last executing test programs: 3m21.904939854s ago: executing program 3 (id=35): open(0x0, 0x14507e, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) mlockall(0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) listxattr(&(0x7f0000000900)='./file0\x00', 0x0, 0x8) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="04024705aaaaaaaaaa11070606926c0e0800aaaaaaaaaa1109070690"], 0x4a) 3m21.650933597s ago: executing program 3 (id=38): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000480)={0x20, 0x10, 0x70, {0x70, 0x7e8e703122aff25f, "b75d2875cdc27272c227519075e8013589bfaace04dc71d6de4b85b2de48b730f01f869bb1e7bd73873b0276ef2a6404ab51c0df6da4d1d4801722c338c4aadc10ab1d1d8dbe3632d6825e95d082ed3822cbed31d60be91a050026c8fa64b37a5dc6a14373000000000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3m18.945726463s ago: executing program 3 (id=53): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file4\x00', 0x22440, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) epoll_create1(0x80000) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3c) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x8c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x66, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1}, {0xaf}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0x4}}, 0x1, @default, 0x8100, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x9d}, @void, @val={0x6, 0x2, 0x8}, @val={0x2d, 0x1a, {0x8, 0x1, 0x2, 0x0, {0x3ff, 0x592, 0x0, 0x273, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0xf, 0x80}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x30}}, [{0xdd, 0x6, "52d4ad5a6f5b"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x8c}}, 0x0) 3m18.055433673s ago: executing program 3 (id=58): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc43, &(0x7f00000011c0)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x12a) 3m17.477223666s ago: executing program 3 (id=63): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000540)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x6e6, &(0x7f0000001640)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='osx.:'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 3m15.361700938s ago: executing program 3 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r4 = shmat(r3, &(0x7f0000ff8000/0x4000)=nil, 0x4000) shmdt(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @local}]}, 0x30}}, 0x0) 3m15.017177049s ago: executing program 32 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r4 = shmat(r3, &(0x7f0000ff8000/0x4000)=nil, 0x4000) shmdt(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @local}]}, 0x30}}, 0x0) 1m21.514125851s ago: executing program 4 (id=466): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x20001a, &(0x7f0000000140)={[{@user_xattr}, {@nombcache}, {@dioread_lock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) unlinkat(0xffffffffffffffff, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) 1m20.279985094s ago: executing program 4 (id=470): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 1m19.965162292s ago: executing program 4 (id=474): open(0x0, 0x14507e, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) mlockall(0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) listxattr(&(0x7f0000000900)='./file0\x00', 0x0, 0x8) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="04024705aaaaaaaaaa11070606926c0e0800aaaaaaaaaa1109070690"], 0x4a) 1m19.014472498s ago: executing program 4 (id=477): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$eJzs3cFvHFcdB/DvrNeOt1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeKitEKQAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmfXu/Y6Xif2OoHPJxrPe/Nm3vzmN29mvOusNsD/rctn0ryfIpfPvHG3rG+sL7Y31heP1M3tJGW5kTS7sxQ3k+JBslS2FwNTBubbfLx66a3PHm583q0166laf6q/3exYIY/Yx716ynzd3/zILafH6r/bVxVeXkxypZ4Pmxm3r6EVy6Sdrudw6Drb3NvL5jte78Czr/d0KrrPzW3mkhfqJ3P1O0F9d2hMLsKDsae7HAAAADynPr112BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA86f+/v+inhr1PPMpet//P9NbVpefQUtjr3n/QOMAAAAAAAAAgMn4+qM8yt0c7dU7RfU3/1NV5Xi+6CRfyvu5k5XcztnczXLWspbbOZ9kbqCjmbvLa2u3z/e3LI3e8sLILS9M6ogBAAAAAAAA4H/SL9Pa/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C4pkqjurpuP1PHNpNLPZlnvJP5PMHHa8e1CMWnh/8nEAAADAU5l9gm2+/CiPcjdHe/VOUb3m/0r1enk27+dm1rKatbSzkqv1a+jyVX9jY32xvbG+eKOcyvpwv9//957CmKl7mKpqo/Z8slqjlWtZrZaczZUqmKtpdPd9OjnZi2cgrgEflTEV36uNGVmzTmu5s9/v9C7Cvhh+K6LxmDVbm8El/Yws1LGVWx7rZqCo3qhJtmZi17PTHKrNVb1O9/d0Po3+Oz/HDyDnL9Tz8nh+c6A536t+JhqpMnGhN/rKa+bxmUi+8dc/vX29ffPd69funHl2DmkXUzss3zomFgcy8cpznYnmHtdfqDJxol+/nB/lJzmT+byZ21nNT7OctaykU7cv1+O5/Dn3+EwtDdXe3C2Smfq8dM/ZODHN54dVaTmnqm2PZjVFbuVqVvJ69e9CzufbuZiLuTRwhk/sGHd1bNVV39h61ffO9N9GBn/6m3WhvLv9dvMut/S4I95pdO6X7r2/zOuxgbx2R/3D/lrHBq6DhYEsvdTLzvTIzp/k3tj8al0o9/GrXZ4TkzVXZ6K8gHpPiV50L3cz0ayeRdvH+R865XZp3+x0ri+/t0P/97bUX6vn5bBa/9pua/eMPhX7qxwvL2W2vpMMj46y7eX+XWagrbM5lrttw0/ccrsTVVtR9K7UH+dWNQC2X6kz9e9w23u6ULW9MrJtsWo7OdA29PtWbqWdqxPIHwBP4h9v94tzeWGm9a/Wp61PWr9uXW+9MfuDI9858upMpv8+/d3mwtRrjVeLv+ST/Hzz9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDk7nzw4bvL7fbK7dGFxs5NQ4VWti7Zqecjo/sp6i/0GWNfz0VhNsnQkup7jiYeRmtrGNsKnV8kE89P70sER6/zu7LQ3DaiRhWWhpb8eXuHH+0xwmK86+IAC41MdqdTGT0ADvGmBEzEubUb752788GH31q9sfzOyjsrN6cvXry0cOni64vnrq22Vxa6Pw87SuAgbD70DzsSAAAAAAAAAAAAYFyjPhhw6sXdPjQy1mc8/M9CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYF9cPpPm/RQ5v3B2oaxvrC+2y6lX3lyzmaTRSIqfJcWDZCndKXMD3RX544N0Ruzn49VLb332cOPzzb6a3fWTRj3f2eNbk9yrp8wnmarnT2GovytP3V/xn94xlAn7otPpLD1dfLA//hsAAP//P3v0tA==") symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 1m18.303355263s ago: executing program 4 (id=481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, r5, 0x11, 0x0, r7, @void, @value}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r4, r5, 0x11, 0x0, r4, @void, @value}, 0x11) 1m16.90144143s ago: executing program 4 (id=488): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus/file0\x00', 0x0, &(0x7f0000000900), 0x1, 0x4e6, &(0x7f0000001400)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000040)='./file0\x00', 0x4644, &(0x7f0000003240)=ANY=[], 0x6, 0x366, &(0x7f0000001280)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x14, {{0x29, 0x0, 0x43000000, @local, 0x20000}}}, 0x88) 1m0.648225955s ago: executing program 33 (id=488): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus/file0\x00', 0x0, &(0x7f0000000900), 0x1, 0x4e6, &(0x7f0000001400)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000040)='./file0\x00', 0x4644, &(0x7f0000003240)=ANY=[], 0x6, 0x366, &(0x7f0000001280)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x14, {{0x29, 0x0, 0x43000000, @local, 0x20000}}}, 0x88) 17.129262316s ago: executing program 0 (id=646): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) flock(r0, 0x2) 15.993789519s ago: executing program 0 (id=652): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 15.521785782s ago: executing program 0 (id=656): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 12.291082895s ago: executing program 1 (id=658): r0 = socket(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x1, 0x5d3, &(0x7f00000006c0)="$eJzs3U9oHNcdB/DvrGXZ64KzSewkLYWKGEwbU1urbWoXCnVLKTqEYuglV2GvY+G1EqRNUUIp6v9rjznkkB7UQ069pvQQmp576l13Q++6uczs7GptKYoUy9pV8/nA2/fevpk37/0887Qzi9kAX1mLb+b0RoosXnljvaxvbXZ6W5udB8NykjNJGsnMIEuxkhSfJTczSPl6+WbdXfF5x3n94ScfXv7g486gNlOnavvGfvsdzEadMpfkVJ0fVX+3n7q/YjTDMmCXhoGDSXu0y8Zhdn/K6xaYBsXg7+YureRckrP154DUq0PjeEd39A61ygEAAMAJ9dx2trOe85MeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwk9e//F3VqDMtzKYa//z9bv5e6fKJ9OukBAAAAAAAAAMAR+NZ2trOe88P6o6L6zv/VqnKhev1a3s1aulnN1axnKf30s5p2ktZYR7PrS/3+avsAey7suefC8cwXAAAAAAAAAP5P/TaLO9//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANCiSU4OsSheG5VYaM0nOJpktt9tI/jEsn2SfTnoAAAAAcAye28521nN+WH9UVPf8L1X3/WfzblbSz3L66aWbO9WzgMFdf2Nrs9Pb2uw8KNPufn/830MNo+oxg2cPex95vtri4miPxfwsv8iVzOVWVrOcX2Yp/XQzl59WpaUUadVPL1rDce493puP1W590VhfqUbSzN0sV2O7mtt5O73cSaOaQ7XN/kf8TRmd4ke1A8boTp2XM/pznU+HVhWR06OIzNexL6Px/P6ROOR58uSR2mmMnkFdeAYxP1fnZaz/ONUxXxg7+17aPxLJd/7zz1v3eiv3791duzI9U/qSnoxEZywSL3+lIjFbR2Owih5utXy12vd8lvPzvJ076eZ65tPOjcznB1lI57Ez7OIBrrXG4a61S9+uC80kf6rz6VDG9fmxuI6vdK2qbfydnSi9cPQr0sw36kJ5jN/V+XR4MhLtsUi8uH8k/vKofF3rrdxfvbf0zgGPd7nOy8v2D1O1NpfnywvlP1ZVe/zsKNte3LOtXbVdGLU1drVdHLV90ZU6W3+G293ToO3lPds6VdsrY217fcoBYOqde+3cbPNh89/Nj5q/b95rvnH2J2dunPnmbE7/a+bvp/7W+Gvjh8Vr+Si/3rn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvry1996/v9TrdVcVFBQURoVJr0zAs3at/+Cda2vvvf/d5QdLb3Xf6q4s3Lh+43rn++3vXbu73OvOD14nPUrgWdj5oz/pkQAAAAAAAAAAAAAHdRz/nWDScwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtsU3c3ojRdrzV+fL+tZmp1emYXlny5kkjSTFr5Lis+RmBimtse6KzzvO6w8/+fDyBx93dvqaGW7f2G+/g9moU+aSnKrzo+rv9lP3V4xmWAbs0jBwMGn/CwAA//+tLA7Z") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x14400, &(0x7f0000000400)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0x0, 0x29a, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xff\x90\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0x78) sendfile(r5, r6, &(0x7f00000001c0), 0x8) fcntl$addseals(r6, 0x409, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000000)={'wlan0\x00'}) fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) 10.401908727s ago: executing program 6 (id=660): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r0, 0x1) 9.265841559s ago: executing program 0 (id=663): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000001a40)={[{@user_xattr}, {@noquota}, {@noblock_validity}, {@jqfmt_vfsv1}, {@grpid}, {@dioread_nolock}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@dioread_nolock}, {@quota}]}, 0xfe, 0x54f, &(0x7f0000000b00)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000300)='./file0\x00', 0x1d5) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000002100)=""/4112, 0x1010}], 0x1, 0x0, 0x0) 9.26278963s ago: executing program 1 (id=664): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,gid=', @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c73ffffffff0000000069643d69676e6f72652c73686f727461642c766f6c756d65303030303030362c00"/57], 0x4, 0xc24, &(0x7f0000000d00)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x2008002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 7.842700088s ago: executing program 2 (id=669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 6.609614301s ago: executing program 2 (id=671): syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x9, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1f, 0xc75, 0x8a}, {0x6, 0x24, 0x1a, 0xb02, 0xd}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x1e, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x1f, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0x7f, 0x6}}}}}}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "5889f933ac1373990a8dda6fc1f2f21c"}]}}) 6.238444384s ago: executing program 6 (id=672): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0xe2, "7897e6e7f79d3ef14fa6734f658f66a9909e0fe19dfaf8f49958baf43217f6879a41cca5bd6018bf42b82d2e1484a1a869980f5ab22ad2cffcd2f5dc442aa1404d4ad726526415b76d6ffead9fc4b5c38f282ecefdfcba3259291cc2615e5be0049f1a9853257a42c2f5f71bb665a72eb4dfb28f82966b41322a4d08f11225974d9f9b51b331ded4b73a8122f4e8f883ed7853eacc401b14280df5200872b807ca2b1b195afb0b4c03b69b34ae5a8e3b32d6b52662a8ec59ce9fcfb7028776defc08504cb82148118c7c06ad89134e61291f456d6c0075a3372bf78571cc4a971050"}, &(0x7f0000000300)=0x106) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x40}}, 0x0) 5.458966074s ago: executing program 5 (id=673): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0xc6188000) syz_open_dev$usbfs(0x0, 0x79, 0x14240) userfaultfd(0x800) landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) 4.597124823s ago: executing program 6 (id=674): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.596431963s ago: executing program 6 (id=675): r0 = socket(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x1, 0x5d3, &(0x7f00000006c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x14400, &(0x7f0000000400)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0x0, 0x29a, &(0x7f0000000cc0)="$eJzs3E1rE10UwPHzJH1J06dNFiIoiAfdqIuhjV/AIC2IAaU2oi6EqZ1oyJgpM2MlIrY7ty79DMWlO0H9At24c+FOuulCwU0XaqTz0iY1tGqbTGj/PyhzOveezJ23cGYgd/3Wi4e1imdUTF9SGZWUyLJsiOQ3o8h/0TIVxEPSalnOj377eOrG7TtXi6XS1IzqdHH2YkFVx0+/ffz01Zn3/ujN1+NvhmU1f3f9a+Hz6vHVE+s/Z+NPd3w1dc5xfHPOtnS+6tUM1eu2ZXqWVuue5ba1V2xnYaGhZn1+LLvgWp6nZr2hNauhvqO+21Dzvlmtq2EYOpaVoyb91xnllZkZs9iVwSAJI51Wum7RTLc1xlF5pVcDAwAA/SOp+v9B1dOqp/W96v+UUP93D/X/YfL/mnR8Ctys/7PR/bvlwo8ejgwAAAAAAAAAAAAAAAAAAAAAAOzHRrOZazabuXgZ/w2LSEZE4v+THie6Yz/nf7j3w8UBa/nhXkbEfr5YXiyHy7C9WJGq2GLJxKDI9+B6iITx9JXS1IQG8vLOXorylxbL6eD6CPJj+c75k2G+tucPSrZ1+wXJyTH51Cm/0DF/SM6dbck3JCcf7okjtswH1/V2/rNJ1cvXSjvyXwb9AAAAAAA4DAzd8tvze9BuaDxtyI72cOX2+wHJ7fF+YMfz9YCcHEhuvwEAAAAAOEq8xpOaaduWS9AWXBKRXfskfehG+uRAdTFIbZ6Dnm/9S3xr9MdBONBg7VG4a3/SOcEvJQAAAABdsV30Jz0SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOrl2mActEXYI1cf9/mXusZXPp3u8hAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0D9+BQAA//90gxyN") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xff\x90\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0x78) sendfile(r5, r6, &(0x7f00000001c0), 0x8) fcntl$addseals(r6, 0x409, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000000)={'wlan0\x00'}) fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) 4.205410099s ago: executing program 1 (id=676): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) flock(r0, 0x2) 4.052698663s ago: executing program 5 (id=677): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x181}]}, 0x24}}, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 3.285769422s ago: executing program 2 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) process_mrelease(0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611990000000000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getgid() 3.230122617s ago: executing program 5 (id=679): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0xc000, &(0x7f0000000000), 0x1, 0x246, &(0x7f00000007c0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") rt_sigaction(0x1d, 0x0, 0x0, 0x0, 0x0) io_setup(0x2b, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') r1 = fanotify_init(0x0, 0x80000) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) getdents(r0, &(0x7f0000000340)=""/183, 0xb7) 3.19713781s ago: executing program 6 (id=680): syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x50e, &(0x7f0000000ac0)="$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") 2.925843065s ago: executing program 0 (id=681): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) finit_module(r0, 0x0, 0x2) 2.925328815s ago: executing program 1 (id=682): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x60, &(0x7f0000001100)}, 0x10) 2.190029971s ago: executing program 1 (id=683): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e00fd260c"], 0x7) 2.09904806s ago: executing program 2 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.972298412s ago: executing program 5 (id=685): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06007c0c"], 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) link(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.930441315s ago: executing program 0 (id=686): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,gid=', @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c73ffffffff0000000069643d69676e6f72652c73686f727461642c766f6c756d65303030303030362c00"/57], 0x4, 0xc24, &(0x7f0000000d00)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x2008002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 973.788242ms ago: executing program 5 (id=687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffed) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') preadv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000000)=""/15, 0xf}], 0x3, 0x0, 0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYRES16=r1, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000006600)=[{0x20, 0xf0, 0x0, 0xfffff010}, {0x68, 0x0, 0x8, 0x7fffffff}, {0x6, 0x0, 0x80}]}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x7040, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) 968.612952ms ago: executing program 6 (id=688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 887.84217ms ago: executing program 2 (id=689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) 837.724904ms ago: executing program 1 (id=690): r0 = socket(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x1, 0x5d3, &(0x7f00000006c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x14400, &(0x7f0000000400)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0x0, 0x29a, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xff\x90\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0x78) sendfile(r5, r6, &(0x7f00000001c0), 0x8) fcntl$addseals(r6, 0x409, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000000)={'wlan0\x00'}) fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) 2.64321ms ago: executing program 2 (id=691): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0xe4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) r2 = socket(0x10, 0x2, 0x0) add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) 0s ago: executing program 5 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) kernel console output (not intermixed with test programs): om the interface descriptor's value: 1 [ 79.953743][ T4359] loop4: detected capacity change from 0 to 512 [ 79.990327][ T4359] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 80.017037][ T4359] UDF-fs: Scanning with blocksize 512 failed [ 80.021297][ T41] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.034199][ T4362] loop0: detected capacity change from 0 to 256 [ 80.045310][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.058197][ T4359] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 80.070331][ T41] usb 3-1: Product: syz [ 80.074538][ T41] usb 3-1: Manufacturer: syz [ 80.085231][ T4359] UDF-fs: Scanning with blocksize 1024 failed [ 80.111448][ T41] usb 3-1: SerialNumber: syz [ 80.116674][ T4359] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 80.124632][ T4359] UDF-fs: Scanning with blocksize 2048 failed [ 80.163347][ T4359] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 80.262905][ T4359] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.459190][ T41] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 80.479521][ T41] cdc_ncm 3-1:1.0: bind() failure [ 80.529689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.538149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 80.550723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 80.559090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 80.568316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 80.582302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 80.592171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 80.600590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 80.610591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 80.619055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 80.959920][ T41] usb 3-1: USB disconnect, device number 2 [ 81.751741][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 81.778402][ T4377] loop3: detected capacity change from 0 to 8 [ 81.926552][ T4382] binder: 4381:4382 ioctl c0306201 0 returned -14 [ 82.105764][ T4384] loop1: detected capacity change from 0 to 256 [ 82.162818][ T4384] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.187960][ T4386] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.223748][ T4384] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 83.938898][ T4403] fuse: Bad value for 'group_id' [ 84.931845][ T4412] loop3: detected capacity change from 0 to 1024 [ 85.063828][ T4415] loop1: detected capacity change from 0 to 16 [ 85.471820][ T4415] erofs: (device loop1): mounted with root inode @ nid 36. [ 85.622056][ T4315] hfsplus: b-tree write err: -5, ino 4 [ 85.629101][ T4417] loop2: detected capacity change from 0 to 1024 [ 85.635704][ T4415] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 85.680292][ T26] audit: type=1326 audit(1730797461.280:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 85.784325][ T26] audit: type=1326 audit(1730797461.320:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 85.873935][ T4427] loop3: detected capacity change from 0 to 1024 [ 85.906404][ T26] audit: type=1326 audit(1730797461.320:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 85.934328][ T4427] EXT4-fs: Ignoring removed oldalloc option [ 85.934512][ T26] audit: type=1326 audit(1730797461.320:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 85.949803][ T4427] EXT4-fs: Ignoring removed orlov option [ 85.971803][ T4426] loop4: detected capacity change from 0 to 1764 [ 86.032411][ T26] audit: type=1326 audit(1730797461.320:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 86.084462][ T4434] loop1: detected capacity change from 0 to 512 [ 86.108364][ T26] audit: type=1326 audit(1730797461.320:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 86.159652][ T4434] EXT4-fs (loop1): orphan cleanup on readonly fs [ 86.183994][ T4427] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.233862][ T4434] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.31: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 86.292694][ T26] audit: type=1326 audit(1730797461.320:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 86.345601][ T4434] EXT4-fs error (device loop1): ext4_quota_enable:6995: comm syz.1.31: Bad quota inode: 4, type: 1 [ 86.359010][ T26] audit: type=1326 audit(1730797461.320:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 86.381507][ T26] audit: type=1326 audit(1730797461.320:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 86.404149][ T4434] EXT4-fs warning (device loop1): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.421270][ T4434] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 86.478845][ T4434] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.496316][ T26] audit: type=1326 audit(1730797461.320:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa084f7d0b0 code=0x7ffc0000 [ 86.567544][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 86.677422][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 86.688263][ T4446] fuse: Bad value for 'group_id' [ 86.750907][ T4448] loop2: detected capacity change from 0 to 256 [ 86.771422][ T125] cfg80211: failed to load regulatory.db [ 86.825069][ T4448] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 86.862774][ T4448] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 87.117773][ T125] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.629060][ T125] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 87.927653][ T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.939390][ T125] usb 4-1: config 0 descriptor?? [ 88.022561][ T4464] loop2: detected capacity change from 0 to 16 [ 88.537932][ T4464] erofs: (device loop2): mounted with root inode @ nid 36. [ 88.566554][ T125] [drm] vendor descriptor length:70 data:70 5f b7 5d 28 75 cd c2 72 72 c2 [ 88.708126][ T125] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 88.756822][ T4464] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 88.774005][ T4468] capability: warning: `syz.4.42' uses deprecated v2 capabilities in a way that may be insecure [ 88.797067][ T125] [drm:udl_init] *ERROR* Selecting channel failed [ 88.835486][ T125] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 88.874986][ T125] [drm] Initialized udl on minor 2 [ 88.907260][ T125] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 88.916090][ T125] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 88.964650][ T125] usb 4-1: USB disconnect, device number 2 [ 89.137432][ T4482] fuse: Bad value for 'group_id' [ 89.279285][ T4485] loop4: detected capacity change from 0 to 2048 [ 89.313376][ T4485] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.489524][ T4493] loop3: detected capacity change from 0 to 1024 [ 89.500419][ T4493] EXT4-fs: Ignoring removed orlov option [ 89.506607][ T4493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.557262][ T4494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.51'. [ 89.566313][ T4494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.51'. [ 89.917845][ T4493] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 90.376095][ T4506] loop0: detected capacity change from 0 to 16 [ 90.401538][ T4506] erofs: (device loop0): mounted with root inode @ nid 36. [ 90.409102][ T4504] loop1: detected capacity change from 0 to 512 [ 90.427479][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 90.466759][ T4504] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.476871][ T4506] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 90.544848][ T4509] loop2: detected capacity change from 0 to 256 [ 90.546511][ T4504] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 90.594362][ T4504] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.55: invalid indirect mapped block 4294967295 (level 0) [ 90.627149][ T4513] loop3: detected capacity change from 0 to 2048 [ 90.649973][ T4513] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.700110][ T4509] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 90.776571][ T4504] EXT4-fs (loop1): Remounting filesystem read-only [ 90.795797][ T4504] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.55: invalid indirect mapped block 4294967295 (level 1) [ 90.849293][ T4504] EXT4-fs (loop1): Remounting filesystem read-only [ 90.873296][ T4504] EXT4-fs (loop1): 1 orphan inode deleted [ 90.906294][ T4504] EXT4-fs (loop1): 1 truncate cleaned up [ 90.932837][ T4504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 90.971243][ T4265] UDF-fs: error (device loop3): udf_read_inode: (ino 1313) failed !bh [ 91.000957][ T4265] UDF-fs: error (device loop3): udf_read_inode: (ino 1313) failed !bh [ 91.233462][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 91.314208][ T4526] loop2: detected capacity change from 0 to 256 [ 91.429044][ T4526] exfat: Deprecated parameter 'namecase' [ 91.704007][ T4526] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 92.130996][ T4527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.64'. [ 92.140600][ T4527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.64'. [ 92.900919][ T4535] loop4: detected capacity change from 0 to 1024 [ 92.927385][ T4542] loop1: detected capacity change from 0 to 16 [ 92.935984][ T4535] EXT4-fs: Ignoring removed orlov option [ 92.958936][ T4542] erofs: (device loop1): mounted with root inode @ nid 36. [ 93.007007][ T4535] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.072144][ T4542] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 93.102366][ T4535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 93.155572][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.200737][ T26] kauditd_printk_skb: 79 callbacks suppressed [ 93.200751][ T26] audit: type=1326 audit(1730797468.800:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 93.336621][ T26] audit: type=1326 audit(1730797468.840:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 93.377346][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 93.385758][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.552066][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.816021][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.383465][ T4569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.79'. [ 94.393012][ T4569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.79'. [ 96.005163][ T4555] Unknown status report in ack skb [ 96.091492][ T4580] loop0: detected capacity change from 0 to 2048 [ 96.167462][ T4580] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 96.247139][ T4262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.256361][ T4262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.264027][ T4262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.272404][ T4262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.280797][ T4262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 96.281265][ T4593] Bluetooth: MGMT ver 1.22 [ 96.297074][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.308140][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 96.386357][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.485045][ T4597] loop1: detected capacity change from 0 to 2048 [ 96.560097][ T4597] loop1: p2 < > [ 96.582133][ T4603] loop4: detected capacity change from 0 to 512 [ 96.602707][ T4603] EXT4-fs: Ignoring removed i_version option [ 96.611321][ T3621] loop1: p2 < > [ 96.615937][ T4603] EXT4-fs: Ignoring removed nobh option [ 96.641631][ T4603] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.663202][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 96.684127][ T4603] EXT4-fs (loop4): 1 truncate cleaned up [ 96.697184][ T4603] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.768578][ T3621] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.788056][ T3621] Buffer I/O error on dev loop1, logical block 0, async page read [ 96.796525][ T3621] ldm_validate_partition_table(): Disk read failed. [ 96.803168][ T3621] Dev loop1: unable to read RDB block 0 [ 96.810227][ T3621] loop1: unable to read partition table [ 96.816099][ T3621] loop1: partition table beyond EOD, truncated [ 96.826947][ T7] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 96.842394][ T7] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 96.883993][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.957637][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 96.998284][ T4331] udevd[4331]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 97.087299][ T4331] udevd[4331]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 97.106808][ T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.115913][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.166615][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.174389][ T7] usb 3-1: Product: syz [ 97.537729][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 97.610406][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 97.758990][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.980025][ T22] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.003156][ T7] usb 3-1: Manufacturer: syz [ 98.007889][ T7] usb 3-1: SerialNumber: syz [ 98.023491][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.067279][ T22] usb 2-1: config 0 descriptor?? [ 98.075704][ T4626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 98.106583][ T4611] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 98.241330][ T4589] chnl_net:caif_netlink_parms(): no params data found [ 98.369043][ T4268] Bluetooth: hci4: command tx timeout [ 98.567227][ T7] usb 3-1: 0:2 : does not exist [ 98.570741][ T22] plantronics 0003:047F:FFFF.0001: item fetching failed at offset 12/15 [ 98.582740][ T22] plantronics 0003:047F:FFFF.0001: parse failed [ 98.590795][ T22] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 98.772048][ T22] usb 2-1: USB disconnect, device number 2 [ 98.826351][ T7] usb 3-1: USB disconnect, device number 3 [ 98.903213][ T4640] loop4: detected capacity change from 0 to 1024 [ 99.117683][ T4352] udevd[4352]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.149153][ T4637] Unknown status report in ack skb [ 99.349586][ T4640] EXT4-fs: Ignoring removed orlov option [ 99.359722][ T4640] EXT4-fs (loop4): Test dummy encryption mode enabled [ 99.493152][ T4640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.543294][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.551753][ T4653] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.170328][ T4670] loop0: detected capacity change from 0 to 2048 [ 101.211905][ T4268] Bluetooth: hci4: command tx timeout [ 101.299353][ T4589] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.393629][ T4589] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.592613][ T4589] device bridge_slave_0 entered promiscuous mode [ 101.717310][ T4670] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 101.740344][ T4640] netlink: 100 bytes leftover after parsing attributes in process `syz.4.97'. [ 101.938791][ T4589] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.956195][ T4589] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.977064][ T4589] device bridge_slave_1 entered promiscuous mode [ 102.013760][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 102.100046][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 102.842141][ T56] device hsr_slave_0 left promiscuous mode [ 102.852396][ T4686] loop4: detected capacity change from 0 to 512 [ 102.899753][ T4686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 102.910642][ T4686] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.957505][ T56] device hsr_slave_1 left promiscuous mode [ 102.965000][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.004580][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.024550][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.040379][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.085886][ T56] device bridge_slave_1 left promiscuous mode [ 103.103973][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.120304][ T56] device bridge_slave_0 left promiscuous mode [ 103.136475][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.234132][ T56] device veth1_macvtap left promiscuous mode [ 103.242088][ T56] device veth0_macvtap left promiscuous mode [ 103.250670][ T56] device veth1_vlan left promiscuous mode [ 103.256624][ T4268] Bluetooth: hci4: command tx timeout [ 103.265437][ T56] device veth0_vlan left promiscuous mode [ 103.348019][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 103.468463][ T4705] loop4: detected capacity change from 0 to 512 [ 103.495230][ T4705] ext4: Unknown parameter 'nouser_xattr' [ 104.544961][ T4714] loop1: detected capacity change from 0 to 16 [ 104.584747][ T4714] erofs: (device loop1): mounted with root inode @ nid 36. [ 104.647262][ T4714] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 104.908963][ T26] audit: type=1326 audit(1730797480.510:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 105.454104][ T4268] Bluetooth: hci4: command tx timeout [ 106.236476][ T26] audit: type=1326 audit(1730797480.510:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 106.255392][ T4721] loop4: detected capacity change from 0 to 1764 [ 106.313188][ T26] audit: type=1326 audit(1730797480.510:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 106.410940][ T26] audit: type=1326 audit(1730797480.510:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 106.461165][ T4723] loop4: detected capacity change from 0 to 2048 [ 106.481940][ T26] audit: type=1326 audit(1730797480.510:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 106.507691][ T26] audit: type=1326 audit(1730797480.540:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 106.532391][ T26] audit: type=1326 audit(1730797480.540:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 106.562564][ T26] audit: type=1326 audit(1730797480.540:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 106.592685][ T26] audit: type=1326 audit(1730797480.540:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 106.624250][ T26] audit: type=1326 audit(1730797480.540:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa084f7d0b0 code=0x7ffc0000 [ 106.669165][ T4723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 106.812129][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 106.943761][ T4728] loop4: detected capacity change from 0 to 128 [ 106.978342][ T4728] EXT4-fs: Ignoring removed nobh option [ 107.003657][ T4728] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.014958][ T4728] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.088109][ T56] team0 (unregistering): Port device team_slave_1 removed [ 107.101541][ T4728] fscrypt (loop4, inode 12): Unsupported encryption flags (0xff) [ 107.156668][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 107.199329][ T56] team0 (unregistering): Port device team_slave_0 removed [ 107.407406][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.661099][ T4738] loop0: detected capacity change from 0 to 2048 [ 107.696188][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.749596][ T4738] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.914492][ T4746] loop4: detected capacity change from 0 to 512 [ 108.954221][ T4746] EXT4-fs (loop4): 1 truncate cleaned up [ 108.960544][ T4746] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.023728][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 109.328184][ T56] bond0 (unregistering): Released all slaves [ 109.999254][ T4589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.096356][ T4589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.127998][ T4699] Unknown status report in ack skb [ 110.281166][ T4589] team0: Port device team_slave_0 added [ 110.344849][ T4589] team0: Port device team_slave_1 added [ 110.659516][ T4757] loop2: detected capacity change from 0 to 2048 [ 110.917084][ T4757] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 111.149613][ T4765] device veth3 entered promiscuous mode [ 111.194383][ T4589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.226670][ T4589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.357258][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 111.362512][ T4771] loop1: detected capacity change from 0 to 1024 [ 111.366182][ T4589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.381645][ T4771] EXT4-fs: Ignoring removed orlov option [ 111.409173][ T4589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.430069][ T4771] EXT4-fs (loop1): Test dummy encryption mode enabled [ 111.506968][ T4589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.544537][ T4773] loop4: detected capacity change from 0 to 1764 [ 111.548110][ T4771] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.621713][ T4589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.895542][ T4589] device hsr_slave_0 entered promiscuous mode [ 111.937432][ T4589] device hsr_slave_1 entered promiscuous mode [ 111.964067][ T4589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.989925][ T4589] Cannot create hsr debugfs directory [ 112.094283][ T4797] loop0: detected capacity change from 0 to 16 [ 112.124556][ T4771] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 112.157325][ T4797] erofs: (device loop0): mounted with root inode @ nid 36. [ 112.242451][ T4797] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 112.273410][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 112.319314][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 112.319331][ T26] audit: type=1326 audit(1730797487.920:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888f57e719 code=0x7ffc0000 [ 112.433573][ T26] audit: type=1326 audit(1730797487.920:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f888f57e719 code=0x7ffc0000 [ 114.015625][ T4807] loop1: detected capacity change from 0 to 2048 [ 114.072963][ T26] audit: type=1326 audit(1730797487.920:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888f57e719 code=0x7ffc0000 [ 114.133217][ T4813] Unknown status report in ack skb [ 114.140740][ T4807] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 114.157823][ T26] audit: type=1326 audit(1730797487.920:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f888f57e719 code=0x7ffc0000 [ 114.186620][ T4807] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.254653][ T26] audit: type=1326 audit(1730797487.920:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888f57e719 code=0x7ffc0000 [ 114.296351][ T26] audit: type=1326 audit(1730797487.920:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f888f57e719 code=0x7ffc0000 [ 114.345763][ T4589] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.417894][ T26] audit: type=1326 audit(1730797487.920:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888f57e719 code=0x7ffc0000 [ 114.457892][ T4589] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.510591][ T4589] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.513908][ T26] audit: type=1326 audit(1730797487.920:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f888f57e719 code=0x7ffc0000 [ 114.543916][ T4589] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.586326][ T26] audit: type=1326 audit(1730797487.920:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888f57e719 code=0x7ffc0000 [ 114.639449][ T26] audit: type=1326 audit(1730797487.920:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4794 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f888f57d0b0 code=0x7ffc0000 [ 114.671769][ T4296] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.699291][ T4825] loop4: detected capacity change from 0 to 2048 [ 114.896433][ T4589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.918482][ T4589] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.947298][ T4296] usb 2-1: Using ep0 maxpacket: 8 [ 114.962491][ T4589] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.973642][ T4589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.978716][ T4825] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 114.994007][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.032772][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.054437][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.067290][ T4296] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 115.107187][ T4296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.122083][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.136713][ T4296] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.153240][ T4623] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.156395][ T4296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.160482][ T4623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.190712][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 115.207199][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.221931][ T4296] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 115.224115][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.241828][ T4296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.259296][ T4623] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.266602][ T4623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.287839][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.291572][ T4296] usb 2-1: config 0 descriptor?? [ 115.314925][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.338655][ T4807] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.342333][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.401817][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.450801][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.487720][ T4296] usb 2-1: USB disconnect, device number 3 [ 115.488194][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.510706][ T4268] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 115.550262][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 115.567503][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.583169][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.593876][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.603275][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.612219][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.620851][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.629552][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.644599][ T4836] netlink: 'syz.0.143': attribute type 7 has an invalid length. [ 115.670147][ T4836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 115.746324][ T4838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 115.855164][ T4844] netlink: 'syz.1.145': attribute type 1 has an invalid length. [ 115.914122][ T4847] loop2: detected capacity change from 0 to 16 [ 115.944600][ T4847] erofs: (device loop2): mounted with root inode @ nid 36. [ 116.024532][ T4847] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 117.039977][ T4861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'. [ 117.049057][ T4861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'. [ 117.479917][ T4862] loop0: detected capacity change from 0 to 1024 [ 117.854139][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.872647][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.910746][ T4872] loop1: detected capacity change from 0 to 2048 [ 117.928649][ T4878] loop0: detected capacity change from 0 to 8 [ 117.933875][ T4589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.065078][ T4878] SQUASHFS error: Failed to read block 0x4e8: -5 [ 118.088151][ T4872] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 118.096728][ T4878] SQUASHFS error: Failed to read block 0x4de: -5 [ 118.096845][ T4878] SQUASHFS error: Failed to read block 0x4de: -5 [ 118.098025][ T4878] SQUASHFS error: Failed to read block 0x4de: -5 [ 118.217692][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 118.217714][ T26] audit: type=1800 audit(1730797493.810:172): pid=4878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.154" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 118.357597][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 118.514025][ T4897] loop0: detected capacity change from 0 to 128 [ 118.567545][ T4897] FAT-fs (loop0): Unrecognized mount option "0x0000000000000000" or missing value [ 118.692417][ T4352] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.805157][ T4910] loop1: detected capacity change from 0 to 16 [ 118.810555][ T4908] loop0: detected capacity change from 0 to 256 [ 118.857830][ T4910] erofs: (device loop1): mounted with root inode @ nid 36. [ 118.877576][ T4908] exfat: Bad value for 'allow_utime' [ 118.962762][ T4910] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 118.984053][ T4352] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.996540][ T26] audit: type=1326 audit(1730797494.600:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4909 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 119.006947][ T4916] "syz.2.163" (4916) uses obsolete ecb(arc4) skcipher [ 119.027425][ T4913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.100926][ T26] audit: type=1326 audit(1730797494.630:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4909 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 119.121742][ T4897] loop0: detected capacity change from 0 to 512 [ 119.195112][ T26] audit: type=1326 audit(1730797494.630:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4909 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 119.233414][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.244934][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.256104][ T4352] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.341598][ T26] audit: type=1326 audit(1730797494.630:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4909 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 119.359124][ T4589] device veth0_vlan entered promiscuous mode [ 119.445819][ T26] audit: type=1326 audit(1730797494.630:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4909 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 119.474323][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.518300][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.540043][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.561769][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.570765][ T26] audit: type=1326 audit(1730797494.630:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4909 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 119.660160][ T4923] loop2: detected capacity change from 0 to 2048 [ 119.680614][ T26] audit: type=1326 audit(1730797494.630:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4909 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 119.740491][ T4923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.749020][ T4589] device veth1_vlan entered promiscuous mode [ 119.811081][ T26] audit: type=1326 audit(1730797494.630:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4909 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 119.853783][ T26] audit: type=1326 audit(1730797494.630:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4909 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 120.221428][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.234826][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.256684][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 120.277320][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.296353][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.350389][ T4589] device veth0_macvtap entered promiscuous mode [ 120.443475][ T4589] device veth1_macvtap entered promiscuous mode [ 120.471744][ T4938] loop4: detected capacity change from 0 to 1024 [ 120.618498][ T4939] loop0: detected capacity change from 0 to 512 [ 120.884444][ T4939] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 120.897583][ T4939] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 120.907881][ T4939] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.168: Corrupt directory, running e2fsck is recommended [ 120.942454][ T4939] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 120.952253][ T4939] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.168: corrupted in-inode xattr [ 120.968120][ T4939] EXT4-fs (loop0): Remounting filesystem read-only [ 120.975178][ T4939] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.168: couldn't read orphan inode 15 (err -117) [ 120.999552][ T4939] EXT4-fs (loop0): Remounting filesystem read-only [ 121.006347][ T4939] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.236961][ T4938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.272863][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.284175][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.294689][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.305800][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.308140][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 121.341297][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.381571][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.433699][ T4946] loop1: detected capacity change from 0 to 512 [ 121.443966][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.477430][ T4948] loop2: detected capacity change from 0 to 16 [ 121.485040][ T4948] erofs: (device loop2): mounted with root inode @ nid 36. [ 121.487489][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.534139][ T4946] EXT4-fs: Ignoring removed nobh option [ 121.547479][ T4589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.582670][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.592485][ T4946] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.613541][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.619524][ T4948] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 121.656488][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 121.673939][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.712995][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.740233][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.793179][ T4946] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.798829][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.809742][ T4958] loop0: detected capacity change from 0 to 128 [ 121.813532][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.829145][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.839839][ T4946] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.840031][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.860862][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.888920][ T4589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.896981][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.907047][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.932238][ T4589] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.954310][ T4589] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.985214][ T4589] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.006282][ T4589] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.060738][ T4352] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.191510][ T4248] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 224: padding at end of block bitmap is not set [ 122.310063][ T4420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.425242][ T4248] EXT4-fs (loop1): Remounting filesystem read-only [ 122.439777][ T4248] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 122.477171][ T4420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.557144][ T4971] loop0: detected capacity change from 0 to 1024 [ 122.564332][ T4971] EXT4-fs: Ignoring removed orlov option [ 122.576874][ T4971] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.611909][ T4248] EXT4-fs (loop1): Remounting filesystem read-only [ 122.859333][ T4623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.892283][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.990157][ T4623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.119586][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 123.720575][ T4971] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 123.747478][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.097135][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 124.914667][ T4995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.183'. [ 125.161286][ T4995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 125.235146][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 125.244083][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 125.391668][ T4997] hub 2-0:1.0: USB hub found [ 125.398539][ T5001] loop1: detected capacity change from 0 to 16 [ 125.426325][ T4997] hub 2-0:1.0: 1 port detected [ 125.436501][ T5001] erofs: (device loop1): mounted with root inode @ nid 36. [ 125.516841][ T5001] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 125.568013][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 125.568029][ T26] audit: type=1326 audit(1730797501.170:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 125.643641][ T26] audit: type=1326 audit(1730797501.170:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 125.772294][ T26] audit: type=1326 audit(1730797501.170:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 125.855624][ T26] audit: type=1326 audit(1730797501.170:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 125.942684][ T26] audit: type=1326 audit(1730797501.170:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 126.035699][ T26] audit: type=1326 audit(1730797501.170:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 126.135310][ T5020] loop2: detected capacity change from 0 to 1024 [ 126.148730][ T26] audit: type=1326 audit(1730797501.170:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 126.171047][ T26] audit: type=1326 audit(1730797501.170:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 126.194141][ T5020] EXT4-fs: Ignoring removed orlov option [ 126.237283][ T26] audit: type=1326 audit(1730797501.170:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa084f7e719 code=0x7ffc0000 [ 126.244417][ T5020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.310456][ T5025] loop5: detected capacity change from 0 to 736 [ 126.340004][ T26] audit: type=1326 audit(1730797501.170:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa084f7d0b0 code=0x7ffc0000 [ 126.358990][ T5020] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 126.537256][ C1] Unknown status report in ack skb [ 126.591329][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 127.023773][ T5042] loop5: detected capacity change from 0 to 512 [ 127.047801][ T5042] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 127.169483][ T5042] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.196: invalid indirect mapped block 2 (level 0) [ 127.232097][ T5042] EXT4-fs (loop5): 1 truncate cleaned up [ 127.262847][ T5042] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 127.936416][ T5050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.195'. [ 127.945336][ T5050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.195'. [ 128.578217][ T5042] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.5.196: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 128.743706][ T5054] loop2: detected capacity change from 0 to 16 [ 128.766781][ T5042] EXT4-fs error (device loop5) in ext4_delete_entry:2800: Corrupt filesystem [ 128.816902][ T5054] erofs: (device loop2): mounted with root inode @ nid 36. [ 128.853905][ T5057] loop0: detected capacity change from 0 to 512 [ 128.890341][ T5057] EXT4-fs (loop0): Test dummy encryption mode enabled [ 128.916810][ T5054] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 128.951777][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 129.024718][ T5057] EXT4-fs error (device loop0): __ext4_iget:5055: inode #11: block 1: comm syz.0.199: invalid block [ 129.143276][ T5057] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.199: couldn't read orphan inode 11 (err -117) [ 129.243062][ T5057] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 129.255125][ T5066] loop5: detected capacity change from 0 to 16 [ 129.293330][ T5066] erofs: (device loop5): mounted with root inode @ nid 36. [ 129.897233][ T5075] syz.0.199 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 131.000543][ T5074] Zero length message leads to an empty skb [ 131.041083][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 131.223560][ T5080] loop2: detected capacity change from 0 to 2048 [ 131.299315][ T5083] loop0: detected capacity change from 0 to 1024 [ 131.323161][ T5083] EXT4-fs: Ignoring removed orlov option [ 131.332007][ T5080] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 131.346968][ T5083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.433461][ T5083] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 131.530529][ T5096] loop4: detected capacity change from 0 to 512 [ 131.765216][ T5103] netlink: 28 bytes leftover after parsing attributes in process `syz.5.208'. [ 131.774242][ T5103] netlink: 28 bytes leftover after parsing attributes in process `syz.5.208'. [ 132.537464][ T5096] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 132.556131][ T5096] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=880fc018, mo2=0002] [ 132.578853][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 132.588022][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 132.642907][ T5096] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 132.735731][ T5096] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 132.791313][ T5096] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.850200][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.856703][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.863041][ T5116] loop5: detected capacity change from 0 to 764 [ 132.901602][ T5110] loop0: detected capacity change from 0 to 2048 [ 132.908791][ T5096] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.207: dx entry: limit 65535 != root limit 120 [ 133.003328][ T5122] xt_socket: unknown flags 0xc [ 133.044681][ T5096] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.207: Corrupt directory, running e2fsck is recommended [ 133.090550][ T5110] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 133.501819][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 133.598549][ T5129] loop1: detected capacity change from 0 to 512 [ 133.673479][ T5129] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 133.754334][ T5129] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 28: 0x1e != 0xfe [ 133.786372][ T5129] UDF-fs: error (device loop1): udf_read_inode: (ino 28) failed !bh [ 134.001974][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 134.165455][ T5143] loop2: detected capacity change from 0 to 2048 [ 134.193104][ T4299] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.265369][ T5143] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 134.329690][ T5155] loop0: detected capacity change from 0 to 512 [ 134.348145][ T5152] loop4: detected capacity change from 0 to 2048 [ 134.417922][ T5155] netlink: 376 bytes leftover after parsing attributes in process `syz.0.223'. [ 134.436833][ T5152] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 134.525899][ T5152] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 134.556311][ T5152] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 134.576586][ T4299] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 134.584582][ T5152] UDF-fs: Scanning with blocksize 512 failed [ 134.603277][ T5152] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.626145][ T4299] usb 2-1: config 0 has no interface number 0 [ 134.663747][ T4299] usb 2-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 134.706940][ T4299] usb 2-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 134.877161][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 134.902060][ T4299] usb 2-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7 [ 134.921227][ T4299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.528181][ T5172] loop0: detected capacity change from 0 to 256 [ 135.556287][ T4299] usb 2-1: Product: syz [ 135.560516][ T4299] usb 2-1: Manufacturer: syz [ 135.565143][ T4299] usb 2-1: SerialNumber: syz [ 135.573221][ T4299] usb 2-1: config 0 descriptor?? [ 135.585187][ T5172] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x74106b80, utbl_chksum : 0xe619d30d) [ 135.718146][ T4299] snd-usb-audio: probe of 2-1:0.216 failed with error -2 [ 135.758875][ T5176] loop4: detected capacity change from 0 to 8 [ 135.804310][ T5176] SQUASHFS error: lzo decompression failed, data probably corrupt [ 135.833423][ T5176] SQUASHFS error: Failed to read block 0x91: -5 [ 135.872408][ T5176] SQUASHFS error: Unable to read metadata cache entry [8f] [ 135.904816][ T5172] process 'syz.0.227' launched './file0/file0' with NULL argv: empty string added [ 135.920240][ T4299] usb 2-1: USB disconnect, device number 4 [ 135.954323][ T4352] udevd[4352]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.958129][ T5176] SQUASHFS error: Unable to read inode 0x11f [ 136.558732][ T5172] syz.0.227: attempt to access beyond end of device [ 136.558732][ T5172] loop0: rw=524288, sector=34359738488, nr_sectors = 3 limit=256 [ 136.678911][ T5172] syz.0.227: attempt to access beyond end of device [ 136.678911][ T5172] loop0: rw=0, sector=34359738488, nr_sectors = 3 limit=256 [ 136.828774][ T5185] loop5: detected capacity change from 0 to 128 [ 136.966504][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 136.966521][ T26] audit: type=1800 audit(1730797512.560:295): pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.229" name="bus" dev="loop5" ino=1048613 res=0 errno=0 [ 136.989449][ T5192] loop1: detected capacity change from 0 to 512 [ 137.060005][ T5192] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.092445][ T5192] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 137.162952][ T5192] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 137.210602][ T5192] System zones: 1-12 [ 137.268913][ T5192] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.230: corrupted in-inode xattr [ 137.307082][ T5192] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.230: couldn't read orphan inode 15 (err -117) [ 137.335744][ T5192] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 137.440843][ T5205] loop0: detected capacity change from 0 to 2048 [ 137.556850][ T5205] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 137.718864][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 139.188267][ T5226] loop5: detected capacity change from 0 to 1024 [ 139.407979][ T5226] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.467382][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 139.675451][ T5237] loop0: detected capacity change from 0 to 1024 [ 139.806974][ T5237] hfsplus: xattr searching failed [ 139.900873][ T5241] fuse: Unknown parameter 'grou00000000000000000000' [ 140.241515][ T5245] loop0: detected capacity change from 0 to 4096 [ 140.329415][ T5245] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 141.378796][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 141.789597][ T5272] 9pnet: p9_errstr2errno: server reported unknown error õ [ 142.612982][ T5284] loop5: detected capacity change from 0 to 2048 [ 142.625231][ T5286] netlink: 'syz.2.255': attribute type 1 has an invalid length. [ 142.633333][ T5286] netlink: 'syz.2.255': attribute type 2 has an invalid length. [ 142.745519][ T5284] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 142.995740][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 143.776304][ T4332] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.157047][ T4332] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 144.346981][ T4332] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.373684][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.425354][ T4332] usb 2-1: Product: syz [ 144.462754][ T4332] usb 2-1: Manufacturer: syz [ 144.492936][ T4332] usb 2-1: SerialNumber: syz [ 144.610256][ T5318] loop0: detected capacity change from 0 to 512 [ 144.618011][ T5318] ext4: Bad value for 'barrier' [ 145.086590][ T5325] loop0: detected capacity change from 0 to 1024 [ 145.682190][ T5322] loop4: detected capacity change from 0 to 2048 [ 145.729261][ T5320] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 145.741230][ T4623] hfsplus: b-tree write err: -5, ino 4 [ 145.778601][ T5322] EXT4-fs: inline encryption not supported [ 145.784506][ T5322] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.799085][ T5322] EXT4-fs: Ignoring removed i_version option [ 145.805264][ T5322] ext4: Unknown parameter 'noacl' [ 145.830460][ T5320] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 145.849923][ T5329] loop5: detected capacity change from 0 to 2048 [ 145.866811][ T4931] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.365434][ T5341] loop4: detected capacity change from 0 to 512 [ 147.368146][ T4332] cdc_ncm 2-1:1.0: failed to get mac address [ 147.409869][ T4332] cdc_ncm 2-1:1.0: bind() failure [ 147.622395][ T5329] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 147.701750][ T4332] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 147.714073][ T5341] EXT4-fs (loop4): Test dummy encryption mode enabled [ 147.726393][ T48] Bluetooth: hci0: command tx timeout [ 147.749750][ T5341] EXT4-fs error (device loop4): __ext4_iget:5055: inode #11: block 1: comm syz.4.268: invalid block [ 147.761311][ T5341] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.268: couldn't read orphan inode 11 (err -117) [ 147.773886][ T5341] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 147.816659][ T4332] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 147.866605][ T4332] usbtest: probe of 2-1:1.1 failed with error -71 [ 147.980239][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 148.007763][ T4332] usb 2-1: USB disconnect, device number 5 [ 148.097304][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 149.026692][ T5364] loop5: detected capacity change from 0 to 512 [ 149.042948][ T5362] loop4: detected capacity change from 0 to 2048 [ 149.070667][ T5364] EXT4-fs: Ignoring removed bh option [ 149.307159][ T5364] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 149.351967][ T5362] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 149.360623][ T5362] UDF-fs: Scanning with blocksize 512 failed [ 149.369787][ T5364] EXT4-fs (loop5): 1 truncate cleaned up [ 149.375493][ T5364] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 149.624683][ T5362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.139759][ T5364] EXT4-fs warning (device loop5): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 150.324317][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 150.658643][ T5390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.950945][ T5404] loop0: detected capacity change from 0 to 2048 [ 153.142474][ T5404] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 153.633884][ T5421] netlink: 28 bytes leftover after parsing attributes in process `syz.5.290'. [ 153.657512][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 156.581126][ T5463] loop4: detected capacity change from 0 to 2048 [ 157.295995][ T5463] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 157.604475][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 157.649386][ T5487] loop1: detected capacity change from 0 to 128 [ 157.773101][ T26] audit: type=1800 audit(1730797789.372:296): pid=5487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.306" name="file1" dev="loop1" ino=1048614 res=0 errno=0 [ 157.898652][ T5494] loop2: detected capacity change from 0 to 2048 [ 157.964034][ T5494] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 158.218392][ T5494] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 158.993115][ T5494] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 159.304831][ T5494] UDF-fs: Scanning with blocksize 512 failed [ 159.674014][ T5494] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.675499][ T5507] loop1: detected capacity change from 0 to 2048 [ 159.734599][ T5510] loop5: detected capacity change from 0 to 512 [ 159.906855][ T5507] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.032149][ T5510] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.313: casefold flag without casefold feature [ 160.566868][ T5510] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.313: couldn't read orphan inode 15 (err -117) [ 160.599989][ T5510] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 161.152620][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 162.479059][ T5552] loop5: detected capacity change from 0 to 1024 [ 165.069752][ T4623] hfsplus: b-tree write err: -5, ino 4 [ 165.343216][ T5563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'. [ 165.392032][ T5563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'. [ 165.916497][ T5395] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 166.277232][ T5395] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 166.589324][ T5395] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.725990][ T5395] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.806349][ T5395] usb 6-1: Product: syz [ 166.810631][ T5395] usb 6-1: Manufacturer: syz [ 166.815254][ T5395] usb 6-1: SerialNumber: syz [ 167.820053][ T5601] loop2: detected capacity change from 0 to 16 [ 167.868053][ T5601] erofs: (device loop2): mounted with root inode @ nid 36. [ 167.892331][ T5603] netlink: 24 bytes leftover after parsing attributes in process `syz.4.335'. [ 167.917034][ T5601] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 168.151972][ T5608] loop2: detected capacity change from 0 to 16 [ 168.178558][ T5608] erofs: (device loop2): mounted with root inode @ nid 36. [ 168.201261][ T5611] loop4: detected capacity change from 0 to 1024 [ 168.273683][ T5608] syz.2.338: attempt to access beyond end of device [ 168.273683][ T5608] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 168.340215][ T5608] syz.2.338: attempt to access beyond end of device [ 168.340215][ T5608] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 168.368498][ T5608] syz.2.338: attempt to access beyond end of device [ 168.368498][ T5608] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 168.938208][ T5395] cdc_ncm 6-1:1.0: failed to get mac address [ 168.957186][ T5395] cdc_ncm 6-1:1.0: bind() failure [ 169.016866][ T5395] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 169.049205][ T5395] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 169.177984][ T5395] usbtest: probe of 6-1:1.1 failed with error -71 [ 169.206342][ T5395] usb 6-1: USB disconnect, device number 2 [ 170.579444][ T5649] Unknown status report in ack skb [ 170.655398][ T5653] loop2: detected capacity change from 0 to 16 [ 170.686162][ T5653] erofs: (device loop2): mounted with root inode @ nid 36. [ 170.772687][ T5653] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 172.144480][ T5676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.342'. [ 172.154393][ T5676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.342'. [ 172.582712][ T5678] binder: 5677:5678 ioctl c0306201 0 returned -14 [ 172.719725][ T5680] loop5: detected capacity change from 0 to 1024 [ 174.421171][ T5703] loop5: detected capacity change from 0 to 2048 [ 174.494691][ T5703] EXT4-fs: Ignoring removed oldalloc option [ 174.590688][ T5703] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 176.404102][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 176.440634][ T5736] loop2: detected capacity change from 0 to 512 [ 176.492618][ T5736] EXT4-fs (loop2): orphan cleanup on readonly fs [ 176.555129][ T5743] loop5: detected capacity change from 0 to 2048 [ 176.577151][ T5743] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 176.604720][ T5736] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.366: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 176.655426][ T5743] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.745568][ T26] audit: type=1804 audit(1730797808.342:297): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.368" name="/newroot/44/file0/file1" dev="loop5" ino=1346 res=1 errno=0 [ 176.783267][ T5736] EXT4-fs error (device loop2): ext4_quota_enable:6995: comm syz.2.366: Bad quota inode: 4, type: 1 [ 176.803193][ T5747] loop1: detected capacity change from 0 to 1024 [ 176.826136][ T5736] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 176.983096][ T5736] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 177.025779][ T5736] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 177.471971][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 177.727403][ T5764] loop2: detected capacity change from 0 to 512 [ 177.768945][ T5764] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.843537][ T5764] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 177.895859][ T5764] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 177.972204][ T5764] EXT4-fs warning (device loop2): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 178.030678][ T5773] loop1: detected capacity change from 0 to 2048 [ 178.073794][ T5764] EXT4-fs (loop2): mount failed [ 178.127565][ T5773] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 178.153988][ T5773] UDF-fs: Scanning with blocksize 512 failed [ 178.190301][ T5773] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.633651][ T5764] loop2: detected capacity change from 0 to 512 [ 179.018667][ T5780] loop0: detected capacity change from 0 to 2048 [ 179.168602][ T5780] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.745587][ T5800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.381'. [ 179.756777][ T5800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.381'. [ 181.416542][ T951] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 181.509746][ T5832] loop4: detected capacity change from 0 to 256 [ 181.615173][ T5832] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 182.217038][ T951] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 183.188519][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.214109][ T951] usb 1-1: config 0 descriptor?? [ 183.326760][ T951] cp210x 1-1:0.0: cp210x converter detected [ 183.597159][ T5850] fuse: Bad value for 'fd' [ 183.676451][ T951] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 183.726855][ T951] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 183.749420][ T951] usb 1-1: cp210x converter now attached to ttyUSB0 [ 183.942617][ T4239] usb 1-1: USB disconnect, device number 2 [ 183.982404][ T4239] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 184.030088][ T4239] cp210x 1-1:0.0: device disconnected [ 184.348891][ T5864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.397'. [ 184.358023][ T5864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.397'. [ 184.386287][ T951] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 184.896421][ T951] usb 6-1: unable to get BOS descriptor or descriptor too short [ 185.036458][ T951] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 185.062896][ T951] usb 6-1: can't read configurations, error -71 [ 185.797596][ T5873] kvm [5872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x4e00000000 [ 185.859237][ T5873] kvm [5872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xce00000000 [ 185.922161][ T5873] kvm [5872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xe000000000 [ 186.023842][ T5873] kvm [5872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x3dd00000800 [ 186.084391][ T5873] kvm [5872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x7f600000000 [ 186.157648][ T5873] kvm [5872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x98000000000 [ 186.215342][ T5873] kvm [5872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x9f600000000 [ 186.252370][ T5873] kvm [5872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xb8000000000 [ 186.643978][ T5889] loop1: detected capacity change from 0 to 1024 [ 188.059567][ T5893] loop5: detected capacity change from 0 to 2048 [ 188.112045][ T5893] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 188.207321][ T5893] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 188.259645][ T5893] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 188.286592][ T5893] UDF-fs: Scanning with blocksize 512 failed [ 188.328306][ T5895] fuse: Bad value for 'fd' [ 188.347053][ T4419] hfsplus: b-tree write err: -5, ino 4 [ 188.415945][ T5893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.601285][ T5897] loop4: detected capacity change from 0 to 256 [ 189.128497][ T5905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.410'. [ 189.139097][ T5905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.410'. [ 189.909725][ T5897] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 189.970230][ T5897] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 190.269631][ T5897] syz.4.409: attempt to access beyond end of device [ 190.269631][ T5897] loop4: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 190.300994][ T5911] loop5: detected capacity change from 0 to 512 [ 190.308261][ T5911] ext4: Bad value for 'barrier' [ 190.353633][ T5897] syz.4.409: attempt to access beyond end of device [ 190.353633][ T5897] loop4: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 190.390985][ T4352] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.516376][ T26] audit: type=1800 audit(1730797822.042:298): pid=5897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.409" name="file1" dev="loop4" ino=1048616 res=0 errno=0 [ 190.726744][ T5914] loop5: detected capacity change from 0 to 1024 [ 190.918764][ T5897] exFAT-fs (loop4): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442) [ 190.918764][ T5897] [ 191.306865][ T5503] hfsplus: b-tree write err: -5, ino 4 [ 191.319812][ T5897] exFAT-fs (loop4): Filesystem has been set read-only [ 191.374287][ T5897] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805c1ee2e0 iblock : 0, err : -5) [ 193.331017][ T5930] fuse: Bad value for 'fd' [ 193.611927][ T5936] fuse: Bad value for 'fd' [ 193.783801][ T5941] loop1: detected capacity change from 0 to 2048 [ 193.840462][ T5941] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 193.929859][ T5944] loop4: detected capacity change from 0 to 512 [ 193.939690][ T5941] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 193.975102][ T5944] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.014682][ T5941] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 194.046697][ T5941] UDF-fs: Scanning with blocksize 512 failed [ 194.079618][ T5944] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.424: casefold flag without casefold feature [ 194.104952][ T5944] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.424: couldn't read orphan inode 15 (err -117) [ 194.134555][ T5945] loop2: detected capacity change from 0 to 4096 [ 194.146796][ T5944] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 194.167499][ T5941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.225727][ T5945] EXT4-fs (loop2): invalid first ino: 0 [ 194.361349][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.368592][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.925861][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 195.252152][ T4352] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 197.545870][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 197.553970][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 197.555009][ T4256] Bluetooth: hci1: command 0x0406 tx timeout [ 198.402455][ T5968] loop4: detected capacity change from 0 to 2048 [ 198.451634][ T5968] EXT4-fs: Ignoring removed oldalloc option [ 198.481848][ T5970] loop2: detected capacity change from 0 to 2048 [ 198.562036][ T5968] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.594566][ T5970] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 198.741672][ T5977] bridge0: port 3(syz_tun) entered blocking state [ 198.775994][ T5977] bridge0: port 3(syz_tun) entered disabled state [ 198.809034][ T5980] EXT4-fs error (device loop2): ext4_dx_csum_verify:502: inode #2: comm syz.2.429: dir seems corrupt? Run e2fsck -D. [ 198.823441][ T5977] device syz_tun entered promiscuous mode [ 198.830859][ T5977] bridge0: port 3(syz_tun) entered blocking state [ 198.837509][ T5977] bridge0: port 3(syz_tun) entered forwarding state [ 198.875294][ T5980] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.429: Directory index failed checksum [ 198.934993][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 199.022637][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 199.248895][ T5982] loop4: detected capacity change from 0 to 2048 [ 199.362377][ T5986] bridge0: port 3(syz_tun) entered disabled state [ 199.369124][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.376797][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.499553][ T5982] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.353843][ T5996] loop0: detected capacity change from 0 to 2048 [ 200.376590][ T5998] loop5: detected capacity change from 0 to 256 [ 200.417468][ T5996] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 200.440879][ T5998] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 200.463229][ T5996] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 200.483461][ T5996] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 200.511899][ T5996] UDF-fs: Scanning with blocksize 512 failed [ 200.525332][ T5996] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.586011][ T6005] loop1: detected capacity change from 0 to 512 [ 200.691552][ T6005] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 200.750760][ T6005] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=880fc018, mo2=0002] [ 200.777979][ T6005] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 200.789987][ T6005] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 200.798968][ T6005] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 201.324117][ T6005] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.430: dx entry: limit 65535 != root limit 120 [ 201.401492][ T6005] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.430: Corrupt directory, running e2fsck is recommended [ 201.654050][ T6017] loop5: detected capacity change from 0 to 4096 [ 201.703458][ T6017] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 201.725068][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 201.771333][ T6020] fuse: Invalid rootmode [ 201.891979][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 201.980015][ T6027] netlink: 76 bytes leftover after parsing attributes in process `syz.4.449'. [ 205.824984][ T6069] fuse: Bad value for 'rootmode' [ 205.846718][ T6065] loop5: detected capacity change from 0 to 2048 [ 205.920631][ T6065] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 206.033378][ T6065] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 206.123212][ T6065] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 206.189719][ T6065] UDF-fs: Scanning with blocksize 512 failed [ 206.260527][ T6065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.611462][ T6079] loop4: detected capacity change from 0 to 1024 [ 207.702487][ T6079] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 208.153058][ T6088] loop5: detected capacity change from 0 to 1024 [ 208.168432][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 208.186935][ T6088] ext4: Unknown parameter 'nouser_xattr' [ 208.532862][ T6100] squashfs: Unknown parameter 'context' [ 208.730865][ T6108] fuse: Bad value for 'fd' [ 209.150347][ T6106] loop1: detected capacity change from 0 to 1024 [ 209.337603][ T6106] EXT4-fs: Ignoring removed orlov option [ 209.380665][ T6106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.471931][ T6111] loop4: detected capacity change from 0 to 1024 [ 209.490724][ T6106] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 210.001962][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 210.054481][ T6117] loop0: detected capacity change from 0 to 1024 [ 210.072888][ T6117] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 210.522755][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 212.019414][ T6147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.485'. [ 212.028550][ T6147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.485'. [ 212.451371][ T6151] loop4: detected capacity change from 0 to 512 [ 212.526183][ C0] sched: RT throttling activated [ 212.603742][ T4352] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.130575][ T6159] loop0: detected capacity change from 0 to 256 [ 213.138788][ T6158] loop1: detected capacity change from 0 to 1024 [ 213.245959][ T6158] EXT4-fs: Ignoring removed orlov option [ 213.354044][ T6158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.382545][ T6159] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 213.451479][ T6151] loop4: detected capacity change from 0 to 128 [ 213.595539][ T6158] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 214.285282][ T6171] loop0: detected capacity change from 0 to 256 [ 215.944830][ T6171] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 215.969788][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 218.236388][ T6181] loop2: detected capacity change from 0 to 2048 [ 218.243511][ T6181] EXT4-fs: Ignoring removed nobh option [ 218.284487][ T6181] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.816602][ T6181] EXT4-fs: error -4 creating inode table initialization thread [ 219.824782][ T6181] EXT4-fs (loop2): mount failed [ 219.882808][ T6206] Bluetooth: MGMT ver 1.22 [ 220.191576][ T6211] loop2: detected capacity change from 0 to 128 [ 221.216357][ T6216] loop5: detected capacity change from 0 to 1024 [ 221.234576][ T6216] EXT4-fs: Ignoring removed orlov option [ 221.241037][ T6211] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 221.275167][ T6216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.427499][ T6216] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 221.597158][ T6222] loop0: detected capacity change from 0 to 1024 [ 221.671658][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 228.076038][ T6263] loop5: detected capacity change from 0 to 1764 [ 228.116250][ T4295] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 228.506481][ T4295] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 228.522558][ T4295] usb 3-1: config 0 has no interface number 0 [ 228.561000][ T4295] usb 3-1: config 0 interface 17 has no altsetting 0 [ 228.593152][ T4295] usb 3-1: New USB device found, idVendor=19d2, idProduct=1148, bcdDevice=5c.71 [ 228.604569][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.775622][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.784852][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.793251][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.801391][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 228.889506][ T6274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.525'. [ 228.898979][ T6274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.525'. [ 229.148613][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.582521][ T4295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.626606][ T4295] usb 3-1: config 0 descriptor?? [ 229.850119][ T6278] loop5: detected capacity change from 0 to 2048 [ 229.894768][ T6278] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.905801][ T6280] loop0: detected capacity change from 0 to 2048 [ 229.954667][ T6280] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 230.013025][ T6280] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 230.036977][ T6280] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 230.055659][ T6280] UDF-fs: Scanning with blocksize 512 failed [ 230.156752][ T4295] usb 3-1: string descriptor 0 read error: -71 [ 230.186567][ T4295] usb 3-1: USB disconnect, device number 4 [ 230.199625][ T6280] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.860106][ T6269] chnl_net:caif_netlink_parms(): no params data found [ 231.155244][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.196821][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.204998][ T6269] device bridge_slave_0 entered promiscuous mode [ 231.250746][ T48] Bluetooth: hci5: command tx timeout [ 231.279221][ T6301] loop2: detected capacity change from 0 to 1024 [ 231.286551][ T6301] EXT4-fs: Ignoring removed orlov option [ 231.292413][ T6301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.347429][ T6301] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 231.353121][ T6297] loop1: detected capacity change from 0 to 2048 [ 231.402151][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.428059][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.447876][ T6269] device bridge_slave_1 entered promiscuous mode [ 231.507127][ T6308] loop0: detected capacity change from 0 to 512 [ 231.514482][ T6308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.539630][ T6297] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 231.559540][ T6297] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 231.579906][ T6297] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 231.594144][ T6297] EXT4-fs (loop1): This should not happen!! Data will be lost [ 231.594144][ T6297] [ 231.607585][ T6297] EXT4-fs (loop1): Total free blocks count 0 [ 231.613657][ T6297] EXT4-fs (loop1): Free/Dirty block details [ 231.626527][ T6297] EXT4-fs (loop1): free_blocks=2415919104 [ 231.632363][ T6308] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 231.656598][ T6297] EXT4-fs (loop1): dirty_blocks=32 [ 231.661782][ T6297] EXT4-fs (loop1): Block reservation details [ 231.665401][ T6308] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 231.686991][ T6297] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 231.703469][ T6298] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 231.727205][ T4976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.738490][ T6308] EXT4-fs (loop0): 1 truncate cleaned up [ 231.744635][ T6308] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 231.764041][ T6308] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 231.795407][ T6308] EXT4-fs (loop0): Remounting filesystem read-only [ 231.839038][ T6269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.889272][ T6269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.932940][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 231.992053][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 232.139822][ T4976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.191590][ T6269] team0: Port device team_slave_0 added [ 232.202962][ T6318] loop0: detected capacity change from 0 to 1024 [ 232.233444][ T6318] hfsplus: unable to parse mount options [ 232.264954][ T6269] team0: Port device team_slave_1 added [ 232.484902][ T4976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.518830][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.607616][ T6324] loop0: detected capacity change from 0 to 128 [ 233.289295][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.336739][ T48] Bluetooth: hci5: command tx timeout [ 233.356879][ T6269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.378314][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.385316][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.412466][ T6269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.733091][ T4976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.297702][ T6269] device hsr_slave_0 entered promiscuous mode [ 234.324887][ T6269] device hsr_slave_1 entered promiscuous mode [ 234.352394][ T6269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.392602][ T6269] Cannot create hsr debugfs directory [ 234.637348][ T6344] loop0: detected capacity change from 0 to 1024 [ 234.788001][ T6344] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 234.859666][ T6344] EXT4-fs (loop0): shut down requested (0) [ 234.995213][ T6356] loop5: detected capacity change from 0 to 1024 [ 235.029253][ T6356] EXT4-fs: Ignoring removed orlov option [ 235.086730][ T6356] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.128208][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 235.155979][ T6356] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 235.238677][ T6269] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 235.426502][ T48] Bluetooth: hci5: command tx timeout [ 236.745062][ T6372] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 236.745062][ T6372] The task syz.2.545 (6372) triggered the difference, watch for misbehavior. [ 236.865406][ T6269] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 236.975100][ T6269] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 237.057201][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 237.119489][ T6269] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 237.205552][ T6377] loop1: detected capacity change from 0 to 1024 [ 237.234668][ T6377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.443732][ T6377] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 237.486370][ T48] Bluetooth: hci5: command tx timeout [ 237.538885][ T14] kernel write not supported for file /tty/drivers (pid: 14 comm: kworker/0:1) [ 237.945680][ T6397] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.973491][ T6269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.585438][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 239.606402][ T6463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.833704][ T6463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.992929][ T6269] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.001606][ T6467] loop5: detected capacity change from 0 to 1024 [ 240.009960][ T6467] EXT4-fs: Ignoring removed orlov option [ 240.015904][ T6467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.209760][ T6467] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 240.342660][ T6472] loop1: detected capacity change from 0 to 256 [ 240.349270][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.383179][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.414689][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.422129][ T6453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.472500][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.483126][ T6472] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 240.499005][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.544063][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.551753][ T6453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.551797][ T6472] FAT-fs (loop1): Filesystem has been set read-only [ 240.584176][ T6472] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 240.600759][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.605017][ T6472] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 240.677562][ T26] audit: type=1804 audit(1730798128.271:299): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.556" name="/newroot/98/file0/file1" dev="loop1" ino=1048618 res=1 errno=0 [ 240.687378][ T6479] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 240.782313][ T26] audit: type=1800 audit(1730798128.381:300): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.556" name="file1" dev="loop1" ino=1048618 res=0 errno=0 [ 240.848277][ T6479] syz.1.556 (6479) used greatest stack depth: 19616 bytes left [ 240.882645][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.930518][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.963957][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 242.501884][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.991104][ T6495] loop1: detected capacity change from 0 to 256 [ 243.099821][ T6495] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d16cac, utbl_chksum : 0xe619d30d) [ 243.130684][ T6495] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 243.140574][ T6495] exFAT-fs (loop1): Filesystem has been set read-only [ 243.147752][ T6495] exFAT-fs (loop1): error, failed to bmap (inode : ffff888057d03be0 iblock : 8, err : -5) [ 243.159885][ T6495] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 243.169627][ T6495] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 243.509600][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.647365][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.699904][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.705932][ T6498] loop5: detected capacity change from 0 to 512 [ 243.844919][ T6498] loop5: detected capacity change from 0 to 512 [ 243.881722][ T6498] ext4: Unknown parameter 'nouser_xattr' [ 244.053770][ T6504] loop5: detected capacity change from 0 to 2048 [ 244.096323][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.146512][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.193718][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.220684][ T6504] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 244.270525][ T6269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.356780][ T6269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.391510][ T6504] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 245.857117][ T4976] device hsr_slave_0 left promiscuous mode [ 245.896810][ T4976] device hsr_slave_1 left promiscuous mode [ 245.924079][ T4976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.951053][ T4976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.983673][ T4976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.026593][ T4976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.055582][ T4976] device bridge_slave_1 left promiscuous mode [ 246.066444][ T4976] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.116880][ T4976] device bridge_slave_0 left promiscuous mode [ 246.143804][ T4976] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.233615][ T4976] device veth1_macvtap left promiscuous mode [ 246.256270][ T4976] device veth0_macvtap left promiscuous mode [ 246.275402][ T4976] device veth1_vlan left promiscuous mode [ 246.293634][ T4976] device veth0_vlan left promiscuous mode [ 246.345327][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 246.539583][ T6522] loop5: detected capacity change from 0 to 1024 [ 246.567245][ T6522] EXT4-fs: Ignoring removed orlov option [ 246.572971][ T6522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.711026][ T6516] loop2: detected capacity change from 0 to 256 [ 246.717363][ T6522] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 246.773133][ T6516] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.808313][ T6527] loop1: detected capacity change from 0 to 128 [ 246.831782][ T6516] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 246.904594][ T6516] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf32de3a7, utbl_chksum : 0xe619d30d) [ 247.028124][ T6531] loop0: detected capacity change from 0 to 2048 [ 247.050167][ T26] audit: type=1800 audit(1730798134.651:301): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.569" name="file1" dev="loop2" ino=1048620 res=0 errno=0 [ 247.110431][ T26] audit: type=1800 audit(1730798134.691:302): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.569" name="file1" dev="loop2" ino=1048620 res=0 errno=0 [ 247.131874][ T26] audit: type=1800 audit(1730798134.701:303): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.569" name="file1" dev="loop2" ino=1048620 res=0 errno=0 [ 247.132241][ T6531] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 247.336675][ T6531] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 247.431305][ T6531] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 247.452404][ T6531] EXT4-fs (loop0): This should not happen!! Data will be lost [ 247.452404][ T6531] [ 247.463176][ T6531] EXT4-fs (loop0): Total free blocks count 0 [ 247.472171][ T6531] EXT4-fs (loop0): Free/Dirty block details [ 247.479900][ T6531] EXT4-fs (loop0): free_blocks=2415919104 [ 247.493851][ T6531] EXT4-fs (loop0): dirty_blocks=16 [ 247.501643][ T6531] EXT4-fs (loop0): Block reservation details [ 247.507993][ T6531] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 247.604227][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 247.760476][ T6539] loop1: detected capacity change from 0 to 1024 [ 247.768820][ T6539] hfsplus: unable to parse mount options [ 247.826672][ T4352] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 247.992667][ T6544] fuse: Unknown parameter 'user_id00000000000000000000' [ 248.140788][ T6549] loop1: detected capacity change from 0 to 128 [ 249.659770][ T4976] team0 (unregistering): Port device team_slave_1 removed [ 249.749619][ T4976] team0 (unregistering): Port device team_slave_0 removed [ 249.897311][ T4976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.919543][ T6567] loop2: detected capacity change from 0 to 128 [ 250.005659][ T4352] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 250.057172][ T4976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.485862][ T6572] loop2: detected capacity change from 0 to 128 [ 250.564818][ T6572] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 250.598542][ T6572] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 250.683262][ T6576] fuse: Bad value for 'fd' [ 250.739894][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 250.869887][ T6580] loop2: detected capacity change from 0 to 128 [ 250.902352][ T6580] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 250.939456][ T6580] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 251.124482][ T6587] loop0: detected capacity change from 0 to 256 [ 251.147081][ T6587] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 251.159531][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 251.445063][ T26] audit: type=1800 audit(1730798139.041:304): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.591" name="bus" dev="loop0" ino=1048623 res=0 errno=0 [ 251.861180][ T4976] bond0 (unregistering): Released all slaves [ 251.926603][ T6596] loop2: detected capacity change from 0 to 256 [ 251.937021][ T26] audit: type=1326 audit(1730798139.531:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888f57e719 code=0x7ffc0000 [ 251.989143][ T26] audit: type=1326 audit(1730798139.571:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f888f57d0b0 code=0x7ffc0000 [ 252.014595][ T6598] loop0: detected capacity change from 0 to 512 [ 252.017745][ T26] audit: type=1326 audit(1730798139.571:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f888f57d0b0 code=0x7ffc0000 [ 252.039126][ T6598] EXT4-fs: Ignoring removed i_version option [ 252.072597][ T26] audit: type=1326 audit(1730798139.571:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888f57e719 code=0x7ffc0000 [ 252.087145][ T6598] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 252.110976][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.125728][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.149961][ T26] audit: type=1326 audit(1730798139.571:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888f57e719 code=0x7ffc0000 [ 252.348230][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 252.350015][ T6598] EXT4-fs (loop0): 1 truncate cleaned up [ 252.350046][ T6598] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 252.412990][ T26] audit: type=1326 audit(1730798139.591:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f888f57e719 code=0x7ffc0000 [ 252.447368][ T6596] capability: warning: `syz.2.595' uses 32-bit capabilities (legacy support in use) [ 252.485732][ T26] audit: type=1326 audit(1730798139.591:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f888f57e753 code=0x7ffc0000 [ 252.572017][ T6607] loop5: detected capacity change from 0 to 512 [ 252.596408][ T26] audit: type=1326 audit(1730798139.591:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f888f57d1ff code=0x7ffc0000 [ 252.659001][ T6607] EXT4-fs (loop5): orphan cleanup on readonly fs [ 252.686614][ T4264] Bluetooth: hci4: command 0x0406 tx timeout [ 252.690109][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 252.735432][ T26] audit: type=1326 audit(1730798139.621:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f888f57e7a7 code=0x7ffc0000 [ 252.766877][ T6607] EXT4-fs error (device loop5): ext4_find_extent:936: inode #4: comm syz.5.597: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 252.810043][ T26] audit: type=1326 audit(1730798139.621:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f888f57d0b0 code=0x7ffc0000 [ 252.920426][ T6607] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 252.963499][ T6607] EXT4-fs warning (device loop5): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 252.996318][ T26] audit: type=1326 audit(1730798139.621:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f888f57e31b code=0x7ffc0000 [ 253.026474][ T6607] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 253.033169][ T6607] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 253.078066][ T6618] loop1: detected capacity change from 0 to 8 [ 253.107132][ T6607] EXT4-fs error (device loop5): ext4_lookup:1855: inode #2: comm syz.5.597: 'file0' linked to parent dir [ 253.134953][ T26] audit: type=1326 audit(1730798139.621:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6597 comm="syz.0.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f888f57d3aa code=0x7ffc0000 [ 253.218167][ T6618] SQUASHFS error: Failed to read block 0x4de: -5 [ 253.310762][ T6618] SQUASHFS error: Failed to read block 0x4de: -5 [ 253.482433][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.518651][ T6453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.579007][ T6269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.792837][ T6634] loop1: detected capacity change from 0 to 2048 [ 253.953290][ T6641] Illegal XDP return value 4294967282 on prog (id 124) dev N/A, expect packet loss! [ 255.710221][ T6646] loop2: detected capacity change from 0 to 1024 [ 255.718365][ T6646] hfsplus: unable to parse mount options [ 255.732230][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.738713][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.869813][ T6662] loop1: detected capacity change from 0 to 4096 [ 259.177647][ T6662] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 259.374246][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 259.836651][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.866085][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.997285][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.029633][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.071270][ T6269] device veth0_vlan entered promiscuous mode [ 260.087340][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.116049][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.182112][ T6269] device veth1_vlan entered promiscuous mode [ 260.343195][ T6686] loop1: detected capacity change from 0 to 512 [ 260.391043][ T6290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 260.406685][ T6290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 260.415320][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 260.441770][ T6290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.477834][ T6290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.504338][ T6686] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.613: inode #1: comm syz.1.613: iget: illegal inode # [ 260.610096][ T6269] device veth0_macvtap entered promiscuous mode [ 260.676371][ T6269] device veth1_macvtap entered promiscuous mode [ 260.694086][ T6686] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.613: error while reading EA inode 1 err=-117 [ 260.743847][ T6698] loop5: detected capacity change from 0 to 1024 [ 260.807032][ T6686] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.613: inode #1: comm syz.1.613: iget: illegal inode # [ 260.854200][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 260.904395][ T6686] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.613: error while reading EA inode 1 err=-117 [ 260.932664][ T6446] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.979808][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 260.979827][ T26] audit: type=1800 audit(1730798148.581:331): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.614" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 261.032989][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.117096][ T6686] EXT4-fs (loop1): 1 orphan inode deleted [ 261.300858][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.337085][ T6686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 261.457677][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.468487][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.478503][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.490156][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.500321][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.512013][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.546355][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.619006][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.645257][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.715633][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.769619][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.229631][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.303841][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.314034][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.332207][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.401683][ T6724] loop0: detected capacity change from 0 to 256 [ 262.409075][ T6724] FAT-fs (loop0): Unrecognized mount option "smackfsdef=md5-generic" or missing value [ 263.486475][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.585237][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.599237][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 263.626937][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.700903][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.747407][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.794593][ T6269] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.822845][ T6731] loop1: detected capacity change from 0 to 512 [ 263.845756][ T6269] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.855371][ T6269] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.865916][ T6269] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.885553][ T6731] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 263.898829][ T6731] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.115123][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.127439][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 264.167622][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.182463][ T6737] loop2: detected capacity change from 0 to 2048 [ 264.202964][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 264.282239][ T6464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.322092][ T6464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.361481][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 264.874360][ T6752] loop1: detected capacity change from 0 to 512 [ 265.043900][ T6752] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 265.452463][ T6752] EXT4-fs (loop1): 1 truncate cleaned up [ 265.528258][ T6761] syz.2.628 uses obsolete (PF_INET,SOCK_PACKET) [ 265.580572][ T6752] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 266.125498][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 267.214522][ T6776] loop1: detected capacity change from 0 to 2048 [ 269.002869][ T6795] binder: BINDER_SET_CONTEXT_MGR already set [ 269.039235][ T6795] binder: 6794:6795 ioctl 4018620d 200001c0 returned -16 [ 270.131050][ T6815] loop2: detected capacity change from 0 to 512 [ 270.295055][ T6815] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 270.332688][ T6815] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.643274][ T6828] loop6: detected capacity change from 0 to 512 [ 270.922372][ T6828] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.934959][ T6828] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 270.945423][ T6828] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.642: Corrupt directory, running e2fsck is recommended [ 270.976448][ T6828] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 270.985912][ T6828] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.642: corrupted in-inode xattr [ 271.008715][ T6828] EXT4-fs (loop6): Remounting filesystem read-only [ 271.015701][ T6828] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.642: couldn't read orphan inode 15 (err -117) [ 271.036688][ T6828] EXT4-fs (loop6): Remounting filesystem read-only [ 271.043418][ T6828] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 271.311616][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 271.328040][ T6269] EXT4-fs (loop6): unmounting filesystem. [ 272.446511][ T6850] loop6: detected capacity change from 0 to 128 [ 272.652926][ T6850] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 272.702075][ T6850] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 274.003224][ T6867] loop1: detected capacity change from 0 to 512 [ 274.223462][ T6867] loop1: detected capacity change from 0 to 128 [ 274.399177][ T6873] overlayfs: failed to resolve './file2': -2 [ 275.109703][ T6269] EXT4-fs (loop6): unmounting filesystem. [ 276.309175][ T6886] loop1: detected capacity change from 0 to 1024 [ 278.047139][ T6886] hfsplus: unable to parse mount options [ 278.072239][ T4352] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 278.421706][ T6896] loop1: detected capacity change from 0 to 128 [ 279.309880][ T6901] loop0: detected capacity change from 0 to 1024 [ 279.360411][ T6901] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 279.510121][ T6901] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 279.558554][ T4256] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 279.795013][ T6906] loop1: detected capacity change from 0 to 2048 [ 280.016387][ T6906] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 280.118204][ T6906] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 280.173817][ T6906] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 280.221964][ T6906] UDF-fs: Scanning with blocksize 512 failed [ 280.234850][ T6916] loop5: detected capacity change from 0 to 512 [ 280.267960][ T6906] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.398983][ T6916] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #16: comm syz.5.667: iget: bad extended attribute block 128 [ 280.479598][ T6916] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.667: couldn't read orphan inode 16 (err -117) [ 280.554873][ T6916] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 280.600884][ T6916] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.653501][ T6916] Quota error (device loop5): do_check_range: Getting dqdh_entries 964 out of range 0-14 [ 280.694012][ T6927] futex_wake_op: syz.5.667 tries to shift op by 144; fix this program [ 280.747584][ T6916] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 280.806978][ T6916] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.667: Failed to acquire dquot type 1 [ 281.563905][ T6921] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 352: padding at end of block bitmap is not set [ 281.838560][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 282.096417][ T4333] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 283.568415][ T4256] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 283.577440][ T4256] Bluetooth: hci4: Injecting HCI hardware error event [ 283.587848][ T4256] Bluetooth: hci4: hardware error 0x00 [ 283.870297][ T6966] loop6: detected capacity change from 0 to 1024 [ 283.936466][ T6966] hfsplus: unable to parse mount options [ 284.265371][ T4352] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 284.276284][ T4333] usb 3-1: not running at top speed; connect to a high speed hub [ 284.406596][ T4333] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 284.473529][ T4333] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 284.614734][ T6975] loop6: detected capacity change from 0 to 128 [ 285.292153][ T4333] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.315402][ T4333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.385389][ T6986] loop5: detected capacity change from 0 to 128 [ 285.416540][ T4333] usb 3-1: can't set config #1, error -71 [ 285.442129][ T6985] loop6: detected capacity change from 0 to 256 [ 285.458202][ T4333] usb 3-1: USB disconnect, device number 5 [ 285.519171][ T6985] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 285.531153][ T6985] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 285.552339][ T6985] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 285.565055][ T6986] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 285.569412][ T6985] UDF-fs: Scanning with blocksize 512 failed [ 285.646419][ T4256] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 285.742976][ T6986] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.764542][ T6985] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 285.784330][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 285.946629][ T6985] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 286.198292][ T6985] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 286.259732][ T6985] UDF-fs: Scanning with blocksize 1024 failed [ 286.309453][ T6985] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 286.337335][ T6985] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 286.347777][ T6985] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 286.355453][ T6985] UDF-fs: Scanning with blocksize 2048 failed [ 286.379695][ T6985] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 286.410415][ T6985] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 286.429674][ T6985] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 286.431088][ T4589] EXT4-fs (loop5): unmounting filesystem. [ 286.446221][ T6985] UDF-fs: Scanning with blocksize 4096 failed [ 286.468876][ T6985] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 286.766810][ T7007] loop0: detected capacity change from 0 to 2048 [ 287.415934][ T7007] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 287.547651][ T7007] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 287.711589][ T7007] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 287.766232][ T7007] UDF-fs: Scanning with blocksize 512 failed [ 287.782308][ T7019] loop1: detected capacity change from 0 to 1024 [ 287.825057][ T7007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.313618][ T7019] hfsplus: unable to parse mount options [ 288.486637][ T7021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.532665][ T951] wlan1: authenticate with 08:02:11:00:00:00 [ 288.560886][ T951] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 288.601992][ T4352] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 288.639809][ T7021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.661161][ T7021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.671217][ T6439] wlan1: authenticated [ 288.683681][ T4296] mac80211_hwsim hwsim15 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 288.704679][ T6439] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 288.733152][ T6439] ------------[ cut here ]------------ [ 288.739238][ T6439] WARNING: CPU: 0 PID: 6439 at net/mac80211/chan.c:248 ieee80211_get_max_required_bw+0x422/0x450 [ 288.750275][ T6439] Modules linked in: [ 288.754227][ T6439] CPU: 0 PID: 6439 Comm: kworker/u4:22 Not tainted 6.1.115-syzkaller #0 [ 288.762725][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 288.772865][ T6439] Workqueue: phy16 ieee80211_iface_work [ 288.778511][ T6439] RIP: 0010:ieee80211_get_max_required_bw+0x422/0x450 [ 288.785332][ T6439] Code: e9 ad fe ff ff e8 ee f4 56 f7 8b 04 24 eb 07 e8 e4 f4 56 f7 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce f4 56 f7 <0f> 0b e9 90 fc ff ff 48 c7 c1 64 38 9a 8e 80 e1 07 80 c1 03 38 c1 [ 288.805033][ T6439] RSP: 0018:ffffc9000396f1a0 EFLAGS: 00010287 [ 288.811190][ T6439] RAX: ffffffff8a339e82 RBX: 0000000000000000 RCX: 0000000000100000 [ 288.819231][ T6439] RDX: ffffc900163b2000 RSI: 0000000000004365 RDI: 0000000000004366 [ 288.827275][ T6439] RBP: ffffc9000396f338 R08: ffffffff8a339b05 R09: ffffffff8a32cdec [ 288.835281][ T6439] R10: 000000000000000e R11: ffff88807f7c3b80 R12: dffffc0000000000 [ 288.843336][ T6439] R13: ffff888067bf8c80 R14: 0000000000000000 R15: dffffc0000000000 [ 288.851483][ T6439] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 288.860485][ T6439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.867134][ T6439] CR2: 00007fa2681faba8 CR3: 0000000027df8000 CR4: 00000000003506f0 [ 288.875142][ T6439] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.883240][ T6439] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 288.891294][ T6439] Call Trace: [ 288.894617][ T6439] [ 288.897704][ T6439] ? __warn+0x15a/0x520 [ 288.901912][ T6439] ? ieee80211_get_max_required_bw+0x422/0x450 [ 288.905687][ T7028] loop2: detected capacity change from 0 to 512 [ 288.908155][ T6439] ? report_bug+0x2af/0x500 [ 288.918978][ T6439] ? ieee80211_get_max_required_bw+0x422/0x450 [ 288.925210][ T6439] ? handle_bug+0x3d/0x70 [ 288.929652][ T6439] ? exc_invalid_op+0x16/0x40 [ 288.934376][ T6439] ? asm_exc_invalid_op+0x16/0x20 [ 288.939528][ T6439] ? _ieee80211_recalc_chanctx_min_def+0x51c/0xe20 [ 288.946085][ T6439] ? ieee80211_get_max_required_bw+0xa5/0x450 [ 288.952271][ T6439] ? ieee80211_get_max_required_bw+0x422/0x450 [ 288.958527][ T6439] ? ieee80211_get_max_required_bw+0x422/0x450 [ 288.964768][ T6439] _ieee80211_recalc_chanctx_min_def+0x5e1/0xe20 [ 288.971213][ T6439] ? _ieee80211_recalc_chanctx_min_def+0x1d0/0xe20 [ 288.977819][ T6439] ? ieee80211_recalc_chanctx_min_def+0x70/0x70 [ 288.984137][ T6439] ieee80211_recalc_chanctx_min_def+0x20/0x70 [ 288.990316][ T6439] ieee80211_recalc_min_chandef+0x3e0/0x4a0 [ 288.996312][ T6439] ? ieee80211_recalc_min_chandef+0xc2/0x4a0 [ 289.002354][ T6439] sta_info_move_state+0x679/0x850 [ 289.007672][ T6439] ieee80211_assoc_success+0x42e0/0x6110 [ 289.013401][ T6439] ? vprintk_emit+0x622/0x740 [ 289.018205][ T6439] ? ieee80211_auth_challenge+0x370/0x370 [ 289.023982][ T6439] ? __mutex_lock+0x9c5/0xd80 [ 289.028791][ T6439] ? _printk+0xd1/0x111 [ 289.033052][ T6439] ieee80211_sta_rx_queued_mgmt+0x2403/0x4100 [ 289.039249][ T6439] ? ieee80211_rx_mgmt_beacon+0x3180/0x3180 [ 289.045208][ T6439] ? stack_trace_save+0x113/0x1c0 [ 289.050385][ T6439] ? mark_lock+0x9a/0x340 [ 289.054781][ T6439] ? __lock_acquire+0x125b/0x1f80 [ 289.060022][ T6439] ? __lock_acquire+0x125b/0x1f80 [ 289.065159][ T6439] ? print_irqtrace_events+0x210/0x210 [ 289.070772][ T6439] ? do_raw_spin_unlock+0x137/0x8a0 [ 289.076031][ T6439] ? kcov_remote_start+0x4ae/0x7c0 [ 289.081342][ T6439] ? lockdep_hardirqs_on+0x94/0x130 [ 289.086637][ T6439] ? kcov_remote_start+0x8c/0x7c0 [ 289.091722][ T6439] ieee80211_iface_work+0x737/0xce0 [ 289.097043][ T6439] ? process_one_work+0x7a9/0x11d0 [ 289.102203][ T6439] process_one_work+0x8a9/0x11d0 [ 289.107257][ T6439] ? worker_detach_from_pool+0x260/0x260 [ 289.112946][ T6439] ? _raw_spin_lock_irqsave+0x120/0x120 [ 289.118700][ T6439] ? kthread_data+0x4e/0xc0 [ 289.123352][ T6439] ? wq_worker_running+0x97/0x190 [ 289.128478][ T6439] worker_thread+0xa47/0x1200 [ 289.133231][ T6439] ? release_firmware_map_entry+0x186/0x186 [ 289.139294][ T6439] kthread+0x28d/0x320 [ 289.143406][ T6439] ? worker_clr_flags+0x190/0x190 [ 289.148522][ T6439] ? kthread_blkcg+0xd0/0xd0 [ 289.153155][ T6439] ret_from_fork+0x1f/0x30 [ 289.157746][ T6439] [ 289.160800][ T6439] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 289.168113][ T6439] CPU: 0 PID: 6439 Comm: kworker/u4:22 Not tainted 6.1.115-syzkaller #0 [ 289.176563][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 289.186822][ T6439] Workqueue: phy16 ieee80211_iface_work [ 289.192419][ T6439] Call Trace: [ 289.195719][ T6439] [ 289.198673][ T6439] dump_stack_lvl+0x1e3/0x2cb [ 289.203406][ T6439] ? nf_tcp_handle_invalid+0x642/0x642 [ 289.208928][ T6439] ? panic+0x764/0x764 [ 289.213064][ T6439] ? 0xffffffffa0000850 [ 289.217266][ T6439] ? vscnprintf+0x59/0x80 [ 289.221645][ T6439] panic+0x318/0x764 [ 289.225583][ T6439] ? __warn+0x169/0x520 [ 289.229781][ T6439] ? memcpy_page_flushcache+0xfc/0xfc [ 289.235206][ T6439] ? ret_from_fork+0x1f/0x30 [ 289.239869][ T6439] __warn+0x348/0x520 [ 289.243885][ T6439] ? ieee80211_get_max_required_bw+0x422/0x450 [ 289.250093][ T6439] report_bug+0x2af/0x500 [ 289.254461][ T6439] ? ieee80211_get_max_required_bw+0x422/0x450 [ 289.260666][ T6439] handle_bug+0x3d/0x70 [ 289.264848][ T6439] exc_invalid_op+0x16/0x40 [ 289.269379][ T6439] asm_exc_invalid_op+0x16/0x20 [ 289.274281][ T6439] RIP: 0010:ieee80211_get_max_required_bw+0x422/0x450 [ 289.281083][ T6439] Code: e9 ad fe ff ff e8 ee f4 56 f7 8b 04 24 eb 07 e8 e4 f4 56 f7 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce f4 56 f7 <0f> 0b e9 90 fc ff ff 48 c7 c1 64 38 9a 8e 80 e1 07 80 c1 03 38 c1 [ 289.300736][ T6439] RSP: 0018:ffffc9000396f1a0 EFLAGS: 00010287 [ 289.306827][ T6439] RAX: ffffffff8a339e82 RBX: 0000000000000000 RCX: 0000000000100000 [ 289.314829][ T6439] RDX: ffffc900163b2000 RSI: 0000000000004365 RDI: 0000000000004366 [ 289.322829][ T6439] RBP: ffffc9000396f338 R08: ffffffff8a339b05 R09: ffffffff8a32cdec [ 289.330829][ T6439] R10: 000000000000000e R11: ffff88807f7c3b80 R12: dffffc0000000000 [ 289.338834][ T6439] R13: ffff888067bf8c80 R14: 0000000000000000 R15: dffffc0000000000 [ 289.346835][ T6439] ? _ieee80211_recalc_chanctx_min_def+0x51c/0xe20 [ 289.353361][ T6439] ? ieee80211_get_max_required_bw+0xa5/0x450 [ 289.359441][ T6439] ? ieee80211_get_max_required_bw+0x422/0x450 [ 289.365625][ T6439] _ieee80211_recalc_chanctx_min_def+0x5e1/0xe20 [ 289.371999][ T6439] ? _ieee80211_recalc_chanctx_min_def+0x1d0/0xe20 [ 289.378541][ T6439] ? ieee80211_recalc_chanctx_min_def+0x70/0x70 [ 289.384815][ T6439] ieee80211_recalc_chanctx_min_def+0x20/0x70 [ 289.390989][ T6439] ieee80211_recalc_min_chandef+0x3e0/0x4a0 [ 289.396896][ T6439] ? ieee80211_recalc_min_chandef+0xc2/0x4a0 [ 289.402912][ T6439] sta_info_move_state+0x679/0x850 [ 289.408064][ T6439] ieee80211_assoc_success+0x42e0/0x6110 [ 289.413764][ T6439] ? vprintk_emit+0x622/0x740 [ 289.418508][ T6439] ? ieee80211_auth_challenge+0x370/0x370 [ 289.424585][ T6439] ? __mutex_lock+0x9c5/0xd80 [ 289.429304][ T6439] ? _printk+0xd1/0x111 [ 289.433508][ T6439] ieee80211_sta_rx_queued_mgmt+0x2403/0x4100 [ 289.439619][ T6439] ? ieee80211_rx_mgmt_beacon+0x3180/0x3180 [ 289.445542][ T6439] ? stack_trace_save+0x113/0x1c0 [ 289.450610][ T6439] ? mark_lock+0x9a/0x340 [ 289.454994][ T6439] ? __lock_acquire+0x125b/0x1f80 [ 289.460235][ T6439] ? __lock_acquire+0x125b/0x1f80 [ 289.465313][ T6439] ? print_irqtrace_events+0x210/0x210 [ 289.470807][ T6439] ? do_raw_spin_unlock+0x137/0x8a0 [ 289.476116][ T6439] ? kcov_remote_start+0x4ae/0x7c0 [ 289.481251][ T6439] ? lockdep_hardirqs_on+0x94/0x130 [ 289.486468][ T6439] ? kcov_remote_start+0x8c/0x7c0 [ 289.491509][ T6439] ieee80211_iface_work+0x737/0xce0 [ 289.496729][ T6439] ? process_one_work+0x7a9/0x11d0 [ 289.501849][ T6439] process_one_work+0x8a9/0x11d0 [ 289.506811][ T6439] ? worker_detach_from_pool+0x260/0x260 [ 289.512472][ T6439] ? _raw_spin_lock_irqsave+0x120/0x120 [ 289.518030][ T6439] ? kthread_data+0x4e/0xc0 [ 289.522552][ T6439] ? wq_worker_running+0x97/0x190 [ 289.527613][ T6439] worker_thread+0xa47/0x1200 [ 289.532376][ T6439] ? release_firmware_map_entry+0x186/0x186 [ 289.538289][ T6439] kthread+0x28d/0x320 [ 289.542369][ T6439] ? worker_clr_flags+0x190/0x190 [ 289.547405][ T6439] ? kthread_blkcg+0xd0/0xd0 [ 289.552009][ T6439] ret_from_fork+0x1f/0x30 [ 289.556540][ T6439] [ 289.559885][ T6439] Kernel Offset: disabled [ 289.564314][ T6439] Rebooting in 86400 seconds..