last executing test programs: 8m18.401426824s ago: executing program 2 (id=839): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) r2 = socket$inet6(0xa, 0x3, 0xff) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x4041818, &(0x7f0000000480)=ANY=[], 0x2, 0x1509, &(0x7f0000001d80)="$eJzs3Au0jtXWOPA511oPm8Sb5L7mmg9vclkkSS4JiSRJjiS5JSRJkoTEJrckJCH3JPeQ3EJyv99yT5IjSZKQkGT9h079nXM63+l83znn842z52+MZ+w19/vO+c5nz733+zxrjL2/7jCoSr2qleowM/xT8E8fUgEgBQD6AkAWAIgAoGTWklkBh0IGjan/3IuIf60Hpl7pDsSVJPNP22T+aZvMP22T+adtMv+0Teaftsn80zaZvxBp2dZpua6RI+0e/3v7/yD7///nyPv/f5DDRUd/vr7odR3/Gyky/7RN5p+2yfzTNpl/2ibzT9tk/v/hIoCKf+dhmX/aJvMXIi270vvPclzZ40p//wkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESBvOhcsMAPy6vtJ9CSGEEEIIIYQQ4l8npP/zKN2Va0QIIYQQQgghhBD/RggKNBiIIB2khxTIABnhKsgEV0NmyAIJuAaywrWQDa6D7JADckIuyA15IC9YIHDAEEM+yA9JuB4KwA1QEApBYSgCHopCMbgRisNNUAJuhpJwC5SCW6E0lIGyUA5ug/JwO1SAilAJ7oDKcCdUgapwF1SDu6E63AM14F6oCfdBLbgfasMfoA48AHXhQagHD0F9eBgaQENoBI2hyf8o/3noAi9AV+gGqdAdesCL0BN6QW/oA33hJegHL0N/eAUGwEAYBK/CYHgNhsDrMBSGwXB4A0bASBgFo2EMjIVx8CaMh7dgArwNE2ESTIYpMBWmwXR4B2bATJgF78JseA/mwFyYB/NhAbwPC2ERLIYPYAl8CEthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW+Ej2AbbYQfshF2wG/bAx7AXPoF98Cnsh8/+Oj/L388/+1f5HREQUKFCgwbTYTpMwRTMiBkxE2bCzJgZE5jArJgVs2E2zI7ZMSfmxNyYG/NiXiQkZGTMh/kwiUksgAWwIBbEwlgYPXoshsWwON6EJbAElsSSWApLYWksg2WwHJbD8lgeK2AFrISVsDJWxipYBe/Cu/BurI7VsQbWwJpYE2thLayNtbEO1sG6WBfrYT2sj/WxATbARtgIm2ATbIpNsRk2wxbYAltiS2yFrbA1tsY22AbbYltsh+2wPbbHDtgBO2In7ITP4/P4Ar6A3bCy6o49sAf2xJ7YG/tgH3wJ++HL+DK+ggNwIA7CV/FVfA2H4BkcisNwOA7H8mokjsLRyGosjsNxOB7H4wScgBNxEk7CKTgVp+F0nI4zcCbOxHdxNr6H7+FcnIvzcQEuwIW4CBfjYlyCZ3EpLsPluAJX4ipciWtwLa7B9bgB1+Mm3IRbcAt+hB/hdtyOO3En7sbd+DF+jJ/gJzgA9+N+PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPIfn8Dyexwv4bO4v6+4utG4AqEuMMiqdSqdSVIrKqDKqTCqTyqwyq4RKqKwqq8qmsqnsKrvKqXKq3Cq3yqvyKlKkWMUqn8qnkiqpCqgCqqAqqAqrwsorr4qpYqq4Kq5KqBKqpLpFlVK3qtKqjGruy6lyqrxq4SuoiqqSqqQqqztVFVVVVVXVVDVVXVVXNVQNVVPVVLXU/aq26o698QF1aTL11ECsrwZhA9VQNVKN1Wv4iGqqhmAz1Vy1UI+pYTgUW6mmvrV6UrVRo7CtelqNxmdUezUWO6jnVEfVSXVWz6suqpnv+ut2p5qCPVUv1Vv1UTPwTnVpYlXUK2qAGqgGqVfVfHxNDVGvq6FqmBqu3lAj1Eg1So1WY9RYNU69qcart9QE9baaqCapyWqKmqqmqenqHTVDzVSz1LtqtnpPzVFz1Tw1Xy1Q76uFapFarD5QS9SHaqlapparFWqlWqVWqzVqrVqn1qsNaqPapDarLWqr+khtU9vVDrVT7VK71R71sdqrPlH71Kdqv/pMHVB/VAfV5+qQ+kIdVl+qI+ordVR9rY6pb9Rx9a06oU6qU+o7dVp9r86os+qc+kGdVz+qC+ondVEFBRq10lobHel0Or1O0Rl0Rn2VBn21zqyz6IS+RmfV1+ps+jqdXefQOXUunVvn0Xm11aSdZh3rfDq/TurrdQF9gy6oC+nCuoj2uqgupm/UxfVNuoS+WZfUt+hS+lZdWpfRZXU5fZsur2/XFXRFXUnfoSvrO3UVXVXfpavpu3V1fY+uoe/VNfV9upa+X9fWf9B19AO6rn5Q19MP6fr6Yd1AN9SNdGPdRD+im+pHdTPdXLfQj+mW+nHdSj+hW+sndRv9lG6rn9bt9DO6vX5Wd9DP6Y66k+6sf9IXddBddTedqrvrHvpF3VP30r11H91Xv6T76Zd1f/2KHqAH6kH6VT1Yv6aH6Nf1UD1MD9dv6BF6pB6lR+sxeqwep9/U4/VbeoJ+W0/Uk/RkPUVP1dN0718qzfoH8t/6G/n9f371LXqr/khv09v1Dr1T79K79R69R+/Ve/U+vU/v1/v1AX1AH9QH9SF9SB/Wh/URfUQf1Uf1MX1MH9fH9Ql9Uv+gv9On9ff6jD6rz+of9Hl9Xl/45WsABo0y2hgTmXQmvUkxGUxGc5XJZK42mU0WkzDXmKzmWpPNXGeymxwmp8llcps8Jq+xhowzbGKTz+Q3SXO9KWBuMAVNIVPYFDHeFDXFzI3/dP7v9dfENDFNTVPTzDQzLUwL09K0NK1MK9PatDZtTBvT1rQ17Uw70960Nx1MB9PRdDSdTWfTxXQxXU1Xk2pSTQ/zoulpepnepo/pa14y/Uw/09/0NwPMADPIDDKDzWAzxAwxQ81QM9wMNyPMCDPKjDJjzBgzzowz4814M8FMMBPNRDPZTDZTzVQz3Uw3M8wMM8vMMrPNbDPHzDHzzDyzwCwwC81Cs9gsNkvMErPULDPLzAqzwqwyq8was8asM+vMBrPBbDKbzFKz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDKHzWFzxBwxR81Rc8wcM8fNcXPCnDCnzClz2pw2Z8wZc86cM+fNeXPBXDAXzcVLl32RilRkIhOli9JFKVFKlDHKGGWKMkWZo8xRIkpEWaOsUbbouih7lCPKGeWKckd5olSwEUUu4iiO8kX5o2R0fVQguiEqGBWKCkdFIh8VjYpFN0bFo5uiEtHNUcnolqhUdGtUOioTlY3KRbdF5aPbowpRxahSdEdUObozqhJVje6KqkV3R9Wje6Ia0b1Rzei+qFZ0f1Q7+kNUJ3ogqhs9GNWLHorqRw9HDaKGEULjqMm/tH4IZ3I86rvabjbVdrc97Iu2p+1le9s+tq99yfazL9v+9hU7wA60g+yrdrB9zQ6xr9uhdpgdbt+wI+xIO8qOtmPsWDvOvmnH27fsBPu2nWgn2cl2ip1qp9np9h07w860s+y7drZ9z86xc+08O98usO/bhXaRXWw/sEvsh3apXWaX2xV2pV1lV9s1dq1dZ9fbDXaj3WQ32y12q/3IbrPb7Q670+6yu+0e+7Hdaz+x++yndr/9zB6wf7QH7ef2kP3CHrZf2iP2K3vUfm2P2W/scfutPWFP2lP2O3vafm/P2LP2nP3Bnrc/2gv2J3vRhksX95fe3smQoXSUjlIohTJSRspEmSgzZaYEJSgrZaVslI2yU3bKSTkpN+WmvJSXLmFiykf5KElJKkAFqCAVpMJUmDx5KkbFqDgVpxJUgkpSSSpFpag0laayVJZuo9vodrqdKlJFuoPuoDvpTqpKVakaVaPqVJ1qUI0tNakm1aJaVJtqUx2qQ3WpLtWjelSf6lMDakCNqBE1oSbUlJpSM2pGLagFtaSW1IpaUWtqTW2oDbWlttSO2lF7ak8dqAN1pI7UmTpTF+pCXakrpVIq9aAe1JN6Um/qTX2pL/WjftSf+tMAGkCDaBANpsE0hIbQUBpGw+kNGkEjaRSNpjE0lsbROBpP42kCTaCJNJEm02SaSlNpOk2nGTSDZtEsmk2zaQ7NoXk0jxbQAlpIC2kxLaYltISW0lJaTstpJa2k1bSa1tJaWk/raSNtpM20mbbSVtpG22gH7aBdtIv20B7aS3tpH+2j/bSfDtABOkgH6RAdosN0mI7QETpKR+kYHaPjdJxO0Ak6RafoNJ2mM3SGztE5Ok8/0gX6iS5SoBSnIKO7ymVyV7vMLotLcRncpTgCgEtxTpfL5XZ5XF5nXXaX4y9ics4VdIVcYVfEeVfUFXM3/iYu7cq4sq6cu82Vd7e7Cr+Jq7m7XXV3j6vh7nVV3V1/Edd097la7iFX2z3s6riGrq5r7Oq5h1x997Br4Bq6Rq6xa+ked63cE661e9K1cU/9Jl7oFrm1bp1b7za4ve4Td8794I66r91596Pr6rq5vu4l18+97Pq7V9wAN/A38XD3hhvhRrpRbrQb48b+Jp7spripbpqb7t5xM9zM38QL3Ptutlvs5ri5bp6b/3N8qafF7gO3xH3olrplbrlb4Va6VW61W/P/e13hNrnNbovb4z5229x2t8PtdLvc7p/jS+exz33q9rvP3BH3lTvoPneH3DF32H35c3zp/I65b9xx96074U66U+47d9p97864sz+f/6Vz/8795C664ICRFWs2HHE6Ts8pnIEz8lWcia/mzJyFE3wNZ+VrORtfx9k5B+fkXJyb83BetkzsmDnmfJyfk3w9F+AbuCAX4sJchD0X5WJ8Ixfnm7gE38wl+RYuxbdyaS7DZbkc38bl+XauwBW5Et/BlUPgKlyV7+JqfDdX53u4Bt/LNfk+rsX3c23+A9fhB7guP8j1+CGuzw9zA27IjbgxN+FHuCk/ys24Obfgx7glP86t+AluzU9yG36K2/LT3I6f4fb8LHfg57gjd+LO/Dx34Re4K3fjVO7OPfhF7sm9uDf34b78Evfjl7k/v8IDeCAP4ld5ML/GQ/h1HsrDeDi/wSN4JI/i0TyGx/I4fpPH81s8gd/miTyJJ/MUnsrTeDq/wzN4Js/id3k2v8dzeC7P4/m8gN/nhbyIF/MHvIQ/5KW8jJfzCl7Jq3g1r+G1vI7X8wbeyJt4M2/hrfwRb+PtvIN38i7ezXv4Y97Ln/A+/pT382d8gP/IB/lzPsRf8GH+ko/wV3yUv+Zj/A0f52/5BJ/kU/wdn+bv+Qyf5XP8A5/nH/kC/8QXOTDEGKtYxyaO4nRx+jglzhBnjK+KM8VXx5njLHEivibOGl8bZ4uvi7PHOeKcca44d5wnzhvbmGIXcxzH+eL8cTK+Pi4Q3xAXjAvFheMisY+LxsXiG+Pi8U1xifjmuGR8S1wqvjWG1DLxQ/eWi2+Ly8e3xxXiinGl+I64cnxnXCWuGt8VV4vvjqvH98Q14nvjEvF9ca34/rh2/Ie4TvxAXDd+MK4XPxTXjx+OG8QN40Zx47hJ/EjcNH40bhY3j1vEj8Ut48fjVvETcev4ybhN/NTvPp4ad497xC/GL8Yh3KN+uU9MLkwuSi5OfpBckvwwuTS5LLk8uSK5MrkquTq5Jrk2uS65PrkhuTG5Kbk5uSUZQtX04NErr73xkU/n0/sUn8Fn9Ff5TP5qn9ln8Ql/jc/qr/XZ/HU+u8/hc/pcPrfP4/N668k7zz72+Xx+n/TX+wL+Bl/QF/KFfRHvfVFfzDf2TXwT39Q/6pv55r6Ff8w/5h/3j/sn/BP+Sd/GP+Xb+qd9O/+Mb++f9c/653xH38l39s/7Lv4F39V386k+1ffwPXxP39P39r19X9/X9/P9fH/f3w/wA/wgP8gP9oP9ED/ED/VD/XA/3I/wI/woP8qP8WP8OD/Oj/fj/QQ/wU/0E/1kP9lP9VP9dD/dz/Az/Cw/y88uONvP8XP8PD/PL/AL/EK/0C/2i/0Sv8Qv9Uv9cr/cr/Qr/Wq/2q/1a/16v95v9Bv9Zr/Zb/Vb/Ta/ze/wO/wuv8vv8Xv8Xr/X7/P7/H6/3x/wB/xBf9Af8l/4w/5Lf8R/5Y/6r/0x/40/7r/1J/xJf8p/50/77/0Zf9af8z/48/5Hf8H/5C/64Mcl3kyMT7yVmJB4OzExMSkxOTElMTUxLTE98U5iRmJmYlbi3cTsxHuJOYm5iXmJ+YkFifcTCxOLEosTHySWJD5MLE0sSyxPrEisTKxKhJBnWxzyhfwhGa4PBcINoWAoFAqHIsGHoqFYuDEUDzeFEuHmUDLcEkqFW0PpUCaUDQ+HBqFhaBQahybhkdA0PBqaheahRXgstAyPh1bhidA6PBnahKdC2/B0aBeeCe3Ds6FDeC50DJ1C5/B86BJeCF1Dt5Aauoce4cXQM/QKvUOf0De8FPqFl0P/8EoYEAaGQeHVMDi8FoaE18PQMCwMD2+EEWFkGBVGhzFhbBgX3gzjw1thQng7TAyTwuQwJUwN08L08E6YEWaGWeHdMDu8F+aEuWFemB8WhPfDwrAoLA4fhCXhw7A0LAvLw4qwMqwKq8OasDasC+vDhrAxbAqbw5awNXwUtoXtYUfYGXaF3WFP+DjsDZ+EfeHTsD98Fg6EP4aD4fNwKHwRDocvw5HwVTgavg7HwjfhePg2nAgnw6nwXTgdvg9nwtlwLvwQzocfw4XwU7gof7MmhBBCCPEP0b/zePe/8bl0APDrLVEPALh6e67Df11zY/Y/rXup3C0TAPBktw4P/HpUrpyamvrLc5dqiPLPBYDEX9b/NV4GLeBxaA3Nofjf7K+X6nSef6d+8haAjH+WkwKX48v1b/ov6j/y2PCFpeJzWf9O/bkABfNfzskAl+PL9Uv8F/VzNP2d/jN8Pg6g2Z/lZILL8eX6xeBReApa/8UzhRBCCCGEEEKIP+mlyrb7vfvnS/fnuc3lnPRwOf69+3MhhBBCCCGEEEJcec906vzEI61bN2/3jy3wl32B/16WLGTxn7PI8MuPzv+Vfv5Niyv5W0kIIYQQQgjx73D5ov9KdyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRd/xv/TuxKn6MQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQghxpf2/AAAA//8oDTM3") times(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_script(r2, &(0x7f00000000c0), 0x28) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 8m16.613751352s ago: executing program 2 (id=840): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000a13000/0x1000)=nil) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000340)) r7 = getgid() shmctl$IPC_SET(r5, 0x1, &(0x7f0000000380)={{0x2, r6, 0xee00, 0x0, r7}, 0x100, 0x3, 0x8, 0x1, r0, r1, 0x871}) r8 = dup(r4) write$UHID_INPUT(r8, &(0x7f0000001380)={0x7, {"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", 0x1000}}, 0x1006) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r9, 0x0) getresgid(&(0x7f0000000180), &(0x7f0000000200)=0x0, &(0x7f0000000240)) fchown(r3, r9, r10) r11 = syz_open_dev$loop(&(0x7f0000000080), 0x929, 0x281) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x2, 0x800, 0x1ff, 0x4, 0x6, r2}) 8m11.543874205s ago: executing program 2 (id=844): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) ioctl$sock_proto_private(r4, 0x89e1, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r5, 0x0, 0x78) fanotify_init(0x40, 0x80000) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) 8m6.028096593s ago: executing program 2 (id=850): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008084) flistxattr(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x14, 0x800) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x2, 0x2, 0x7, 0x4}, {0x9, 0x1, 0x81, 0x7}]}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="00298312408af6b91f4047514aa706b5bfccfe591793903862cc50a9b019c3209b36d518889a89fc6d5409474aa178007d781328feec2d4c", @ANYRES8=r0, @ANYBLOB="320a050023080000240012800b000100627269646765000014000280060009000600000006000600ea3700"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f0000808000/0x4000)=nil) 7m59.782275345s ago: executing program 2 (id=854): r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000500)=[{0x0}], 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000b00)={0x0, 0x0}, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r5, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r5, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0xffde) 7m52.068740564s ago: executing program 2 (id=859): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) gettid() timer_create(0x5, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000fee000/0x4000)=nil) 7m36.029118022s ago: executing program 32 (id=859): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) gettid() timer_create(0x5, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000fee000/0x4000)=nil) 4m8.697746683s ago: executing program 0 (id=1042): syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32], 0x47, 0xc15, &(0x7f0000001940)="$eJzs3V1sZOdZB/DnnWPHY6e0TtNuWmjKSEXtymWj/equq0WVt3ENlbabql5X5Koef+x2FO94ZXvppkBlQAWJm4rcIG6QRYlA6gVXhEtcGqRWCAlVvSgXSJZoo1xw4YtKCFBqdM68Y493vVk3G39s8vtFzv/MmeeM34/xmWNpX58AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI++7nLp8+ko24FAHCYrk5+6fQ5n/8A8K5yze//AAAAAAAAAAAAAABw3KUo4kSkGHplM01XjzvqV1rt23emxif2PmwwRYpaFFV9+VU/c/bc+U9duDjazTc//u324Xhu8trlxrOLN28tzS8vz881ptqt2cW5+X2/wsMef7eRagAaN1+4PXf9+nLj7DPndj19Z/i1gcdPDF+6eOrCaLd2anxiYrKnpq//LX/3e9xvhcdjUUQzUrwx/HpqRkQtHn4sHvDeOWiDVSdGqk5MjU9UHVloNdsr5ZOplqtqEY2eg8a6Y3QIc/FQxiJWy+aXDR4puzd5q7nUnFmYb3yxubTSWmkttlOt09qyP42oxWiKWIuIjYF7X64/ivhopHjp9GaaiYiiOw6frBYGP7g9tQPo4z6U7Wz0R6zVHoE5O8YGooirkeJnr56M2XLM8ld8POILZb4S8XKZn4lI5RvjfMRP93gf8WjqiyL+NVIsps00V50PuueVK19ufL59fbGntnteeeQ/Hw7TMT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25Hij57+nWpdcVTr0t93afQ9z/9m75rxpx7wOmXtMxGxWtvfmtz+vHQ41cr/DqBj7Es9ivhGXv/3B0fdGAAAAAAAAAAAAAAAAAAAgHe1Ip6PFF85dTKtRe89xVvtG41rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzjsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KhbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIZyLF+vP16vFaLeJaRPx8a2ur+vqfra2tiM1y+2EddV8BAAAAAAAAAAAAAAAAAADg2EpFfCxSPPm/m6kREXeGXxt4/MTwpYunLowWUUQqS3rrn5u8drnx7OLNW0vzy8vzc42pdmt2cW5+v9+ufqXVvn1nanziQDrzQIMH3P7B+rOLt15cat346sqezw/VL88sryw1Z/d+OgajFjHdu2ekavDU+ETV6IVWs10dmmr3aWAtYmy/nQEAAAAAAAAAAAAAAAAAAODYGEpFfC5S/OQ/zqfuuvG+zpr/X+o8KrZrX/69nb8FsHBXdvX+/YD9bKf9NnSkWnjfmBqfmJjs2d3Xf29p2aaUingqUnzipQ9V6+FTDO25Nr6se29Zd/N8rhv+lbJudVdVfWRqfKJxdbF96vLCwuJsc6U5szDfmLzVnN33Hw4AAAAAAAAAAAAAAAAAAACANzGUivhRpPivv/231L3vfF7/39d51LP+/zeqJfSVetqd26q1/e+t1vZ3tt93aXToo0/fb/9BrP8v25RSEd+MFOd+9KHqfvrd9f/Td9WWdX8SKV5/+iO5rvZYWdfsdqfzitdbC/Ony9q/jBS/+ka3NqraG7n2yZ3aM2XtYKT4883dtV/NtR/YqT1b1p6MFN/7z71rP7hTe66s/Umk+Ie/aXRrh8ra3821J3Zqn5ldXJh70LCW8/+dSPHXV38rdft83/nv+fsPq3fltnvm/M233675H+7Zt5rn9Y/z/DcfMP8XIsV36h/JdZ2xn8nPP1H9f2f+PxEp/v1fdtdez7Xv36k9s99uHbVy/r8dKb77Fz/e7nOe/zyyOzPUO/+/3Lc7t98lRzT/T/TsG87tmv0Fx+LdaPnFr7/QXFiYX7Jhw4aN7Y2jPjNxGMrP/z+NFP93okjd65j8+f+ezqOd67///sbO5/+lu3LbEX3+v79n36V81dLfF1FfuXmr/6mI+vKLXz/Vutm8MX9jvn32zOlPf/rCmdNnLvQ/1r2429na99i9E5Tz/4NI8cO/++H27zG7r//2vv4fuiu3HdH8P9nbp13XNfseinelcv7/KlI88dkfb/+++WbX/93f/09+bHdu//wd0fx/oGffcG5X6xccCwAAAAAAAAAAgEfJUCrizyLFb//hr6fuGqL9/Pu/ubty2xH9+68TPfvmDmldw74HGQDgGCmv/z4YKf5x6/vba7l3X//Fr3Vre6//7uc43P8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAedSmK+P1IMfTKZlofKB931K+02rfvTI1P7H3YYIoUtSiq+vKrfubsufOfunBxtJtXBg6zGx+O5yavXW48u3jz1tL88vL8XGOq3ZpdnJvf9ys87PF3G6kGsHHzhdtz168vN84+c27X03eGXxt4/MTwpYunLox2a6fGJyYme2r6+t/yd79Hus/+x6KI70eKN4ZfT98diKjFw4/FA947B22w6sRI1Ymp8YmqIwutZnulfDLVclUtotFz0Fh3jA5hLh7KWMRq2fyywSNl9yZvNZeaMwvzjS82l1ZaK63Fdqp1Wlv2pxG1GE0RaxGxscePZH8U8c1I8dLpzfRPAxFFdxw+eXXyS6fPPbg9tQPo4z6U7Wz0R6zVHoE5O8YGooi/jxQ/e/VkfG8goi86X/HxiC+U+UrEy2V+JiKVb4zzET891FM7B6kvijgfKRbTZnp1oDwfdM8rV77c+Hz7+mJPbfe88sh/PhymY35uqkcRP6jO+Jvpn/1cAwAAAAAAAAAAAAAAABwjRaxFiq+cOpmq9cHba4pb7RuNa82Zhc6yvu7av+6a6a2tra1G6uRYzumcqznXcq7n3MgZtXx8zrGc0zlXc67lXM+5kTOKfHzOsZzTOVdzruVcz7mRM/ry8TnHck7nXM25lnM950bOOCZr9wAAAAAAAAAAAAAAAAAAgHeWWhTVXdy/9bXNtDXQub/0dHRy3f1A3/H+PwAA//8YNXNU") mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000003c0)='./bus\x00', 0x39bcc6c, 0x0, 0x0, 0x0, &(0x7f0000000040)) syz_mount_image$exfat(0x0, &(0x7f00000002c0)='./file4\x00', 0x101000, 0x0, 0x3, 0x0, &(0x7f00000002c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) 4m8.062342874s ago: executing program 0 (id=1044): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000013, 0x13, r3, 0xddc2a000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008084) flistxattr(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) 4m6.808599494s ago: executing program 0 (id=1045): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0xa, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16], 0x7) 3m59.684228894s ago: executing program 0 (id=1054): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x1000414, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES32=0x0], 0x6, 0x801, &(0x7f0000001540)="$eJzs3U1oHOcZAOB3FMmW5WBMWtxgbGfspOCAo6xWiVKRQ7JZjeRJpF2xuyo2paQmloOwnAS7obUviSkkbWkpPfXQQ5prbr21FFrooc2p0Bx66S2QU0mhf6QNBZXZH1mytZL8n9TPI6SZnXm/+d5vtJp3RtLOBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQSXWqVBpLYjavLZxI+6tONepzm6zvbe836ybrPLuu34ik+Izh4fjkH51lX7yyel/x5Ugc6Dw6EMPFZDgu7d639+kvDA702m+S0I06vM24JOLNIqmzp5aXF89fdzcxfN1Nbp/v/+q6m/x7pfg6k9XyZuRzlZkszZv1dHJiovT48elmOp3PZs2TzVY2l1YbWaVVb6RHq4+mY5OT42k2erK+UJuZqsxmvYVPPVYulSbS50fns0qjWa89/nw0q8fz2dm8NtOOKZe+FUXMU8UT8YW8lbayylyanllaXhzfKtUiaGyjFfd1nj8HHtn70esf/n1psXhC9ttI0n1ilsfGyuWxiScnn3yqVBosl8rrF5SuEqsRMRBRRNyWJy2fI7f2AA43YaBb/2M28qjFQpyIdIOPoajGVDSiHnPF4z8NXRPR1av/X378r3/YrN+19b9X5R+8snp/tOv/oc6jQ/3q/4a53smPC3ExLsXZOBXLsRyLcf6uZ7TFx8DNbiFZ++g/90dELfJoRj3ymItKzEQWaXdJGpMxERNRihfjeExHM9KYjjxmI4tmnIxmtCJrP6Oq0YgsKtGKejQijaNRjUcjjbGYjMkYjzSyGI2TUY+FqMVMTEWlvZUzsdTe7+NXZblvV/zy5T9+9E4xvxo0tsngk+Jkrgj62yZjH4jyddT/lZXifOHqCPX/HrBjs5W34SgON2alV/8BAACA/1tJ+7fvxfX/UBxsz03ns9nX7nZaAAAAwC3U/sv/gWIyVMwdjKS4/i9tEPnBHc8NAAAAuDWS9mvskogYiYc6c2diKd6MxdjolwARsfdOpwgAAADcpPbf/w8Vk5GIN9oLerdL6XP9DwAAAHzefLffPfY/7N1jtzm/M/n1UEQMJZfnTzySnKsUcZVz93XadSdfXd1ia3p/sqe7kfZkYvDS7iQiBqvZgaR398v/7uxMP25/3T+42rzfvf6TRqNIYFfR90YJxOYJtB/FD+JwJ+bw6fZkd7fJYNLpZWQ6n81Gq/XZp9u3RCw+W6+/svTtiKL379Xm9iRxZml5cfSlV5dPt3fG5aL55XPdGygmEYPbzWWluwfiYAzv6M6uHfFQ+4UY3X5HOv2W1n4DBjptBjYff7K2z7fiSCfmyEhnOtJb0+lzuOhzbPTpsahU9gy0shOt11fWjL7Iosh6deRDa0f+093bHPlb8XAn5uGjD3cmG2RRXpfFK1dlsbS8WF67/7e3L7adxTuH3zjxr9/Vk2x8qyzGryOLlfsirs4C4G45077rT6cKFZNd7br76UpHUf87dXdnr+7u6rXcxrH2n1d6WT3L6LVfU90Ho1fde9VtYPXAuL3qvhKdI/rRTszRzvnE4P5uXKfSdupKaYMj+mtLr/2+e0R/4r2f/Ozrh97/ebvftdVtG1l0jujvxaOdmO4kHvhtnxpbjPmHq5VkrD36d4sW7/bttzlbTtqnGN8891rsu3Dx0mNL5069vPjy4ivl8vhE6YlS6cly72RiqH3GsEmmANy7tn6Pnb4RvTqTPFFcVQ+v2ejp9ddzD6z+S8FovBSvxnKcjmPtVxtExEMb9zuy5t8Qjm1x1XoldiyObXFteSW2fG1sEn1ix9cM7ks/bk8+uQ3fDAC4Q45sUYeTOPJ+N7TfGUJyrN919zV1tKjlV10dR/9avpGv3M6dAQD3iKzxcTLSejtpNPL5F8cmJ8cqreP3p4169YW0kU/NZGlea2WN6vFKbSZL5xv1Vr3a+8XxVNZMmwvz8/VGK52uN9IYaOYn2u/8nnbf+r2ZzVVqrbzanJ/NKs0srdZrrUq1lU7lzWo6v/DcbN48njXajZvzWTWfzquVVl6vpc36QqOajaZpM8vWBOZTWa2VT+fFbC2db+RzlcbliJhdmMvSqaxZbeTzrXpng72+8tp0vTHX3uzotcP/y53e3wDwWXDh4qWzp5aXF8/f2MyftxN8t8cIAKynSgMAAAAAAAAAAAAAwGffhYuXzg7H8uL5vb0XAhRLb+IVgdc3szNuexf37EzxjfwMpHFjMwfvvzXb+cYzz5ztF/PcGw8e3952uj8pg7HlS13f3hOx4xc/6ix5tn/wd7o/f7dmj30QETfQfCXZYNWnK52ZdYeJHXf+yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1/pfAAAA//+iNle9") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) r2 = socket$inet6(0xa, 0x3, 0xff) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x4041818, &(0x7f0000000480)=ANY=[], 0x2, 0x1509, &(0x7f0000001d80)="$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") times(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_script(r2, &(0x7f00000000c0), 0x28) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 3m59.038417795s ago: executing program 0 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r3, &(0x7f0000000400)=ANY=[], 0xfffffeff) 3m57.084217778s ago: executing program 0 (id=1058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c"], 0xfdef) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 3m40.571697181s ago: executing program 33 (id=1058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c"], 0xfdef) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 1m45.910041151s ago: executing program 1 (id=1168): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x1) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8}, 0xffffffffffffffff, {[0xfffffff9, 0x4, 0xc, 0x480000, 0x7, 0xffffff01, 0x4, 0x10001]}}, 0x5c) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x0, 0x5}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001600)={{0x1, 0xffffffffffffffff}, &(0x7f0000001580), &(0x7f00000015c0)='%pB \x00'}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x6d7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x3, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x13}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @exit, @alu={0x7, 0x0, 0x6, 0x5, 0x2, 0x6, 0xffffffffffffffff}]}, 0x0, 0x4, 0x49, &(0x7f00000002c0)=""/73, 0x40f00, 0x18, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x7, 0xb7cb, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000017c0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x6}, 0x94) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x78, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x20044890) socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001a40)=0x1, &(0x7f0000001a80)=0x4) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r4, 0x0, 0x8000) 1m43.411049632s ago: executing program 5 (id=1170): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1, 0x5519, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000900)="d42f4f32df76", 0x6}], 0x2, 0x6, 0x6) 1m40.586337083s ago: executing program 1 (id=1172): syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) clock_getres(0x7, &(0x7f0000000400)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0) read$FUSE(r5, &(0x7f0000003ec0)={0x2020}, 0x2020) sendfile(r5, r5, &(0x7f00000000c0)=0x7, 0x6fecb1) 1m37.242270671s ago: executing program 1 (id=1175): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@errors_remount}, {@nomblk_io_submit}, {@noblock_validity}, {@nodiscard}, {@nolazytime}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xee01}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x1, 0x492, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x22020600) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x204}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000008}, 0x44080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000300)="a0", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x9}, 0x1c) shutdown(r4, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000480)) 1m35.904387535s ago: executing program 1 (id=1177): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@dioread_nolock}]}, 0x2, 0x54a, &(0x7f00000005c0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m35.238229176s ago: executing program 1 (id=1178): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) ioctl$sock_proto_private(r5, 0x89e1, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r6, 0x0, 0x78) fanotify_init(0x40, 0x80000) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) 1m31.974356932s ago: executing program 5 (id=1181): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) ioctl$sock_proto_private(r5, 0x89e1, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r6, 0x0, 0x78) fanotify_init(0x40, 0x80000) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) 1m30.582913787s ago: executing program 5 (id=1182): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0x0, 0x5, 0xa7, {0xa7, 0x22, "15114ed3957ba40890a9366de1d5768dae5fd31db9a0a768379be28e523fe20c1e9fd921cd8c22f0387bc3e0e71bb617991e4ba79013035f1f6beda42a210f2750c57969cd08f163a6c95402c9301d14e1ba7786e8d4b1b302d34d8d221ee68b18bf0446de508936071df500209f76cb16706ff13cf22942a3740d3154adb2db8e4d51f1d3d25cc1ae58a504113cc5b8c0d0028be2908aa8a4b8ae7cad9966aaa3f6533c3e"}}, 0x0}, 0x0) 1m29.354284386s ago: executing program 1 (id=1184): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x2e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$loop(0x0, 0x3af2, 0x5000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000200)={'\x00', 0x7, 0x9, 0x80000000, 0x7, 0x0, r1}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x2582, 0x0) write$binfmt_aout(r6, &(0x7f0000000400)=ANY=[], 0xff2e) read(r6, &(0x7f00000006c0)=""/4096, 0x1000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) ptrace$getregset(0x4204, r1, 0x1, &(0x7f00000019c0)={&(0x7f00000009c0)=""/4096, 0x1000}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 1m28.005995649s ago: executing program 34 (id=1184): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x2e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$loop(0x0, 0x3af2, 0x5000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000200)={'\x00', 0x7, 0x9, 0x80000000, 0x7, 0x0, r1}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x2582, 0x0) write$binfmt_aout(r6, &(0x7f0000000400)=ANY=[], 0xff2e) read(r6, &(0x7f00000006c0)=""/4096, 0x1000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) ptrace$getregset(0x4204, r1, 0x1, &(0x7f00000019c0)={&(0x7f00000009c0)=""/4096, 0x1000}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 1m24.497716403s ago: executing program 5 (id=1189): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000340)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@sys_immutable}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000000c0)=r0) 1m23.98410027s ago: executing program 5 (id=1191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r3, &(0x7f0000000400)=ANY=[], 0xfffffeff) 1m23.138223387s ago: executing program 5 (id=1192): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x40, &(0x7f0000000480)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x7ffffffc}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noauto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resgid, 0x32}]}, 0x0, 0x4e0, &(0x7f0000001a40)="$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") fstat(r0, &(0x7f0000000180)) 1m22.322268073s ago: executing program 35 (id=1192): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x40, &(0x7f0000000480)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x7ffffffc}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noauto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resgid, 0x32}]}, 0x0, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") fstat(r0, &(0x7f0000000180)) 31.798775064s ago: executing program 6 (id=1186): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r4}, 0x50) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{0x1}}}}, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x1, 0x5, 0x0) close(r5) r6 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) sched_setscheduler(r0, 0x0, 0x0) shutdown(r6, 0x1) 29.841748997s ago: executing program 6 (id=1232): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x2e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$loop(0x0, 0x3af2, 0x5000) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000200)={'\x00', 0x7, 0x9, 0x80000000, 0x7, 0x0, r0}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xff2e) read(0xffffffffffffffff, &(0x7f00000006c0)=""/4096, 0x1000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300) 23.86831306s ago: executing program 6 (id=1236): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) ioctl$sock_proto_private(r5, 0x89e1, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r6, 0x0, 0x78) fanotify_init(0x40, 0x80000) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) 17.68227179s ago: executing program 7 (id=1240): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) ioctl$sock_proto_private(r5, 0x89e1, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r6, 0x0, 0x78) fanotify_init(0x40, 0x80000) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) 14.704351856s ago: executing program 7 (id=1243): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f00000007c0)='./bus\x00', 0x182) 14.594852989s ago: executing program 6 (id=1244): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000a13000/0x1000)=nil) r5 = getgid() shmctl$IPC_SET(r4, 0x1, &(0x7f0000000380)={{0x2, 0x0, 0xee00, 0x0, r5}, 0x100, 0x3, 0x8, 0x1, r0, 0x0, 0x871}) r6 = dup(r3) write$UHID_INPUT(r6, &(0x7f0000001380)={0x7, {"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", 0x1000}}, 0x1006) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r7, 0x0) setreuid(r7, 0xffffffffffffffff) getresgid(&(0x7f0000000180), &(0x7f0000000200)=0x0, &(0x7f0000000240)) fchown(r2, r7, r8) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x929, 0x281) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x2, 0x800, 0x1ff, 0x4, 0x6, r1}) 14.506298032s ago: executing program 3 (id=1245): unshare(0x8040880) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019ec0)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) process_mrelease(0xffffffffffffffff, 0x0) 13.798452615s ago: executing program 3 (id=1246): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x2e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$loop(0x0, 0x3af2, 0x5000) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000200)={'\x00', 0x7, 0x9, 0x80000000, 0x7, 0x0, r0}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xff2e) read(0xffffffffffffffff, &(0x7f00000006c0)=""/4096, 0x1000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300) 13.600756351s ago: executing program 4 (id=1247): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) 11.920562016s ago: executing program 3 (id=1248): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r4}, 0x50) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{0x1}}}}, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x1, 0x5, 0x0) close(r5) r6 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) sched_setscheduler(r0, 0x0, 0x0) shutdown(r6, 0x1) 10.744375994s ago: executing program 4 (id=1249): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) 8.839053825s ago: executing program 7 (id=1250): creat(&(0x7f0000000c00)='./file0\x00', 0x80) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$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") 8.630388001s ago: executing program 4 (id=1251): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) ioctl$sock_proto_private(r5, 0x89e1, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r6, 0x0, 0x78) fanotify_init(0x40, 0x80000) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) 8.37026482s ago: executing program 7 (id=1252): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) ioctl$sock_proto_private(r5, 0x89e1, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r6, 0x0, 0x78) fanotify_init(0x40, 0x80000) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) 6.81412925s ago: executing program 6 (id=1253): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b2, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x103042, 0x41) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x0, 0x4, 0x1000000000000}) 6.081676164s ago: executing program 4 (id=1254): unshare(0x8040880) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019ec0)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) process_mrelease(0xffffffffffffffff, 0x0) 4.798189915s ago: executing program 3 (id=1255): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 4.713995818s ago: executing program 7 (id=1256): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001002089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000000c0)={0x5, 0x3, 0x80020000}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setresgid(0xee00, 0x0, 0xee00) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x48) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xfffffffc) socket$inet6(0xa, 0xa, 0x7fff) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) fsopen(&(0x7f0000000140)='binfmt_misc\x00', 0xccfc969d25ddf6d0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x3000, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c6e66733d6e6f7374616c655f726f2c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c7379735f696d6d757461626c652c73686f77657865632c757466383d302c757466383d302c000000007fffffff66383d302c00"], 0x0, 0x29f, &(0x7f0000000840)="$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") setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x3, 0x0, 0xfffffffc}, 0x10) 4.194163474s ago: executing program 3 (id=1257): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) 2.411463923s ago: executing program 4 (id=1258): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f00000007c0)='./bus\x00', 0x182) 910.020281ms ago: executing program 3 (id=1259): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f0000000080)={[{@quota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nobarrier}, {@errors_remount}]}, 0xfd, 0x485, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 253.985982ms ago: executing program 7 (id=1260): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 103.042647ms ago: executing program 4 (id=1261): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000a13000/0x1000)=nil) r5 = getgid() shmctl$IPC_SET(r4, 0x1, &(0x7f0000000380)={{0x2, 0x0, 0xee00, 0x0, r5}, 0x100, 0x3, 0x8, 0x1, r0, 0x0, 0x871}) r6 = dup(r3) write$UHID_INPUT(r6, &(0x7f0000001380)={0x7, {"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", 0x1000}}, 0x1006) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r7, 0x0) setreuid(r7, 0xffffffffffffffff) getresgid(&(0x7f0000000180), &(0x7f0000000200)=0x0, &(0x7f0000000240)) fchown(r2, r7, r8) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x929, 0x281) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x2, 0x800, 0x1ff, 0x4, 0x6, r1}) 0s ago: executing program 6 (id=1262): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) ioctl$sock_proto_private(r5, 0x89e1, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r6, 0x0, 0x78) fanotify_init(0x40, 0x80000) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) kernel console output (not intermixed with test programs): syz [ 331.456631][ T5763] usb 4-1: SerialNumber: syz [ 331.687251][ T5763] usb 4-1: config 0 descriptor?? [ 331.697427][ T5763] smsc95xx v2.0.0 [ 332.636761][ T5763] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 332.701884][ T5763] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 335.301403][ T5763] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 335.322183][ T5763] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 335.351883][ T5763] usb 4-1: USB disconnect, device number 2 [ 335.768591][ T6985] loop3: detected capacity change from 0 to 2048 [ 335.907452][ T6987] loop2: detected capacity change from 0 to 512 [ 335.915115][ T6987] EXT4-fs: Ignoring removed oldalloc option [ 335.923115][ T6987] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 336.012564][ T6987] EXT4-fs (loop2): 1 truncate cleaned up [ 336.020483][ T6987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.036957][ T6985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.050396][ T6987] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 336.287539][ T6992] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Out of memory [ 336.323849][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.355259][ T6992] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #15: comm syz.3.308: mark_inode_dirty error [ 336.727590][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.794325][ T51] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 340.975176][ T7007] loop1: detected capacity change from 0 to 512 [ 341.022387][ T7007] EXT4-fs: Ignoring removed nobh option [ 341.124930][ T7007] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 341.192243][ T7007] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.314: attempt to clear invalid blocks 1 len 1 [ 341.287907][ T7007] EXT4-fs (loop1): Remounting filesystem read-only [ 341.320424][ T7007] EXT4-fs (loop1): 1 truncate cleaned up [ 341.352834][ T7007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.626445][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.201600][ T7017] binder: 7016:7017 ioctl c0306201 200000000080 returned -14 [ 343.223311][ T7019] loop3: detected capacity change from 0 to 512 [ 343.268176][ T7017] binder: 7016:7017 ioctl c0306201 2000000003c0 returned -14 [ 343.275545][ T7019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 343.304232][ T7019] ext4: Unknown parameter 'fscontext' [ 343.652138][ T7026] loop0: detected capacity change from 0 to 512 [ 343.691528][ T7026] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 343.729474][ T7026] EXT4-fs (loop0): 1 truncate cleaned up [ 343.738171][ T7026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.954762][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 344.575876][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.686058][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 344.751395][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.770977][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.816721][ T27] usb 3-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 344.831392][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.851027][ T27] usb 3-1: Product: syz [ 344.855287][ T27] usb 3-1: Manufacturer: syz [ 344.860017][ T27] usb 3-1: SerialNumber: syz [ 344.892621][ T7031] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7032] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7031] [ 345.520305][ T27] usb 3-1: unit 3 not found! [ 345.638221][ T27] usb 3-1: USB disconnect, device number 8 [ 345.714335][ T7039] loop1: detected capacity change from 0 to 512 [ 345.722106][ T7039] EXT4-fs: Ignoring removed oldalloc option [ 345.735022][ T7039] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 345.789299][ T7039] EXT4-fs (loop1): 1 truncate cleaned up [ 345.797142][ T7039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.827592][ T7039] EXT4-fs error (device loop1): mb_free_blocks:1970: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 345.858274][ T51] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 346.023331][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.420178][ T7043] loop0: detected capacity change from 0 to 512 [ 346.498957][ T7043] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 347.957213][ T7043] EXT4-fs (loop0): 1 truncate cleaned up [ 347.965236][ T7043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.437303][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.642791][ T7050] loop0: detected capacity change from 0 to 16 [ 348.711607][ T7050] erofs: (device loop0): mounted with root inode @ nid 36. [ 349.901789][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.952338][ T7056] binder: 7055:7056 ioctl c0306201 200000000080 returned -14 [ 350.009554][ T7056] binder: 7055:7056 ioctl c0306201 2000000003c0 returned -14 [ 350.098551][ T7060] loop1: detected capacity change from 0 to 512 [ 350.122257][ T7060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 350.135253][ T7058] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7063] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7058] [ 350.389967][ T7060] ext4: Unknown parameter 'fscontext' [ 351.065153][ T51] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 353.591074][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 356.262648][ T7080] loop1: detected capacity change from 0 to 512 [ 356.270327][ T7080] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.294170][ T7080] ext4: Unknown parameter 'fscontext' [ 356.406983][ T7081] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 358.203525][ T7086] loop0: detected capacity change from 0 to 512 [ 358.211193][ T7086] EXT4-fs: Ignoring removed oldalloc option [ 359.728207][ T7086] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 359.908382][ T7086] EXT4-fs (loop0): 1 truncate cleaned up [ 359.915643][ T7086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.933648][ T7086] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 360.609321][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.771211][ T7100] binder: 7099:7100 ioctl c0306201 200000000080 returned -14 [ 360.854337][ T7102] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7103] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7102] [ 361.361606][ T7100] binder: 7099:7100 ioctl c0306201 2000000003c0 returned -14 [ 362.427555][ T51] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 365.820993][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 365.893227][ T7117] loop3: detected capacity change from 0 to 512 [ 365.913630][ T7117] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 366.122107][ T7117] EXT4-fs (loop3): 1 truncate cleaned up [ 366.129214][ T7117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.438390][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.932398][ T7132] loop0: detected capacity change from 0 to 512 [ 367.939830][ T7132] EXT4-fs: Ignoring removed nomblk_io_submit option [ 367.993986][ T7132] ext4: Unknown parameter 'fscontext' [ 370.365290][ T7140] loop2: detected capacity change from 0 to 512 [ 370.407395][ T7140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.500916][ T7140] ext4: Unknown parameter 'fscontext' [ 371.632617][ T7144] loop3: detected capacity change from 0 to 512 [ 371.639964][ T7144] EXT4-fs: Ignoring removed oldalloc option [ 371.818118][ T7144] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 371.851920][ T7144] EXT4-fs (loop3): 1 truncate cleaned up [ 371.859062][ T7144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.806319][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.111959][ T7152] binder: 7149:7152 ioctl c0306201 200000000080 returned -14 [ 373.127750][ T7152] binder: BINDER_SET_CONTEXT_MGR already set [ 373.165915][ T7152] binder: 7149:7152 ioctl 4018620d 200000000040 returned -16 [ 373.202385][ T7154] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7155] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7154] [ 373.731515][ T7157] binder: 7149:7157 ioctl c0306201 2000000003c0 returned -14 [ 374.743195][ T51] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 374.758610][ T7161] loop1: detected capacity change from 0 to 512 [ 374.765986][ T7161] EXT4-fs: Ignoring removed i_version option [ 374.772505][ T7161] EXT4-fs: Ignoring removed oldalloc option [ 374.824642][ T7161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 375.884409][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.166188][ T7172] loop3: detected capacity change from 0 to 512 [ 377.300647][ T7174] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 377.519669][ T7172] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 377.573699][ T7174] bond1: (slave bridge1): making interface the new active one [ 377.662674][ T7174] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 377.706385][ T7172] EXT4-fs (loop3): 1 truncate cleaned up [ 377.725619][ T7172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.744000][ T7174] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 378.881487][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.887869][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.108227][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.665645][ T7189] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7190] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7189] [ 381.964617][ T7194] loop3: detected capacity change from 0 to 512 [ 382.005300][ T51] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 382.022080][ T7194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 382.069831][ T7194] ext4: Unknown parameter 'fscontext' [ 384.945990][ T7213] binder: 7212:7213 ioctl c0306201 200000000080 returned -14 [ 384.988569][ T7213] binder: 7212:7213 ioctl c0306201 2000000003c0 returned -14 [ 385.250522][ T7215] loop1: detected capacity change from 0 to 512 [ 385.311619][ T7215] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 385.345917][ T7215] EXT4-fs (loop1): 1 truncate cleaned up [ 385.377085][ T7215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.659071][ T7219] netlink: 'syz.3.369': attribute type 1 has an invalid length. [ 386.258781][ T7219] bond4: (slave bridge4): making interface the new active one [ 386.324775][ T7219] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 386.375735][ T7222] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 386.395935][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.745443][ T7234] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7235] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7234] [ 389.840706][ T51] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 394.837281][ T7253] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7254] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7253] [ 395.618069][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.380'. [ 396.770510][ T7264] loop0: detected capacity change from 0 to 512 [ 396.912000][ T7264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 396.918870][ T7264] ext4: Unknown parameter 'fscontext' [ 396.981459][ T7247] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 397.490994][ T5819] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 397.636006][ T7272] loop2: detected capacity change from 0 to 2048 [ 397.710923][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 397.743740][ T7272] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.755231][ T5819] usb 4-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 397.781722][ T5819] usb 4-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 397.811736][ T5819] usb 4-1: config 218 has no interface number 0 [ 397.848808][ T5819] usb 4-1: config 218 interface 95 altsetting 64 has an invalid endpoint with address 0xFF, skipping [ 397.890598][ T5819] usb 4-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 397.920214][ T5819] usb 4-1: config 218 interface 95 has no altsetting 0 [ 397.938295][ T5819] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 397.951142][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.959215][ T5819] usb 4-1: Product: syz [ 397.990904][ T5819] usb 4-1: Manufacturer: syz [ 398.001487][ T5819] usb 4-1: SerialNumber: syz [ 398.216846][ T7274] loop2: detected capacity change from 0 to 2048 [ 398.258315][ T5819] usbtouchscreen: probe of 4-1:218.95 failed with error -8 [ 398.293208][ T5819] usb 4-1: USB disconnect, device number 3 [ 398.323904][ T7274] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 398.489460][ T51] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 398.725750][ T51] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 399.256961][ T7283] binder: 7282:7283 ioctl c0306201 200000000080 returned -14 [ 399.284216][ T7283] binder: 7282:7283 ioctl c0306201 2000000003c0 returned -14 [ 405.032030][ T51] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 407.372829][ T7308] loop3: detected capacity change from 0 to 16 [ 407.407302][ T7308] erofs: (device loop3): mounted with root inode @ nid 36. [ 408.495445][ T7320] binder: 7319:7320 ioctl c0306201 200000000080 returned -14 [ 408.546650][ T7320] binder: 7319:7320 ioctl c0306201 2000000003c0 returned -14 [ 408.877729][ T7322] loop3: detected capacity change from 0 to 256 [ 408.994240][ T7322] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 409.937063][ T7328] loop2: detected capacity change from 0 to 2048 [ 410.005527][ T7328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.416420][ T51] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 411.100371][ T7336] loop2: detected capacity change from 0 to 128 [ 411.177491][ T51] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 411.217536][ T7336] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.914391][ T7336] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 413.198728][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 413.477160][ T7350] binder: 7348:7350 ioctl c0306201 200000000080 returned -14 [ 413.507956][ T7349] binder: 7348:7349 ioctl c0306201 2000000003c0 returned -14 [ 419.421296][ T7366] loop0: detected capacity change from 0 to 16 [ 419.441475][ T7366] erofs: (device loop0): mounted with root inode @ nid 36. [ 422.761982][ T7379] binder: 7378:7379 ioctl c0306201 200000000080 returned -14 [ 422.787755][ T7379] binder: 7378:7379 ioctl c0306201 2000000003c0 returned -14 [ 422.855862][ T7382] loop1: detected capacity change from 0 to 764 [ 426.713769][ T7394] netlink: 'syz.0.414': attribute type 34 has an invalid length. [ 427.006211][ T7398] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7399] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7398] [ 427.528291][ T7396] loop3: detected capacity change from 0 to 2048 [ 428.245196][ T7396] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.811500][ T51] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 431.711960][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 431.938021][ T27] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 433.741009][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.794054][ T27] usb 4-1: config 0 descriptor?? [ 433.821013][ T27] usb 4-1: can't set config #0, error -71 [ 433.829489][ T27] usb 4-1: USB disconnect, device number 4 [ 433.962638][ T7416] loop0: detected capacity change from 0 to 16 [ 434.011590][ T7416] erofs: (device loop0): mounted with root inode @ nid 36. [ 434.248739][ T7419] loop3: detected capacity change from 0 to 512 [ 434.298595][ T7419] EXT4-fs: Ignoring removed nomblk_io_submit option [ 434.306646][ T7419] ext4: Unknown parameter 'fscontext' [ 435.268213][ T7424] tmpfs: Bad value for 'size' [ 435.454110][ T7428] loop0: detected capacity change from 0 to 2048 [ 435.471896][ T7427] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7429] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7427] [ 440.752106][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.840915][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.900307][ T7428] Alternate GPT is invalid, using primary GPT. [ 440.909534][ T7428] loop0: p1 p2 p3 [ 440.913993][ T7428] loop0: partition table partially beyond EOD, truncated [ 441.113945][ T7444] binder: 7443:7444 ioctl c0306201 200000000080 returned -14 [ 441.150554][ T7444] binder: 7443:7444 ioctl c0306201 2000000003c0 returned -14 [ 446.237838][ T7464] loop2: detected capacity change from 0 to 512 [ 446.305117][ T7464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.329179][ T7464] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.540187][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.636619][ T7474] loop2: detected capacity change from 0 to 512 [ 447.648844][ T7474] EXT4-fs: Ignoring removed nomblk_io_submit option [ 447.655854][ T7474] ext4: Unknown parameter 'fscontext' [ 448.652955][ T7479] loop1: detected capacity change from 0 to 512 [ 448.667399][ T7479] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 448.674967][ T7479] UDF-fs: Scanning with blocksize 512 failed [ 448.701708][ T7479] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 448.793961][ T7479] UDF-fs: Scanning with blocksize 1024 failed [ 448.844639][ T7479] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 448.885272][ T7479] UDF-fs: Scanning with blocksize 2048 failed [ 448.915432][ T7479] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 448.995298][ T7479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.074976][ T7481] loop2: detected capacity change from 0 to 2048 [ 450.171809][ T7481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 450.258586][ T7485] binder: 7484:7485 ioctl c0306201 200000000080 returned -14 [ 450.281874][ T7485] binder: 7484:7485 ioctl c0306201 2000000003c0 returned -14 [ 450.578514][ T51] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 459.048256][ T7518] loop0: detected capacity change from 0 to 2048 [ 459.088429][ T7518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.346158][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.909296][ T7544] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7545] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7544] [ 467.182194][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 470.940542][ T7558] loop0: detected capacity change from 0 to 512 [ 470.962522][ T7558] EXT4-fs: Ignoring removed oldalloc option [ 470.993324][ T7558] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 471.166507][ T7558] EXT4-fs (loop0): 1 truncate cleaned up [ 471.795549][ T7564] loop1: detected capacity change from 0 to 8 [ 472.802523][ T7558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.815103][ T7564] unable to read xattr id index table [ 473.156009][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.545946][ T7576] loop2: detected capacity change from 0 to 512 [ 476.584617][ T7576] EXT4-fs: Ignoring removed nomblk_io_submit option [ 476.610988][ T7576] ext4: Unknown parameter 'fscontext' [ 477.841795][ T7585] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7586] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7585] [ 479.602725][ T7601] loop2: detected capacity change from 0 to 1024 [ 479.714894][ T5854] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 481.387448][ T5854] usb 2-1: device descriptor read/all, error -71 [ 481.640102][ T7610] loop1: detected capacity change from 0 to 764 [ 482.848173][ T7615] loop1: detected capacity change from 0 to 512 [ 482.876110][ T7615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 482.921812][ T7615] ext4: Unknown parameter 'fscontext' [ 486.613690][ T7628] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7629] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7628] [ 487.691000][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 487.921554][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 487.942723][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.982723][ T27] usb 1-1: config 0 has no interfaces? [ 488.004119][ T27] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 488.034191][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.071019][ T27] usb 1-1: Product: syz [ 488.090790][ T27] usb 1-1: Manufacturer: syz [ 488.095474][ T27] usb 1-1: SerialNumber: syz [ 488.137516][ T27] usb 1-1: config 0 descriptor?? [ 488.379813][ T27] usb 1-1: USB disconnect, device number 4 [ 490.442175][ T7641] loop2: detected capacity change from 0 to 764 [ 495.728542][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 495.986548][ T27] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 495.986680][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.986769][ T27] usb 2-1: Product: syz [ 495.986856][ T27] usb 2-1: Manufacturer: syz [ 495.986943][ T27] usb 2-1: SerialNumber: syz [ 496.018152][ T27] usb 2-1: config 0 descriptor?? [ 496.297073][ T27] usb 2-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 496.304491][ T27] f81604 2-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 496.312554][ T27] f81604: probe of 2-1:0.0 failed with error -121 [ 496.412007][ T7660] xt_cgroup: invalid path, errno=-2 [ 496.945607][ T7662] loop3: detected capacity change from 0 to 1024 [ 497.243678][ T7666] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7667] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7666] [ 500.171985][ T5819] usb 2-1: USB disconnect, device number 6 [ 501.786974][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.795279][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.831865][ T7681] loop1: detected capacity change from 0 to 16 [ 501.968841][ T7681] erofs: (device loop1): mounted with root inode @ nid 36. [ 504.404932][ T7691] loop1: detected capacity change from 0 to 1024 [ 504.976756][ T7695] loop0: detected capacity change from 0 to 4096 [ 506.985296][ T7695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 507.012855][ T7695] EXT4-fs (loop0): Test dummy encryption mode enabled [ 507.061739][ T7695] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 507.110964][ T7695] System zones: 0-5 [ 507.152223][ T7695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.271314][ T7695] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 507.332730][ T7695] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 507.359146][ T7695] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 507.484310][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.651431][ T5763] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 507.743299][ T7711] loop0: detected capacity change from 0 to 764 [ 507.883050][ T5763] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 507.910852][ T5763] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 507.936876][ T5763] usb 4-1: config 220 has no interface number 2 [ 507.966476][ T5763] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 508.010505][ T5763] usb 4-1: config 220 interface 0 has no altsetting 0 [ 508.044568][ T5763] usb 4-1: config 220 interface 76 has no altsetting 0 [ 508.054697][ T5763] usb 4-1: config 220 interface 1 has no altsetting 0 [ 508.103833][ T5763] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 508.130822][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.143766][ T5763] usb 4-1: Product: syz [ 508.147994][ T5763] usb 4-1: Manufacturer: syz [ 508.177459][ T5763] usb 4-1: SerialNumber: syz [ 508.547962][ T5763] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 508.558853][ T5763] usb 4-1: No valid video chain found. [ 508.680877][ T5763] usb 4-1: selecting invalid altsetting 0 [ 508.866010][ T5763] usb 4-1: selecting invalid altsetting 0 [ 508.895257][ T5763] usbtest: probe of 4-1:220.1 failed with error -22 [ 508.952582][ T5763] usb 4-1: USB disconnect, device number 5 [ 509.393989][ T7720] loop1: detected capacity change from 0 to 16 [ 509.452888][ T7720] erofs: (device loop1): mounted with root inode @ nid 36. [ 513.474955][ T7737] loop1: detected capacity change from 0 to 1024 [ 514.127628][ T7742] loop0: detected capacity change from 0 to 2048 [ 514.209496][ T7742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 514.971548][ T51] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 515.352955][ T7750] loop0: detected capacity change from 0 to 764 [ 519.964601][ T7766] loop0: detected capacity change from 0 to 16 [ 520.013238][ T7766] erofs: (device loop0): mounted with root inode @ nid 36. [ 523.830955][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 524.030925][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 524.049602][ T27] usb 4-1: config 222 has an invalid descriptor of length 0, skipping remainder of the config [ 524.068700][ T27] usb 4-1: config 222 has 0 interfaces, different from the descriptor's value: 1 [ 524.108556][ T27] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 524.118177][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.128271][ T27] usb 4-1: Product: syz [ 524.141081][ T27] usb 4-1: Manufacturer: syz [ 524.145781][ T27] usb 4-1: SerialNumber: syz [ 524.385886][ T27] usb 4-1: USB disconnect, device number 6 [ 526.145833][ T7787] loop3: detected capacity change from 0 to 512 [ 526.215768][ T7787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 526.367277][ T7787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 526.479649][ T7787] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.655724][ T7794] loop2: detected capacity change from 0 to 2048 [ 526.972887][ T7794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 527.065705][ T7796] loop1: detected capacity change from 0 to 1024 [ 527.706000][ T51] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 528.031565][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 528.222196][ T7803] loop2: detected capacity change from 0 to 16 [ 528.267960][ T7803] erofs: (device loop2): mounted with root inode @ nid 36. [ 533.640973][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 533.863610][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.880958][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.910846][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 533.934303][ T27] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.960838][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.982695][ T27] usb 1-1: config 0 descriptor?? [ 534.428822][ T27] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 534.483523][ T27] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 534.867496][ T27] usb 1-1: USB disconnect, device number 5 [ 536.802802][ T7838] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7839] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7838] [ 537.655415][ T7844] loop0: detected capacity change from 0 to 1024 [ 553.567178][ T7892] loop1: detected capacity change from 0 to 1024 [ 553.603031][ T7891] loop3: detected capacity change from 0 to 128 [ 553.838336][ T7891] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 554.105281][ T7891] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 558.699513][ T7909] loop2: detected capacity change from 0 to 512 [ 559.970932][ T7909] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 560.071812][ T7909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.151014][ T7909] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.345293][ T7916] EXT4-fs error (device loop2): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.2.549: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 560.437534][ T7916] EXT4-fs (loop2): Remounting filesystem read-only [ 560.628335][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.822305][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.828740][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.248427][ T7936] loop2: detected capacity change from 0 to 512 [ 569.524273][ T7936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.601321][ T7936] ext4 filesystem being mounted at /141/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.818237][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.429559][ T7949] loop0: detected capacity change from 0 to 2048 [ 571.555113][ T7949] loop0: p1 p2 p3 [ 571.555113][ T7949] p1: [ 571.568079][ T7949] loop0: p1 size 16779263 extends beyond EOD, truncated [ 571.623084][ T7949] loop0: p2 size 458752 extends beyond EOD, truncated [ 571.711361][ T7949] loop0: p3 start 3036741376 is beyond EOD, truncated [ 571.735339][ T7950] loop2: detected capacity change from 0 to 7 [ 571.799345][ T7950] loop2: [ 571.847902][ T7950] loop2: partition table partially beyond EOD, truncated [ 572.467633][ T7951] udevd[7951]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 572.496979][ T7857] udevd[7857]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 572.559519][ T7954] udevd[7954]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 578.683286][ T7981] loop2: detected capacity change from 0 to 1024 [ 586.336436][ T8003] loop0: detected capacity change from 0 to 2048 [ 586.397575][ T8003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 586.771342][ T51] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 593.635098][ T8025] loop0: detected capacity change from 0 to 1024 [ 604.536104][ T8058] loop0: detected capacity change from 0 to 2048 [ 604.586150][ T8058] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 605.011372][ T51] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 605.767732][ T8066] loop0: detected capacity change from 0 to 1024 [ 624.629298][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.636683][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.796378][ T8126] loop2: detected capacity change from 0 to 2048 [ 625.825733][ T8126] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 627.328708][ T51] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 634.679432][ T8159] loop1: detected capacity change from 0 to 1024 [ 636.839453][ T8165] loop1: detected capacity change from 0 to 2048 [ 636.898557][ T8165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 637.353397][ T51] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 638.151877][ T8173] loop1: detected capacity change from 0 to 764 [ 646.752732][ T8201] loop2: detected capacity change from 0 to 2048 [ 646.788451][ T8201] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 647.521363][ T51] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 649.970623][ T8213] loop0: detected capacity change from 0 to 512 [ 650.096368][ T8219] loop2: detected capacity change from 0 to 1024 [ 650.102567][ T8213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 650.141965][ T8213] ext4: Unknown parameter 'fscontext' [ 653.677133][ T8240] loop2: detected capacity change from 0 to 2048 [ 654.503185][ T8240] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 655.070891][ T51] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 655.945451][ T8248] loop2: detected capacity change from 0 to 512 [ 656.005984][ T8253] loop1: detected capacity change from 0 to 16 [ 656.025660][ T8253] erofs: (device loop1): mounted with root inode @ nid 36. [ 657.666037][ T8067] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 661.188889][ T8267] loop3: detected capacity change from 0 to 512 [ 661.978955][ T8267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 662.063545][ T8267] ext4: Unknown parameter 'fscontext' [ 662.717494][ T6150] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 664.398593][ T8284] loop1: detected capacity change from 0 to 2048 [ 664.464104][ T8284] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 664.468035][ T6150] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 664.523066][ T6150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.558880][ T6150] usb 3-1: Product: syz [ 664.566888][ T6150] usb 3-1: Manufacturer: syz [ 664.585884][ T6150] usb 3-1: SerialNumber: syz [ 664.603235][ T6150] usb 3-1: config 0 descriptor?? [ 666.713794][ T6150] usb 3-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 666.839323][ T6150] f81604 3-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 666.870834][ T6150] f81604: probe of 3-1:0.0 failed with error -110 [ 666.942490][ T6150] usb 3-1: USB disconnect, device number 9 [ 667.090142][ T51] Bluetooth: hci2: unexpected event for opcode 0x202d [ 667.364519][ T8293] loop1: detected capacity change from 0 to 16 [ 667.389360][ T8293] erofs: (device loop1): mounted with root inode @ nid 36. [ 668.861406][ T8302] loop0: detected capacity change from 0 to 1024 [ 671.301253][ T8308] blktrace: Concurrent blktraces are not allowed on loop5 [ 674.890745][ T5819] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 676.146680][ T8332] loop0: detected capacity change from 0 to 128 [ 676.777172][ T5819] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 676.787107][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.810014][ T5819] usb 3-1: Product: syz [ 676.817621][ T5819] usb 3-1: Manufacturer: syz [ 676.826785][ T5819] usb 3-1: SerialNumber: syz [ 676.844949][ T5819] usb 3-1: config 0 descriptor?? [ 679.091295][ T5819] usb 3-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 679.098554][ T5819] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 679.138129][ T5819] f81604: probe of 3-1:0.0 failed with error -71 [ 679.181493][ T5819] usb 3-1: USB disconnect, device number 10 [ 679.326707][ T8342] loop2: detected capacity change from 0 to 16 [ 679.374167][ T8342] erofs: (device loop2): mounted with root inode @ nid 36. [ 680.717237][ T8352] loop0: detected capacity change from 0 to 1024 [ 683.366562][ T8354] loop0: detected capacity change from 0 to 512 [ 683.401579][ T8354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 683.460799][ T8354] ext4: Unknown parameter 'fscontext' [ 686.091746][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.098128][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.830901][ T5819] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 691.238551][ T8393] loop2: detected capacity change from 0 to 512 [ 691.324374][ T8393] EXT4-fs: Ignoring removed nomblk_io_submit option [ 691.370856][ T8393] ext4: Unknown parameter 'fscontext' [ 692.328180][ T8396] loop0: detected capacity change from 0 to 16 [ 692.530763][ T8396] erofs: (device loop0): mounted with root inode @ nid 36. [ 693.760775][ T8402] loop1: detected capacity change from 0 to 1024 [ 697.707172][ T8416] Illegal XDP return value 4294967294 on prog (id 32) dev syz_tun, expect packet loss! [ 700.893547][ T8426] loop2: detected capacity change from 0 to 512 [ 700.917574][ T8426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 700.931022][ T8426] ext4: Unknown parameter 'fscontext' [ 704.705824][ T8446] loop2: detected capacity change from 0 to 16 [ 704.732983][ T51] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 704.785720][ T8446] erofs: (device loop2): mounted with root inode @ nid 36. [ 709.853555][ T8464] loop2: detected capacity change from 0 to 512 [ 709.913897][ T8464] EXT4-fs: Ignoring removed nomblk_io_submit option [ 709.970768][ T8464] ext4: Unknown parameter 'fscontext' [ 711.110672][ T8472] loop0: detected capacity change from 0 to 1024 [ 718.763494][ T8494] loop0: detected capacity change from 0 to 16 [ 718.903918][ T8494] erofs: (device loop0): mounted with root inode @ nid 36. [ 719.838304][ T51] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 720.092037][ T8502] loop1: detected capacity change from 0 to 512 [ 720.100416][ T8502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 720.136213][ T8502] ext4: Unknown parameter 'fscontext' [ 721.498965][ T8510] loop2: detected capacity change from 0 to 1024 [ 727.491002][ T51] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 727.641302][ T8538] loop2: detected capacity change from 0 to 512 [ 727.648942][ T8538] EXT4-fs: Ignoring removed nomblk_io_submit option [ 727.688544][ T8538] ext4: Unknown parameter 'fscontext' [ 734.286364][ T8566] loop1: detected capacity change from 0 to 1024 [ 737.046525][ T8577] loop1: detected capacity change from 0 to 512 [ 737.126852][ T8577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 737.299206][ T8577] ext4: Unknown parameter 'fscontext' [ 738.483885][ T8583] loop1: detected capacity change from 0 to 1024 [ 738.511040][ T51] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 738.592720][ T8583] Bluetooth: MGMT ver 1.22 [ 747.506026][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.512736][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.605652][ T51] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 752.500559][ T8629] loop0: detected capacity change from 0 to 512 [ 752.521935][ T8629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 752.556594][ T8629] ext4: Unknown parameter 'fscontext' [ 762.273522][ T8658] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8659] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8658] [ 765.831156][ T51] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 767.650299][ T8680] loop0: detected capacity change from 0 to 512 [ 767.671869][ T8680] EXT4-fs: Ignoring removed nomblk_io_submit option [ 767.679143][ T8680] ext4: Unknown parameter 'fscontext' [ 777.549400][ T8704] loop0: detected capacity change from 0 to 16 [ 777.622794][ T8704] erofs: (device loop0): mounted with root inode @ nid 36. [ 780.337116][ T8712] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8713] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8712] [ 781.251017][ T8718] binder: BC_ACQUIRE_RESULT not supported [ 781.257029][ T8718] binder: 8717:8718 ioctl c0306201 200000000000 returned -22 [ 781.478478][ T8720] loop1: detected capacity change from 0 to 128 [ 781.637912][ T8720] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 781.755341][ T8720] ext4 filesystem being mounted at /195/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 784.930452][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 785.422959][ T8737] loop2: detected capacity change from 0 to 16 [ 785.854528][ T8737] erofs: (device loop2): mounted with root inode @ nid 36. [ 788.472534][ T51] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 789.121323][ T8752] loop0: detected capacity change from 0 to 2048 [ 789.134462][ T8752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 791.481616][ T8768] loop1: detected capacity change from 0 to 128 [ 792.090835][ T8067] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 798.813160][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 802.780984][ T8797] blktrace: Concurrent blktraces are not allowed on loop5 [ 805.045793][ T8806] loop1: detected capacity change from 0 to 1024 [ 810.531255][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.537611][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.251628][ T8828] loop3: detected capacity change from 0 to 764 [ 816.520919][ T8839] blktrace: Concurrent blktraces are not allowed on loop5 [ 817.802997][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 821.860986][ T8852] blktrace: Concurrent blktraces are not allowed on loop5 [ 829.043836][ T8881] loop0: detected capacity change from 0 to 4096 [ 829.105998][ T8881] EXT4-fs (loop0): Test dummy encryption mode enabled [ 830.812944][ T8881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.776214][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 832.787717][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.151941][ T8933] Bluetooth: MGMT ver 1.22 [ 844.956384][ T8935] loop3: detected capacity change from 0 to 4096 [ 845.074088][ T8935] EXT4-fs (loop3): Test dummy encryption mode enabled [ 845.149508][ T8935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.270914][ T8951] blktrace: Concurrent blktraces are not allowed on loop5 [ 847.582217][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.610663][ T5818] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 849.435446][ T5818] usb 3-1: device descriptor read/all, error -71 [ 852.844796][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 856.201095][ T8979] loop2: detected capacity change from 0 to 1024 [ 857.260371][ T8981] loop2: detected capacity change from 0 to 4096 [ 857.333048][ T8981] EXT4-fs (loop2): Test dummy encryption mode enabled [ 857.404639][ T8981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.779376][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.850927][ T8995] blktrace: Concurrent blktraces are not allowed on loop5 [ 864.800649][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 867.103020][ T9015] loop1: detected capacity change from 0 to 2048 [ 867.154545][ T9015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 867.883806][ T51] Bluetooth: hci2: unexpected event for opcode 0x202d [ 868.194943][ T9022] loop1: detected capacity change from 0 to 764 [ 868.267609][ T9024] loop0: detected capacity change from 0 to 512 [ 868.306263][ T9024] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 868.395155][ T9024] EXT4-fs (loop0): 1 truncate cleaned up [ 868.438371][ T9024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 869.089469][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 869.415877][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.206239][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.212648][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.270957][ T9050] blktrace: Concurrent blktraces are not allowed on loop5 [ 879.914178][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 880.018557][ T9061] loop0: detected capacity change from 0 to 764 [ 881.430216][ T9066] loop1: detected capacity change from 0 to 2048 [ 881.456816][ T9066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 884.031061][ T51] Bluetooth: hci2: unexpected event for opcode 0x202d [ 889.760954][ T9087] blktrace: Concurrent blktraces are not allowed on loop5 [ 891.616549][ T9095] loop1: detected capacity change from 0 to 1024 [ 893.254628][ T9102] loop1: detected capacity change from 0 to 764 [ 898.860896][ T9119] blktrace: Concurrent blktraces are not allowed on loop5 [ 900.372136][ T9126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 900.383347][ T9126] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 900.392619][ T9126] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 900.403216][ T9126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 900.412399][ T9126] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 900.419862][ T9126] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 902.100958][ T9128] blktrace: Concurrent blktraces are not allowed on loop5 [ 902.540792][ T51] Bluetooth: hci4: command tx timeout [ 902.776766][ T7547] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.370894][ T9134] blktrace: Concurrent blktraces are not allowed on loop5 [ 904.640805][ T51] Bluetooth: hci4: command tx timeout [ 904.795272][ T7547] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.042617][ T7547] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.298874][ T7547] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.609163][ T9124] chnl_net:caif_netlink_parms(): no params data found [ 905.651425][ T9145] loop0: detected capacity change from 0 to 512 [ 905.954006][ T9145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 906.001840][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 906.099683][ T9145] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 906.576520][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.666421][ T9124] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.676819][ T9124] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.692562][ T9124] bridge_slave_0: entered allmulticast mode [ 906.710175][ T51] Bluetooth: hci4: command tx timeout [ 906.744283][ T9124] bridge_slave_0: entered promiscuous mode [ 906.823417][ T9124] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.841375][ T9124] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.848764][ T9124] bridge_slave_1: entered allmulticast mode [ 906.910685][ T9124] bridge_slave_1: entered promiscuous mode [ 906.984397][ T9156] loop0: detected capacity change from 0 to 1024 [ 908.691763][ T9156] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 908.785969][ T51] Bluetooth: hci4: command tx timeout [ 908.794854][ T9156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.203859][ T9155] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 910.221606][ T9155] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 910.234170][ T9155] EXT4-fs (loop0): This should not happen!! Data will be lost [ 910.234170][ T9155] [ 910.243880][ T9155] EXT4-fs (loop0): Total free blocks count 0 [ 910.249902][ T9155] EXT4-fs (loop0): Free/Dirty block details [ 910.255948][ T9155] EXT4-fs (loop0): free_blocks=20480 [ 910.261376][ T9155] EXT4-fs (loop0): dirty_blocks=10752 [ 910.266760][ T9155] EXT4-fs (loop0): Block reservation details [ 910.272909][ T9155] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 910.318772][ T3426] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 912.446223][ T9124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.494188][ T9124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.266373][ T9124] team0: Port device team_slave_0 added [ 913.313994][ T9124] team0: Port device team_slave_1 added [ 914.830902][ T9184] blktrace: Concurrent blktraces are not allowed on loop5 [ 915.776820][ T9193] loop1: detected capacity change from 0 to 764 [ 915.784928][ T9124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.820883][ T9124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.920703][ T9124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.247232][ T9124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.270096][ T9124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.580920][ T9124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.460893][ T9204] blktrace: Concurrent blktraces are not allowed on loop5 [ 920.899311][ T9124] hsr_slave_0: entered promiscuous mode [ 920.955852][ T9124] hsr_slave_1: entered promiscuous mode [ 921.000728][ T9124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 921.008417][ T9124] Cannot create hsr debugfs directory [ 924.989133][ T7547] hsr_slave_0: left promiscuous mode [ 925.172584][ T7547] hsr_slave_1: left promiscuous mode [ 926.905259][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 926.980981][ T7547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.988537][ T7547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.014781][ T7547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.041693][ T7547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.072842][ T7547] bridge_slave_1: left allmulticast mode [ 927.109050][ T7547] bridge_slave_1: left promiscuous mode [ 927.117840][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.153705][ T7547] bridge_slave_0: left allmulticast mode [ 927.159453][ T7547] bridge_slave_0: left promiscuous mode [ 927.191078][ T7547] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.378441][ T7547] veth1_macvtap: left promiscuous mode [ 927.397387][ T7547] veth0_macvtap: left promiscuous mode [ 927.411643][ T7547] veth1_vlan: left promiscuous mode [ 927.417413][ T7547] veth0_vlan: left promiscuous mode [ 928.021173][ T7547] bond1 (unregistering): (slave bridge1): Releasing active interface [ 928.085674][ T7547] bond1 (unregistering): Released all slaves [ 931.825708][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.832219][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.370903][ T9255] blktrace: Concurrent blktraces are not allowed on loop5 [ 936.150176][ T9260] loop0: detected capacity change from 0 to 764 [ 936.644673][ T7547] team0 (unregistering): Port device team_slave_1 removed [ 937.077973][ T7547] team0 (unregistering): Port device team_slave_0 removed [ 937.253111][ T7547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.009546][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 939.263731][ T7547] bond0 (unregistering): (slave 30): Releasing backup interface [ 942.468361][ T9277] loop3: detected capacity change from 0 to 128 [ 943.968418][ T7547] bond0 (unregistering): Released all slaves [ 947.329139][ T9124] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 947.387164][ T9124] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 947.477393][ T9124] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 947.632018][ T9124] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 948.082732][ T9124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.175734][ T9124] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.254515][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.261883][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.373198][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.382127][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.374508][ T9307] blktrace: Concurrent blktraces are not allowed on loop5 [ 951.387850][ T9124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.565871][ T9124] veth0_vlan: entered promiscuous mode [ 952.627594][ T9124] veth1_vlan: entered promiscuous mode [ 952.716396][ T9335] loop3: detected capacity change from 0 to 764 [ 952.793239][ T9124] veth0_macvtap: entered promiscuous mode [ 952.838862][ T9124] veth1_macvtap: entered promiscuous mode [ 952.938043][ T9124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.994859][ T9124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.046057][ T9124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.129591][ T9124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.182838][ T9124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.230659][ T9124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.268216][ T9124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.320006][ T9124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.372456][ T9124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.406956][ T9124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.680731][ T9124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.701861][ T9124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.712416][ T9124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.725355][ T9124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.511123][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 956.594767][ T9124] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.894776][ T9124] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.914860][ T9124] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.958368][ T9124] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.742852][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.410590][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.785830][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 960.797985][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 960.809307][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 960.825837][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 960.851433][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 960.858835][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 962.659711][ T992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.945934][ T51] Bluetooth: hci3: command tx timeout [ 963.126515][ T992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.455414][ T992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.712552][ T992] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.798678][ T9367] chnl_net:caif_netlink_parms(): no params data found [ 964.011264][ T9393] loop1: detected capacity change from 0 to 2048 [ 964.225001][ T9367] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.232496][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.239843][ T9367] bridge_slave_0: entered allmulticast mode [ 964.269145][ T9367] bridge_slave_0: entered promiscuous mode [ 964.301795][ T9367] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.308990][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.345025][ T9367] bridge_slave_1: entered allmulticast mode [ 964.367487][ T9393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 964.381479][ T9367] bridge_slave_1: entered promiscuous mode [ 964.724080][ T9367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.814535][ T9367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.700880][ T51] Bluetooth: hci3: command tx timeout [ 966.559112][ T9367] team0: Port device team_slave_0 added [ 966.604176][ T9367] team0: Port device team_slave_1 added [ 966.710022][ T9367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.770638][ T9367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.882695][ T9367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.350647][ T9367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.390854][ T9367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.497773][ T9367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.741342][ T51] Bluetooth: hci3: command tx timeout [ 969.662203][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 969.820645][ T51] Bluetooth: hci3: command tx timeout [ 970.039540][ T9430] loop1: detected capacity change from 0 to 256 [ 971.802430][ T9367] hsr_slave_0: entered promiscuous mode [ 971.811567][ T9430] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 971.864518][ T9367] hsr_slave_1: entered promiscuous mode [ 971.916253][ T9367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 971.924157][ T9367] Cannot create hsr debugfs directory [ 971.949512][ T28] audit: type=1800 audit(1780567996.689:15): pid=9430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.913" name="file1" dev="loop1" ino=1048598 res=0 errno=0 [ 972.125033][ T9430] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 972.200857][ T9430] FAT-fs (loop1): Filesystem has been set read-only [ 972.207873][ T9430] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 974.905948][ T9455] loop3: detected capacity change from 0 to 512 [ 975.048446][ T9455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 975.898594][ T9455] ext4: Unknown parameter 'fscontext' [ 978.203922][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 979.463304][ T9478] loop0: detected capacity change from 0 to 2048 [ 979.478422][ T9367] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 979.535075][ T9367] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 979.646537][ T9367] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 979.646673][ T9478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 979.748478][ T992] hsr_slave_0: left promiscuous mode [ 979.784239][ T992] hsr_slave_1: left promiscuous mode [ 981.411141][ T9484] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 981.583504][ T9478] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 981.609746][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.624961][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.632319][ T9478] EXT4-fs (loop0): This should not happen!! Data will be lost [ 981.632319][ T9478] [ 981.661941][ T9478] EXT4-fs (loop0): Total free blocks count 0 [ 981.668372][ T9478] EXT4-fs (loop0): Free/Dirty block details [ 981.675467][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.700695][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.716583][ T9478] EXT4-fs (loop0): free_blocks=4096 [ 981.730736][ T9478] EXT4-fs (loop0): dirty_blocks=16 [ 981.737307][ T992] bridge_slave_1: left allmulticast mode [ 981.743995][ T9478] EXT4-fs (loop0): Block reservation details [ 981.750106][ T992] bridge_slave_1: left promiscuous mode [ 981.761284][ T9478] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 981.768107][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.801310][ T992] bridge_slave_0: left allmulticast mode [ 981.807043][ T992] bridge_slave_0: left promiscuous mode [ 981.850924][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.934242][ T59] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 982.193325][ T992] veth1_macvtap: left promiscuous mode [ 982.198979][ T992] veth0_macvtap: left promiscuous mode [ 982.220929][ T992] veth1_vlan: left promiscuous mode [ 982.236649][ T992] veth0_vlan: left promiscuous mode [ 982.420652][ T6150] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 982.621078][ T6150] usb 1-1: Using ep0 maxpacket: 16 [ 982.642123][ T6150] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 982.673056][ T6150] usb 1-1: config 0 has no interfaces? [ 982.730735][ T6150] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 982.739858][ T6150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.770564][ T6150] usb 1-1: Product: syz [ 982.774813][ T6150] usb 1-1: Manufacturer: syz [ 982.820757][ T6150] usb 1-1: SerialNumber: syz [ 982.841720][ T6150] usb 1-1: config 0 descriptor?? [ 983.101093][ T5819] usb 1-1: USB disconnect, device number 6 [ 986.559004][ T9517] loop0: detected capacity change from 0 to 1024 [ 988.455448][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 989.811983][ T9523] loop3: detected capacity change from 0 to 4096 [ 989.867884][ T9523] EXT4-fs (loop3): Test dummy encryption mode enabled [ 989.890674][ T9523] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 989.962624][ T992] team0 (unregistering): Port device team_slave_1 removed [ 991.901424][ T992] team0 (unregistering): Port device team_slave_0 removed [ 992.830796][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 992.861564][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.012099][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.032595][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 993.053677][ T27] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 993.070248][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 993.095756][ T27] usb 4-1: SerialNumber: syz [ 993.276836][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.283625][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.511358][ T27] usb 4-1: can't set config #1, error -71 [ 993.539409][ T27] usb 4-1: USB disconnect, device number 8 [ 993.987969][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.242952][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 996.250627][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 996.257640][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 997.526538][ T9549] loop0: detected capacity change from 0 to 2048 [ 997.604174][ T9549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 997.947939][ T51] Bluetooth: hci0: unexpected event for opcode 0x202d [ 1000.240886][ T9552] blktrace: Concurrent blktraces are not allowed on loop5 [ 1002.928764][ T992] bond0 (unregistering): Released all slaves [ 1004.627066][ T9367] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1004.982485][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1005.018220][ T9367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.067166][ T9367] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.087256][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.094503][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.175626][ T7547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.182912][ T7547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.213706][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 1006.905034][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.936556][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.975689][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1007.033708][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1007.070577][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.100114][ T23] usb 1-1: config 0 descriptor?? [ 1007.562708][ T23] microsoft 0003:045E:07DA.0003: unbalanced collection at end of report description [ 1007.577087][ T9367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.595337][ T23] microsoft 0003:045E:07DA.0003: parse failed [ 1007.617381][ T23] microsoft: probe of 0003:045E:07DA.0003 failed with error -22 [ 1007.842300][ T23] usb 1-1: USB disconnect, device number 7 [ 1011.236769][ T9367] veth0_vlan: entered promiscuous mode [ 1011.315549][ T9367] veth1_vlan: entered promiscuous mode [ 1012.557958][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 1013.676727][ T9618] loop0: detected capacity change from 0 to 128 [ 1014.332082][ T9367] veth0_macvtap: entered promiscuous mode [ 1014.393596][ T9367] veth1_macvtap: entered promiscuous mode [ 1014.569535][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.630561][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.640452][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.693815][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.721698][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.760549][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.792445][ T9367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1014.839963][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.870617][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.900565][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.920663][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.954969][ T9367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1014.985156][ T9367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.012288][ T9367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.066284][ T9367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.100676][ T9367] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.109472][ T9367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.160621][ T9367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.531644][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.539560][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.679634][ T7547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.705364][ T7547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.832071][ T9631] loop1: detected capacity change from 0 to 2048 [ 1015.927677][ T9631] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1016.239022][ T51] Bluetooth: hci2: unexpected event for opcode 0x202d [ 1018.726672][ T9643] loop1: detected capacity change from 0 to 1024 [ 1023.216854][ T9662] loop1: detected capacity change from 0 to 512 [ 1023.256384][ T9662] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1023.334541][ T9662] EXT4-fs (loop1): 1 truncate cleaned up [ 1023.373121][ T9662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1024.816590][ T9662] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.955: deleted inode referenced: 15 [ 1024.879876][ T9662] EXT4-fs (loop1): Remounting filesystem read-only [ 1025.028243][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.519206][ T9681] loop1: detected capacity change from 0 to 2048 [ 1025.602419][ T9681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1027.475791][ T51] Bluetooth: hci2: unexpected event for opcode 0x202d [ 1027.595328][ T9691] loop0: detected capacity change from 0 to 1024 [ 1035.115236][ T9741] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9745] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9741] [ 1041.282378][ T9780] loop3: detected capacity change from 0 to 2048 [ 1041.343931][ T9780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1041.546907][ T51] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1045.367292][ T9811] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9813] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9811] [ 1055.108854][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.116693][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.116265][ T9885] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9887] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9885] [ 1060.731856][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 1061.053233][ T9897] loop1: detected capacity change from 0 to 2048 [ 1063.029118][ T9897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1063.150915][ T51] Bluetooth: hci2: unexpected event for opcode 0x202d [ 1067.340857][ T1191] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1074.290955][ T9941] loop3: detected capacity change from 0 to 8192 [ 1074.344891][ T9941] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1075.569850][ T9946] loop3: detected capacity change from 0 to 2048 [ 1075.753700][ T9946] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1077.691144][ T51] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1083.719604][ T9973] loop1: detected capacity change from 0 to 2048 [ 1083.764179][ T9973] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1083.789925][ T9977] loop3: detected capacity change from 0 to 512 [ 1083.865227][ T51] Bluetooth: hci2: unexpected event for opcode 0x202d [ 1083.899827][ T9977] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1084.094314][ T9977] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.1008: Directory hole found for htree leaf block 0 [ 1084.142320][ T9980] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.1008: Directory hole found for htree leaf block 0 [ 1084.362578][ T5774] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1085.628394][ T9126] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 1087.638980][ T9986] kvm: kvm [9984]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x689c [ 1087.672836][ T9126] Bluetooth: hci3: command 0x0406 tx timeout [ 1091.626300][T10013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1016'. [ 1091.959676][T10017] loop1: detected capacity change from 0 to 764 [ 1092.311658][T10019] loop4: detected capacity change from 0 to 2048 [ 1092.448861][T10019] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1092.580385][ T51] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1094.947802][T10029] loop3: detected capacity change from 0 to 1024 [ 1096.262594][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 1096.411103][T10036] loop3: detected capacity change from 0 to 8 [ 1096.439988][T10036] squashfs: Unknown parameter 'ÿ' [ 1097.599734][T10048] loop3: detected capacity change from 0 to 764 [ 1097.893406][T10050] loop0: detected capacity change from 0 to 2048 [ 1098.040784][T10050] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1098.226568][ T51] Bluetooth: hci0: unexpected event for opcode 0x202d [ 1099.991582][T10060] loop0: detected capacity change from 0 to 2048 [ 1100.100737][T10060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1104.465776][T10075] loop3: detected capacity change from 0 to 256 [ 1104.488347][T10075] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1104.592243][ T28] audit: type=1800 audit(1780568129.339:16): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1035" name="file1" dev="loop3" ino=1048606 res=0 errno=0 [ 1104.720597][ T28] audit: type=1800 audit(1780568129.389:17): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1035" name="file1" dev="loop3" ino=1048606 res=0 errno=0 [ 1105.388667][T10075] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 1106.350339][T10075] FAT-fs (loop3): Filesystem has been set read-only [ 1106.350666][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 1106.382701][T10075] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 1106.414372][T10075] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 1106.428656][T10075] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 1106.812164][T10089] loop3: detected capacity change from 0 to 764 [ 1106.825854][T10087] loop0: detected capacity change from 0 to 2048 [ 1107.002140][T10087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1107.146300][ T51] Bluetooth: hci0: unexpected event for opcode 0x202d [ 1113.532831][T10108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.756689][T10113] loop4: detected capacity change from 0 to 2048 [ 1113.787673][T10113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1113.881481][ T51] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1115.864141][T10120] loop0: detected capacity change from 0 to 764 [ 1116.148022][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.154566][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.310835][ T9371] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1118.545452][ T9371] usb 5-1: Using ep0 maxpacket: 16 [ 1118.568294][ T9371] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 1118.577139][ T9371] usb 5-1: config 1 has no interface number 0 [ 1118.595247][ T9371] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1118.631244][ T9371] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1118.651894][ T9371] usb 5-1: config 1 interface 105 has no altsetting 0 [ 1118.673189][ T9371] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1118.700993][ T9371] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1118.714717][ T9371] usb 5-1: Product: syz [ 1118.718958][ T9371] usb 5-1: Manufacturer: syz [ 1118.754948][ T9371] usb 5-1: SerialNumber: syz [ 1118.780914][T10124] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1118.788393][T10124] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1119.460794][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 1119.494690][ T9371] aqc111: probe of 5-1:1.105 failed with error -71 [ 1119.853243][ T9371] usb 5-1: USB disconnect, device number 2 [ 1123.981022][T10143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.122362][T10146] syzkaller0: entered promiscuous mode [ 1124.128021][T10146] syzkaller0: entered allmulticast mode [ 1125.235981][T10154] loop1: detected capacity change from 0 to 2048 [ 1127.018698][T10154] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1131.370144][T10172] loop4: detected capacity change from 0 to 764 [ 1137.288125][ T9126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1137.299367][ T9126] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1137.308327][ T9126] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1137.330621][ T9126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1137.338794][ T9126] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1137.348112][ T9126] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1139.472181][ T51] Bluetooth: hci4: command tx timeout [ 1140.953384][T10213] loop1: detected capacity change from 0 to 764 [ 1142.887579][ T51] Bluetooth: hci4: command tx timeout [ 1144.941109][ T51] Bluetooth: hci4: command tx timeout [ 1147.219378][ T51] Bluetooth: hci4: command tx timeout [ 1150.478047][T10240] loop1: detected capacity change from 0 to 764 [ 1159.332054][T10271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1094'. [ 1160.289870][T10279] loop3: detected capacity change from 0 to 1024 [ 1161.676534][T10286] loop3: detected capacity change from 0 to 764 [ 1161.853940][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.973683][T10194] chnl_net:caif_netlink_parms(): no params data found [ 1162.130206][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.828803][T10292] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10293] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10292] [ 1164.082616][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.363163][T10297] loop3: detected capacity change from 0 to 1024 [ 1164.397079][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.450625][T10297] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1164.528715][T10297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1164.647985][T10194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.523778][T10296] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1165.538390][T10296] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1165.550744][T10296] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1165.550744][T10296] [ 1165.560407][T10296] EXT4-fs (loop3): Total free blocks count 0 [ 1165.566511][T10296] EXT4-fs (loop3): Free/Dirty block details [ 1165.572476][T10296] EXT4-fs (loop3): free_blocks=20480 [ 1165.577767][T10296] EXT4-fs (loop3): dirty_blocks=9120 [ 1165.583146][T10296] EXT4-fs (loop3): Block reservation details [ 1165.589222][T10296] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 1165.673267][T10194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.682442][ T2935] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 1165.696936][T10194] bridge_slave_0: entered allmulticast mode [ 1165.888064][T10194] bridge_slave_0: entered promiscuous mode [ 1165.898387][T10194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.905878][T10194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.914046][T10194] bridge_slave_1: entered allmulticast mode [ 1165.921759][T10194] bridge_slave_1: entered promiscuous mode [ 1166.176131][T10194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.373554][T10194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.635643][T10194] team0: Port device team_slave_0 added [ 1169.762735][T10194] team0: Port device team_slave_1 added [ 1169.858314][ T5774] EXT4-fs: 63 callbacks suppressed [ 1169.858339][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.006212][T10194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1170.039331][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1170.118223][T10194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.271322][T10194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.278352][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1170.380554][T10194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.578684][T10325] loop3: detected capacity change from 0 to 512 [ 1170.611940][T10325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1170.618646][T10325] ext4: Unknown parameter 'fscontext' [ 1170.668677][T10194] hsr_slave_0: entered promiscuous mode [ 1170.711163][T10194] hsr_slave_1: entered promiscuous mode [ 1170.718078][T10194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1170.753083][T10194] Cannot create hsr debugfs directory [ 1171.261476][T10333] loop3: detected capacity change from 0 to 2048 [ 1171.727149][T10334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1104'. [ 1172.032828][T10339] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10339] [ 1176.065875][T10355] loop3: detected capacity change from 0 to 2048 [ 1176.100866][T10355] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1176.370729][ T51] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1176.563389][T10194] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1177.876320][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.882817][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.151504][T10194] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1178.178918][T10194] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1178.367056][ T42] hsr_slave_0: left promiscuous mode [ 1178.408288][T10368] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[10369] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10368] [ 1179.032612][ T42] hsr_slave_1: left promiscuous mode [ 1179.130698][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1179.138242][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1179.211547][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1179.270597][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.339658][ T42] bridge_slave_1: left allmulticast mode [ 1179.379577][ T42] bridge_slave_1: left promiscuous mode [ 1179.409191][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.032747][ T42] bridge_slave_0: left allmulticast mode [ 1180.038476][ T42] bridge_slave_0: left promiscuous mode [ 1181.142559][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 1182.932198][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.111246][ T42] veth1_macvtap: left promiscuous mode [ 1183.117672][ T42] veth0_macvtap: left promiscuous mode [ 1183.140683][ T42] veth1_vlan: left promiscuous mode [ 1183.146156][ T42] veth0_vlan: left promiscuous mode [ 1183.694433][ T42] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1183.815521][ T42] bond1 (unregistering): Released all slaves [ 1186.269510][T10398] loop4: detected capacity change from 0 to 2048 [ 1186.348924][T10398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1186.393578][ T51] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1188.846303][T10410] loop4: detected capacity change from 0 to 128 [ 1189.471891][T10389] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1190.987782][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1191.177136][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1193.510588][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 1193.705822][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1195.872275][ T42] bond0 (unregistering): (slave 30): Releasing backup interface [ 1196.737935][ T9126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1196.749224][ T9126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1196.757978][ T9126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1196.803297][ T9126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1196.820901][ T9126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1196.828466][ T9126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1197.064906][T10433] loop3: detected capacity change from 0 to 256 [ 1198.877909][ T51] Bluetooth: hci0: command tx timeout [ 1200.940665][ T51] Bluetooth: hci0: command tx timeout [ 1200.980317][ T42] bond0 (unregistering): Released all slaves [ 1201.299832][T10194] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1201.657499][T10451] loop1: detected capacity change from 0 to 2048 [ 1201.798626][T10451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1202.340861][T10458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1132'. [ 1202.643033][T10430] chnl_net:caif_netlink_parms(): no params data found [ 1203.215592][ T51] Bluetooth: hci0: command tx timeout [ 1205.780627][ T51] Bluetooth: hci0: command tx timeout [ 1205.786411][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 1206.464037][T10430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.485015][T10430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.502835][T10430] bridge_slave_0: entered allmulticast mode [ 1206.510331][T10430] bridge_slave_0: entered promiscuous mode [ 1206.575464][T10430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.605306][T10430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.630881][T10430] bridge_slave_1: entered allmulticast mode [ 1206.638939][T10430] bridge_slave_1: entered promiscuous mode [ 1206.714644][T10488] kvm: kvm [10487]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x689c [ 1206.792515][T10430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.817705][T10488] kvm: kvm [10487]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000e94d [ 1206.832538][T10430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.869035][T10488] kvm: kvm [10487]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x89c7 [ 1206.931177][T10488] kvm: kvm [10487]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x6012 [ 1206.972057][T10488] kvm: kvm [10487]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1206.992481][T10430] team0: Port device team_slave_0 added [ 1207.011486][T10488] kvm: kvm [10487]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xe147 [ 1207.032304][T10430] team0: Port device team_slave_1 added [ 1207.052510][T10488] kvm: kvm [10487]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x89b9 [ 1207.126923][T10488] kvm: kvm [10487]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x90bb [ 1207.161636][T10488] kvm: kvm [10487]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x69da [ 1207.203924][T10488] kvm: kvm [10487]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xb25b [ 1207.651535][T10430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1207.658599][T10430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.780470][T10430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.672014][T10430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.679225][T10430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1209.738941][T10430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.015428][T10430] hsr_slave_0: entered promiscuous mode [ 1210.090700][T10430] hsr_slave_1: entered promiscuous mode [ 1210.109153][T10512] loop1: detected capacity change from 0 to 512 [ 1210.212897][T10512] EXT4-fs: inline encryption not supported [ 1210.287699][T10512] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1210.445443][T10512] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1210.545739][T10512] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.1135: Directory hole found for htree leaf block 0 [ 1210.652748][ T5779] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1211.862781][T10528] loop4: detected capacity change from 0 to 2048 [ 1212.131147][T10528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1212.223108][T10478] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1214.545135][T10430] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1214.582115][T10430] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1216.477126][T10430] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1216.711527][T10430] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1216.846750][ T42] hsr_slave_0: left promiscuous mode [ 1216.957698][ T42] hsr_slave_1: left promiscuous mode [ 1217.051212][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.131400][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1217.188815][ T42] bridge_slave_1: left allmulticast mode [ 1217.194829][ T42] bridge_slave_1: left promiscuous mode [ 1217.214824][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.393302][ T42] bridge_slave_0: left allmulticast mode [ 1217.405682][ T42] bridge_slave_0: left promiscuous mode [ 1217.430737][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.259689][T10560] loop4: detected capacity change from 0 to 256 [ 1218.378111][T10560] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 1218.708461][T10557] kvm_pr_unimpl_wrmsr: 5 callbacks suppressed [ 1218.708484][T10557] kvm: kvm [10555]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x689c [ 1218.716858][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1220.601844][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1220.666564][T10557] kvm: kvm [10555]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000e94d [ 1220.775473][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1220.944074][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1222.685757][T10478] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 1223.243571][T10574] loop1: detected capacity change from 0 to 2048 [ 1223.359093][ T42] bond0 (unregistering): Released all slaves [ 1223.394240][T10574] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1223.935139][T10430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.028095][T10430] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.071635][ T7547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.078915][ T7547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.188188][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.195500][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.068955][T10430] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1226.131112][T10430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1228.018886][T10430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.655057][T10430] veth0_vlan: entered promiscuous mode [ 1230.704161][T10430] veth1_vlan: entered promiscuous mode [ 1230.839225][T10430] veth0_macvtap: entered promiscuous mode [ 1230.911776][T10430] veth1_macvtap: entered promiscuous mode [ 1230.956856][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.009479][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.048068][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.083348][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.110505][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.155514][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.185929][T10430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.243067][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.270488][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.301125][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.340571][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.375312][T10430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.400724][T10430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.444238][T10430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.454443][T10634] loop4: detected capacity change from 0 to 512 [ 1231.491673][T10634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1231.498378][T10634] ext4: Unknown parameter 'fscontext' [ 1231.518781][T10430] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.552241][T10430] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.596771][T10430] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.607657][T10430] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.014535][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.088378][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.037923][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.083323][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.701077][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.707555][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.717551][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1157'. [ 1246.577298][T10713] loop1: detected capacity change from 0 to 512 [ 1246.651609][T10713] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1246.658327][T10713] ext4: Unknown parameter 'fscontext' [ 1252.058072][T10741] loop4: detected capacity change from 0 to 8192 [ 1252.100368][T10741] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1254.954262][T10745] kvm: kvm [10744]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x689c [ 1258.286236][T10775] loop1: detected capacity change from 0 to 512 [ 1258.328123][T10775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1258.371114][T10775] ext4: Unknown parameter 'fscontext' [ 1259.592980][T10784] loop1: detected capacity change from 0 to 512 [ 1259.626996][T10784] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1259.670266][T10784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1259.731030][T10784] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1260.067603][ T5779] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 7: comm syz-executor: path /311/file1/lost+ound: bad entry in directory: inode out of bounds - offset=0, inode=385875968, rec_len=2048, size=2048 fake=0 [ 1260.124334][ T5779] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=6144, inode=385875968, rec_len=2048, size=2048 fake=0 [ 1260.201129][ T5779] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 7: comm syz-executor: path /311/file1/lost+ound: bad entry in directory: inode out of bounds - offset=0, inode=385875968, rec_len=2048, size=2048 fake=0 [ 1260.290341][ T5779] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=6144, inode=385875968, rec_len=2048, size=2048 fake=0 [ 1262.021638][ T5779] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 7: comm syz-executor: path /311/file1/lost+ound: bad entry in directory: inode out of bounds - offset=0, inode=385875968, rec_len=2048, size=2048 fake=0 [ 1262.094427][ T5779] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=6144, inode=385875968, rec_len=2048, size=2048 fake=0 [ 1262.147948][ T5779] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 7: comm syz-executor: path /311/file1/lost+ound: bad entry in directory: inode out of bounds - offset=0, inode=385875968, rec_len=2048, size=2048 fake=0 [ 1262.222510][ T5779] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=6144, inode=385875968, rec_len=2048, size=2048 fake=0 [ 1262.285388][ T5779] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 7: comm syz-executor: path /311/file1/lost+ound: bad entry in directory: inode out of bounds - offset=0, inode=385875968, rec_len=2048, size=2048 fake=0 [ 1262.505562][ T5779] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 7: comm syz-executor: bad entry in directory: inode out of bounds - offset=6144, inode=385875968, rec_len=2048, size=2048 fake=0 [ 1265.697289][ T9829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1265.852660][T10829] loop3: detected capacity change from 0 to 8192 [ 1265.898300][T10829] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1266.734243][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.137152][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.407124][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.812991][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.893405][T10850] netlink: 'syz.4.1187': attribute type 4 has an invalid length. [ 1268.850529][ T5819] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1270.048549][T10856] loop4: detected capacity change from 0 to 128 [ 1270.550538][ T5819] usb 6-1: Using ep0 maxpacket: 16 [ 1270.558170][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.569788][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.581604][ T5819] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1270.600527][ T5819] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1270.610017][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.631804][ T5819] usb 6-1: config 0 descriptor?? [ 1270.740499][T10711] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1270.803329][ T5819] usb 6-1: can't set config #0, error -71 [ 1270.823495][ T5819] usb 6-1: USB disconnect, device number 2 [ 1271.019278][T10865] loop5: detected capacity change from 0 to 256 [ 1271.481166][ T9126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1271.531544][ T9126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1271.550591][ T9126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1271.600712][ T9126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1271.641751][ T9126] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1271.690733][ T9126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1274.600586][T10478] Bluetooth: hci2: command tx timeout [ 1275.149696][ T11] bond1: (slave gretap1): Releasing active interface [ 1275.399008][ T9126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1275.413703][ T9126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1275.430299][ T9126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1275.453628][ T9126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1275.472936][ T9126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1275.511716][ T9126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1277.331780][T10478] Bluetooth: hci2: command tx timeout [ 1277.463037][T10870] chnl_net:caif_netlink_parms(): no params data found [ 1277.581327][T10478] Bluetooth: hci0: command tx timeout [ 1278.242770][T10870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.284060][T10870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.317938][T10870] bridge_slave_0: entered allmulticast mode [ 1278.342321][T10870] bridge_slave_0: entered promiscuous mode [ 1278.379821][T10870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.388361][T10870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.420893][T10870] bridge_slave_1: entered allmulticast mode [ 1278.428488][T10870] bridge_slave_1: entered promiscuous mode [ 1278.630575][ T11] hsr_slave_0: left promiscuous mode [ 1278.663285][ T11] hsr_slave_1: left promiscuous mode [ 1278.799707][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.807314][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.851352][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1278.859297][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.911564][ T11] bridge_slave_1: left allmulticast mode [ 1278.917302][ T11] bridge_slave_1: left promiscuous mode [ 1278.940910][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.984790][ T11] bridge_slave_0: left allmulticast mode [ 1278.990561][ T11] bridge_slave_0: left promiscuous mode [ 1278.996346][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.081667][T10939] loop4: detected capacity change from 0 to 256 [ 1279.266755][ T11] veth1_macvtap: left promiscuous mode [ 1279.276876][ T11] veth0_macvtap: left promiscuous mode [ 1279.308668][ T11] veth1_vlan: left promiscuous mode [ 1279.314402][ T11] veth0_vlan: left promiscuous mode [ 1279.340743][ T9126] Bluetooth: hci2: command tx timeout [ 1279.367045][T10939] FAT-fs (loop4): Directory bread(block 64) failed [ 1279.377600][T10939] FAT-fs (loop4): Directory bread(block 65) failed [ 1279.404405][T10939] FAT-fs (loop4): Directory bread(block 66) failed [ 1279.462335][T10939] FAT-fs (loop4): Directory bread(block 67) failed [ 1279.469923][T10939] FAT-fs (loop4): Directory bread(block 68) failed [ 1279.491853][T10939] FAT-fs (loop4): Directory bread(block 69) failed [ 1279.508945][T10939] FAT-fs (loop4): Directory bread(block 70) failed [ 1281.295951][ T9126] Bluetooth: hci0: command tx timeout [ 1281.331936][T10939] FAT-fs (loop4): Directory bread(block 71) failed [ 1281.364492][T10939] FAT-fs (loop4): Directory bread(block 72) failed [ 1281.371957][T10939] FAT-fs (loop4): Directory bread(block 73) failed [ 1281.432358][ T9126] Bluetooth: hci2: command tx timeout [ 1282.697888][ T11] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1282.775190][ T11] bond1 (unregistering): Released all slaves [ 1284.575965][ T9126] Bluetooth: hci0: command tx timeout [ 1285.510321][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1285.919754][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1286.058444][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1287.654103][ T9126] Bluetooth: hci0: command tx timeout [ 1287.735277][ T11] bond0 (unregistering): (slave 30): Releasing backup interface [ 1288.260808][ T11] bond0 (unregistering): Released all slaves [ 1288.605844][T10870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1288.635621][T10870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.671651][T10970] loop4: detected capacity change from 0 to 16 [ 1288.754061][T10970] erofs: (device loop4): mounted with root inode @ nid 36. [ 1288.763498][ T1191] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1288.819983][T10970] erofs: (device loop4): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 1288.877961][T10870] team0: Port device team_slave_0 added [ 1288.918638][T10870] team0: Port device team_slave_1 added [ 1288.955641][T10904] chnl_net:caif_netlink_parms(): no params data found [ 1289.006566][ T1191] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.040294][ T1191] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1289.062150][ T1191] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1290.310910][ T1191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1290.319018][ T1191] usb 4-1: SerialNumber: syz [ 1290.498261][T10870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1290.509794][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1290.539771][T10870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1290.553879][T10870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1290.573212][ T1191] usb 4-1: 0:2 : does not exist [ 1290.584976][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1290.611361][T10870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.631803][ T1191] usb 4-1: USB disconnect, device number 9 [ 1290.708096][T10859] udevd[10859]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1290.869792][T10870] hsr_slave_0: entered promiscuous mode [ 1290.877305][T10870] hsr_slave_1: entered promiscuous mode [ 1290.911319][T10870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1290.918968][T10870] Cannot create hsr debugfs directory [ 1291.009725][T10904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.039128][T10904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.054782][T10904] bridge_slave_0: entered allmulticast mode [ 1291.065020][T10904] bridge_slave_0: entered promiscuous mode [ 1291.153641][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.328273][T10904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.349116][T10904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.377255][T10904] bridge_slave_1: entered allmulticast mode [ 1291.385882][T10904] bridge_slave_1: entered promiscuous mode [ 1293.066322][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.223369][T10904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.289847][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.308894][T10904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.376018][T10904] team0: Port device team_slave_0 added [ 1293.397875][T10904] team0: Port device team_slave_1 added [ 1293.463160][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.331732][T10904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1295.338764][T10904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.382423][T10904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.452898][T10904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.459919][T10904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.550925][T10904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.364766][T10870] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1296.428347][T10870] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1296.476298][T10870] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1296.527793][T10870] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1296.596927][T11023] loop3: detected capacity change from 0 to 256 [ 1296.692094][T11023] FAT-fs (loop3): Directory bread(block 64) failed [ 1296.698717][T11023] FAT-fs (loop3): Directory bread(block 65) failed [ 1296.706771][T11023] FAT-fs (loop3): Directory bread(block 66) failed [ 1296.732066][T11023] FAT-fs (loop3): Directory bread(block 67) failed [ 1296.738797][T11023] FAT-fs (loop3): Directory bread(block 68) failed [ 1296.756952][T11023] FAT-fs (loop3): Directory bread(block 69) failed [ 1296.765171][T11023] FAT-fs (loop3): Directory bread(block 70) failed [ 1296.786929][T10904] hsr_slave_0: entered promiscuous mode [ 1296.801659][T10904] hsr_slave_1: entered promiscuous mode [ 1296.808130][T11023] FAT-fs (loop3): Directory bread(block 71) failed [ 1296.821075][T10904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1296.828704][T10904] Cannot create hsr debugfs directory [ 1296.833615][T11023] FAT-fs (loop3): Directory bread(block 72) failed [ 1296.851457][T11023] FAT-fs (loop3): Directory bread(block 73) failed [ 1299.874636][T10870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1300.423927][T10870] 8021q: adding VLAN 0 to HW filter on device team0 [ 1300.470312][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.476967][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.532465][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.539696][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1300.653242][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.660528][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.777459][T10904] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1300.966174][T10904] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1302.622913][T10904] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1302.710782][T10904] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1304.675862][ T11] hsr_slave_0: left promiscuous mode [ 1304.727199][ T11] hsr_slave_1: left promiscuous mode [ 1304.735285][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1304.757727][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1304.767459][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1304.795073][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1304.819936][ T11] bridge_slave_1: left allmulticast mode [ 1304.843557][ T11] bridge_slave_1: left promiscuous mode [ 1304.851550][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.879143][ T11] bridge_slave_0: left allmulticast mode [ 1304.892617][ T11] bridge_slave_0: left promiscuous mode [ 1304.898445][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.958809][ T11] veth1_macvtap: left promiscuous mode [ 1304.980684][ T11] veth0_macvtap: left promiscuous mode [ 1304.986442][ T11] veth1_vlan: left promiscuous mode [ 1305.000739][ T11] veth0_vlan: left promiscuous mode [ 1305.578191][T11074] loop4: detected capacity change from 0 to 512 [ 1310.253137][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1310.354624][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1310.540749][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1311.936210][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1314.572488][ T11] bond0 (unregistering): Released all slaves [ 1318.205958][T10904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1318.302969][T10870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1318.313909][T10904] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.401495][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.408746][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.511280][T10837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.518490][T10837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.896580][T10870] veth0_vlan: entered promiscuous mode [ 1319.943175][T10870] veth1_vlan: entered promiscuous mode [ 1320.002715][T10904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.124088][T10870] veth0_macvtap: entered promiscuous mode [ 1320.158159][T10870] veth1_macvtap: entered promiscuous mode [ 1320.323181][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.354630][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.385150][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.746222][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.782307][T10870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1322.013198][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.054073][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.080728][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.101575][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.132217][T10870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1322.157434][T11151] tc_dump_action: action bad kind [ 1322.828182][T10870] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.880543][T10870] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.925021][T10870] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.961601][T10870] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.201050][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.208963][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.313740][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.332185][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.487165][T10904] veth0_vlan: entered promiscuous mode [ 1323.530246][T10904] veth1_vlan: entered promiscuous mode [ 1323.640779][T10904] veth0_macvtap: entered promiscuous mode [ 1325.177520][T10904] veth1_macvtap: entered promiscuous mode [ 1325.344847][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.377477][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.475443][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.487861][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.502816][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.513440][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.542242][T10904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1325.594724][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1325.620113][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.651018][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1325.690744][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.710447][T10904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1325.750506][T10904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.783447][T10904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1325.818415][T10904] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.848525][T10904] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.376546][T10904] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.431008][T10904] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.847144][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.883711][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.962192][T10837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.970106][T10837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1328.324206][T11185] loop7: detected capacity change from 0 to 8192 [ 1328.354468][T11185] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1329.219418][T11187] loop4: detected capacity change from 0 to 512 [ 1329.642264][T11187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1331.463434][T11187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1331.490978][T11187] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1331.662614][T11187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.330585][ T9424] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1332.550523][ T9424] usb 4-1: Using ep0 maxpacket: 8 [ 1332.592148][ T9424] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1332.602465][ T9424] usb 4-1: config 1 has an invalid interface descriptor of length 2, skipping [ 1332.631183][ T9424] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping [ 1332.640145][ T9424] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.684705][ T9424] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1332.704792][ T9424] usb 4-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40 [ 1332.722074][ T9424] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.746256][ T9424] usb 4-1: Product: syz [ 1332.764982][ T9424] usb 4-1: Manufacturer: syz [ 1332.769663][ T9424] usb 4-1: SerialNumber: syz [ 1333.046206][ T9424] usb 4-1: 0:1 : does not exist [ 1333.055953][ T9424] usb 4-1: 0:2 : does not exist [ 1333.086739][T11214] loop4: detected capacity change from 0 to 40427 [ 1333.138741][T11214] F2FS-fs (loop4): Image doesn't support compression [ 1333.141129][ T9424] usb 4-1: USB disconnect, device number 10 [ 1333.184932][T11214] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1333.257352][T10859] udevd[10859]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1337.907232][T11240] loop3: detected capacity change from 0 to 256 [ 1337.970678][T11240] exFAT-fs (loop3): invalid boot record signature [ 1338.007135][T11240] exFAT-fs (loop3): failed to read boot sector [ 1338.043898][T11240] exFAT-fs (loop3): failed to recognize exfat type [ 1345.910186][T11281] loop7: detected capacity change from 0 to 8192 [ 1345.928921][T11281] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1349.247970][ T9126] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 1354.049149][T11331] loop7: detected capacity change from 0 to 128 [ 1354.070072][T11334] loop6: detected capacity change from 0 to 512 [ 1354.095076][T11334] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1354.182450][T11334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1354.222704][T11334] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1354.345940][T11339] loop4: detected capacity change from 0 to 8192 [ 1354.427540][T11339] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1355.378877][T10870] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1355.406037][T11345] loop3: detected capacity change from 0 to 512 [ 1355.812824][T11345] [ 1355.815201][T11345] ====================================================== [ 1355.822236][T11345] WARNING: possible circular locking dependency detected [ 1355.829293][T11345] syzkaller #0 Not tainted [ 1355.833721][T11345] ------------------------------------------------------ [ 1355.840745][T11345] syz.3.1259/11345 is trying to acquire lock: [ 1355.846815][T11345] ffff888030014c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 1355.856869][T11345] [ 1355.856869][T11345] but task is already holding lock: [ 1355.864266][T11345] ffff88805cd394c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 1355.874160][T11345] [ 1355.874160][T11345] which lock already depends on the new lock. [ 1355.874160][T11345] [ 1355.884570][T11345] [ 1355.884570][T11345] the existing dependency chain (in reverse order) is: [ 1355.893612][T11345] [ 1355.893612][T11345] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 1355.901236][T11345] down_write+0x97/0x200 [ 1355.906052][T11345] ext4_destroy_inline_data+0x28/0xe0 [ 1355.912006][T11345] ext4_do_writepages+0x4f0/0x3990 [ 1355.917695][T11345] ext4_writepages+0x1dd/0x350 [ 1355.923034][T11345] do_writepages+0x3b3/0x630 [ 1355.928204][T11345] __writeback_single_inode+0x153/0xec0 [ 1355.934330][T11345] writeback_sb_inodes+0x7cd/0xf50 [ 1355.940018][T11345] wb_writeback+0x46a/0xbf0 [ 1355.945098][T11345] wb_workfn+0x400/0xe60 [ 1355.949915][T11345] process_scheduled_works+0xa5d/0x15d0 [ 1355.956039][T11345] worker_thread+0xa55/0xfc0 [ 1355.961210][T11345] kthread+0x2fa/0x390 [ 1355.965848][T11345] ret_from_fork+0x48/0x80 [ 1355.970832][T11345] ret_from_fork_asm+0x11/0x20 [ 1355.976178][T11345] [ 1355.976178][T11345] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1355.984649][T11345] __lock_acquire+0x2df1/0x7d40 [ 1355.990064][T11345] lock_acquire+0x19e/0x420 [ 1355.995125][T11345] percpu_down_read+0x44/0x1a0 [ 1356.000454][T11345] ext4_writepages+0x1a4/0x350 [ 1356.005772][T11345] do_writepages+0x3b3/0x630 [ 1356.010919][T11345] __writeback_single_inode+0x153/0xec0 [ 1356.017020][T11345] writeback_single_inode+0x21f/0x760 [ 1356.022948][T11345] write_inode_now+0x183/0x210 [ 1356.028264][T11345] iput+0x5ae/0x920 [ 1356.032614][T11345] ext4_xattr_block_set+0x273f/0x32b0 [ 1356.038537][T11345] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 1356.044997][T11345] __ext4_expand_extra_isize+0x306/0x400 [ 1356.051190][T11345] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 1356.057196][T11345] ext4_evict_inode+0x7f3/0xea0 [ 1356.062622][T11345] evict+0x4ca/0x8d0 [ 1356.067066][T11345] ext4_orphan_cleanup+0xbec/0x1420 [ 1356.072842][T11345] ext4_fill_super+0x5eea/0x67b0 [ 1356.078332][T11345] get_tree_bdev+0x3f3/0x520 [ 1356.083466][T11345] vfs_get_tree+0x8c/0x280 [ 1356.088436][T11345] do_new_mount+0x24b/0xa40 [ 1356.093489][T11345] __se_sys_mount+0x2e7/0x3d0 [ 1356.098711][T11345] do_syscall_64+0x55/0xb0 [ 1356.103686][T11345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1356.110127][T11345] [ 1356.110127][T11345] other info that might help us debug this: [ 1356.110127][T11345] [ 1356.120377][T11345] Possible unsafe locking scenario: [ 1356.120377][T11345] [ 1356.127848][T11345] CPU0 CPU1 [ 1356.133244][T11345] ---- ---- [ 1356.138645][T11345] lock(&ei->xattr_sem); [ 1356.143003][T11345] lock(&sbi->s_writepages_rwsem); [ 1356.150753][T11345] lock(&ei->xattr_sem); [ 1356.157624][T11345] rlock(&sbi->s_writepages_rwsem); [ 1356.162949][T11345] [ 1356.162949][T11345] *** DEADLOCK *** [ 1356.162949][T11345] [ 1356.171140][T11345] 3 locks held by syz.3.1259/11345: [ 1356.176368][T11345] #0: ffff888053fba0e0 (&type->s_umount_key#32){++++}-{3:3}, at: get_tree_bdev+0x353/0x520 [ 1356.186517][T11345] #1: ffff888053fba608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2bf/0xea0 [ 1356.195980][T11345] #2: ffff88805cd394c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 1356.206294][T11345] [ 1356.206294][T11345] stack backtrace: [ 1356.212218][T11345] CPU: 1 PID: 11345 Comm: syz.3.1259 Not tainted syzkaller #0 [ 1356.219695][T11345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1356.229786][T11345] Call Trace: [ 1356.233116][T11345] [ 1356.236069][T11345] dump_stack_lvl+0x18c/0x250 [ 1356.240779][T11345] ? load_image+0x420/0x420 [ 1356.245308][T11345] ? show_regs_print_info+0x20/0x20 [ 1356.250550][T11345] ? print_circular_bug+0x12b/0x1a0 [ 1356.255793][T11345] check_noncircular+0x2fc/0x400 [ 1356.260757][T11345] ? do_raw_spin_unlock+0x121/0x230 [ 1356.265985][T11345] ? look_up_lock_class+0x75/0x140 [ 1356.271133][T11345] ? print_deadlock_bug+0x5d0/0x5d0 [ 1356.276365][T11345] ? lockdep_lock+0xf5/0x230 [ 1356.280983][T11345] ? _find_first_zero_bit+0xd3/0x100 [ 1356.286297][T11345] __lock_acquire+0x2df1/0x7d40 [ 1356.291189][T11345] ? mark_lock+0x94/0x320 [ 1356.295555][T11345] ? verify_lock_unused+0x140/0x140 [ 1356.300777][T11345] ? __lock_acquire+0x1347/0x7d40 [ 1356.305838][T11345] lock_acquire+0x19e/0x420 [ 1356.310377][T11345] ? ext4_writepages+0x1a4/0x350 [ 1356.315386][T11345] ? __might_sleep+0xe0/0xe0 [ 1356.320046][T11345] ? read_lock_is_recursive+0x20/0x20 [ 1356.325475][T11345] ? mark_lock+0x94/0x320 [ 1356.329848][T11345] ? __lock_acquire+0x1347/0x7d40 [ 1356.334912][T11345] percpu_down_read+0x44/0x1a0 [ 1356.339718][T11345] ? ext4_writepages+0x1a4/0x350 [ 1356.344702][T11345] ext4_writepages+0x1a4/0x350 [ 1356.349508][T11345] ? ext4_read_folio+0x2f0/0x2f0 [ 1356.354487][T11345] ? __rwlock_init+0x150/0x150 [ 1356.359287][T11345] ? do_raw_spin_unlock+0x121/0x230 [ 1356.364520][T11345] ? ext4_read_folio+0x2f0/0x2f0 [ 1356.369498][T11345] do_writepages+0x3b3/0x630 [ 1356.374133][T11345] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 1356.379895][T11345] ? writeback_single_inode+0x214/0x760 [ 1356.385474][T11345] ? __lock_acquire+0x7d40/0x7d40 [ 1356.390527][T11345] ? do_raw_spin_lock+0x11f/0x2c0 [ 1356.395585][T11345] __writeback_single_inode+0x153/0xec0 [ 1356.401175][T11345] writeback_single_inode+0x21f/0x760 [ 1356.406582][T11345] ? io_schedule+0x80/0xd0 [ 1356.411029][T11345] ? write_inode_now+0x210/0x210 [ 1356.416010][T11345] write_inode_now+0x183/0x210 [ 1356.420811][T11345] ? bdi_split_work_to_wbs+0x910/0x910 [ 1356.426342][T11345] ? do_raw_spin_unlock+0x121/0x230 [ 1356.431593][T11345] iput+0x5ae/0x920 [ 1356.435451][T11345] ext4_xattr_block_set+0x273f/0x32b0 [ 1356.441011][T11345] ? __might_sleep+0xe0/0xe0 [ 1356.445673][T11345] ? xattr_find_entry+0x12b/0x2f0 [ 1356.450745][T11345] ? ext4_xattr_block_find+0x350/0x350 [ 1356.456246][T11345] ? ext4_xattr_block_find+0x2d4/0x350 [ 1356.461740][T11345] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 1356.467687][T11345] __ext4_expand_extra_isize+0x306/0x400 [ 1356.473361][T11345] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 1356.478872][T11345] ext4_evict_inode+0x7f3/0xea0 [ 1356.483772][T11345] ? _raw_spin_unlock+0x28/0x40 [ 1356.488692][T11345] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1356.494639][T11345] ? do_raw_spin_unlock+0x121/0x230 [ 1356.499880][T11345] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1356.505810][T11345] evict+0x4ca/0x8d0 [ 1356.509741][T11345] ? proc_nr_inodes+0x230/0x230 [ 1356.514627][T11345] ? do_raw_spin_unlock+0x121/0x230 [ 1356.519858][T11345] ? _raw_spin_unlock+0x28/0x40 [ 1356.524745][T11345] ? iput+0x706/0x920 [ 1356.528781][T11345] ext4_orphan_cleanup+0xbec/0x1420 [ 1356.534010][T11345] ? ext4_orphan_del+0xbf0/0xbf0 [ 1356.538984][T11345] ? ext4_register_li_request+0x183/0x940 [ 1356.544727][T11345] ? errseq_check_and_advance+0x66/0x120 [ 1356.550398][T11345] ext4_fill_super+0x5eea/0x67b0 [ 1356.555385][T11345] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1356.561660][T11345] ? __might_sleep+0xe0/0xe0 [ 1356.566277][T11345] ? read_lock_is_recursive+0x20/0x20 [ 1356.571683][T11345] ? snprintf+0xe9/0x140 [ 1356.575972][T11345] ? down_read_killable+0x340/0x340 [ 1356.581207][T11345] ? setup_bdev_super+0x56b/0x660 [ 1356.586276][T11345] get_tree_bdev+0x3f3/0x520 [ 1356.590903][T11345] ? vfs_parse_fs_string+0x170/0x170 [ 1356.596221][T11345] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1356.602494][T11345] ? setup_bdev_super+0x660/0x660 [ 1356.607549][T11345] ? apparmor_capable+0x137/0x1a0 [ 1356.612607][T11345] ? bpf_lsm_capable+0x9/0x10 [ 1356.617314][T11345] ? security_capable+0x89/0xb0 [ 1356.622207][T11345] vfs_get_tree+0x8c/0x280 [ 1356.626647][T11345] do_new_mount+0x24b/0xa40 [ 1356.631190][T11345] __se_sys_mount+0x2e7/0x3d0 [ 1356.635892][T11345] ? __x64_sys_mount+0xc0/0xc0 [ 1356.640683][T11345] ? lockdep_hardirqs_on+0x98/0x150 [ 1356.645914][T11345] ? __x64_sys_mount+0x20/0xc0 [ 1356.650700][T11345] do_syscall_64+0x55/0xb0 [ 1356.655141][T11345] ? clear_bhb_loop+0x40/0x90 [ 1356.659840][T11345] ? clear_bhb_loop+0x40/0x90 [ 1356.664538][T11345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1356.670462][T11345] RIP: 0033:0x7f107f39e0ca [ 1356.674922][T11345] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.694581][T11345] RSP: 002b:00007f1080340e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1356.703031][T11345] RAX: ffffffffffffffda RBX: 00007f1080340ee0 RCX: 00007f107f39e0ca [ 1356.711073][T11345] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 00007f1080340ea0 [ 1356.719102][T11345] RBP: 0000200000000180 R08: 00007f1080340ee0 R09: 0000000000000010 [ 1356.727125][T11345] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000040 [ 1356.735127][T11345] R13: 00007f1080340ea0 R14: 0000000000000485 R15: 000000000000002c [ 1356.743138][T11345] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1356.865149][T11345] ------------[ cut here ]------------ [ 1356.871009][T11345] EA inode 11 i_nlink=65535 [ 1356.941115][T11345] WARNING: CPU: 1 PID: 11345 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x53c/0x590 [ 1356.956151][T11345] Modules linked in: [ 1356.960103][T11345] CPU: 1 PID: 11345 Comm: syz.3.1259 Not tainted syzkaller #0 [ 1356.967662][T11345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1356.977910][T11345] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 1356.984756][T11345] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 85 d2 98 ff 49 8b 37 48 c7 c7 60 dc de 8a 89 da e8 54 44 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 2e c1 41 08 [ 1356.984777][T11345] RSP: 0018:ffffc9000461f1a0 EFLAGS: 00010246 [ 1356.984796][T11345] RAX: a4b1c9140425be00 RBX: 000000000000ffff RCX: 0000000000080000 [ 1356.984809][T11345] RDX: ffffc9000d4cc000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1356.984823][T11345] RBP: ffffc9000461f298 R08: ffffc9000461eda7 R09: 1ffff920008c3db4 [ 1356.984838][T11345] R10: dffffc0000000000 R11: fffff520008c3db5 R12: dffffc0000000000 [ 1356.984852][T11345] R13: ffff88805cd3c0a8 R14: ffff88805cd3beb0 R15: ffff88805cd3bf00 [ 1356.984868][T11345] FS: 00007f10803416c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1357.060705][T11345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1357.060719][T11345] CR2: 00007fc800941000 CR3: 0000000069fb2000 CR4: 00000000003506e0 [ 1357.060735][T11345] Call Trace: [ 1357.060742][T11345] [ 1357.060752][T11345] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 1357.060783][T11345] ? ext4_xattr_inode_iget+0x3df/0x600 [ 1357.060809][T11345] ext4_xattr_set_entry+0xcda/0x1e90 [ 1357.060841][T11345] ext4_xattr_ibody_set+0x254/0x6a0 [ 1357.060870][T11345] ext4_expand_extra_isize_ea+0x1398/0x1e80 [ 1357.060908][T11345] __ext4_expand_extra_isize+0x306/0x400 [ 1357.060936][T11345] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 1357.060962][T11345] ext4_evict_inode+0x7f3/0xea0 [ 1357.060982][T11345] ? _raw_spin_unlock+0x28/0x40 [ 1357.061008][T11345] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1357.061031][T11345] ? do_raw_spin_unlock+0x121/0x230 [ 1357.061053][T11345] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1357.061075][T11345] evict+0x4ca/0x8d0 [ 1357.061097][T11345] ? proc_nr_inodes+0x230/0x230 [ 1357.061115][T11345] ? do_raw_spin_unlock+0x121/0x230 [ 1357.061137][T11345] ? _raw_spin_unlock+0x28/0x40 [ 1357.061158][T11345] ? iput+0x706/0x920 [ 1357.061176][T11345] ext4_orphan_cleanup+0xbec/0x1420 [ 1357.061196][T11345] ? ext4_orphan_del+0xbf0/0xbf0 [ 1357.061212][T11345] ? ext4_register_li_request+0x183/0x940 [ 1357.061227][T11345] ? errseq_check_and_advance+0x66/0x120 [ 1357.061282][T11345] ext4_fill_super+0x5eea/0x67b0 [ 1357.061318][T11345] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1357.061355][T11345] ? __might_sleep+0xe0/0xe0 [ 1357.061381][T11345] ? read_lock_is_recursive+0x20/0x20 [ 1357.061400][T11345] ? snprintf+0xe9/0x140 [ 1357.061430][T11345] ? down_read_killable+0x340/0x340 [ 1357.061452][T11345] ? setup_bdev_super+0x56b/0x660 [ 1357.061469][T11345] get_tree_bdev+0x3f3/0x520 [ 1357.061485][T11345] ? vfs_parse_fs_string+0x170/0x170 [ 1357.061506][T11345] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1357.061526][T11345] ? setup_bdev_super+0x660/0x660 [ 1357.061541][T11345] ? apparmor_capable+0x137/0x1a0 [ 1357.061560][T11345] ? bpf_lsm_capable+0x9/0x10 [ 1357.061584][T11345] ? security_capable+0x89/0xb0 [ 1357.061606][T11345] vfs_get_tree+0x8c/0x280 [ 1357.061623][T11345] do_new_mount+0x24b/0xa40 [ 1357.061642][T11345] __se_sys_mount+0x2e7/0x3d0 [ 1357.061660][T11345] ? __x64_sys_mount+0xc0/0xc0 [ 1357.061677][T11345] ? lockdep_hardirqs_on+0x98/0x150 [ 1357.061699][T11345] ? __x64_sys_mount+0x20/0xc0 [ 1357.061715][T11345] do_syscall_64+0x55/0xb0 [ 1357.061733][T11345] ? clear_bhb_loop+0x40/0x90 [ 1357.061746][T11345] ? clear_bhb_loop+0x40/0x90 [ 1357.061759][T11345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1357.061783][T11345] RIP: 0033:0x7f107f39e0ca [ 1357.061798][T11345] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1357.061811][T11345] RSP: 002b:00007f1080340e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1357.061828][T11345] RAX: ffffffffffffffda RBX: 00007f1080340ee0 RCX: 00007f107f39e0ca [ 1357.061839][T11345] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 00007f1080340ea0 [ 1357.061852][T11345] RBP: 0000200000000180 R08: 00007f1080340ee0 R09: 0000000000000010 [ 1357.061863][T11345] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000040 [ 1357.061873][T11345] R13: 00007f1080340ea0 R14: 0000000000000485 R15: 000000000000002c [ 1357.061889][T11345] [ 1357.061896][T11345] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1357.061905][T11345] CPU: 1 PID: 11345 Comm: syz.3.1259 Not tainted syzkaller #0 [ 1357.061918][T11345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1357.061927][T11345] Call Trace: [ 1357.061932][T11345] [ 1357.061937][T11345] dump_stack_lvl+0x18c/0x250 [ 1357.061956][T11345] ? show_regs_print_info+0x20/0x20 [ 1357.061973][T11345] ? load_image+0x420/0x420 [ 1357.061992][T11345] panic+0x2dc/0x730 [ 1357.062017][T11345] ? bpf_jit_dump+0xd0/0xd0 [ 1357.062045][T11345] __warn+0x2e0/0x470 [ 1357.062066][T11345] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 1357.062091][T11345] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 1357.062115][T11345] report_bug+0x2be/0x4f0 [ 1357.062144][T11345] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 1357.062168][T11345] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 1357.062193][T11345] ? ext4_xattr_inode_update_ref+0x53e/0x590 [ 1357.062216][T11345] handle_bug+0xcf/0x120 [ 1357.062234][T11345] exc_invalid_op+0x1a/0x50 [ 1357.062252][T11345] asm_exc_invalid_op+0x1a/0x20 [ 1357.062274][T11345] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 1357.062299][T11345] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 85 d2 98 ff 49 8b 37 48 c7 c7 60 dc de 8a 89 da e8 54 44 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 2e c1 41 08 [ 1357.062312][T11345] RSP: 0018:ffffc9000461f1a0 EFLAGS: 00010246 [ 1357.062324][T11345] RAX: a4b1c9140425be00 RBX: 000000000000ffff RCX: 0000000000080000 [ 1357.062334][T11345] RDX: ffffc9000d4cc000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1357.062351][T11345] RBP: ffffc9000461f298 R08: ffffc9000461eda7 R09: 1ffff920008c3db4 [ 1357.062362][T11345] R10: dffffc0000000000 R11: fffff520008c3db5 R12: dffffc0000000000 [ 1357.062374][T11345] R13: ffff88805cd3c0a8 R14: ffff88805cd3beb0 R15: ffff88805cd3bf00 [ 1357.062423][T11345] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 1357.062455][T11345] ? ext4_xattr_inode_iget+0x3df/0x600 [ 1357.062493][T11345] ext4_xattr_set_entry+0xcda/0x1e90 [ 1357.062525][T11345] ext4_xattr_ibody_set+0x254/0x6a0 [ 1357.062550][T11345] ext4_expand_extra_isize_ea+0x1398/0x1e80 [ 1357.062586][T11345] __ext4_expand_extra_isize+0x306/0x400 [ 1357.062613][T11345] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 1357.062638][T11345] ext4_evict_inode+0x7f3/0xea0 [ 1357.062658][T11345] ? _raw_spin_unlock+0x28/0x40 [ 1357.062683][T11345] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1357.062705][T11345] ? do_raw_spin_unlock+0x121/0x230 [ 1357.062726][T11345] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 1357.062747][T11345] evict+0x4ca/0x8d0 [ 1357.062767][T11345] ? proc_nr_inodes+0x230/0x230 [ 1357.062785][T11345] ? do_raw_spin_unlock+0x121/0x230 [ 1357.062806][T11345] ? _raw_spin_unlock+0x28/0x40 [ 1357.062827][T11345] ? iput+0x706/0x920 [ 1357.062846][T11345] ext4_orphan_cleanup+0xbec/0x1420 [ 1357.062866][T11345] ? ext4_orphan_del+0xbf0/0xbf0 [ 1357.062881][T11345] ? ext4_register_li_request+0x183/0x940 [ 1357.062895][T11345] ? errseq_check_and_advance+0x66/0x120 [ 1357.062917][T11345] ext4_fill_super+0x5eea/0x67b0 [ 1357.062944][T11345] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1357.062964][T11345] ? __might_sleep+0xe0/0xe0 [ 1357.062983][T11345] ? read_lock_is_recursive+0x20/0x20 [ 1357.062999][T11345] ? snprintf+0xe9/0x140 [ 1357.063027][T11345] ? down_read_killable+0x340/0x340 [ 1357.063049][T11345] ? setup_bdev_super+0x56b/0x660 [ 1357.063065][T11345] get_tree_bdev+0x3f3/0x520 [ 1357.063080][T11345] ? vfs_parse_fs_string+0x170/0x170 [ 1357.063100][T11345] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 1357.063119][T11345] ? setup_bdev_super+0x660/0x660 [ 1357.063134][T11345] ? apparmor_capable+0x137/0x1a0 [ 1357.063151][T11345] ? bpf_lsm_capable+0x9/0x10 [ 1357.063173][T11345] ? security_capable+0x89/0xb0 [ 1357.063195][T11345] vfs_get_tree+0x8c/0x280 [ 1357.063211][T11345] do_new_mount+0x24b/0xa40 [ 1357.063229][T11345] __se_sys_mount+0x2e7/0x3d0 [ 1357.063246][T11345] ? __x64_sys_mount+0xc0/0xc0 [ 1357.063262][T11345] ? lockdep_hardirqs_on+0x98/0x150 [ 1357.063283][T11345] ? __x64_sys_mount+0x20/0xc0 [ 1357.063299][T11345] do_syscall_64+0x55/0xb0 [ 1357.063315][T11345] ? clear_bhb_loop+0x40/0x90 [ 1357.063328][T11345] ? clear_bhb_loop+0x40/0x90 [ 1357.063348][T11345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1357.063371][T11345] RIP: 0033:0x7f107f39e0ca [ 1357.063382][T11345] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1357.063394][T11345] RSP: 002b:00007f1080340e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1357.063408][T11345] RAX: ffffffffffffffda RBX: 00007f1080340ee0 RCX: 00007f107f39e0ca [ 1357.063419][T11345] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 00007f1080340ea0 [ 1357.063430][T11345] RBP: 0000200000000180 R08: 00007f1080340ee0 R09: 0000000000000010 [ 1357.063440][T11345] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000040 [ 1357.063449][T11345] R13: 00007f1080340ea0 R14: 0000000000000485 R15: 000000000000002c [ 1357.063464][T11345] [ 1357.064074][T11345] Kernel Offset: disabled