh3rfDq/TurrdQF9gy6oC+nCuoj2uqgupm/UxfVNuoS+WZfUt+hS+lZdWpfRZXU5fZsur2/XFXRFXUnfoSvrO3UVXVXfpavpu3V1fY+uoe/VNfV9upa+X9fWf9B19AO6rn5Q19MP6fr6Yd1AN9SNdGPdRD+im+pHdTPdXLfQj+mW+nHdSj+hW+sndRv9lG6rn9bt9DO6vX5Wd9DP6Y66k+6sf9IXddBddTedqrvrHvpF3VP30r11H91Xv6T76Zd1f/2KHqAH6kH6VT1Yv6aH6Nf1UD1MD9dv6BF6pB6lR+sxeqwep9/U4/VbeoJ+W0/Uk/RkPUVP1dN0718qzfoH8t/6G/n9f371LXqr/khv09v1Dr1T79K79R69R+/Ve/U+vU/v1/v1AX1AH9QH9SF9SB/Wh/URfUQf1Uf1MX1MH9fH9Ql9Uv+gv9On9ff6jD6rz+of9Hl9Xl/45WsABo0y2hgTmXQmvUkxGUxGc5XJZK42mU0WkzDXmKzmWpPNXGeymxwmp8llcps8Jq+xhowzbGKTz+Q3SXO9KWBuMAVNIVPYFDHeFDXFzI3/dP7v9dfENDFNTVPTzDQzLUwL09K0NK1MK9PatDZtTBvT1rQ17Uw70960Nx1MB9PRdDSdTWfTxXQxXU1Xk2pSTQ/zoulpepnepo/pa14y/Uw/09/0NwPMADPIDDKDzWAzxAwxQ81QM9wMNyPMCDPKjDJjzBgzzowz4814M8FMMBPNRDPZTDZTzVQz3Uw3M8wMM8vMMrPNbDPHzDHzzDyzwCwwC81Cs9gsNkvMErPULDPLzAqzwqwyq8was8asM+vMBrPBbDKbzFKz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDKHzWFzxBwxR81Rc8wcM8fNcXPCnDCnzClz2pw2Z8wZc86cM+fNeXPBXDAXzcVLl32RilRkIhOli9JFKVFKlDHKGGWKMkWZo8xRIkpEWaOsUbbouih7lCPKGeWKckd5olSwEUUu4iiO8kX5o2R0fVQguiEqGBWKCkdFIh8VjYpFN0bFo5uiEtHNUcnolqhUdGtUOioTlY3KRbdF5aPbowpRxahSdEdUObozqhJVje6KqkV3R9Wje6Ia0b1Rzei+qFZ0f1Q7+kNUJ3ogqhs9GNWLHorqRw9HDaKGUaOocdTkX1o/hDM5HvVdbTebarvbHvZF29P2sr1tH9vXvmT72Zdtf/uKHWAH2kH2VTvYvmaH2NftUDvMDrdv2BF2pB1lR9sxdqwdZ9+04+1bdoJ92060k+xkO8VOtdPsdPuOnWFn2ln2XTvbvmfn2Ll2np1vF9j37UK7yC62H9gl9kO71C6zy+0Ku9KusqvtGrvWrrPr7Qa70W6ym+0Wu9V+ZLfZ7XaH3Wl32d12j/3Y7rWf2H32U7vffmYP2D/ag/Zze8h+YQ/bL+0R+5U9ar+2x+w39rj91p6wJ+0p+509bb+3Z+xZe87+YM/bH+0F+5O9aMOli/tLb+9kyFA6SkcplEIZKSNlokyUmTJTghKUlbJSNspG2Sk75aSclJtyU17KS5cwMeWjfJSkJBWgAlSQClJhKkyePBWjYlScilMJKkElqSSVolJUmkpTWSpLt9FtdDvdThWpIt1Bd9CddCdVpapUjapRdapONagG1aSaVItqUW2qTXWoDtWlulSP6lF9qk8NqAE1okbUhJpQU2pKzagZtaAW1JJaUitqRa2pNbWhNtSW2lI7akftqT11oA7UkTpSZ+pMXagLdaWulEqp1IN6UE/qSb2pN/WlvtSP+lF/6k8DaAANokE0mAbTEBpCQ2kYDac3aASNpFE0msbQWBpH42g8jacJNIEm0kSaTJNpKk2l6TSdZtAMmkWzaDbNpjk0h+bRPFpAC2ghLaTFtJiW0BJaSktpOS2nlbSSVtNqWktraT2tp420kTbTZtpKW2kbbaMdtIN20S7aQ3toL+2lfbSP9tN+OkAH6CAdpEN0iA7TYTpCR+goHaVjdIyO03E6QSfoFJ2i03SaztAZOkfn6Dz9SBfoJ7pIgVKcgozuKpfJXe0yuywuxWVwl+IIAC7FOV0ul9vlcXmdddldjr+IyTlX0BVyhV0R511RV8zd+Ju4tCvjyrpy7jZX3t3uKvwmrubudtXdPa6Gu9dVdXf9RVzT3edquYdcbfewq+MaurqusavnHnL13cOugWvoGrnGrqV73LVyT7jW7knXxj31m3ihW+TWunVuvdvg9rpP3Dn3gzvqvnbn3Y+uq+vm+rqXXD/3suvvXnED3MDfxMPdG26EG+lGudFujBv7m3iym+KmumluunvHzXAzfxMvcO+72W6xm+Pmunlu/s/xpZ4Wuw/cEvehW+qWueVuhVvpVrnVbs3/73WF2+Q2uy1uj/vYbXPb3Q630+1yu3+OL53HPvep2+8+c0fcV+6g+9wdcsfcYfflz/Gl8zvmvnHH3bfuhDvpTrnv3Gn3vTvjzv58/pfO/Tv3k7voggNGVqzZcMTpOD2ncAbOyFdxJr6aM3MWTvA1nJWv5Wx8HWfnHJyTc3FuzsN52TKxY+aY83F+TvL1XIBv4IJciAtzEfZclIvxjVycb+ISfDOX5Fu4FN/KpbkMl+VyfBuX59u5AlfkSnwHVw6Bq3BVvour8d1cne/hGnwv1+T7uBbfz7X5D1yHH+C6/CDX44e4Pj/MDbghN+LG3IQf4ab8KDfj5tyCH+OW/Di34ie4NT/JbfgpbstPczt+htvzs9yBn+OO3Ik78/PchV/grtyNU7k79+AXuSf34t7ch/vyS9yPX+b+/AoP4IE8iF/lwfwaD+HXeSgP4+H8Bo/gkTyKR/MYHsvj+E0ez2/xBH6bJ/IknsxTeCpP4+n8Ds/gmTyL3+XZ/B7P4bk8j+fzAn6fF/IiXswf8BL+kJfyMl7OK3glr+LVvIbX8jpezxt4I2/izbyFt/JHvI238w7eybt4N+/hj3kvf8L7+FPez5/xAf4jH+TP+RB/wYf5Sz7CX/FR/pqP8Td8nL/lE3yST/F3fJq/5zN8ls/xD3yef+QL/BNf5MAQY6xiHZs4itPF6eOUOEOcMb4qzhRfHWeOs8SJ+Jo4a3xtnC2+Ls4e54hzxrni3HGeOG9sY4pdzHEc54vzx8n4+rhAfENcMC4UF46LxD4uGheLb4yLxzfFJeKb45LxLXGp+NYYUsvED91bLr4tLh/fHleIK8aV4jviyvGdcZW4anxXXC2+O64e3xPXiO+NS8T3xbXi++Pa8R/iOvEDcd34wbhe/FBcP344bhA3jBvFjeMm8SNx0/jRuFncPG4RPxa3jB+PW8VPxK3jJ+M28VO/+3hq3D3uEb8YvxiHcI/65T4xuTC5KLk4+UFySfLD5NLksuTy5IrkyuSq5OrkmuTa5Lrk+uSG5MbkpuTm5JZkCFXTg0evvPbGRz6dT+9TfAaf0V/lM/mrfWafxSf8NT6rv9Zn89f57D6Hz+lz+dw+j8/rrSfvPPvY5/P5fdJf7wv4G3xBX8gX9kW890V9Md/YN/FNfFP/qG/mm/sW/jH/mH/cP+6f8E/4J30b/5Rv65/27fwzvr1/1j/rn/MdfSff2T/vu/gXfFffzaf6VN/D9/A9fU/f2/f2fX1f38/38/19fz/AD/CD/CA/2A/2Q/wQP9QP9cP9cD/Cj/Cj/Cg/xo/x4/w4P96P9xP8BD/RT/ST/WQ/1U/10/10P8PP8LP8LD+74Gw/x8/x8/w8v8Av8Av9Qr/YL/ZL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/hD/sv/RH/lT/qv/bH/Df+uP/Wn/An/Sn/nT/tv/dn/Fl/zv/gz/sf/QX/k7/ogx+XeDMxPvFWYkLi7cTExKTE5MSUxNTEtMT0xDuJGYmZiVmJdxOzE+8l5iTmJuYl5icWJN5PLEwsSixOfJBYkvgwsTSxLLE8sSKxMrEqEUKebXHIF/KHZLg+FAg3hIKhUCgcigQfioZi4cZQPNwUSoSbQ8lwSygVbg2lQ5lQNjwcGoSGoVFoHJqER0LT8GhoFpqHFuGx0DI8HlqFJ0Lr8GRoE54KbcPToV14JrQPz4YO4bnQMXQKncPzoUt4IXQN3UJq6B56hBdDz9Ar9A59Qt/wUugXXg79wythQBgYBoVXw+DwWhgSXg9Dw7AwPLwRRoSRYVQYHcaEsWFceDOMD2+FCeHtMDFMCpPDlDA1TAvTwzthRpgZZoV3w+zwXpgT5oZ5YX5YEN4PC8OisDh8EJaED8PSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBR2Ba2hx1hZ9gVdoc94eOwN3wS9oVPw/7wWTgQ/hgOhs/DofBFOBy+DEfCV+Fo+DocC9+E4+HbcCKcDKfCd+F0+D6cCWfDufBDOB9+DBfCT+Gi/M2aEEIIIcQ/RP/O493/xufSAcCvt0Q9AODq7bkO/3XNjdn/tO6lcrdMAMCT3To88OtRuXJqauovz12qIco/FwASf1n/13gZtIDHoTU0h+J/s79eqtN5/p36yVsAMv5ZTgpcji/Xv+m/qP/IY8MXlorPZf079ecCFMx/OScDXI4v1y/xX9TP0fR3+s/w+TiAZn+Wkwkux5frF4NH4Slo/RfPFEIIIYQQQggh/qSXKtvu9+6fL92f5zaXc9LD5fj37s+FEEIIIYQQQghx5T3TqfMTj7Ru3bzdP7bAX/YF/ntZspDFf84iwy8/Ov9X+vk3La7kbyUhhBBCCCHEv8Pli/4r3YkQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJF2/W/8O7ErfY5CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfb/AgAA//+wBDLo") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x2f, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677f2d0b4992", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.211861335s ago: executing program 3 (id=1675): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) times(&(0x7f0000000180)) 2.200985305s ago: executing program 6 (id=1676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.163057417s ago: executing program 2 (id=1677): r0 = fanotify_init(0x4, 0x1000) fanotify_mark(r0, 0x1, 0x4000001b, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.124169538s ago: executing program 0 (id=1678): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) 1.923089367s ago: executing program 7 (id=1679): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x40000000, 0xfffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.922641227s ago: executing program 3 (id=1680): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24008002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x2a, 0x44a}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 944.179129ms ago: executing program 7 (id=1681): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x2280, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 943.840289ms ago: executing program 2 (id=1682): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r2, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 943.75779ms ago: executing program 0 (id=1683): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x30}}, 0x40840) 939.12181ms ago: executing program 6 (id=1684): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) close(r0) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file1\x00'}, 0x6e) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x48) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000003c0)=0x899, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000cc0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='-}\x00', r4) 843.079564ms ago: executing program 3 (id=1685): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000004c0)="$eJzsmb+uEkEUxr+Z3QvcG2NiY2GjiTfxmlyW3UUNjQU+gQn4r5PIStAFDGwBJBbExsbH8BUsqCzs7Gy1UBMTCymt18xw2B35J8QQSTy/hNlvZs7MnDnAVwAYhvlv+frl5+dXt0rVUwBncIwsjX+30hhpxH/Kkfj4+l377PPx/H4CQBxvfr4N4G3ZQkT9OP599TE9q5CJvgOJq6TvQcAh/RASd0kHEHhA+omhO4ckwsB51Anrj5th4KrGU42vmuJ8fpORQB1AjvITxnxvMHxaC8OgOy8O4tk5C1Pbij/Uz56UJW4a9VPv1/2XL0aqP6uNa9TPg4RHugiBCukSsnAcJy2Jcf8Ldrq/tcn990Gcy6+LOd2DDFn8AyGMkUMl1Bc6GTk/Gb9fXPVtl4ld2u2VQZ69MPXh6O92zpAJLI1J/VNZ7hXDn2zYiX8UotazQm8wzDdbtUbQCNq+X7zhXnPd635BG9G0XeN/Oe1PR8b+BytiMyKDfi2Kul4fiLpe0venreG4lTedH3qN1P4ncXJ5uof6qOhrZ5efIegl9VOpE2tl8gzDMAzDMAzDMAzDMAzDMFtxEUL/Ckp/VMUr8G/r6F8BAAD///ckZMc=") chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 715.911239ms ago: executing program 0 (id=1686): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) 715.701589ms ago: executing program 6 (id=1687): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/4, 0x4}], 0x1}, 0xfff}], 0x2, 0x40000022, 0x0) 714.836869ms ago: executing program 2 (id=1688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 622.796363ms ago: executing program 0 (id=1689): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x2a, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 621.852953ms ago: executing program 7 (id=1690): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) 582.992255ms ago: executing program 6 (id=1691): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x1a, '\x00', [@generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x7, "e80ee304ecb784"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x200}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8e}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 0 (id=1692): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): USB device number 6 using dummy_hcd [ 90.583750][ T7] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 90.620698][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 90.643272][ T7] usb 2-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 90.659898][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.687857][ T7] usb 2-1: config 0 descriptor?? [ 90.944277][ T4994] vhci_hcd: connection closed [ 90.947072][ T52] vhci_hcd: stop threads [ 90.961388][ T7] usb 2-1: USB disconnect, device number 6 [ 90.982530][ T52] vhci_hcd: release socket [ 90.994071][ T52] vhci_hcd: disconnect device [ 91.003710][ T4316] vhci_hcd: vhci_device speed not set [ 91.029887][ T4969] syz.2.222 (4969): drop_caches: 2 [ 91.717753][ T5011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 91.741387][ T5011] device netdevsim0 entered promiscuous mode [ 91.760351][ T5011] device netdevsim0 left promiscuous mode [ 91.822277][ T26] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 91.946978][ T5021] loop4: detected capacity change from 0 to 1024 [ 92.035937][ T26] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 92.062169][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.093779][ T41] hfsplus: b-tree write err: -5, ino 3 [ 92.099465][ T26] usb 2-1: Product: syz [ 92.131903][ T26] usb 2-1: Manufacturer: syz [ 92.142769][ T26] usb 2-1: SerialNumber: syz [ 92.172266][ T4330] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 92.353863][ T4330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.365551][ T4330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.375408][ T4372] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 92.382985][ T4330] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 92.392606][ T4330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.408379][ T4330] usb 4-1: config 0 descriptor?? [ 92.572394][ T4372] usb 3-1: Using ep0 maxpacket: 8 [ 92.578872][ T26] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 92.582591][ T4372] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 92.601109][ T4372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.611127][ T4372] usb 3-1: Product: syz [ 92.624377][ T4372] usb 3-1: Manufacturer: syz [ 92.629036][ T4372] usb 3-1: SerialNumber: syz [ 92.652916][ T4372] usb 3-1: config 0 descriptor?? [ 92.799561][ T26] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 92.812052][ T26] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 92.825557][ T4330] usbhid 4-1:0.0: can't add hid device: -71 [ 92.826153][ T26] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 92.840530][ T4330] usbhid: probe of 4-1:0.0 failed with error -71 [ 92.857503][ T26] lan78xx: probe of 2-1:1.0 failed with error -71 [ 92.869562][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 92.909516][ T26] usb 2-1: USB disconnect, device number 7 [ 92.910885][ T4372] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 92.927958][ T4330] usb 4-1: USB disconnect, device number 9 [ 92.937053][ T4372] gspca_sunplus: reg_w_riv err -71 [ 92.943551][ T4372] sunplus: probe of 3-1:0.0 failed with error -71 [ 92.987615][ T4372] usb 3-1: USB disconnect, device number 6 [ 93.041448][ T5058] device syzkaller0 entered promiscuous mode [ 93.253201][ T1124] tipc: Subscription rejected, illegal request [ 93.274490][ T5064] loop4: detected capacity change from 0 to 512 [ 93.294078][ T5066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.252'. [ 93.321650][ T5064] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.251: ea_inode with extended attributes [ 93.410040][ T5064] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.251: error while reading EA inode 11 err=-117 [ 93.430326][ T5064] EXT4-fs (loop4): 1 orphan inode deleted [ 93.452952][ T5064] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 93.634795][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 94.920443][ T5119] xt_socket: unknown flags 0x48 [ 95.075013][ C1] Unknown status report in ack skb [ 95.102264][ T125] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 95.170618][ T5131] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 95.177178][ T5131] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.193567][ T5131] vhci_hcd vhci_hcd.0: Device attached [ 95.210355][ T5133] usbip_core: unknown command [ 95.215543][ T5133] vhci_hcd: unknown pdu 117440512 [ 95.221479][ T5133] usbip_core: unknown command [ 95.231103][ T52] vhci_hcd: stop threads [ 95.238478][ T52] vhci_hcd: release socket [ 95.255516][ T52] vhci_hcd: disconnect device [ 95.293899][ T125] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 95.317821][ T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.339887][ T125] usb 4-1: config 0 descriptor?? [ 95.371193][ T125] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 95.753528][ T125] gp8psk: usb in 138 operation failed. [ 95.759332][ T125] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 95.794499][ T125] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 95.805583][ T125] usb 4-1: USB disconnect, device number 10 [ 96.162506][ T4316] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 96.225451][ T4372] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 96.257625][ T5161] loop2: detected capacity change from 0 to 4096 [ 96.344384][ T4316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.362260][ T4316] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 96.381505][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.412273][ T4372] usb 2-1: Using ep0 maxpacket: 8 [ 96.412566][ T4316] usb 5-1: config 0 descriptor?? [ 96.418826][ T4372] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 96.446988][ T4372] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 96.448245][ T4316] pwc: Askey VC010 type 2 USB webcam detected. [ 96.502870][ T4372] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.530155][ T4372] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.561353][ T4372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.583315][ T4372] usbtmc 2-1:16.0: bulk endpoints not found [ 96.801569][ T5175] loop3: detected capacity change from 0 to 1024 [ 96.850918][ T4316] pwc: recv_control_msg error -32 req 02 val 2b00 [ 96.857511][ T27] audit: type=1800 audit(1763851188.790:22): pid=5175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.289" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 97.011341][ T5176] xt_socket: unknown flags 0x48 [ 97.083455][ T4316] pwc: recv_control_msg error -32 req 02 val 2c00 [ 97.094641][ T4316] pwc: recv_control_msg error -71 req 04 val 1000 [ 97.103101][ T4316] pwc: recv_control_msg error -71 req 04 val 1300 [ 97.110057][ T4316] pwc: recv_control_msg error -71 req 04 val 1400 [ 97.117560][ T4316] pwc: recv_control_msg error -71 req 02 val 2000 [ 97.124951][ T4316] pwc: recv_control_msg error -71 req 02 val 2100 [ 97.132101][ T4316] pwc: recv_control_msg error -71 req 04 val 1500 [ 97.139312][ T4316] pwc: recv_control_msg error -71 req 02 val 2500 [ 97.147282][ T4316] pwc: recv_control_msg error -71 req 02 val 2400 [ 97.154435][ T4316] pwc: recv_control_msg error -71 req 02 val 2600 [ 97.161548][ T4316] pwc: recv_control_msg error -71 req 02 val 2900 [ 97.168761][ T4316] pwc: recv_control_msg error -71 req 02 val 2800 [ 97.176164][ T4316] pwc: recv_control_msg error -71 req 04 val 1100 [ 97.183343][ T4316] pwc: recv_control_msg error -71 req 04 val 1200 [ 97.198284][ T4316] pwc: Registered as video103. [ 97.214722][ T4316] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 97.245198][ T4316] usb 5-1: USB disconnect, device number 9 [ 97.937245][ T5200] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (10) [ 98.321783][ T5213] loop4: detected capacity change from 0 to 512 [ 98.330005][ T5213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.339461][ T5213] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.363156][ T5211] loop2: detected capacity change from 0 to 4096 [ 98.397482][ T5213] EXT4-fs (loop4): 1 truncate cleaned up [ 98.404841][ T5213] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 98.432219][ T125] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 98.611770][ T5218] loop2: detected capacity change from 0 to 4096 [ 98.628658][ T125] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.628874][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 98.640400][ T125] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.657515][ T125] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.668369][ T5218] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 98.699613][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.722734][ T125] usb 4-1: Product: syz [ 98.726929][ T125] usb 4-1: Manufacturer: syz [ 98.731530][ T125] usb 4-1: SerialNumber: syz [ 98.785725][ T5218] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 99.021579][ T4316] usb 2-1: USB disconnect, device number 8 [ 99.186623][ T125] usb 4-1: cannot find UAC_HEADER [ 99.240114][ T125] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 99.268857][ T125] usb 4-1: USB disconnect, device number 11 [ 99.336850][ T4393] udevd[4393]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.435311][ T5236] xt_socket: unknown flags 0x48 [ 100.222402][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 100.364208][ T5259] loop3: detected capacity change from 0 to 4096 [ 100.380055][ T5259] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 100.413460][ T5259] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 100.422691][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 100.430542][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.435400][ T5259] overlayfs: missing 'lowerdir' [ 100.492612][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.502196][ T125] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 100.512181][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 100.532220][ T7] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 100.570217][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.593248][ T7] usb 5-1: config 0 descriptor?? [ 100.692441][ T125] usb 3-1: Using ep0 maxpacket: 16 [ 100.702471][ T125] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 100.734828][ T125] usb 3-1: config 0 has no interface number 0 [ 100.752393][ T125] usb 3-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 100.786933][ T125] usb 3-1: config 0 interface 216 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 100.858916][ T125] usb 3-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 100.904511][ T125] usb 3-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 100.927328][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.939090][ T125] usb 3-1: Product: syz [ 100.945395][ T125] usb 3-1: Manufacturer: syz [ 100.953397][ T125] usb 3-1: SerialNumber: syz [ 100.978478][ T125] usb 3-1: config 0 descriptor?? [ 101.004517][ T5257] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 101.029862][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 101.030082][ T5257] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 101.043240][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 101.067406][ T7] usb 5-1: USB disconnect, device number 10 [ 101.095399][ T125] usb-storage 3-1:0.216: USB Mass Storage device detected [ 101.137189][ T125] scsi host1: usb-storage 3-1:0.216 [ 102.302284][ T125] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 102.322446][ T5273] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 102.449897][ T5305] loop3: detected capacity change from 0 to 1024 [ 102.493761][ T125] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 102.525226][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.555025][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.567010][ T125] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 102.606057][ T125] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 102.616095][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.639496][ T125] usb 5-1: config 0 descriptor?? [ 102.663091][ T5309] loop3: detected capacity change from 0 to 4096 [ 102.735660][ T5309] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.899774][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 103.011538][ T5320] loop1: detected capacity change from 0 to 128 [ 103.050160][ T5322] loop8: detected capacity change from 0 to 7 [ 103.056976][ T5320] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.068858][ T125] uclogic 0003:5543:0781.0002: No inputs registered, leaving [ 103.086367][ T5322] Dev loop8: unable to read RDB block 7 [ 103.098997][ T5320] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.101848][ T5322] loop8: unable to read partition table [ 103.138214][ T5326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 103.148038][ T125] uclogic 0003:5543:0781.0002: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input0 [ 103.166421][ T5322] loop8: partition table beyond EOD, truncated [ 103.186846][ T4374] usb 3-1: USB disconnect, device number 7 [ 103.217946][ T5322] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 103.268919][ T125] usb 5-1: USB disconnect, device number 11 [ 103.281881][ T5328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.342'. [ 103.387651][ T5332] netlink: 56 bytes leftover after parsing attributes in process `syz.3.343'. [ 103.447494][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 103.481574][ T5329] fido_id[5329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 103.549283][ T5336] tmpfs: Unknown parameter 'quota' [ 103.557932][ T5336] overlayfs: failed to clone upperpath [ 103.799055][ T5345] loop3: detected capacity change from 0 to 4096 [ 103.882367][ T4374] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.073221][ T4374] usb 3-1: Using ep0 maxpacket: 32 [ 104.087679][ T4374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.129072][ T4374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.155367][ T4374] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 104.166008][ T4374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.178103][ T4374] usb 3-1: config 0 descriptor?? [ 104.321337][ T5364] loop1: detected capacity change from 0 to 4096 [ 104.340831][ T5364] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 104.370929][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 104.456670][ T5364] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 104.457027][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.473506][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.480935][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.493759][ T5371] device bridge_slave_0 left promiscuous mode [ 104.501648][ T5371] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.504258][ T5364] overlayfs: missing 'lowerdir' [ 104.517270][ T5371] device bridge_slave_1 left promiscuous mode [ 104.524025][ T5371] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.537111][ T5371] bond0: (slave bond_slave_0): Releasing backup interface [ 104.560571][ T5371] bond0: (slave bond_slave_1): Releasing backup interface [ 104.592440][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 104.601084][ T4374] usbhid 3-1:0.0: can't add hid device: -71 [ 104.606080][ T7] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.627998][ T4374] usbhid: probe of 3-1:0.0 failed with error -71 [ 104.632547][ T7] usb 4-1: config 0 has no interface number 0 [ 104.646025][ T5371] team0: Port device team_slave_1 removed [ 104.649548][ T4374] usb 3-1: USB disconnect, device number 8 [ 104.676328][ T5371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.684238][ T4330] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 104.695545][ T7] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 104.710741][ T5371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.721170][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.729528][ T7] usb 4-1: Product: syz [ 104.743163][ T7] usb 4-1: Manufacturer: syz [ 104.751147][ T7] usb 4-1: SerialNumber: syz [ 104.767801][ T5371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.776007][ T5371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.784268][ T7] usb 4-1: config 0 descriptor?? [ 104.796393][ T7] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 104.819614][ T7] usb 4-1: selecting invalid altsetting 1 [ 104.828632][ T7] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 104.847145][ T7] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 104.857909][ T7] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 104.882292][ T4330] usb 5-1: Using ep0 maxpacket: 32 [ 104.892282][ T4330] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 104.900633][ T7] usb 4-1: media controller created [ 104.910738][ T4330] usb 5-1: config 0 has no interface number 0 [ 104.920885][ T4330] usb 5-1: config 0 interface 184 has no altsetting 0 [ 104.935460][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.952475][ T4330] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 104.968713][ T4330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.977696][ T4330] usb 5-1: Product: syz [ 104.981874][ T4330] usb 5-1: Manufacturer: syz [ 104.987273][ T4330] usb 5-1: SerialNumber: syz [ 104.999363][ T4330] usb 5-1: config 0 descriptor?? [ 105.009211][ T4330] smsc75xx v1.0.0 [ 105.534167][ T5395] loop1: detected capacity change from 0 to 4096 [ 105.556551][ T5395] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 105.607187][ T5395] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 105.619502][ T4330] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 105.626575][ T5395] overlayfs: missing 'lowerdir' [ 105.652027][ T4330] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 105.934007][ T5408] loop2: detected capacity change from 0 to 4096 [ 105.982543][ T5411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.380'. [ 106.003460][ T951] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 106.015988][ T5411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 106.072617][ T7] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 106.088299][ T7] zl10353_read_register: readreg error (reg=127, ret==-110) [ 106.119209][ T7] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 106.173323][ T951] usb 2-1: device descriptor read/64, error -71 [ 106.199517][ T7] usb 4-1: USB disconnect, device number 12 [ 106.455409][ T951] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 106.483851][ T5422] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 106.622365][ T951] usb 2-1: device descriptor read/64, error -71 [ 106.706197][ T4330] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 106.742506][ T951] usb usb2-port1: attempt power cycle [ 106.759750][ T4330] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 106.773494][ T4330] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 106.773995][ T5428] loop3: detected capacity change from 0 to 4096 [ 106.787676][ T4330] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 106.799918][ T4330] usb 5-1: USB disconnect, device number 12 [ 106.820916][ T5430] netlink: 256 bytes leftover after parsing attributes in process `syz.2.388'. [ 106.836344][ T5430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.388'. [ 106.846499][ T5428] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 106.908976][ T5428] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 106.978722][ T5428] overlayfs: missing 'lowerdir' [ 107.172456][ T951] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 107.212947][ T951] usb 2-1: device descriptor read/8, error -71 [ 107.419605][ T5448] loop4: detected capacity change from 0 to 4096 [ 107.486923][ T5455] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.502204][ T951] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 107.543669][ T951] usb 2-1: device descriptor read/8, error -71 [ 107.686808][ T951] usb usb2-port1: unable to enumerate USB device [ 108.138599][ T5480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.152049][ T5480] bond0: (slave rose0): Enslaving as an active interface with an up link [ 108.199779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 109.140043][ T5531] loop1: detected capacity change from 0 to 128 [ 109.184068][ T5531] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 109.472503][ T5538] random: crng reseeded on system resumption [ 110.353405][ T5544] loop1: detected capacity change from 0 to 4096 [ 110.422709][ T5544] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 110.506481][ T5544] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 110.576799][ T5544] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 110.605544][ T5544] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 110.620172][ T5557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 110.842197][ T4374] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 110.978033][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 111.014402][ T4374] usb 3-1: device descriptor read/64, error -71 [ 111.302239][ T4374] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 111.462191][ T4374] usb 3-1: device descriptor read/64, error -71 [ 111.592703][ T4374] usb usb3-port1: attempt power cycle [ 112.012287][ T4374] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 112.082897][ T4374] usb 3-1: device descriptor read/8, error -71 [ 112.352226][ T4374] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 112.370812][ T5618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.453'. [ 112.396252][ T4374] usb 3-1: device descriptor read/8, error -71 [ 112.408126][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 112.515655][ T5623] loop1: detected capacity change from 0 to 4096 [ 112.522804][ T4374] usb usb3-port1: unable to enumerate USB device [ 112.823748][ T5623] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 113.010319][ T5623] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 113.054374][ T5623] overlayfs: missing 'lowerdir' [ 113.186916][ T5639] netlink: 36 bytes leftover after parsing attributes in process `syz.1.460'. [ 113.250664][ T5641] team0: Device bridge1 is up. Set it down before adding it as a team port [ 113.859893][ T5671] kvm: pic: non byte write [ 113.945497][ T5676] overlayfs: failed to clone upperpath [ 114.067245][ T4316] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 114.252501][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 114.262021][ T4316] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 114.277730][ T4316] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 114.289102][ T4316] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 114.311120][ T4316] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 114.322392][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.330502][ T4316] usb 3-1: Product: syz [ 114.335313][ T4316] usb 3-1: Manufacturer: syz [ 114.339997][ T4316] usb 3-1: SerialNumber: syz [ 114.358593][ T4316] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 114.369755][ T4316] imon 3-1:155.0: unable to initialize intf0, err -19 [ 114.379895][ T4316] imon:imon_probe: failed to initialize context! [ 114.386307][ T4316] imon 3-1:155.0: unable to register, err -19 [ 114.761187][ T5711] process 'syz.0.487' launched './file1' with NULL argv: empty string added [ 114.821914][ T5714] fuse: Bad value for 'fd' [ 114.990068][ T5717] netlink: 40 bytes leftover after parsing attributes in process `syz.3.490'. [ 115.042045][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 115.069679][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.118590][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.172001][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.233422][ T5717] device bridge_slave_0 left promiscuous mode [ 115.285004][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.358584][ T5717] device bridge_slave_1 left promiscuous mode [ 115.406054][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.473389][ T5717] bond0: (slave bond_slave_0): Releasing backup interface [ 115.501489][ T5717] bond0: (slave bond_slave_1): Releasing backup interface [ 115.590999][ T5717] team0: Port device team_slave_0 removed [ 115.634096][ T5717] team0: Port device team_slave_1 removed [ 115.648040][ T5717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.684771][ T5717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.699204][ T5717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.709221][ T5717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.726944][ T5717] bond0: (slave netdevsim0): Releasing backup interface [ 116.028359][ T5729] loop1: detected capacity change from 0 to 256 [ 116.067147][ T5729] FAT-fs (loop1): Directory bread(block 64) failed [ 116.075023][ T5729] FAT-fs (loop1): Directory bread(block 65) failed [ 116.081771][ T5729] FAT-fs (loop1): Directory bread(block 66) failed [ 116.089078][ T5729] FAT-fs (loop1): Directory bread(block 67) failed [ 116.098905][ T5729] FAT-fs (loop1): Directory bread(block 68) failed [ 116.107048][ T5729] FAT-fs (loop1): Directory bread(block 69) failed [ 116.113976][ T5729] FAT-fs (loop1): Directory bread(block 70) failed [ 116.120690][ T5729] FAT-fs (loop1): Directory bread(block 71) failed [ 116.128584][ T5729] FAT-fs (loop1): Directory bread(block 72) failed [ 116.136950][ T5729] FAT-fs (loop1): Directory bread(block 73) failed [ 116.281750][ T5731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 116.674323][ T125] usb 3-1: USB disconnect, device number 13 [ 117.606743][ T5772] overlayfs: failed to clone upperpath [ 117.907434][ T125] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 118.095741][ T125] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 118.109365][ T125] usb 3-1: config 0 has no interface number 0 [ 118.122807][ T125] usb 3-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 118.146242][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.171759][ T125] usb 3-1: config 0 descriptor?? [ 118.355362][ T5792] netlink: 'syz.3.522': attribute type 1 has an invalid length. [ 118.381534][ T5792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.381679][ T5751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.408637][ T5751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.431781][ T5792] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 118.432170][ T125] usb 3-1: string descriptor 0 read error: -71 [ 118.453392][ T125] usb-storage 3-1:0.168: USB Mass Storage device detected [ 118.489429][ T125] usb-storage 3-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 118.575295][ T125] usb 3-1: USB disconnect, device number 14 [ 119.116891][ T5821] loop1: detected capacity change from 0 to 4096 [ 119.285042][ T5825] loop2: detected capacity change from 0 to 4096 [ 119.315036][ T5825] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 119.365825][ T5825] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 119.398988][ T5825] overlayfs: missing 'workdir' [ 119.748377][ T5844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.542'. [ 119.906760][ T5854] netlink: 40 bytes leftover after parsing attributes in process `syz.3.546'. [ 120.042801][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 120.102193][ T4330] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 120.248432][ T7] usb 3-1: config 0 has no interfaces? [ 120.254058][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=1290, bcdDevice=dc.1b [ 120.271191][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.293847][ T4330] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.313496][ T7] apple-mfi-fastcharge 3-1: config 0 descriptor?? [ 120.328045][ T4330] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 120.359098][ T4330] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.370827][ T4330] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 120.381806][ T4330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.398608][ T4330] usb 2-1: config 0 descriptor?? [ 120.404064][ T5850] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 120.523618][ T4374] apple-mfi-fastcharge 3-1: USB disconnect, device number 15 [ 120.620208][ T4330] usbhid 2-1:0.0: can't add hid device: -71 [ 120.626395][ T4330] usbhid: probe of 2-1:0.0 failed with error -71 [ 120.635358][ T4330] usb 2-1: USB disconnect, device number 13 [ 120.847668][ T5882] device vlan0 entered promiscuous mode [ 120.869098][ T5882] team0: Port device vlan0 added [ 121.229778][ T5899] loop1: detected capacity change from 0 to 128 [ 121.236892][ T5897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'. [ 121.287658][ T5899] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 121.327951][ T5899] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.366704][ T5906] loop2: detected capacity change from 0 to 256 [ 121.437229][ T5906] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 121.521365][ T5906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.569'. [ 121.538671][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 121.669150][ T5911] loop1: detected capacity change from 0 to 512 [ 121.758521][ T5911] EXT4-fs (loop1): 1 orphan inode deleted [ 121.779886][ T5911] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 121.805360][ T5911] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.947153][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 122.071505][ T5928] loop1: detected capacity change from 0 to 1024 [ 122.472327][ T4316] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 122.592275][ T125] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 122.652214][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 122.660367][ T4316] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 122.669487][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.677688][ T4316] usb 3-1: Product: syz [ 122.681840][ T4316] usb 3-1: Manufacturer: syz [ 122.686493][ T4316] usb 3-1: SerialNumber: syz [ 122.692783][ T4316] usb 3-1: config 0 descriptor?? [ 122.701082][ T4316] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 122.772219][ T125] usb 2-1: Using ep0 maxpacket: 8 [ 122.781475][ T125] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 122.816321][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.833968][ T125] usb 2-1: Product: syz [ 122.838745][ T125] usb 2-1: Manufacturer: syz [ 122.850797][ T125] usb 2-1: SerialNumber: syz [ 123.212706][ T4316] gspca_topro: reg_w err -110 [ 123.268029][ T4316] gspca_topro: Sensor soi763a [ 123.283436][ T125] mxuport 2-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 123.291157][ T125] mxuport: probe of 2-1:254.0 failed with error -5 [ 123.519240][ T125] usb 2-1: USB disconnect, device number 14 [ 123.630003][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.640099][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.648777][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.657992][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.665978][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 123.676057][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.707651][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.714969][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.728628][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.741663][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.760395][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 123.768619][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.849294][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.981921][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.110996][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.241685][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.408008][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 124.502695][ T6003] xt_socket: unknown flags 0x48 [ 124.632008][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.650326][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.661878][ T5972] device bridge_slave_0 entered promiscuous mode [ 124.724587][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.734022][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.758453][ T5972] device bridge_slave_1 entered promiscuous mode [ 124.937141][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.025209][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.144355][ T5972] team0: Port device team_slave_0 added [ 125.204011][ T5972] team0: Port device team_slave_1 added [ 125.224859][ T4316] usb 3-1: USB disconnect, device number 16 [ 125.369880][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.387474][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.472258][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.567430][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.584539][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.630043][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.837030][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 125.853270][ T6039] loop2: detected capacity change from 0 to 1024 [ 125.891787][ T5972] device hsr_slave_0 entered promiscuous mode [ 125.942048][ T5972] device hsr_slave_1 entered promiscuous mode [ 125.958917][ T5972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.987698][ T5972] Cannot create hsr debugfs directory [ 126.022840][ T11] hfsplus: b-tree write err: -5, ino 3 [ 127.054620][ T52] device hsr_slave_0 left promiscuous mode [ 127.117229][ T52] device hsr_slave_1 left promiscuous mode [ 127.145752][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.168263][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.195825][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.201486][ T6083] loop2: detected capacity change from 0 to 1024 [ 127.219798][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.237016][ T52] device bridge_slave_1 left promiscuous mode [ 127.261750][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.303641][ T52] device bridge_slave_0 left promiscuous mode [ 127.310041][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.380261][ T1124] hfsplus: b-tree write err: -5, ino 3 [ 127.497760][ T52] device veth1_macvtap left promiscuous mode [ 127.510204][ T52] device veth0_macvtap left promiscuous mode [ 127.527542][ T52] device veth1_vlan left promiscuous mode [ 127.537808][ T52] device veth0_vlan left promiscuous mode [ 127.912266][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 127.924681][ T6102] xt_socket: unknown flags 0x48 [ 128.072650][ T6104] overlayfs: failed to clone upperpath [ 128.341715][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 128.921809][ T52] team0 (unregistering): Port device team_slave_1 removed [ 129.008934][ T52] team0 (unregistering): Port device team_slave_0 removed [ 129.107237][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.210449][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.992304][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 130.017695][ T52] bond0 (unregistering): Released all slaves [ 130.127302][ T6090] Set syz1 is full, maxelem 65536 reached [ 130.222731][ T6106] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 130.263359][ T5972] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.315364][ T5972] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.379001][ T5972] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.473399][ T5972] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.731776][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.775134][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.790330][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.826718][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.867461][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.877554][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.895848][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.903034][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.925205][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.940043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.969246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.989276][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.996434][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.002823][ T6119] loop1: detected capacity change from 0 to 32768 [ 131.035122][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.080376][ T27] audit: type=1800 audit(1763851223.010:23): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.641" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 131.111407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.131511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.145521][ T6146] xt_socket: unknown flags 0x48 [ 131.153359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.192981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.234853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.268508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.284723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.307364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.358225][ T5972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.404739][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.459146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.470430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.621329][ T6162] tipc: Enabling of bearer rejected, failed to enable media [ 132.074070][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 132.408229][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.452519][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.464978][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.703075][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.710051][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.719156][ T6224] loop1: detected capacity change from 0 to 4096 [ 133.900629][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.956162][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.035555][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.047758][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.096222][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.138191][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.185636][ T5972] device veth0_vlan entered promiscuous mode [ 134.902941][ T6267] loop2: detected capacity change from 0 to 4096 [ 135.048162][ T6269] xt_socket: unknown flags 0x48 [ 137.458494][ T6306] loop2: detected capacity change from 0 to 4096 [ 137.549016][ T6243] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.572177][ T6243] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.632199][ T6243] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.641109][ T6243] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.187575][ T5972] device veth1_vlan entered promiscuous mode [ 138.383111][ T6201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.444013][ T6201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.644467][ T5972] device veth0_macvtap entered promiscuous mode [ 138.733922][ T5972] device veth1_macvtap entered promiscuous mode [ 139.248747][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.784345][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.841551][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.902178][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.912022][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.996222][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.077464][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.118711][ T6201] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.137729][ T6201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.194627][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.258625][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.322222][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.705980][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.750505][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.788000][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.813940][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.846468][ T5972] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.864796][ T5972] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.894497][ T5972] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.938672][ T5972] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.031441][ T6360] xt_socket: unknown flags 0x48 [ 141.225747][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.264393][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.304673][ T6283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.312026][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.820040][ T6283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.950409][ T6283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.912462][ T4330] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 143.103546][ T4330] usb 6-1: Using ep0 maxpacket: 8 [ 143.118587][ T4330] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 143.272335][ T4330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.280962][ T4330] usb 6-1: Product: syz [ 143.285513][ T4330] usb 6-1: Manufacturer: syz [ 143.290581][ T4330] usb 6-1: SerialNumber: syz [ 143.297286][ T4330] usb 6-1: config 0 descriptor?? [ 143.509833][ T4330] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 144.725253][ T6434] xt_CONNSECMARK: invalid mode: 66 [ 144.745341][ T6434] loop2: detected capacity change from 0 to 1024 [ 144.752930][ T6434] EXT4-fs: Ignoring removed bh option [ 144.758366][ T6434] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.782791][ T6434] EXT4-fs (loop2): Test dummy encryption mode enabled [ 146.272143][ C0] sched: RT throttling activated [ 146.302262][ T4330] gspca_sunplus: reg_r err -71 [ 146.307099][ T4330] sunplus: probe of 6-1:0.0 failed with error -71 [ 147.428358][ T6434] EXT4-fs: error -4 creating inode table initialization thread [ 147.436687][ T6434] EXT4-fs (loop2): mount failed [ 147.480781][ T4330] usb 6-1: USB disconnect, device number 2 [ 148.602255][ T4330] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 148.912223][ T4330] usb 6-1: Using ep0 maxpacket: 8 [ 148.919705][ T4330] usb 6-1: unable to get BOS descriptor or descriptor too short [ 149.056252][ T4330] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 149.081905][ T4330] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 149.790794][ T4330] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 149.802279][ T4330] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 149.812513][ T4330] usb 6-1: Manufacturer: syz [ 149.817129][ T4330] usb 6-1: SerialNumber: syz [ 149.904866][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 150.096023][ T4330] usb 6-1: USB disconnect, device number 3 [ 150.445026][ T6489] xt_CONNSECMARK: invalid mode: 66 [ 152.198105][ T6497] loop5: detected capacity change from 0 to 128 [ 152.338053][ T27] audit: type=1800 audit(1763851244.270:24): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.740" name="bus" dev="loop5" ino=1048600 res=0 errno=0 [ 154.582315][ T4330] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 154.660929][ T6547] loop2: detected capacity change from 0 to 256 [ 154.772227][ T4330] usb 6-1: Using ep0 maxpacket: 8 [ 154.779468][ T4330] usb 6-1: unable to get BOS descriptor or descriptor too short [ 154.808883][ T4330] usb 6-1: config 4 interface 0 has no altsetting 0 [ 154.840077][ T4330] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 154.901495][ T4330] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 154.934167][ T4330] usb 6-1: Manufacturer: syz [ 154.947754][ T4330] usb 6-1: SerialNumber: syz [ 155.114769][ T6561] xt_socket: unknown flags 0x48 [ 155.235110][ T4330] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 155.381471][ T4330] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 155.506047][ T4330] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 155.521019][ T4330] usb 6-1: media controller created [ 155.667164][ T4330] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.780895][ T4330] zl10353_read_register: readreg error (reg=127, ret==0) [ 155.925782][ T4330] usb 6-1: USB disconnect, device number 4 [ 157.031313][ T6588] loop2: detected capacity change from 0 to 256 [ 158.661482][ T6624] loop5: detected capacity change from 0 to 128 [ 159.953416][ T6639] loop1: detected capacity change from 0 to 1024 [ 159.968203][ T6639] hfsplus: unable to parse mount options [ 160.795720][ T4373] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.712465][ T4275] Bluetooth: hci2: command 0x0405 tx timeout [ 167.663581][ T6833] loop1: detected capacity change from 0 to 512 [ 167.683197][ T6833] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 167.713644][ T6833] EXT4-fs (loop1): orphan cleanup on readonly fs [ 167.730264][ T6833] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.847: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 167.780442][ T6836] loop5: detected capacity change from 0 to 164 [ 167.839113][ T6833] EXT4-fs error (device loop1): ext4_quota_enable:7020: comm syz.1.847: Bad quota inode: 4, type: 1 [ 167.907838][ T6833] EXT4-fs warning (device loop1): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 167.959881][ T6833] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 167.987318][ T6833] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.101552][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 171.046029][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.871'. [ 171.091090][ T6902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.142208][ T4342] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 171.192524][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.874'. [ 171.204082][ T6902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.249405][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 171.332266][ T4342] usb 3-1: Using ep0 maxpacket: 8 [ 171.339684][ T4342] usb 3-1: unable to get BOS descriptor or descriptor too short [ 171.373486][ T4342] usb 3-1: config 4 interface 0 has no altsetting 0 [ 171.424257][ T4342] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 171.450560][ T4342] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 171.472305][ T4342] usb 3-1: Manufacturer: syz [ 171.485466][ T4342] usb 3-1: SerialNumber: syz [ 171.719069][ T4342] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 171.758992][ T4342] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 171.802516][ T4342] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 171.809781][ T4342] usb 3-1: media controller created [ 171.834801][ T4342] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.854887][ T4342] zl10353_read_register: readreg error (reg=127, ret==0) [ 171.931982][ T4342] usb 3-1: USB disconnect, device number 17 [ 173.913150][ T6976] loop5: detected capacity change from 0 to 16 [ 173.966144][ T6976] erofs: (device loop5): mounted with root inode @ nid 36. [ 174.014093][ T6976] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 179.158077][ T27] audit: type=1326 audit(1763851527.086:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 179.307797][ T27] audit: type=1326 audit(1763851527.116:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 179.501781][ T27] audit: type=1326 audit(1763851527.116:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 179.636537][ T27] audit: type=1326 audit(1763851527.116:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 179.642414][ T4337] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 179.805752][ T27] audit: type=1326 audit(1763851527.116:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 179.862510][ T7119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.938'. [ 179.881178][ T27] audit: type=1326 audit(1763851527.116:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 179.932373][ T4337] usb 2-1: Using ep0 maxpacket: 8 [ 179.939420][ T4337] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.972312][ T27] audit: type=1326 audit(1763851527.116:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 179.989020][ T4337] usb 2-1: config 4 interface 0 has no altsetting 0 [ 180.113506][ T4337] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 180.210660][ T4337] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 180.219231][ T4337] usb 2-1: Manufacturer: syz [ 180.224336][ T4337] usb 2-1: SerialNumber: syz [ 180.590962][ T4337] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 180.612662][ T27] audit: type=1400 audit(1763851528.306:32): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7125 comm="syz.2.941" [ 181.376447][ T4337] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 181.427335][ T4337] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 181.453177][ T4337] usb 2-1: media controller created [ 181.548252][ T4337] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.637822][ T4337] zl10353_read_register: readreg error (reg=127, ret==0) [ 181.716505][ T4337] usb 2-1: USB disconnect, device number 15 [ 184.680098][ T7190] loop2: detected capacity change from 0 to 128 [ 186.526533][ T7203] 9pnet_fd: Insufficient options for proto=fd [ 188.309742][ T7232] loop5: detected capacity change from 0 to 128 [ 188.532479][ T14] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 189.925935][ T7232] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 189.983079][ T7232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.057261][ T7232] 9p: Unknown Cache mode £3ùs³ã¹eŸ¡Öã+í * ;}þÂøÄD!Û·«Ñî‹™_;ÖugöuôÂØÑÁ¡¡Ó±˜öÄm_}‰Íð“ò´M¦ßþÌNHòT{]Üâ½ÓhA!v… [ 190.057261][ T7232] [ 190.057261][ T7232] 2•›Yðw‡á¹²:É°ŽšÐ5é’ü|Y²>ŸÙòtP¦î_ŠvRR[X_ ßøÀöº\þ¶ùù|AÒƒj6[Ã:äé'™¦7¤4¼úÍŠ&k—§‹2ý9P´SÁýÀïOþmóسÙgf&fc±ÃæzT«Í´ÆïM)y:Üñ‹6²Ú™AÓù“¥·eÚòÉ+Á¼BÁ¼tÃÀ¾'OõÇg[oq?v—›?.gLN¸Øa6óê_. [ 190.124641][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 190.138276][ T14] usb 3-1: unable to get BOS descriptor or descriptor too short [ 190.173412][ T14] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 190.196567][ T14] usb 3-1: can't read configurations, error -71 [ 190.535705][ T7245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.978'. [ 191.347752][ T7248] loop5: detected capacity change from 0 to 16 [ 191.412556][ T7248] erofs: Unknown parameter '' [ 191.960190][ T7267] trusted_key: encrypted_key: key trusted:syz not found [ 192.021890][ T7272] loop5: detected capacity change from 0 to 512 [ 192.171581][ T7272] EXT4-fs: Ignoring removed oldalloc option [ 192.212560][ T7272] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 192.290511][ T7272] EXT4-fs (loop5): 1 truncate cleaned up [ 192.297158][ T7272] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 192.368913][ T7287] loop1: detected capacity change from 0 to 2048 [ 192.473447][ T7287] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 192.527382][ T7287] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.554746][ T7272] loop5: detected capacity change from 512 to 64 [ 192.580127][ T7296] EXT4-fs warning (device loop5): ext4_dx_find_entry:1798: inode #2: lblock 1: comm syz.5.988: error -12 reading directory block [ 192.702643][ T5972] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1083: inode #2: lblock 1: comm syz-executor: error -12 reading directory block [ 192.948575][ T5972] EXT4-fs (loop5): unmounting filesystem. [ 192.998416][ T7307] trusted_key: encrypted_key: key trusted:syz not found [ 193.038746][ T4316] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 193.072796][ T27] audit: type=1326 audit(1763851541.006:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7302 comm="syz.3.999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbac78f749 code=0x0 [ 193.120852][ T4316] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 193.180736][ T4316] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 193.211924][ T4316] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 193.241517][ T4316] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 193.254616][ T4316] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 193.263039][ T4316] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 193.270779][ T4316] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 193.279029][ T4316] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 193.287286][ T4316] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 193.307272][ T4316] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 193.315550][ T4316] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 193.326864][ T4316] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 193.336519][ T4316] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 193.346704][ T4316] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 193.357258][ T4316] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 193.400300][ T4316] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 194.084749][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.091087][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.258429][ T7326] fido_id[7326]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 194.305368][ T27] audit: type=1326 audit(1763851542.236:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.3.1006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbac78f749 code=0x0 [ 194.337477][ T7332] loop1: detected capacity change from 0 to 512 [ 194.383013][ T7332] EXT4-fs: Ignoring removed oldalloc option [ 194.403987][ T7332] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 194.438778][ T6201] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.472525][ T7332] EXT4-fs (loop1): 1 truncate cleaned up [ 194.480192][ T7332] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 194.592357][ T7332] loop1: detected capacity change from 512 to 64 [ 194.631045][ T6201] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.641619][ T7343] EXT4-fs warning (device loop1): ext4_dx_find_entry:1798: inode #2: lblock 1: comm syz.1.1008: error -12 reading directory block [ 194.753050][ T4276] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 1: comm syz-executor: error -12 reading directory block [ 194.826149][ T6201] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.844816][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 195.728451][ T6201] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.793051][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.803062][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.811582][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.820043][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.829018][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 196.836670][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.493920][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.503648][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.512377][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.520338][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.532347][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 197.540671][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.873540][ T7376] chnl_net:caif_netlink_parms(): no params data found [ 197.976913][ T6201] device hsr_slave_0 left promiscuous mode [ 197.993964][ T6201] device hsr_slave_1 left promiscuous mode [ 198.010196][ T6201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.020640][ T6201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.041045][ T6201] device bridge_slave_1 left promiscuous mode [ 198.070903][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.105373][ T6201] device bridge_slave_0 left promiscuous mode [ 198.119419][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.205662][ T6201] device veth1_macvtap left promiscuous mode [ 198.211741][ T6201] device veth0_macvtap left promiscuous mode [ 198.225138][ T6201] device veth1_vlan left promiscuous mode [ 198.231028][ T6201] device veth0_vlan left promiscuous mode [ 198.882381][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 199.171147][ T6201] team0 (unregistering): Port device team_slave_1 removed [ 199.236091][ T6201] team0 (unregistering): Port device team_slave_0 removed [ 199.402450][ T6201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.592398][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 199.649075][ T6201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.650085][ T4316] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 200.708684][ T6201] bond0 (unregistering): Released all slaves [ 200.842217][ T4316] usb 3-1: Using ep0 maxpacket: 8 [ 200.849566][ T4316] usb 3-1: unable to get BOS descriptor or descriptor too short [ 200.878794][ T4316] usb 3-1: config 4 interface 0 has no altsetting 0 [ 200.896537][ T4316] usb 3-1: string descriptor 0 read error: -22 [ 200.920867][ T4316] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 200.934785][ T4316] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 200.952411][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 200.980420][ T4316] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 200.992063][ T4316] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 201.008537][ T4316] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 201.017061][ T4316] usb 3-1: media controller created [ 201.041120][ T4316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.070394][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.078089][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.095661][ T7376] device bridge_slave_0 entered promiscuous mode [ 201.114568][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.123182][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.131290][ T7376] device bridge_slave_1 entered promiscuous mode [ 201.185955][ T4316] zl10353_read_register: readreg error (reg=127, ret==0) [ 201.251582][ T4316] usb 3-1: USB disconnect, device number 20 [ 201.295312][ T7376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.351480][ T7376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.410626][ T7376] team0: Port device team_slave_0 added [ 201.453988][ T7376] team0: Port device team_slave_1 added [ 201.532832][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.552218][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.608640][ T7376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.635282][ T7389] chnl_net:caif_netlink_parms(): no params data found [ 201.659841][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.672288][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 201.682644][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.768905][ T7376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.881726][ T6201] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.075989][ T6201] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.100587][ T7376] device hsr_slave_0 entered promiscuous mode [ 202.114006][ T7376] device hsr_slave_1 entered promiscuous mode [ 202.120750][ T7376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.134230][ T7376] Cannot create hsr debugfs directory [ 202.185620][ T6201] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.237767][ T7389] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.245944][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.254548][ T7389] device bridge_slave_0 entered promiscuous mode [ 202.329892][ T6201] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.349068][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.357544][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.371731][ T7389] device bridge_slave_1 entered promiscuous mode [ 202.518610][ T7389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.586187][ T7389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.692937][ T7389] team0: Port device team_slave_0 added [ 202.762408][ T7389] team0: Port device team_slave_1 added [ 202.924359][ T7389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.931343][ T7389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.003221][ T7389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.032636][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 203.308900][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 203.787998][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 203.820111][ T7389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.834077][ T7389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.901982][ T7389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.123252][ T7376] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 204.147784][ T7376] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 204.175424][ T7376] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 204.245708][ T7376] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 204.324114][ T7389] device hsr_slave_0 entered promiscuous mode [ 204.330937][ T7389] device hsr_slave_1 entered promiscuous mode [ 204.337928][ T7389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.345598][ T7389] Cannot create hsr debugfs directory [ 204.430929][ T7559] xt_socket: unknown flags 0x48 [ 204.768176][ T7376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.864330][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.882631][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.896321][ T7376] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.717371][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 205.832446][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 205.891464][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.915633][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.938651][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.945808][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.982873][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.020286][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.038904][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.046055][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.071778][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.089488][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.108368][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.130846][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.201086][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.230870][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.271940][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.292863][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.307423][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.322819][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.334052][ T7584] loop2: detected capacity change from 0 to 1024 [ 206.344057][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.357903][ T7584] hfsplus: invalid gid specified [ 206.363896][ T7584] hfsplus: unable to parse mount options [ 206.375779][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.445105][ T6201] device hsr_slave_0 left promiscuous mode [ 206.455129][ T6201] device hsr_slave_1 left promiscuous mode [ 206.511930][ T6201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.539086][ T6201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.583865][ T6201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.600484][ T6201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.629362][ T6201] device bridge_slave_1 left promiscuous mode [ 206.637607][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.655467][ T6201] device bridge_slave_0 left promiscuous mode [ 206.668022][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.738361][ T6201] device veth1_macvtap left promiscuous mode [ 206.752530][ T6201] device veth0_macvtap left promiscuous mode [ 206.758643][ T6201] device veth1_vlan left promiscuous mode [ 206.771133][ T6201] device veth0_vlan left promiscuous mode [ 207.122493][ T4291] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 207.422264][ T4291] usb 3-1: Using ep0 maxpacket: 8 [ 207.446139][ T4291] usb 3-1: unable to get BOS descriptor or descriptor too short [ 207.487204][ T4291] usb 3-1: config 4 interface 0 has no altsetting 0 [ 207.573436][ T4291] usb 3-1: string descriptor 0 read error: -22 [ 207.602964][ T4291] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 207.649223][ T4291] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 207.701774][ T4291] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 207.710714][ T4291] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 207.721391][ T4291] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 207.728741][ T4291] usb 3-1: media controller created [ 207.741304][ T4291] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.913477][ T4291] zl10353_read_register: readreg error (reg=127, ret==0) [ 207.956656][ T4291] usb 3-1: USB disconnect, device number 21 [ 208.098756][ T6201] team0 (unregistering): Port device team_slave_1 removed [ 208.140123][ T6201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.184233][ T6201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.004007][ T6201] bond0 (unregistering): Released all slaves [ 210.142756][ T7376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.163307][ T7389] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 210.220333][ T7389] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 210.240824][ T7619] xt_socket: unknown flags 0x48 [ 210.278595][ T7389] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 210.317736][ T7389] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 210.673948][ T7389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.756417][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.770913][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.806571][ T7389] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.838198][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.862738][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.933442][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.940626][ T6202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.270980][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.616694][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.642917][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.683115][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.690274][ T6438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.843253][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.882692][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.922813][ T7376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.941422][ T7389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.633450][ T7389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.645214][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.683388][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.702586][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.745255][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.782919][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.790414][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.843182][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.882451][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.904837][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.930629][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.966063][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.012993][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.378763][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 214.420107][ T7675] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1109'. [ 214.848602][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.872718][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.935302][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.964406][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.983299][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.028329][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.054479][ T7376] device veth0_vlan entered promiscuous mode [ 215.081224][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.091872][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.128090][ T7389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.160384][ T7376] device veth1_vlan entered promiscuous mode [ 215.255609][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.279214][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.309101][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.337949][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.360444][ T7376] device veth0_macvtap entered promiscuous mode [ 215.393886][ T7376] device veth1_macvtap entered promiscuous mode [ 215.466492][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.512850][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.544243][ T7376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.573497][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.601871][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.640230][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.667693][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.707674][ T7376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.744228][ T7376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.793603][ T7376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.801562][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.816568][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.892056][ T7376] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.931825][ T7376] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.985505][ T7376] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.015844][ T7376] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.155271][ T7724] xt_socket: unknown flags 0x48 [ 216.292036][ T6202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.322857][ T6202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.365609][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.395362][ T5631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.421752][ T5631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.467994][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.584119][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.605249][ T7737] loop2: detected capacity change from 0 to 128 [ 216.642732][ T7737] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 216.643635][ T5631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.687053][ T7737] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.755092][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.778090][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.808082][ T7389] device veth0_vlan entered promiscuous mode [ 216.851477][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.918464][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.967806][ T7389] device veth1_vlan entered promiscuous mode [ 217.065994][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.138294][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.155747][ T7750] capability: warning: `syz.0.1123' uses deprecated v2 capabilities in a way that may be insecure [ 217.192780][ T7389] device veth0_macvtap entered promiscuous mode [ 217.247132][ T7389] device veth1_macvtap entered promiscuous mode [ 217.373039][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.417177][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.460245][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.507671][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.520274][ T7] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 217.555930][ T7389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.586483][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.614402][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.650091][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.687927][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.732874][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.744778][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 217.752848][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 217.777316][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.792061][ T7] usb 3-1: config 4 interface 0 has no altsetting 0 [ 217.816401][ T7] usb 3-1: string descriptor 0 read error: -22 [ 217.824959][ T7389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.848001][ T7] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 217.871163][ T7389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.890149][ T7] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 217.916819][ T7389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.955343][ T7] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 217.977937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.998204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.002685][ T7] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 218.042700][ T7] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 218.049904][ T7] usb 3-1: media controller created [ 218.056311][ T7389] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.079929][ T7389] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.132018][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.140790][ T7389] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.180082][ T7389] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.241749][ T7] zl10353_read_register: readreg error (reg=127, ret==0) [ 218.416182][ T7] usb 3-1: USB disconnect, device number 22 [ 218.443722][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.481938][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.549944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.594416][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.632835][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.691218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 218.950407][ T7786] loop6: detected capacity change from 0 to 512 [ 219.149909][ T7786] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1135: inode has both inline data and extents flags [ 221.072309][ T7786] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1135: couldn't read orphan inode 15 (err -117) [ 221.130446][ T7786] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 222.585380][ T7376] EXT4-fs (loop6): unmounting filesystem. [ 222.632775][ T7819] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1144'. [ 222.954179][ T7827] loop6: detected capacity change from 0 to 512 [ 223.008634][ T7827] EXT4-fs (loop6): Test dummy encryption mode enabled [ 223.253016][ T7827] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 223.282360][ T14] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 223.366478][ T7841] Illegal XDP return value 4286759793 on prog (id 67) dev N/A, expect packet loss! [ 223.946336][ T7827] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 224.048303][ T7827] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.1143: Directory hole found for htree leaf block 0 [ 224.082251][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 224.093153][ T14] usb 3-1: unable to get BOS descriptor or descriptor too short [ 224.126486][ T7827] EXT4-fs (loop6): Remounting filesystem read-only [ 224.133342][ T14] usb 3-1: config 4 interface 0 has no altsetting 0 [ 224.168471][ T14] usb 3-1: string descriptor 0 read error: -22 [ 224.212352][ T7843] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.1143: Directory hole found for htree leaf block 0 [ 224.252237][ T14] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 224.261325][ T14] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 224.322262][ T7843] EXT4-fs (loop6): Remounting filesystem read-only [ 224.343275][ T14] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 224.410664][ T14] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 224.486687][ T14] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 224.506190][ T14] usb 3-1: media controller created [ 225.176871][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.201255][ T14] zl10353_read_register: readreg error (reg=127, ret==0) [ 225.300833][ T14] usb 3-1: USB disconnect, device number 23 [ 225.333455][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 225.357874][ T7376] EXT4-fs (loop6): unmounting filesystem. [ 226.240005][ T7884] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 228.736032][ T7930] loop2: detected capacity change from 0 to 512 [ 229.797448][ T7930] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1175: inode has both inline data and extents flags [ 229.903611][ T7930] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1175: couldn't read orphan inode 15 (err -117) [ 229.970769][ T7930] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 231.070382][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 231.211859][ T7961] xt_TPROXY: Can be used only with -p tcp or -p udp [ 232.332269][ T951] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 232.582275][ T951] usb 7-1: Using ep0 maxpacket: 8 [ 232.589433][ T951] usb 7-1: unable to get BOS descriptor or descriptor too short [ 232.653520][ T951] usb 7-1: config 4 interface 0 has no altsetting 0 [ 232.724463][ T951] usb 7-1: string descriptor 0 read error: -22 [ 232.730715][ T951] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 232.795427][ T7987] loop2: detected capacity change from 0 to 512 [ 232.800912][ T951] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 232.871568][ T951] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 232.902937][ T951] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 232.937573][ T7987] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 232.962097][ T951] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 232.978025][ T7987] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e02c, mo2=0102] [ 233.020418][ T7987] System zones: 1-12 [ 233.025420][ T951] usb 7-1: media controller created [ 233.071121][ T7987] EXT4-fs (loop2): orphan cleanup on readonly fs [ 233.145384][ T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.174316][ T7987] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.1190: attempt to clear invalid blocks 1024 len 1 [ 233.235519][ T951] zl10353_read_register: readreg error (reg=127, ret==0) [ 233.541314][ T7987] EXT4-fs (loop2): Remounting filesystem read-only [ 233.562448][ T951] usb 7-1: USB disconnect, device number 2 [ 233.582461][ T7987] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1190: bg 0: block 361: padding at end of block bitmap is not set [ 233.657255][ T7987] EXT4-fs (loop2): Remounting filesystem read-only [ 233.682347][ T7987] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 233.723773][ T7987] EXT4-fs (loop2): Remounting filesystem read-only [ 233.757869][ T7987] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1190: invalid indirect mapped block 1811939328 (level 0) [ 233.816701][ T7987] EXT4-fs (loop2): Remounting filesystem read-only [ 233.865783][ T7987] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1190: invalid indirect mapped block 2 (level 2) [ 233.900346][ T7987] EXT4-fs (loop2): Remounting filesystem read-only [ 233.922007][ T7987] EXT4-fs (loop2): 1 truncate cleaned up [ 233.928138][ T7987] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 235.068214][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 235.777444][ T8033] xt_hashlimit: max too large, truncated to 1048576 [ 236.020979][ T8041] loop6: detected capacity change from 0 to 256 [ 236.171011][ T8041] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 239.535288][ T6289] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 239.742273][ T6289] usb 3-1: Using ep0 maxpacket: 8 [ 239.750036][ T6289] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.803302][ T6289] usb 3-1: config 4 interface 0 has no altsetting 0 [ 239.849592][ T6289] usb 3-1: string descriptor 0 read error: -22 [ 239.906604][ T6289] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 239.960673][ T6289] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 240.036546][ T6289] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 240.107415][ T6289] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 240.256797][ T8094] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 240.276959][ T6289] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 240.303617][ T6289] usb 3-1: media controller created [ 242.014227][ T6289] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.121432][ T6289] zl10353_read_register: readreg error (reg=127, ret==0) [ 242.433831][ T6289] usb 3-1: USB disconnect, device number 24 [ 243.067228][ T8136] syz.3.1235 (8136) used greatest stack depth: 18176 bytes left [ 243.242921][ T8143] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 245.258810][ T27] audit: type=1326 audit(1763851593.186:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbac78f749 code=0x7ffc0000 [ 245.410920][ T27] audit: type=1326 audit(1763851593.246:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fdbac78f749 code=0x7ffc0000 [ 245.481984][ T27] audit: type=1326 audit(1763851593.246:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbac78f749 code=0x7ffc0000 [ 245.586384][ T27] audit: type=1326 audit(1763851593.246:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbac78f749 code=0x7ffc0000 [ 248.493049][ T27] audit: type=1326 audit(1763851596.416:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.0.1265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd861b8f749 code=0x0 [ 248.521463][ T8224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.700370][ T8240] netlink: 'syz.3.1266': attribute type 4 has an invalid length. [ 249.708202][ T8240] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1266'. [ 253.222141][ T7] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 253.413821][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.440238][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.470831][ T7] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 253.495036][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 253.531387][ T7] usb 3-1: SerialNumber: syz [ 253.552129][ T951] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 253.760635][ T7] usb 3-1: 0:2 : does not exist [ 253.765706][ T951] usb 7-1: Using ep0 maxpacket: 32 [ 253.778574][ T951] usb 7-1: config 4 has an invalid interface number: 128 but max is 0 [ 253.797171][ T7] usb 3-1: unit 255 not found! [ 253.832026][ T951] usb 7-1: config 4 has no interface number 0 [ 253.849846][ T7] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 253.893730][ T951] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.482794][ T951] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.493260][ T951] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 254.502567][ T951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.596816][ T7] usb 3-1: 5:0: cannot get min/max values for control 10 (id 5) [ 254.620384][ T951] hub 7-1:4.128: USB hub found [ 254.636227][ T7] usb 3-1: USB disconnect, device number 25 [ 254.828858][ T951] hub 7-1:4.128: config failed, hub doesn't have any ports! (err -19) [ 254.882142][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.145839][ T8348] loop7: detected capacity change from 0 to 512 [ 255.153687][ T951] usb 7-1: USB disconnect, device number 3 [ 255.340976][ T8348] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.1307: inode has both inline data and extents flags [ 255.531572][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.538245][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.782339][ T8348] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1307: couldn't read orphan inode 15 (err -117) [ 256.047342][ T8348] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 256.057029][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1309'. [ 256.137580][ T7389] EXT4-fs (loop7): unmounting filesystem. [ 256.535506][ T8384] loop7: detected capacity change from 0 to 1024 [ 256.552553][ T8384] EXT4-fs: Ignoring removed oldalloc option [ 256.574028][ T8384] EXT4-fs: Ignoring removed bh option [ 256.596743][ T8384] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 256.678256][ T8384] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 256.792998][ T7389] EXT4-fs (loop7): unmounting filesystem. [ 256.801923][ T8398] loop2: detected capacity change from 0 to 1024 [ 256.947130][ T9] hfsplus: b-tree write err: -5, ino 4 [ 258.188058][ T951] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 258.391227][ T951] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 258.443945][ T27] audit: type=1326 audit(6055253905.376:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31ab8f749 code=0x7ffc0000 [ 258.479608][ T951] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.509148][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 258.528247][ T8435] loop6: detected capacity change from 0 to 512 [ 258.534895][ T951] usb 3-1: SerialNumber: syz [ 258.572628][ T27] audit: type=1326 audit(6055253905.396:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31ab8f749 code=0x7ffc0000 [ 258.618523][ T8435] EXT4-fs warning (device loop6): ext4_xattr_inode_get:509: inode #11: comm syz.6.1336: EA inode hash validation failed [ 258.618983][ T27] audit: type=1326 audit(6055253905.406:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe31ab8f749 code=0x7ffc0000 [ 258.661992][ T27] audit: type=1326 audit(6055253905.416:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31ab8f749 code=0x7ffc0000 [ 258.692713][ T27] audit: type=1326 audit(6055253905.416:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31ab8f749 code=0x7ffc0000 [ 258.695513][ T8435] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #15: comm syz.6.1336: corrupted inode contents [ 258.796216][ T27] audit: type=1326 audit(6055253905.426:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe31ab8f749 code=0x7ffc0000 [ 258.826905][ T951] usb 3-1: bad CDC descriptors [ 258.845628][ T951] usb 3-1: USB disconnect, device number 26 [ 258.853759][ T8435] EXT4-fs error (device loop6): ext4_dirty_inode:6133: inode #15: comm syz.6.1336: mark_inode_dirty error [ 258.900572][ T8435] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #15: comm syz.6.1336: corrupted inode contents [ 258.922709][ T27] audit: type=1326 audit(6055253905.436:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31ab8f749 code=0x7ffc0000 [ 258.964110][ T8435] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2964: inode #15: comm syz.6.1336: mark_inode_dirty error [ 258.993914][ T27] audit: type=1326 audit(6055253905.436:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31ab8f749 code=0x7ffc0000 [ 259.016297][ T8435] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2967: inode #15: comm syz.6.1336: mark inode dirty (error -117) [ 259.040493][ T27] audit: type=1326 audit(6055253905.436:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe31ab8f749 code=0x7ffc0000 [ 259.069174][ T8435] EXT4-fs warning (device loop6): ext4_evict_inode:299: xattr delete (err -117) [ 259.078333][ T8435] EXT4-fs (loop6): 1 orphan inode deleted [ 259.099256][ T8435] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 259.120979][ T27] audit: type=1326 audit(6055253905.436:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.6.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31ab8f749 code=0x7ffc0000 [ 259.250041][ T7376] EXT4-fs (loop6): unmounting filesystem. [ 259.488493][ T8470] loop7: detected capacity change from 0 to 1024 [ 259.680606][ T8470] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 259.691055][ T8470] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.752999][ T8470] EXT4-fs error (device loop7): ext4_lookup:1858: inode #15: comm syz.7.1347: inode has both inline data and extents flags [ 261.367638][ T7389] EXT4-fs (loop7): unmounting filesystem. [ 261.548737][ T8502] netlink: 'syz.7.1356': attribute type 3 has an invalid length. [ 261.976911][ T8519] loop2: detected capacity change from 0 to 512 [ 262.021713][ T8519] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1363: inode has both inline data and extents flags [ 262.052307][ T8519] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1363: couldn't read orphan inode 15 (err -117) [ 262.073656][ T8519] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 263.008503][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 264.443860][ T8568] loop7: detected capacity change from 0 to 512 [ 265.479182][ T8568] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.1378: inode has both inline data and extents flags [ 265.595764][ T8568] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1378: couldn't read orphan inode 15 (err -117) [ 265.631591][ T8568] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 266.356120][ T7389] EXT4-fs (loop7): unmounting filesystem. [ 266.950246][ T8599] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 267.379503][ T8616] loop6: detected capacity change from 0 to 512 [ 268.443868][ T8624] loop2: detected capacity change from 0 to 512 [ 268.453109][ T8616] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 268.478043][ T8616] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #13: comm syz.6.1391: iget: bad i_size value: 12154757448730 [ 268.503803][ T8616] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1391: couldn't read orphan inode 13 (err -117) [ 268.535696][ T8616] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 268.548254][ T8624] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1397: inode has both inline data and extents flags [ 268.573056][ T8616] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 268.581950][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 268.581962][ T27] audit: type=1326 audit(6055253915.521:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.0.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd861b8f749 code=0x7ffc0000 [ 268.634963][ T27] audit: type=1326 audit(6055253915.561:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.0.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fd861b8f749 code=0x7ffc0000 [ 268.682830][ T8624] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1397: couldn't read orphan inode 15 (err -117) [ 268.711782][ T8624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 268.773630][ T27] audit: type=1326 audit(6055253915.561:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.0.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd861b8f749 code=0x7ffc0000 [ 268.866299][ T7376] EXT4-fs (loop6): unmounting filesystem. [ 268.871703][ T27] audit: type=1326 audit(6055253915.561:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8629 comm="syz.0.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd861b8f749 code=0x7ffc0000 [ 269.471614][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 269.567783][ T8638] loop7: detected capacity change from 0 to 128 [ 269.634329][ T8638] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 269.674947][ T8638] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 270.552236][ T7389] EXT4-fs (loop7): unmounting filesystem. [ 271.863415][ T8678] loop6: detected capacity change from 0 to 512 [ 271.870770][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1412'. [ 273.504070][ T8678] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1411: inode has both inline data and extents flags [ 273.567310][ T8678] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1411: couldn't read orphan inode 15 (err -117) [ 273.603388][ T8678] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 273.857547][ T8701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.532961][ T7376] EXT4-fs (loop6): unmounting filesystem. [ 277.826417][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1440'. [ 277.949170][ T8780] loop2: detected capacity change from 0 to 164 [ 278.010392][ T4373] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 279.723695][ T8816] netlink: 'syz.2.1453': attribute type 8 has an invalid length. [ 279.872085][ T8821] loop6: detected capacity change from 0 to 128 [ 280.596853][ T8821] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 280.659253][ T8821] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.835918][ T7376] EXT4-fs (loop6): unmounting filesystem. [ 281.568418][ T8868] loop6: detected capacity change from 0 to 512 [ 281.575773][ T8866] loop7: detected capacity change from 0 to 2048 [ 281.715331][ T8868] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 281.764995][ T8868] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.277559][ T7376] EXT4-fs (loop6): unmounting filesystem. [ 285.357703][ T8931] loop2: detected capacity change from 0 to 512 [ 285.385178][ T8931] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 285.416819][ T8931] EXT4-fs (loop2): 1 truncate cleaned up [ 285.422651][ T8931] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 285.476372][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 285.500613][ T8935] loop6: detected capacity change from 0 to 2048 [ 285.529942][ T8935] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 285.557949][ T8942] overlayfs: missing 'lowerdir' [ 285.596396][ T8935] UDF-fs: Scanning with blocksize 512 failed [ 285.711750][ T8935] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.574406][ T8998] xt_socket: unknown flags 0x48 [ 288.609165][ T27] audit: type=1326 audit(6055253935.561:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.2.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 288.702861][ T27] audit: type=1326 audit(6055253935.591:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.2.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 288.789928][ T27] audit: type=1326 audit(6055253935.591:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9009 comm="syz.2.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 293.316359][ T9115] loop6: detected capacity change from 0 to 512 [ 293.346594][ T9119] loop7: detected capacity change from 0 to 512 [ 293.454813][ T9119] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.1549: inode has both inline data and extents flags [ 293.472253][ T9115] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1547: inode has both inline data and extents flags [ 293.552393][ T9119] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1549: couldn't read orphan inode 15 (err -117) [ 293.569944][ T9115] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1547: couldn't read orphan inode 15 (err -117) [ 293.615793][ T9119] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 293.628604][ T9115] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 294.013236][ T27] audit: type=1326 audit(6055253940.954:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.0.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd861b8f749 code=0x7ffc0000 [ 294.099118][ T27] audit: type=1326 audit(6055253940.954:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.0.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd861b8f749 code=0x7ffc0000 [ 294.217716][ T27] audit: type=1326 audit(6055253940.954:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.0.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd861b8f749 code=0x7ffc0000 [ 294.254362][ T27] audit: type=1326 audit(6055253940.954:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.0.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd861b8f749 code=0x7ffc0000 [ 294.318127][ T9141] xt_socket: unknown flags 0x48 [ 294.436554][ T27] audit: type=1326 audit(6055253940.954:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.0.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd861b8f749 code=0x7ffc0000 [ 294.473530][ T7376] EXT4-fs (loop6): unmounting filesystem. [ 294.488936][ T7389] EXT4-fs (loop7): unmounting filesystem. [ 294.639270][ T27] audit: type=1326 audit(6055253940.954:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.0.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fd861b8f749 code=0x7ffc0000 [ 294.771403][ T27] audit: type=1326 audit(6055253940.954:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.0.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd861b8f749 code=0x7ffc0000 [ 294.840193][ T9155] loop7: detected capacity change from 0 to 1024 [ 294.883386][ T27] audit: type=1326 audit(6055253940.954:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.0.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fd861b8f749 code=0x7ffc0000 [ 295.171385][ T27] audit: type=1326 audit(6055253940.954:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9137 comm="syz.0.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd861b8f749 code=0x7ffc0000 [ 295.832720][ T41] hfsplus: b-tree write err: -5, ino 4 [ 296.139884][ T9179] loop6: detected capacity change from 0 to 512 [ 296.198617][ T9179] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1567: inode has both inline data and extents flags [ 296.280668][ T14] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 296.355458][ T9179] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1567: couldn't read orphan inode 15 (err -117) [ 296.425621][ T9179] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 296.484179][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.584807][ T9190] loop7: detected capacity change from 0 to 1024 [ 296.852513][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.102067][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 297.209704][ T14] usb 3-1: New USB device found, idVendor=6a6a, idProduct=49ee, bcdDevice= 0.09 [ 297.239316][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.291502][ T14] usb 3-1: config 0 descriptor?? [ 297.809143][ T7376] EXT4-fs (loop6): unmounting filesystem. [ 297.911532][ T14] hid-generic 0003:6A6A:49EE.0004: unbalanced collection at end of report description [ 297.932217][ T14] hid-generic: probe of 0003:6A6A:49EE.0004 failed with error -22 [ 298.113400][ T4316] usb 3-1: USB disconnect, device number 27 [ 300.241834][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1593'. [ 300.379763][ T9266] xt_socket: unknown flags 0x48 [ 300.818931][ T9268] bond0: (slave bond_slave_1): Releasing backup interface [ 304.110060][ T9305] loop2: detected capacity change from 0 to 128 [ 305.011508][ T9305] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 305.102072][ T9305] ext4 filesystem being mounted at /300/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 306.616494][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 307.074422][ T9336] xt_SECMARK: invalid mode: 2 [ 308.254733][ T4337] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 308.264425][ T9363] loop6: detected capacity change from 0 to 512 [ 308.324166][ T9363] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.1620: inode #1: comm syz.6.1620: iget: illegal inode # [ 308.352249][ T9363] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1620: error while reading EA inode 1 err=-117 [ 308.427480][ T9363] EXT4-fs (loop6): 1 orphan inode deleted [ 308.439452][ T9363] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 308.582744][ T4337] usb 3-1: Using ep0 maxpacket: 8 [ 308.585935][ T7376] EXT4-fs (loop6): unmounting filesystem. [ 308.593181][ T4337] usb 3-1: config index 0 descriptor too short (expected 4419, got 3976) [ 308.612616][ T4337] usb 3-1: config 0 has an invalid interface number: 242 but max is 3 [ 308.620918][ T4337] usb 3-1: config 0 has an invalid interface number: 81 but max is 3 [ 308.662958][ T4337] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.197194][ T4337] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 309.587070][ T4337] usb 3-1: config 0 has no interface number 0 [ 309.593193][ T4337] usb 3-1: config 0 has no interface number 1 [ 309.599392][ T4337] usb 3-1: config 0 interface 242 altsetting 6 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 309.610491][ T4337] usb 3-1: config 0 interface 242 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 309.621250][ T4337] usb 3-1: config 0 interface 242 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 309.632263][ T4337] usb 3-1: config 0 interface 242 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 309.643363][ T4337] usb 3-1: config 0 interface 242 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 309.657658][ T4337] usb 3-1: config 0 interface 242 altsetting 6 has 9 endpoint descriptors, different from the interface descriptor's value: 16 [ 309.716486][ T4337] usb 3-1: config 0 interface 242 has no altsetting 0 [ 309.718510][ T9392] loop7: detected capacity change from 0 to 512 [ 309.739013][ T9392] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 309.771172][ T4337] usb 3-1: New USB device found, idVendor=0499, idProduct=1017, bcdDevice=de.54 [ 309.796605][ T9392] EXT4-fs (loop7): 1 truncate cleaned up [ 309.812462][ T9392] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 309.875883][ T4337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.334408][ T4337] usb 3-1: Product: syz [ 310.338958][ T4337] usb 3-1: Manufacturer: syz [ 310.350235][ T4337] usb 3-1: SerialNumber: syz [ 310.368909][ T4337] usb 3-1: config 0 descriptor?? [ 310.370013][ T7389] EXT4-fs (loop7): unmounting filesystem. [ 310.706511][ T4337] usb 3-1: invalid MIDI in EP 0 [ 310.711931][ T4337] snd-usb-audio: probe of 3-1:0.242 failed with error -22 [ 310.772579][ T4337] snd-usb-audio: probe of 3-1:0.81 failed with error -2 [ 310.809046][ T4337] usb 3-1: USB disconnect, device number 28 [ 310.823003][ T4393] udevd[4393]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.81/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.479444][ T9438] loop7: detected capacity change from 0 to 16 [ 311.518006][ T9438] erofs: (device loop7): mounted with root inode @ nid 36. [ 311.622621][ T9433] loop6: detected capacity change from 0 to 8192 [ 311.635068][ T9444] xt_socket: unknown flags 0x48 [ 311.709255][ T9433] vfat filesystem being mounted at /82/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 315.091422][ T27] audit: type=1326 audit(6055253961.834:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 315.115059][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.531073][ T27] audit: type=1326 audit(6055253961.834:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 315.553239][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.706749][ T27] audit: type=1326 audit(6055253961.834:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 315.805083][ T27] audit: type=1326 audit(6055253961.834:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 315.922832][ T27] audit: type=1326 audit(6055253961.834:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 316.070834][ T27] audit: type=1326 audit(6055253961.834:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 316.144726][ T27] audit: type=1326 audit(6055253961.834:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 316.166893][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.295158][ T27] audit: type=1326 audit(6055253961.834:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 316.317381][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.487672][ T27] audit: type=1326 audit(6055253961.844:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 316.535627][ T9506] loop6: detected capacity change from 0 to 512 [ 316.616470][ T9506] EXT4-fs (loop6): Test dummy encryption mode enabled [ 316.924141][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.930620][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.189124][ T27] audit: type=1326 audit(6055253961.844:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f12b8f749 code=0x7ffc0000 [ 317.255022][ T9506] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 317.347209][ T9506] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.1662: bad orphan inode 131083 [ 317.388564][ T9506] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 317.601963][ T9506] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 318.238681][ T9506] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #2: block 13: comm syz.6.1662: lblock 0 mapped to illegal pblock 13 (length 1) [ 318.344658][ T9529] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #2: block 13: comm syz.6.1662: lblock 0 mapped to illegal pblock 13 (length 1) [ 318.483787][ T7376] EXT4-fs (loop6): unmounting filesystem. [ 318.734641][ T9548] loop7: detected capacity change from 0 to 256 [ 318.799399][ T9548] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 318.839369][ T9548] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 318.868104][ T9548] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 318.911227][ T9548] exfat filesystem being mounted at /96/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 319.089451][ T9557] mmap: syz.0.1678 (9557) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 319.585602][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 321.154524][ T9585] [ 321.156890][ T9585] ====================================================== [ 321.163925][ T9585] WARNING: possible circular locking dependency detected [ 321.170950][ T9585] syzkaller #0 Not tainted [ 321.175372][ T9585] ------------------------------------------------------ [ 321.182387][ T9585] syz.2.1688/9585 is trying to acquire lock: [ 321.188363][ T9585] ffff88802fb1bd58 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 321.198029][ T9585] [ 321.198029][ T9585] but task is already holding lock: [ 321.205392][ T9585] ffff8880780a7a80 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 321.216281][ T9585] [ 321.216281][ T9585] which lock already depends on the new lock. [ 321.216281][ T9585] [ 321.226676][ T9585] [ 321.226676][ T9585] the existing dependency chain (in reverse order) is: [ 321.235669][ T9585] [ 321.235669][ T9585] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 321.244347][ T9585] down_write+0x36/0x60 [ 321.249015][ T9585] process_measurement+0x33c/0x1a10 [ 321.254719][ T9585] ima_file_mmap+0x104/0x150 [ 321.259814][ T9585] __se_sys_remap_file_pages+0x53e/0x770 [ 321.265953][ T9585] do_syscall_64+0x4c/0xa0 [ 321.270871][ T9585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.277266][ T9585] [ 321.277266][ T9585] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 321.284803][ T9585] __lock_acquire+0x2cf8/0x7c50 [ 321.290160][ T9585] lock_acquire+0x1b4/0x490 [ 321.295178][ T9585] down_read_killable+0x4c/0x340 [ 321.300623][ T9585] mmap_read_lock_killable+0x1d/0x60 [ 321.306408][ T9585] lock_mm_and_find_vma+0x2b1/0x2f0 [ 321.312111][ T9585] do_user_addr_fault+0x2db/0xb10 [ 321.317640][ T9585] exc_page_fault+0x60/0x100 [ 321.322737][ T9585] asm_exc_page_fault+0x22/0x30 [ 321.328090][ T9585] fault_in_readable+0x13e/0x1f0 [ 321.333530][ T9585] fault_in_iov_iter_readable+0xbb/0x2e0 [ 321.339665][ T9585] generic_perform_write+0x1d2/0x560 [ 321.345453][ T9585] __generic_file_write_iter+0x172/0x430 [ 321.351586][ T9585] generic_file_write_iter+0xab/0x2e0 [ 321.357460][ T9585] vfs_write+0x44c/0x960 [ 321.362206][ T9585] ksys_write+0x143/0x240 [ 321.367037][ T9585] do_syscall_64+0x4c/0xa0 [ 321.371957][ T9585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.378359][ T9585] [ 321.378359][ T9585] other info that might help us debug this: [ 321.378359][ T9585] [ 321.388573][ T9585] Possible unsafe locking scenario: [ 321.388573][ T9585] [ 321.395999][ T9585] CPU0 CPU1 [ 321.401342][ T9585] ---- ---- [ 321.406683][ T9585] lock(&sb->s_type->i_mutex_key#12); [ 321.412129][ T9585] lock(&mm->mmap_lock); [ 321.418962][ T9585] lock(&sb->s_type->i_mutex_key#12); [ 321.426922][ T9585] lock(&mm->mmap_lock); [ 321.431235][ T9585] [ 321.431235][ T9585] *** DEADLOCK *** [ 321.431235][ T9585] [ 321.439357][ T9585] 3 locks held by syz.2.1688/9585: [ 321.444447][ T9585] #0: ffff88802e84fc68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 321.453657][ T9585] #1: ffff88807d7e2460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x256/0x960 [ 321.462515][ T9585] #2: ffff8880780a7a80 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 321.473814][ T9585] [ 321.473814][ T9585] stack backtrace: [ 321.479703][ T9585] CPU: 1 PID: 9585 Comm: syz.2.1688 Not tainted syzkaller #0 [ 321.487055][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.497097][ T9585] Call Trace: [ 321.500362][ T9585] [ 321.503282][ T9585] dump_stack_lvl+0x168/0x22e [ 321.507948][ T9585] ? load_image+0x3b0/0x3b0 [ 321.512440][ T9585] ? show_regs_print_info+0x12/0x12 [ 321.517625][ T9585] ? print_circular_bug+0x12b/0x1a0 [ 321.522816][ T9585] check_noncircular+0x274/0x310 [ 321.527741][ T9585] ? add_chain_block+0x940/0x940 [ 321.532665][ T9585] ? lockdep_lock+0xdc/0x1e0 [ 321.537242][ T9585] ? __lock_acquire+0x12e5/0x7c50 [ 321.542260][ T9585] ? _find_first_zero_bit+0xcf/0x100 [ 321.547533][ T9585] __lock_acquire+0x2cf8/0x7c50 [ 321.552376][ T9585] ? verify_lock_unused+0x140/0x140 [ 321.557560][ T9585] ? verify_lock_unused+0x140/0x140 [ 321.562746][ T9585] ? memset+0x1e/0x40 [ 321.566726][ T9585] lock_acquire+0x1b4/0x490 [ 321.571213][ T9585] ? mmap_read_lock_killable+0x1d/0x60 [ 321.576656][ T9585] ? read_lock_is_recursive+0x10/0x10 [ 321.582012][ T9585] ? cmp_ex_search+0x1a/0x70 [ 321.586587][ T9585] ? bsearch+0x8a/0xb0 [ 321.590641][ T9585] ? fault_in_readable+0x13e/0x1f0 [ 321.595739][ T9585] ? search_extable+0x8c/0xd0 [ 321.600397][ T9585] ? trim_init_extable+0x3b0/0x3b0 [ 321.605491][ T9585] ? mmap_read_lock_killable+0x1d/0x60 [ 321.610933][ T9585] down_read_killable+0x4c/0x340 [ 321.615856][ T9585] ? mmap_read_lock_killable+0x1d/0x60 [ 321.621297][ T9585] mmap_read_lock_killable+0x1d/0x60 [ 321.626567][ T9585] lock_mm_and_find_vma+0x2b1/0x2f0 [ 321.631753][ T9585] do_user_addr_fault+0x2db/0xb10 [ 321.636762][ T9585] ? _raw_spin_unlock_irq+0x1f/0x40 [ 321.641951][ T9585] exc_page_fault+0x60/0x100 [ 321.646528][ T9585] asm_exc_page_fault+0x22/0x30 [ 321.651363][ T9585] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 321.657070][ T9585] Code: 48 e7 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 27 e7 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 0a e7 [ 321.676683][ T9585] RSP: 0018:ffffc90008e17a90 EFLAGS: 00050287 [ 321.682731][ T9585] RAX: ffffffff81bbef39 RBX: 0000000000001000 RCX: 0000000000080000 [ 321.690686][ T9585] RDX: ffffc9000ce49000 RSI: 000000000001dd11 RDI: 000000000001dd12 [ 321.698640][ T9585] RBP: 0000000000000000 R08: ffff888026ffbb80 R09: 0000000000000002 [ 321.706610][ T9585] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000119000 [ 321.714572][ T9585] R13: dffffc0000000000 R14: 0000200000117100 R15: 0000200000118000 [ 321.722541][ T9585] ? fault_in_readable+0x139/0x1f0 [ 321.727656][ T9585] fault_in_iov_iter_readable+0xbb/0x2e0 [ 321.733287][ T9585] generic_perform_write+0x1d2/0x560 [ 321.738564][ T9585] ? atime_needs_update+0x780/0x780 [ 321.743750][ T9585] ? generic_file_direct_write+0x660/0x660 [ 321.749541][ T9585] ? __file_remove_privs+0x5b0/0x5b0 [ 321.754822][ T9585] ? preempt_count_add+0x8d/0x190 [ 321.759833][ T9585] ? rwsem_write_trylock+0x12f/0x1b0 [ 321.765107][ T9585] ? clear_nonspinnable+0x60/0x60 [ 321.770164][ T9585] ? generic_write_checks_count+0x3d9/0x4c0 [ 321.776055][ T9585] __generic_file_write_iter+0x172/0x430 [ 321.781682][ T9585] generic_file_write_iter+0xab/0x2e0 [ 321.787050][ T9585] vfs_write+0x44c/0x960 [ 321.791286][ T9585] ? file_end_write+0x250/0x250 [ 321.796137][ T9585] ? __fget_files+0x44a/0x4d0 [ 321.800815][ T9585] ? __fdget_pos+0x2ae/0x360 [ 321.805394][ T9585] ? ksys_write+0x71/0x240 [ 321.809802][ T9585] ksys_write+0x143/0x240 [ 321.814119][ T9585] ? __ia32_sys_read+0x80/0x80 [ 321.818872][ T9585] ? lockdep_hardirqs_on+0x94/0x140 [ 321.824059][ T9585] do_syscall_64+0x4c/0xa0 [ 321.828467][ T9585] ? clear_bhb_loop+0x60/0xb0 [ 321.833215][ T9585] ? clear_bhb_loop+0x60/0xb0 [ 321.837879][ T9585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.843756][ T9585] RIP: 0033:0x7f3f12b8f749 [ 321.848181][ T9585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.867786][ T9585] RSP: 002b:00007f3f13a78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 321.876183][ T9585] RAX: ffffffffffffffda RBX: 00007f3f12de5fa0 RCX: 00007f3f12b8f749 [ 321.884144][ T9585] RDX: 000000000208e24b RSI: 0000200000000100 RDI: 0000000000000005 [ 321.892098][ T9585] RBP: 00007f3f12c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 321.900052][ T9585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.908020][ T9585] R13: 00007f3f12de6038 R14: 00007f3f12de5fa0 R15: 00007fff1e62a058 [ 321.915983][ T9585]