last executing test programs: 5m34.724389545s ago: executing program 3 (id=868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x40201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x1000, 0x2, 0x0, 0x8002}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) 5m32.228865751s ago: executing program 3 (id=873): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 5m31.706214159s ago: executing program 3 (id=876): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 5m30.30607414s ago: executing program 3 (id=880): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 5m30.196852082s ago: executing program 3 (id=881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 5m26.91996756s ago: executing program 3 (id=884): dup(0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4810, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYBLOB="f1e5ca4c5480ba330c4fa7236fdaa2484e6ca93e8009caee410da97394c04c07084f36aacfb1163b6fc130a0a379a44bccd1e4638985aceb5b720578e9b84a17fc7d32d0ed230b6fa732"], 0x11, 0x6a0, &(0x7f0000004200)="$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") truncate(0x0, 0xf64) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, 0x0, &(0x7f0000000880)=r0}, 0x20) truncate(&(0x7f00000000c0)='./file1\x00', 0x10000000000002) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000540)={0x0, 0x8c7c8f6744f0b74e, 0x8, "d4a911bb11e39d2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x40, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES8, @ANYRESOCT]) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200a804, &(0x7f0000000240)={[{@utf8}, {@uni_xlate}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fat=@fmask={'fmask', 0x3d, 0x7}}, {@utf8}, {@fat=@uid}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@fat=@dos1xfloppy}, {@numtail}, {@utf8}]}, 0xf5, 0x2e9, &(0x7f0000002140)="$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") 5m25.705984818s ago: executing program 32 (id=884): dup(0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4810, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYBLOB="f1e5ca4c5480ba330c4fa7236fdaa2484e6ca93e8009caee410da97394c04c07084f36aacfb1163b6fc130a0a379a44bccd1e4638985aceb5b720578e9b84a17fc7d32d0ed230b6fa732"], 0x11, 0x6a0, &(0x7f0000004200)="$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") truncate(0x0, 0xf64) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, 0x0, &(0x7f0000000880)=r0}, 0x20) truncate(&(0x7f00000000c0)='./file1\x00', 0x10000000000002) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000540)={0x0, 0x8c7c8f6744f0b74e, 0x8, "d4a911bb11e39d2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x40, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES8, @ANYRESOCT]) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200a804, &(0x7f0000000240)={[{@utf8}, {@uni_xlate}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fat=@fmask={'fmask', 0x3d, 0x7}}, {@utf8}, {@fat=@uid}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@fat=@dos1xfloppy}, {@numtail}, {@utf8}]}, 0xf5, 0x2e9, &(0x7f0000002140)="$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") 21.683895171s ago: executing program 1 (id=1596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b00000000ff00f825ffff00ffff00"}) r6 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r6, 0x4, 0x102800) write(r6, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xe) close_range(r4, 0xffffffffffffffff, 0x0) 20.001428256s ago: executing program 1 (id=1600): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212000100"], 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000010400), 0x121c41, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000040018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b703000000ccbc008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) recvfrom(0xffffffffffffffff, &(0x7f0000000b00)=""/28, 0x1c, 0x101, &(0x7f0000000b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x0, {0xa, 0x4e21, 0x9ae, @ipv4={'\x00', '\xff\xff', @remote}, 0x329}}}, 0x80) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x7f) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x8400, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000ec000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003780000000c0a010200fdffffff000000010000000900020073797a32000000004c000380480000800b000340000000003c000b80200007800e000100636f6e6e6c696d69740000000c00028008000140000000001800018004000200636f6e6e6c696d6974000000040002800900010073797a30"], 0xfc}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r9) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat2(r11, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x517002, 0x0, 0xc}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f00000001c0)={0x10200, 0x2, 0xdddd0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000fffffff300000014000600776c61af87c186dc1f43238b46c46e31000000000000000000000014000300fc02000000000000000000000000000114000200ff02000000000000000000000000000108000400ac1e0101"], 0x58}}, 0x0) write$uinput_user_dev(r1, &(0x7f0000000680)={'syz0\x00', {}, 0x3b, [0x0, 0x0, 0x0, 0x10000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], [0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000000, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x4, 0x0, 0x0, 0x0, 0xfffffff8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xede9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x9) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="000004000000a7210c77"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.98580799s ago: executing program 5 (id=1609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 16.672297054s ago: executing program 1 (id=1610): mount$bpf(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x888000, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 15.106579258s ago: executing program 1 (id=1614): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4004, r3, 0x2}) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) close(0xffffffffffffffff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) 11.909707885s ago: executing program 5 (id=1619): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x2, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) syz_clone(0x89000, 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)="f4f84ee5b77be10928cc726640b9e7820d419258e9dd1c29a916bdfe2f39c5cedbf04356c27a999a76c2e0ba7f61e365677df52c1c74") 9.317525973s ago: executing program 1 (id=1627): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) 9.081318216s ago: executing program 4 (id=1629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 8.419913596s ago: executing program 0 (id=1631): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x156, &(0x7f0000000240)="$eJzs271OwlAYxvHnAALiF4o6GAcTB12kfEQSN70UApUQixpxgTjoFXgN3pkXoIObkxgawEQ+mkjsifb/W/o2T0/6djjtu1QAIutUezIySvZPdtPZx5yx3RKAkPQGx48egOiJv9vuAIAdr2fSs6SXt7ua4smx+aCf3w/zWGo8f5B2EoPcpLX4fb54kg6G601m4vrMKF+amB/uD++/rBWtak1ZrWtDuUFeH63fnmMSAgAgOozyQfnMC2I6b3puYWq+4OfFqXnSz0sBeXlqnvLzfO3Kq89qE8AEsTn3fzxg/ycC9j8Ae9qd7kXV89wbCgoKilFh+80E4Lc5t61rp93pHjVb1YbbcC9LhcJJ5bhcrJQcf7J3Zs/3AP6ur4++7U4AAAAAAAAAAAAAAMBPbWrLdgsAAAAAQhLG70S2nxEAAAAAAAAAAAAAAAAAgP/mMwAA//9E/CIc") socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000005140)='./file0\x00', 0x1000884, &(0x7f0000000240)={[{@inode_cache}, {@nodatacow}, {@acl}, {@noautodefrag}, {@nobarrier}, {@autodefrag}, {@discard_sync}, {@usebackuproot}, {@ssd_spread}, {@enospc_debug}]}, 0x1, 0x5100, &(0x7f000000f3c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) read$FUSE(r0, &(0x7f0000005180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x113) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000480)="1d", 0x1}], 0x1, 0xcfbc, 0x3, 0x0) socket(0x2c, 0x5, 0x36) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000000}, 0x40) r5 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) prctl$PR_SET_SECUREBITS(0x1c, 0x51) setresuid(0xee01, r6, 0xffffffffffffffff) setresuid(0xffffffffffffffff, r6, r6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@loopback, @loopback, 0x0}, &(0x7f0000000400)=0xc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000380)={@mcast2, 0xf, r10}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5416af1431e685d17369e03b01eb8ec47e7545b119f381e411b122d2b7a191785272f3542a20bb8eb516ad1b8e0b6f5df77749d89dda704d7c7999a6277cbaa0e1f9a74455e2bd731dcd668604288b254946f00029fe229dfd47193735f41f548e84ace08d4057b2b5a1900c8611df0a7f6ab6c7e0ff", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf25100000005800018008000100", @ANYRES32=r7, @ANYBLOB="140002007665746831000000000000000000000008000100", @ANYBLOB="0800030003000000140002006e657464657673696d300000000000001400020070696d367265673100000000000000000c00018008000300000000000800070006000000080007000f000000080006000d00000008000900090000"], 0x98}, 0x1, 0x0, 0x0, 0x40009830}, 0x804) sendfile(r2, r2, 0x0, 0x7a680003) read$sequencer(0xffffffffffffffff, &(0x7f0000000040)=""/67, 0x43) 8.351949627s ago: executing program 4 (id=1632): mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000180)=@rc, 0x80, &(0x7f0000000240)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1, &(0x7f0000000480)=""/190, 0xbe}, 0x8}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000001880)=[{&(0x7f00000005c0)=""/229, 0xe5}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/66, 0x42}, {&(0x7f0000001740)=""/102, 0x66}, {&(0x7f00000002c0)=""/28, 0x1c}, {&(0x7f00000017c0)=""/151, 0x97}], 0x6, &(0x7f0000001900)=""/187, 0xbb}, 0x6}], 0x2, 0x2, &(0x7f0000000400)={r1, r2+60000000}) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b80)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c646d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75650000000000000003667365743d30121df478303030383030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be27ef17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e676cc6e5b2e542e426bceaab9b2cf261046247bce0565d13a6ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4656e47fe5a25502919954242f8d771fc2acf14f2cee04696a9d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d32da887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab924472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893f64421a40f4822ffcc284dfe9ae1c6e4a04293c970f2dae776decf07b085eb5fdeda7d365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2c7fb0340a249135057f87882717e166ef509c14fdcf38f63141e4ed36737c6e55498b350f41c8caed3e347c149162b4c6ed629be8eaaa25d59747816197aff2cf68a42d73e8146c72fedb130521de285872a4ca5353cc354a0b0e2ce57275b34276d28d91b2c0c2fa1041f818ea96f65a3000057dfb8858cfd194f7431e4b734f848268c5a000f01000000010000000360236584faaf1a4d4fabd3b68929729fd006fa91186ac3d0d222e00c77ad726cdc16c8456d6f598254bda7c72b24a6b213162cd6e6f205d16a083b5bf85cd0ea669c5fb5535a49d95389c186be0d5d6aaf673c3b675e34dbc89407aa23b2cd4f0d7674421b4896983d7958b0cf1c7c1322b944e316711ed73c720ac25fea464ea96fdf6be3f67430188cb9f1ea81316df61c875ff59c8ffa9ffe954ccb28f037ca003109618cff0ec917fc7abe19b6a10a0eae6c72b067e29580d666042466d68ce5d192fae5bdea0b94a9bfbd0efae746ff081eb028e5566a25db8f43ddd07c39db9bed54a8a9d5763d42", @ANYRES32=0x0], 0xfc, 0x2b5, &(0x7f00000001c0)="$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") 8.286925618s ago: executing program 2 (id=1633): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_allocate_blocks\x00'}, 0x18) syz_emit_ethernet(0x6f, 0x0, 0x0) mkdir(0x0, 0xb4) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) r3 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000540)=0x2) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) timer_create(0xb, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000001080)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 8.080443741s ago: executing program 5 (id=1634): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$loop(0x0, 0x5749, 0x408882) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000002c0)={0x0, 0x0, 0x27f}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) 7.757894665s ago: executing program 0 (id=1635): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(0x0, 0x80) 7.699977487s ago: executing program 5 (id=1636): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r6 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x20000000) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x6b1, &(0x7f0000001f80)="$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") openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0) r8 = memfd_create(0x0, 0x4) dup(r8) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$video(0x0, 0xffffffffffffffff, 0x400400) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.667420932s ago: executing program 4 (id=1637): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4004, r3, 0x2}) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) close(0xffffffffffffffff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) 6.383961516s ago: executing program 2 (id=1638): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21404e, &(0x7f0000000bc0)={[], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@subj_type={'subj_type', 0x3d, 'euid'}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@euid_eq}, {@uid_eq}, {@euid_eq}, {@euid_lt}, {@dont_measure}]}, 0x1, 0x507, &(0x7f00000004c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="15000000"], 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x58}}, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000180)=0x1, 0x4) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x2}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8000f28, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r6, 0x26, &(0x7f0000000080)) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) sendmsg$802154_dgram(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="9448ff5deadc9b8d628c8a93d7ccc79d93dcceb13499c5a34278c0b33c307f9e984e4ee14d822a6e2cd6fda168cb25d49cf457b18414fbc43335", 0x3a}, 0x1, 0x0, 0x0, 0x844}, 0x40000) syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202"], 0x0) 6.1008963s ago: executing program 0 (id=1639): mount$bpf(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x888000, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.520098243s ago: executing program 2 (id=1640): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x29, 0x0, 0x0) iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$ax25(0x3, 0x3, 0xce) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 2.468080994s ago: executing program 0 (id=1641): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) 2.02997498s ago: executing program 4 (id=1642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 1.949515911s ago: executing program 2 (id=1643): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001600), 0x2a040, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000380)=@in6={0xa, 0x4e21, 0xb, @dev={0xfe, 0x80, '\x00', 0x15}, 0xf7}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000400)="5b5a44ffcf00c054aa3ddf71a4c945e5b3d0c6118b2c5cbe90d219ab3e7c536a6b81c6fed44a63b07bd293f3693dcfb6655ac50627d7e922f60999928363a588e8d4cfd881cdcb36504559bc5d238d65c6660ce21e210336b75e8521d5b5cc124d73e912e4e5e2e2b90ad43bd45cbfb37756507b8de568e3411f7faf265b4dfc1657fb32ce4e4158b7dea35220fd9013e803448d1d46eb18a2a3f47cdde67130319d7c6cae3ab6303a786ea54e66102fed33", 0xb2}, {&(0x7f00000004c0)="04d4c2c8e7407cfcda23b746d3acf9627ef125", 0x13}, {&(0x7f0000000500)="edb023da205d94c777264d99a95b1acff00efb17df0b313c360f2589812fd79c84eec0715ad4bccce5dc1d3b6d3f3490e1f60f14245dedf48a882cdb261e3ef1c51919902a88bada11102c41ae0a0e82325a36107b9ed6f7800956de9f34d8e9aee6268ffd33e6adf5a5995c379d3e86020e73806a94e9702f20a67d6d2feb766cc1067e8448733f854f813ff6d89dce9c5b36679e2510176195e483b8ee19beb36f2deb29285bd4bee37284cbe783d79f8e9bf14a46e6cc37d75828dd18b4efc36365817f0844f33cb739d3ece54ec899087a1abdd17959afb785af674430f2ffc5cff9f5e1abb425", 0xe9}], 0x3, &(0x7f0000000640)=[{0xb8, 0xff, 0x5, "493a577ff72ca99557d5a1b4e47d3b899b7ae3c276723a39670b7a5fc0722b199e9ba56e45a0872ef430e9dff56f6d27fe1e8c1c3d1e969c5fd91612fd6bfe28112a23b55603b274b74f087928086ba660540e61da12ea2aef9d7aa34674a4e280178e0ebbefb8e6a7b186d4a8c09ce63550eb2f645b9afa139cd1ff2b6f7b641fcfde0fe284e758eb6728065cbcc85aa4c4670b4f19ae3046c29ea997b8d9df8d720e860fd5"}], 0xb8}}, {{&(0x7f0000000700)=@xdp={0x2c, 0x1, 0x0, 0x2b}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000780)="5aa9094622ff9e7a7740dc5d5157a50becf30fc07a1fe7b147732708ed6953d71c7409826f24313f0a26bc95e0e024de5c77d0babc67c6ca51c7b591e14768cabe990a18031b718478bde4226c2e27f6c4c83de8db6dc91507fbfc02e0949385ce483104ce2919dcba2b78efd45b2f5d2cb9eb595d422b22700ecf5125a00aa46bccc7d26e580e0b05287c232d593224b13e278919cb9ab4344be29ddf4f3f5259b78d520038c014dd4d9d7e67d139a9f83edba8644bd2b597c081ec87cbce236c6011b9e68b7196988b92708543383005abfb4b50c41ce9cd5d371b811ab54e2f4d93e67638ed210bdcb73ac14193", 0xef}, {&(0x7f0000000880)="3ac7bddff8b7ea69a9761cbbf2656c2bf86d91d7ed75b6ab23bfbfcb3d58e40043667ec03e247d85b45cc8e641163a0d9a8c2eaa0a5d1d0879a68d36dd925d6bf5497948c200db655d243305f13b40f15c5373aa81857dc0f5a0bb0aa23d89a20b8fe4ea9f48230658d66db315f32e9c2066c6f321b9d86a617e81e9d886c1868205f1", 0x83}, {&(0x7f0000000940)}, {0x0}], 0x4, &(0x7f0000000b80)=[{0x10, 0x3a, 0x6}, {0x68, 0x108, 0x7, "435935bfdefd29f966eecda6e39c3d5d2c916f2afa0e82ca8b458f0ac371a6a60085c5681e60f0148139eb23cfe865578c8b640dc4225d3012a5850de985d97883c9b3ec5bac63629ddae3f4c6130d4ef90179"}, {0x68, 0x117, 0x7, "80823178d8e5ef380ee2dc221cd6a69f94291e55215a545fc18af90e4f38d7cf77caec08d099e735bdce7a80b0f0efe971627e5d4542e74bd80a6eec9c206c9e8636b556f7951fae0448ffccd5e54092a4"}, {0x10, 0x10c, 0x8}], 0xf0}}], 0x2, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_clone(0x200000, &(0x7f00000001c0)="d65f7fcc115d40eeb5644552e8914736b92326b9f7cab143764716943ae712a9c87a2b2ea7c511d4edc3b36f1a0a429ade8315691a7fa5840df46cd22e821adfc08b6ab676ff722ba24d89429ed94411bf4ab055", 0x54, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000240)="62b5b7615f2d4e57355d160e61d5d08d9ee904c9cccb52c6948b936f75e75bcb42753472d044b33f26310c2e9b40846a85aa8d96eaf6b65a1c2cbe91566a2967697c2c8e4e0a49f21383b17a17a8c87126b07f027019bd6a51c0775b075bdfe427d5d28eee6137e8a317d155a637c913f4491342349071104f51f84106ddf61e52ed8498161aeee6745547f3ec4fe52df80c1b30027a8e0fab8dce3d6e57cf7ae57707781b779831f9578102671ad652e50e03d15f89de2c5b13b8f75db4fcaac376379ca203") timer_create(0x5, &(0x7f0000000140)={0x0, 0x3d, 0x1, @tid=r2}, &(0x7f0000000340)) 1.938873622s ago: executing program 1 (id=1644): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x2, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) syz_clone(0x89000, 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)="f4f84ee5b77be10928cc726640b9e7820d419258e9dd1c29a916bdfe2f39c5cedbf04356c27a999a76c2e0ba7f61e365677df52c1c74") 1.831922293s ago: executing program 4 (id=1645): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x156, &(0x7f0000000240)="$eJzs271OwlAYxvHnAALiF4o6GAcTB12kfEQSN70UApUQixpxgTjoFXgN3pkXoIObkxgawEQ+mkjsifb/W/o2T0/6djjtu1QAIutUezIySvZPdtPZx5yx3RKAkPQGx48egOiJv9vuAIAdr2fSs6SXt7ua4smx+aCf3w/zWGo8f5B2EoPcpLX4fb54kg6G601m4vrMKF+amB/uD++/rBWtak1ZrWtDuUFeH63fnmMSAgAgOozyQfnMC2I6b3puYWq+4OfFqXnSz0sBeXlqnvLzfO3Kq89qE8AEsTn3fzxg/ycC9j8Ae9qd7kXV89wbCgoKilFh+80E4Lc5t61rp93pHjVb1YbbcC9LhcJJ5bhcrJQcf7J3Zs/3AP6ur4++7U4AAAAAAAAAAAAAAMBPbWrLdgsAAAAAQhLG70S2nxEAAAAAAAAAAAAAAAAAgP/mMwAA//9E/CIc") socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000005140)='./file0\x00', 0x1000884, &(0x7f0000000240)={[{@inode_cache}, {@nodatacow}, {@acl}, {@noautodefrag}, {@nobarrier}, {@autodefrag}, {@discard_sync}, {@usebackuproot}, {@ssd_spread}, {@enospc_debug}]}, 0x1, 0x5100, &(0x7f000000f3c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) read$FUSE(r0, &(0x7f0000005180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x113) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000480)="1d", 0x1}], 0x1, 0xcfbc, 0x3, 0x0) socket(0x2c, 0x5, 0x36) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000000}, 0x40) r5 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) prctl$PR_SET_SECUREBITS(0x1c, 0x51) setresuid(0xee01, r6, 0xffffffffffffffff) setresuid(0xffffffffffffffff, r6, r6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@loopback, @loopback, 0x0}, &(0x7f0000000400)=0xc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000380)={@mcast2, 0xf, r10}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5416af1431e685d17369e03b01eb8ec47e7545b119f381e411b122d2b7a191785272f3542a20bb8eb516ad1b8e0b6f5df77749d89dda704d7c7999a6277cbaa0e1f9a74455e2bd731dcd668604288b254946f00029fe229dfd47193735f41f548e84ace08d4057b2b5a1900c8611df0a7f6ab6c7e0ff", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf25100000005800018008000100", @ANYRES32=r7, @ANYBLOB="140002007665746831000000000000000000000008000100", @ANYBLOB="0800030003000000140002006e657464657673696d300000000000001400020070696d367265673100000000000000000c00018008000300000000000800070006000000080007000f000000080006000d00000008000900090000"], 0x98}, 0x1, 0x0, 0x0, 0x40009830}, 0x804) sendfile(r2, r2, 0x0, 0x7a680003) read$sequencer(0xffffffffffffffff, &(0x7f0000000040)=""/67, 0x43) 1.615270696s ago: executing program 2 (id=1646): sendmsg(0xffffffffffffffff, 0x0, 0x40c2) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x8, 0x1b, 0x0, 0x2, 0xa}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x0, r4}) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380), 0x0, 0xffffffff, 0x30, 0x0, 0x0}) 1.478905998s ago: executing program 5 (id=1647): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000340)='9', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 1.478126488s ago: executing program 0 (id=1648): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_allocate_blocks\x00'}, 0x18) syz_emit_ethernet(0x6f, 0x0, 0x0) mkdir(0x0, 0xb4) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) r3 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000540)=0x2) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) timer_create(0xb, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000001080)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 1.237373362s ago: executing program 4 (id=1649): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(0x0, 0x80) 1.204614672s ago: executing program 5 (id=1650): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21404e, &(0x7f0000000bc0)={[], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@subj_type={'subj_type', 0x3d, 'euid'}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@euid_eq}, {@uid_eq}, {@euid_eq}, {@euid_lt}, {@dont_measure}]}, 0x1, 0x507, &(0x7f00000004c0)="$eJzs3V9rZGcZAPDnTDJrtps6qfWiFlqLrWSL7kzSaBu8aCuIdwWl3q8hmYSQSSZkJu0mFknxAwgiuuCVV94IfgBB1m+wLCzovagoort6IaIeOTNndrPDmU0W588y+f3gzXnPO+ec53lnds6cf3tOABfWKxHxbkTMRMTrEVHJ20t5iZNuyaa7f++j9azE7STe/2sSSd4WndpDV/LZ5rqDQq2j4521RqN+kI/X2rv7tdbR8bXt3bWt+lZ9b2Vl+c3Vt1Zjbmko/cz69fbX/vij7//s62//6osf/u76n69+N8t6Pn+924/h674z5ey9yNz9V95+MIpgE1DJS3nSiQAAcC7PR8SnIuJzne3/SszEbO8lm3QAAAAwJdJ35uPfSUQKAAAATK13OtfAJqVqfr3vfJRK1Wr3Gt5PxzOlRrPV/sJm83Bvo3ut7EKUS5vbjfpSft3nQpSTbHy5U384/kbf+EpEPBcRP6xc7oxX15uNjUkf/AAAAIAL4krf/v8/Kt39fwAAAGDKLEw6AQAAAGDkBu3/J2POAwAAABgd5/8BAABgqn3jvfeykvaef73xwdHhTvODaxv11k5193C9ut482K9uNZtbnXv27Z61vEazuf+l2Du8UWvXW+1a6+j4+m7zcK99fbv3CGwAAABg3J777K3fJhFx8pXLnZK5lP2ZGTCDawVgapSeZOI/jC4PYPwG/cwD02920gkAk3My6QSASXvkVh8FGwWnL9555JjB7dHlBAAADNfiZ4rP/2e7AOVJJweM1BOd/wemivP/cHEVnf//9eDJ74wyF2C8yrYA4MI761EfA2/ece7z/2l65rIAAICRms+2/U8iqvm5wPkolarViGc7/9W/nGxuN+pLEfHJiPhNpfyJbHy5M2fi8YAAAAAAAAAAAAAAAAAAAAAAAAAAcE5pmkQKAAAATLWI0p+S/Plfi5XX5vuPD1xK/lnpDCPiw5+8/+Mba+32wXLW/rcH7e2befsbkziCAQAAABfebH9Dbz+9tx8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMN0/95H670yzrh/+WpELBTFn425znAuyhHxzN+TmD01XxIRM0OIf/JxRLxQFD/J0oqFPIv++KWIuDye+C+laVqKgvhXhhAfLrJb2frn3aLvXyle6QyLv/+zefl/DV7/lR6s/2YGrP+ePWeMF+/+ojYw/scRL84Wr3968ZMB8V8tWmDBm/Ltbx0fD4qf/jRisfD3J3kkVq29u19rHR1f295d26pv1fdWVpbfXH1r9curS7XN7UY9/1sY4wcv/fK/fU3/Sbs6/Y8B8RfO6P9rWaV8ujP9YfJgd2/ce75bLfctohP/6qvFn/8Lj4mf/Zv4fP47kL2+2KufdOunvfzzOy8XJpbH3xjQ/7M+/6uDFtrn9W9+7/fnnBQAGIPW0fHOWqNRPxh55WaapuOKpfIUVuaejjRUzq4M48gWAADwtHm40f8EM31nhAkBAAAAAAAAAAAAAAAAAADABdQ6itLA24BdGs7txPpjnkymqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj/W/AAAA///rIuPm") socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="15000000"], 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a310000000005000100070000000500"], 0x58}}, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000180)=0x1, 0x4) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x2}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x8000f28, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r6, 0x26, &(0x7f0000000080)) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) sendmsg$802154_dgram(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="9448ff5deadc9b8d628c8a93d7ccc79d93dcceb13499c5a34278c0b33c307f9e984e4ee14d822a6e2cd6fda168cb25d49cf457b18414fbc43335", 0x3a}, 0x1, 0x0, 0x0, 0x844}, 0x40000) syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202"], 0x0) 241.847316ms ago: executing program 2 (id=1651): mount$bpf(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x888000, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1652): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4004, r3, 0x2}) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) close(0xffffffffffffffff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): rr=-117, ino=3). Please run e2fsck to fix. [ 184.125206][ T5426] EXT4-fs (loop1): mount failed [ 184.629201][ T5441] loop4: detected capacity change from 0 to 1024 [ 184.691930][ T5441] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 184.700062][ T5441] EXT4-fs (loop4): write access will be enabled during recovery [ 184.707889][ T5441] EXT4-fs (loop4): barriers disabled [ 184.717647][ T5441] JBD2: no valid journal superblock found [ 184.723622][ T5441] EXT4-fs (loop4): error loading journal [ 186.025374][ T5453] loop1: detected capacity change from 0 to 1024 [ 186.550257][ T4210] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 186.900252][ T4210] usb 2-1: Using ep0 maxpacket: 32 [ 187.140399][ T4210] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 187.188635][ T4210] usb 2-1: config 0 has no interface number 0 [ 187.220015][ T4210] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.301923][ T4210] usb 2-1: config 0 interface 85 has no altsetting 0 [ 187.429023][ T5469] loop0: detected capacity change from 0 to 8192 [ 187.460326][ T4210] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 187.479829][ T4210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.510946][ T5469] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 187.563483][ T4210] usb 2-1: Product: syz [ 187.590219][ T5469] REISERFS (device loop0): using ordered data mode [ 187.596948][ T5469] reiserfs: using flush barriers [ 187.603301][ T4210] usb 2-1: Manufacturer: syz [ 187.607924][ T4210] usb 2-1: SerialNumber: syz [ 187.645566][ T4210] usb 2-1: config 0 descriptor?? [ 187.663694][ T5469] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 187.693988][ T5469] REISERFS (device loop0): checking transaction log (loop0) [ 187.747286][ T5473] loop3: detected capacity change from 0 to 512 [ 187.940131][ T4210] appletouch 2-1:0.85: Failed to read mode from device. [ 187.979798][ T4210] appletouch: probe of 2-1:0.85 failed with error -5 [ 187.985374][ T5469] REISERFS (device loop0): Using tea hash to sort names [ 187.997264][ T5469] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 188.026334][ T5473] EXT4-fs error (device loop3): ext4_quota_enable:6388: inode #3: comm syz.3.358: iget: bogus i_mode (0) [ 188.070104][ T5480] loop2: detected capacity change from 0 to 1024 [ 188.080204][ T5473] EXT4-fs error (device loop3): ext4_quota_enable:6391: comm syz.3.358: Bad quota inode: 3, type: 0 [ 188.091667][ T5473] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 188.107713][ T5473] EXT4-fs (loop3): mount failed [ 188.184552][ T5480] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 188.192662][ T5480] EXT4-fs (loop2): write access will be enabled during recovery [ 188.200532][ T5480] EXT4-fs (loop2): barriers disabled [ 188.208567][ T5480] JBD2: no valid journal superblock found [ 188.214942][ T5480] EXT4-fs (loop2): error loading journal [ 188.222130][ T4210] usb 2-1: USB disconnect, device number 5 [ 188.587274][ T5484] team0: Device gre1 is of different type [ 191.677163][ T5358] Bluetooth: hci0: command 0x0406 tx timeout [ 191.677660][ T4210] Bluetooth: hci3: command 0x0406 tx timeout [ 191.683338][ T5358] Bluetooth: hci2: command 0x0406 tx timeout [ 191.711429][ T5358] Bluetooth: hci1: command 0x0406 tx timeout [ 191.777138][ T4210] Bluetooth: hci4: command 0x0406 tx timeout [ 192.335651][ T5525] loop2: detected capacity change from 0 to 512 [ 192.468364][ T5525] EXT4-fs error (device loop2): ext4_quota_enable:6388: inode #3: comm syz.2.372: iget: bogus i_mode (0) [ 192.540459][ T5525] EXT4-fs error (device loop2): ext4_quota_enable:6391: comm syz.2.372: Bad quota inode: 3, type: 0 [ 192.600370][ T5525] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 192.691175][ T5525] EXT4-fs (loop2): mount failed [ 192.741167][ T5531] loop0: detected capacity change from 0 to 8192 [ 192.822156][ T5531] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 192.840469][ T5531] REISERFS (device loop0): using ordered data mode [ 192.860917][ T5531] reiserfs: using flush barriers [ 192.908912][ T5531] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 192.990395][ T5531] REISERFS (device loop0): checking transaction log (loop0) [ 193.078535][ T5534] loop2: detected capacity change from 0 to 1024 [ 193.190675][ T5531] REISERFS (device loop0): Using tea hash to sort names [ 193.211673][ T5531] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 193.630009][ T5350] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 193.900362][ T5350] usb 3-1: Using ep0 maxpacket: 32 [ 194.392306][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.412605][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.960321][ T5350] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 194.979022][ T5350] usb 3-1: config 0 has no interface number 0 [ 197.002192][ T5350] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.015822][ T5350] usb 3-1: config 0 interface 85 has no altsetting 0 [ 197.110161][ T5350] usb 3-1: string descriptor 0 read error: -71 [ 197.116581][ T5350] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 197.176083][ T5350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.288407][ T5350] usb 3-1: config 0 descriptor?? [ 197.320645][ T5350] usb 3-1: can't set config #0, error -71 [ 197.340660][ T5350] usb 3-1: USB disconnect, device number 2 [ 197.356544][ T5566] loop3: detected capacity change from 0 to 512 [ 198.531968][ T5566] EXT4-fs error (device loop3): ext4_quota_enable:6388: inode #3: comm syz.3.384: iget: bogus i_mode (0) [ 198.574092][ T5566] EXT4-fs error (device loop3): ext4_quota_enable:6391: comm syz.3.384: Bad quota inode: 3, type: 0 [ 198.589852][ T5566] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 198.826709][ T5566] EXT4-fs (loop3): mount failed [ 200.384838][ T4208] Bluetooth: hci4: command 0x0405 tx timeout [ 200.601073][ T5599] netlink: 80 bytes leftover after parsing attributes in process `syz.0.392'. [ 200.859787][ T5604] loop2: detected capacity change from 0 to 1024 [ 201.620121][ T5358] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 201.797298][ T5612] loop3: detected capacity change from 0 to 8 [ 201.866019][ T5612] SQUASHFS error: zlib decompression failed, data probably corrupt [ 201.876009][ T5358] usb 3-1: Using ep0 maxpacket: 32 [ 201.899592][ T5612] SQUASHFS error: Failed to read block 0x9b: -5 [ 201.915349][ T5612] SQUASHFS error: Unable to read metadata cache entry [99] [ 201.933006][ T5612] SQUASHFS error: Unable to read inode 0x127 [ 202.000275][ T5358] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 202.018405][ T5358] usb 3-1: config 0 has no interface number 0 [ 202.032685][ T5358] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.070038][ T5358] usb 3-1: config 0 interface 85 has no altsetting 0 [ 202.221752][ T5606] loop0: detected capacity change from 0 to 32768 [ 202.290492][ T5358] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 202.299670][ T5358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.305645][ T5606] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 202.338165][ T5358] usb 3-1: Product: syz [ 202.349964][ T5358] usb 3-1: Manufacturer: syz [ 202.354385][ T5606] dlm: no local IP address has been set [ 202.365037][ T5358] usb 3-1: SerialNumber: syz [ 202.383764][ T5606] dlm: cannot start dlm midcomms -107 [ 202.389396][ T5606] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 202.391873][ T5358] usb 3-1: config 0 descriptor?? [ 202.680232][ T5358] appletouch 3-1:0.85: Failed to read mode from device. [ 202.687509][ T5358] appletouch: probe of 3-1:0.85 failed with error -5 [ 202.899426][ T5358] usb 3-1: USB disconnect, device number 3 [ 203.835204][ T5623] ax25_connect(): syz.0.399 uses autobind, please contact jreuter@yaina.de [ 205.135548][ T5633] loop1: detected capacity change from 0 to 512 [ 205.307730][ T5633] EXT4-fs error (device loop1): ext4_quota_enable:6388: inode #3: comm syz.1.403: iget: bogus i_mode (0) [ 205.349115][ T5633] EXT4-fs error (device loop1): ext4_quota_enable:6391: comm syz.1.403: Bad quota inode: 3, type: 0 [ 205.505304][ T5633] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 205.544689][ T5633] EXT4-fs (loop1): mount failed [ 207.771718][ T5672] loop2: detected capacity change from 0 to 1024 [ 209.048367][ T5681] loop3: detected capacity change from 0 to 512 [ 209.310202][ T5681] EXT4-fs error (device loop3): ext4_quota_enable:6388: inode #3: comm syz.3.415: iget: bogus i_mode (0) [ 209.367482][ T5681] EXT4-fs error (device loop3): ext4_quota_enable:6391: comm syz.3.415: Bad quota inode: 3, type: 0 [ 209.409968][ T4208] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 209.423753][ T5681] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 209.457478][ T5681] EXT4-fs (loop3): mount failed [ 210.050085][ T4208] usb 3-1: Using ep0 maxpacket: 32 [ 210.938456][ T4208] usb 3-1: device descriptor read/all, error -71 [ 212.683121][ T5715] loop3: detected capacity change from 0 to 1024 [ 212.690669][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.726634][ T5715] EXT4-fs (loop3): INFO: recovery required on readonly filesystem [ 212.734914][ T5715] EXT4-fs (loop3): write access will be enabled during recovery [ 212.742687][ T5715] EXT4-fs (loop3): barriers disabled [ 212.748280][ T5715] JBD2: no valid journal superblock found [ 212.754124][ T5715] EXT4-fs (loop3): error loading journal [ 212.819567][ T5716] device bridge_slave_1 left promiscuous mode [ 213.285889][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.001821][ T5733] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 214.047779][ T5732] loop2: detected capacity change from 0 to 1024 [ 214.085023][ T5733] VFS: Can't find a romfs filesystem on dev nullb0. [ 214.085023][ T5733] [ 214.792873][ T5740] loop3: detected capacity change from 0 to 512 [ 214.863982][ T5350] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 215.101703][ T5740] EXT4-fs error (device loop3): ext4_quota_enable:6388: inode #3: comm syz.3.432: iget: bogus i_mode (0) [ 215.138717][ T5740] EXT4-fs error (device loop3): ext4_quota_enable:6391: comm syz.3.432: Bad quota inode: 3, type: 0 [ 215.208283][ T5740] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 215.291157][ T5740] EXT4-fs (loop3): mount failed [ 215.765975][ T5757] loop0: detected capacity change from 0 to 64 [ 216.037565][ T5759] loop3: detected capacity change from 0 to 128 [ 216.245755][ T5759] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 216.288948][ T5759] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 216.752805][ T5350] usb 3-1: Using ep0 maxpacket: 32 [ 218.080199][ T5350] usb 3-1: unable to read config index 0 descriptor/all [ 218.207044][ T5350] usb 3-1: can't read configurations, error -71 [ 218.270391][ T5787] loop2: detected capacity change from 0 to 512 [ 218.400235][ T5787] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.421265][ T5787] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 218.809338][ T5793] loop3: detected capacity change from 0 to 512 [ 218.831038][ T5787] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 218.963487][ T5799] loop4: detected capacity change from 0 to 128 [ 219.442240][ T5787] EXT4-fs (loop2): 1 truncate cleaned up [ 219.450109][ T5787] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,nombcache,journal_ioprio=0x0000000000000003,errors=remount-ro,lazytime,minixdf,noquota,dioread_nolock,. Quota mode: none. [ 220.187187][ T5793] EXT4-fs error (device loop3): ext4_quota_enable:6388: inode #3: comm syz.3.447: iget: bogus i_mode (0) [ 220.560840][ T5793] EXT4-fs error (device loop3): ext4_quota_enable:6391: comm syz.3.447: Bad quota inode: 3, type: 0 [ 220.667821][ T5810] EXT4-fs error (device loop2): ext4_read_inline_dir:1600: inode #12: block 7: comm syz.2.442: path /84/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 220.695862][ T5810] EXT4-fs (loop2): Remounting filesystem read-only [ 221.469288][ T5793] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 221.710406][ T5817] loop0: detected capacity change from 0 to 64 [ 221.849158][ T5793] EXT4-fs (loop3): mount failed [ 224.468574][ T5831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.458'. [ 224.829831][ T5848] loop1: detected capacity change from 0 to 128 [ 226.011324][ T5863] loop4: detected capacity change from 0 to 64 [ 226.029515][ T5858] loop2: detected capacity change from 0 to 512 [ 226.881154][ T5858] EXT4-fs error (device loop2): ext4_quota_enable:6388: inode #3: comm syz.2.466: iget: bogus i_mode (0) [ 226.992201][ T5858] EXT4-fs error (device loop2): ext4_quota_enable:6391: comm syz.2.466: Bad quota inode: 3, type: 0 [ 227.025548][ T5858] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 227.048095][ T5858] EXT4-fs (loop2): mount failed [ 227.157106][ T5874] loop4: detected capacity change from 0 to 64 [ 228.084012][ T5888] loop2: detected capacity change from 0 to 128 [ 228.172289][ T5889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.472'. [ 229.973857][ T5909] overlayfs: missing 'lowerdir' [ 230.481555][ T5909] crypto_alloc_aead failed rc=-4 [ 230.912681][ T5928] loop4: detected capacity change from 0 to 1024 [ 231.909765][ T5362] hfsplus: b-tree write err: -5, ino 4 [ 232.443097][ T5940] loop4: detected capacity change from 0 to 512 [ 232.565399][ T5940] EXT4-fs error (device loop4): ext4_quota_enable:6388: inode #3: comm syz.4.483: iget: bogus i_mode (0) [ 232.578406][ T5940] EXT4-fs error (device loop4): ext4_quota_enable:6391: comm syz.4.483: Bad quota inode: 3, type: 0 [ 232.607445][ T5940] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 232.637038][ T5940] EXT4-fs (loop4): mount failed [ 232.772332][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.486'. [ 234.046173][ T5980] loop0: detected capacity change from 0 to 2048 [ 234.338999][ T5991] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.500350][ T5973] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 234.542186][ T5973] Remounting filesystem read-only [ 235.476117][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.484600][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.523799][ T5999] loop1: detected capacity change from 0 to 512 [ 235.591675][ T5980] device bridge_slave_1 left promiscuous mode [ 235.856309][ T6000] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 236.141042][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.202556][ T5999] EXT4-fs error (device loop1): ext4_quota_enable:6388: inode #3: comm syz.1.500: iget: bogus i_mode (0) [ 236.320411][ T5999] EXT4-fs error (device loop1): ext4_quota_enable:6391: comm syz.1.500: Bad quota inode: 3, type: 0 [ 236.370433][ T5999] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 236.421163][ T5980] device bridge_slave_0 left promiscuous mode [ 236.432378][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.471237][ T5999] EXT4-fs (loop1): mount failed [ 236.994756][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.502'. [ 238.579149][ T6028] loop0: detected capacity change from 0 to 64 [ 241.202542][ T6044] loop1: detected capacity change from 0 to 512 [ 241.417398][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.515'. [ 241.460791][ T6044] EXT4-fs error (device loop1): ext4_quota_enable:6388: inode #3: comm syz.1.511: iget: bogus i_mode (0) [ 241.527272][ T6044] EXT4-fs error (device loop1): ext4_quota_enable:6391: comm syz.1.511: Bad quota inode: 3, type: 0 [ 241.587841][ T6044] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 241.637220][ T6066] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 241.657744][ T6044] EXT4-fs (loop1): mount failed [ 242.008339][ T6074] loop4: detected capacity change from 0 to 64 [ 246.133809][ T6098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.527'. [ 246.703171][ T6117] loop2: detected capacity change from 0 to 64 [ 249.303566][ T6133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.538'. [ 251.362636][ T6154] serio: Serial port ptm0 [ 253.295621][ T6167] loop0: detected capacity change from 0 to 512 [ 253.501012][ T6167] EXT4-fs error (device loop0): ext4_quota_enable:6388: inode #3: comm syz.0.547: iget: bogus i_mode (0) [ 253.502663][ T6177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.550'. [ 253.547446][ T6167] EXT4-fs error (device loop0): ext4_quota_enable:6391: comm syz.0.547: Bad quota inode: 3, type: 0 [ 253.644447][ T6167] EXT4-fs warning (device loop0): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 253.739751][ T6167] EXT4-fs (loop0): mount failed [ 255.804614][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.813984][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.910974][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.563'. [ 257.434959][ T6230] 8021q: VLANs not supported on ip6gre0 [ 257.650332][ T6237] loop2: detected capacity change from 0 to 512 [ 258.750996][ T6247] loop0: detected capacity change from 0 to 1024 [ 260.021209][ T6237] EXT4-fs error (device loop2): ext4_quota_enable:6388: inode #3: comm syz.2.568: iget: bogus i_mode (0) [ 260.081674][ T6237] EXT4-fs error (device loop2): ext4_quota_enable:6391: comm syz.2.568: Bad quota inode: 3, type: 0 [ 260.178303][ T4952] hfsplus: b-tree write err: -5, ino 4 [ 260.199817][ T6237] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 260.260363][ T6237] EXT4-fs (loop2): mount failed [ 261.976839][ T6261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.574'. [ 263.453385][ T6281] 9pnet: Insufficient options for proto=fd [ 264.565828][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.585'. [ 267.058690][ T6317] loop1: detected capacity change from 0 to 256 [ 267.180420][ T6317] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 270.043931][ T6333] loop3: detected capacity change from 0 to 128 [ 273.666951][ T6362] loop0: detected capacity change from 0 to 256 [ 275.724169][ T6381] loop1: detected capacity change from 0 to 128 [ 276.575504][ T6392] loop1: detected capacity change from 0 to 64 [ 276.636000][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.613'. [ 276.645639][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 277.483527][ T6396] tipc: Started in network mode [ 277.488455][ T6396] tipc: Node identity aaaaaaaaaa17, cluster identity 4711 [ 277.507474][ T6396] tipc: Enabled bearer , priority 0 [ 277.874713][ T6404] netlink: 'syz.0.618': attribute type 1 has an invalid length. [ 279.016082][ T6404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.618'. [ 279.039953][ T5350] tipc: Node number set to 12429994 [ 279.070360][ T6404] device bond1 entered promiscuous mode [ 279.333748][ T6421] loop0: detected capacity change from 0 to 128 [ 282.696790][ T6443] tipc: Enabling of bearer rejected, already enabled [ 283.606592][ T6447] loop4: detected capacity change from 0 to 1024 [ 285.019942][ T5358] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 285.270053][ T5358] usb 5-1: Using ep0 maxpacket: 32 [ 286.060193][ T5358] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 286.078835][ T5358] usb 5-1: config 0 has no interface number 0 [ 286.109397][ T5358] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.179473][ T5358] usb 5-1: config 0 interface 85 has no altsetting 0 [ 286.620112][ T5358] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 286.689472][ T6473] loop1: detected capacity change from 0 to 64 [ 287.454705][ T5358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.490027][ T5358] usb 5-1: Product: syz [ 287.494357][ T5358] usb 5-1: Manufacturer: syz [ 287.591662][ T5358] usb 5-1: config 0 descriptor?? [ 287.615873][ T5358] usb 5-1: can't set config #0, error -71 [ 287.641447][ T5358] usb 5-1: USB disconnect, device number 3 [ 287.742041][ T6477] tipc: Enabling of bearer rejected, already enabled [ 288.310775][ T6482] loop1: detected capacity change from 0 to 256 [ 288.648063][ T6482] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 290.183573][ T5350] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 290.440099][ T5350] usb 2-1: Using ep0 maxpacket: 8 [ 290.566023][ T5350] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 290.590040][ T5350] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 290.626501][ T5350] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 290.654180][ T5350] usb 2-1: config 250 has no interface number 0 [ 290.679192][ T5350] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 291.562492][ T5350] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 291.575314][ T5350] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.586256][ T5350] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 291.598590][ T5350] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 291.628865][ T5350] usb 2-1: config 250 interface 228 has no altsetting 0 [ 291.661766][ T6510] loop3: detected capacity change from 0 to 1024 [ 291.770178][ T5350] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 292.200377][ T4210] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 292.520474][ T4210] usb 4-1: Using ep0 maxpacket: 32 [ 292.614378][ T5350] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 292.623209][ T5350] usb 2-1: Product: syz [ 292.628242][ T5350] usb 2-1: SerialNumber: syz [ 292.671188][ T5350] hub 2-1:250.228: bad descriptor, ignoring hub [ 292.677544][ T5350] hub: probe of 2-1:250.228 failed with error -5 [ 292.690849][ T4210] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 292.722965][ T4210] usb 4-1: config 0 has no interface number 0 [ 292.749592][ T4210] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.882216][ T4210] usb 4-1: config 0 interface 85 has no altsetting 0 [ 292.972075][ T6520] tipc: Enabling of bearer rejected, already enabled [ 293.022626][ T5350] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 293.081170][ T5350] usb 2-1: USB disconnect, device number 6 [ 293.101574][ T5350] usblp0: removed [ 293.180206][ T4210] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 293.189484][ T4210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.480425][ T6536] loop4: detected capacity change from 0 to 64 [ 294.961272][ T4210] usb 4-1: Product: syz [ 294.965697][ T4210] usb 4-1: Manufacturer: syz [ 294.970521][ T4210] usb 4-1: SerialNumber: syz [ 294.989382][ T4210] usb 4-1: config 0 descriptor?? [ 295.020064][ T4210] usb 4-1: can't set config #0, error -71 [ 295.030160][ T4210] usb 4-1: USB disconnect, device number 4 [ 297.338675][ T6558] input: syz0 as /devices/virtual/input/input11 [ 297.883199][ T6567] tipc: Enabling of bearer rejected, already enabled [ 298.098446][ T6573] loop4: detected capacity change from 0 to 256 [ 298.986422][ T6573] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 301.607348][ T6596] loop3: detected capacity change from 0 to 8192 [ 301.973052][ T6596] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 302.013646][ T6596] REISERFS (device loop3): using ordered data mode [ 302.080388][ T6596] reiserfs: using flush barriers [ 302.132124][ T6596] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 302.363842][ T6596] REISERFS (device loop3): checking transaction log (loop3) [ 302.992786][ T6610] tipc: Enabling of bearer rejected, already enabled [ 303.146706][ T6596] REISERFS (device loop3): Using tea hash to sort names [ 303.469051][ T6596] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 306.415196][ T6653] tipc: Enabling of bearer rejected, already enabled [ 308.567335][ T6670] loop1: detected capacity change from 0 to 47 [ 309.714543][ T4546] attempt to access beyond end of device [ 309.714543][ T4546] loop1: rw=1, want=50, limit=47 [ 309.714792][ T6673] loop4: detected capacity change from 0 to 8192 [ 309.752403][ T4546] Buffer I/O error on dev loop1, logical block 24, lost async page write [ 309.790464][ T4546] attempt to access beyond end of device [ 309.790464][ T4546] loop1: rw=1, want=52, limit=47 [ 309.826825][ T4546] Buffer I/O error on dev loop1, logical block 25, lost async page write [ 309.858310][ T6673] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 309.890092][ T4546] attempt to access beyond end of device [ 309.890092][ T4546] loop1: rw=1, want=54, limit=47 [ 309.901451][ T4546] Buffer I/O error on dev loop1, logical block 26, lost async page write [ 309.910015][ T4546] attempt to access beyond end of device [ 309.910015][ T4546] loop1: rw=1, want=56, limit=47 [ 309.919253][ T6673] REISERFS (device loop4): using ordered data mode [ 309.923312][ T4546] Buffer I/O error on dev loop1, logical block 27, lost async page write [ 309.984354][ T6673] reiserfs: using flush barriers [ 310.039238][ T6673] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 310.116595][ T6673] REISERFS (device loop4): checking transaction log (loop4) [ 310.199129][ T6684] loop2: detected capacity change from 0 to 256 [ 310.633692][ T6684] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 311.140880][ T6670] attempt to access beyond end of device [ 311.140880][ T6670] loop1: rw=2049, want=50, limit=47 [ 311.228437][ T6670] Buffer I/O error on dev loop1, logical block 24, lost async page write [ 311.270289][ T6670] attempt to access beyond end of device [ 311.270289][ T6670] loop1: rw=2049, want=52, limit=47 [ 311.290232][ T6670] Buffer I/O error on dev loop1, logical block 25, lost async page write [ 311.323075][ T6670] attempt to access beyond end of device [ 311.323075][ T6670] loop1: rw=2049, want=54, limit=47 [ 311.721908][ T6673] REISERFS (device loop4): Using tea hash to sort names [ 311.752233][ T6673] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 311.954881][ T6670] Buffer I/O error on dev loop1, logical block 26, lost async page write [ 311.975194][ T6670] attempt to access beyond end of device [ 311.975194][ T6670] loop1: rw=2049, want=56, limit=47 [ 311.993587][ T6670] Buffer I/O error on dev loop1, logical block 27, lost async page write [ 316.256697][ T6728] dlm: no local IP address has been set [ 316.262832][ T6728] dlm: cannot start dlm midcomms -107 [ 316.337532][ T6729] loop1: detected capacity change from 0 to 8 [ 316.752469][ T6729] SQUASHFS error: zstd decompression failed, data probably corrupt [ 317.159758][ T6733] loop0: detected capacity change from 0 to 256 [ 317.390390][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.396998][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.602936][ T6729] SQUASHFS error: Failed to read block 0x4ec: -5 [ 317.609703][ T6729] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 317.617360][ T6729] SQUASHFS error: Unable to read inode 0x2011f [ 318.323193][ T6733] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 328.155782][ T6821] loop4: detected capacity change from 0 to 64 [ 329.014016][ T6823] loop2: detected capacity change from 0 to 256 [ 329.235862][ T6823] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 333.730428][ T6851] tipc: Enabling of bearer rejected, already enabled [ 333.781342][ T6851] tipc: Enabling of bearer rejected, already enabled [ 334.177019][ T6863] loop1: detected capacity change from 0 to 64 [ 335.574112][ T6866] loop3: detected capacity change from 0 to 256 [ 335.680556][ T6866] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 335.709122][ T6868] loop4: detected capacity change from 0 to 256 [ 338.006813][ T6868] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 339.581203][ T6899] tipc: Enabling of bearer rejected, already enabled [ 339.664167][ T6899] tipc: Enabling of bearer rejected, already enabled [ 343.156759][ T6926] loop2: detected capacity change from 0 to 256 [ 343.555262][ T6926] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 343.577927][ T6934] loop4: detected capacity change from 0 to 256 [ 344.448822][ T6934] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 344.942276][ T6943] tipc: Enabled bearer , priority 10 [ 345.463686][ T6943] tipc: Enabling of bearer rejected, already enabled [ 349.167784][ T6979] serio: Serial port ptm0 [ 349.196860][ T6986] tipc: Enabling of bearer rejected, already enabled [ 349.206197][ T6986] tipc: Enabling of bearer rejected, already enabled [ 349.422851][ T6992] loop0: detected capacity change from 0 to 256 [ 350.616502][ T6992] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 351.126698][ T7008] loop1: detected capacity change from 0 to 64 [ 356.366272][ T7029] loop2: detected capacity change from 0 to 2048 [ 356.490161][ T7029] loop2: p1 < > p4 [ 357.425072][ T7029] loop2: p4 size 8388608 extends beyond EOD, truncated [ 358.006676][ T7050] loop2: detected capacity change from 0 to 64 [ 359.109621][ T7060] loop3: detected capacity change from 0 to 256 [ 359.226621][ T7062] loop0: detected capacity change from 0 to 64 [ 360.036552][ T7060] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 363.226024][ T7099] loop4: detected capacity change from 0 to 512 [ 363.847108][ T7110] loop0: detected capacity change from 0 to 512 [ 365.023175][ T7115] loop3: detected capacity change from 0 to 256 [ 365.167520][ T7110] EXT4-fs (loop0): Ignoring removed nobh option [ 365.173881][ T7110] EXT4-fs (loop0): Ignoring removed nobh option [ 365.180401][ T7110] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 365.199481][ T7115] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 365.219795][ T7110] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 365.229122][ T7110] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.817: invalid indirect mapped block 2683928664 (level 1) [ 365.251442][ T7110] EXT4-fs (loop0): 1 truncate cleaned up [ 365.257157][ T7110] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,nobh,minixdf,nobh,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback. [ 365.262166][ T7099] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.818: inode #1: comm syz.4.818: iget: illegal inode # [ 365.331152][ T4208] Bluetooth: hci0: command 0x0406 tx timeout [ 365.367072][ T7120] tipc: Enabling of bearer rejected, already enabled [ 365.367284][ T7099] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.818: error while reading EA inode 1 err=-117 [ 365.579710][ T7120] tipc: Enabling of bearer rejected, already enabled [ 365.584041][ T7099] EXT4-fs (loop4): 1 orphan inode deleted [ 365.620092][ T7099] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,journal_dev=0x0000000000008000,debug_want_extra_isize=0x0000000000000040,nouid32,resgid=0x0000000000000000,bsdgroups,usrjquota=,,errors=continue. Quota mode: none. [ 366.140614][ T7125] loop1: detected capacity change from 0 to 1024 [ 366.518473][ T7135] loop0: detected capacity change from 0 to 2048 [ 366.599093][ T7135] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 366.700356][ T4210] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 366.990335][ T4210] usb 2-1: Using ep0 maxpacket: 32 [ 367.180904][ T4210] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 367.229426][ T4210] usb 2-1: config 0 has no interface number 0 [ 367.406817][ T4210] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 367.441957][ T4210] usb 2-1: config 0 interface 85 has no altsetting 0 [ 367.640553][ T4210] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 367.719799][ T4210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.855824][ T4210] usb 2-1: Product: syz [ 367.937250][ T4210] usb 2-1: Manufacturer: syz [ 368.021467][ T4210] usb 2-1: SerialNumber: syz [ 368.362466][ T4210] usb 2-1: config 0 descriptor?? [ 369.460599][ T7160] tipc: Enabling of bearer rejected, already enabled [ 369.471029][ T7160] tipc: Enabling of bearer rejected, already enabled [ 369.520137][ T4210] appletouch 2-1:0.85: Failed to read mode from device. [ 369.541016][ T4210] appletouch: probe of 2-1:0.85 failed with error -5 [ 369.634492][ T4210] usb 2-1: USB disconnect, device number 7 [ 369.713504][ T7174] loop2: detected capacity change from 0 to 128 [ 370.680558][ T7186] netlink: 'syz.0.839': attribute type 4 has an invalid length. [ 373.099717][ T7205] tipc: Enabling of bearer rejected, already enabled [ 373.120975][ T7205] tipc: Enabling of bearer rejected, already enabled [ 373.130739][ T7203] loop4: detected capacity change from 0 to 1024 [ 373.783405][ T4209] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 374.474775][ T7215] loop2: detected capacity change from 0 to 1024 [ 374.626892][ T7215] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 374.778323][ T4209] usb 5-1: Using ep0 maxpacket: 32 [ 375.229999][ T4209] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 375.407909][ T7214] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 375.425058][ T7214] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 375.438398][ T7214] EXT4-fs (loop2): This should not happen!! Data will be lost [ 375.438398][ T7214] [ 375.448302][ T7214] EXT4-fs (loop2): Total free blocks count 0 [ 375.454585][ T7214] EXT4-fs (loop2): Free/Dirty block details [ 375.460743][ T7214] EXT4-fs (loop2): free_blocks=68451041280 [ 375.467093][ T7214] EXT4-fs (loop2): dirty_blocks=32 [ 375.472413][ T7214] EXT4-fs (loop2): Block reservation details [ 375.478605][ T7214] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 377.139755][ T4209] usb 5-1: config 0 has no interface number 0 [ 377.146088][ T4209] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.157478][ T4209] usb 5-1: config 0 interface 85 has no altsetting 0 [ 377.319979][ T4209] usb 5-1: string descriptor 0 read error: -71 [ 377.326277][ T4209] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 377.550306][ T4209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.843016][ T7239] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 377.852258][ T7239] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 378.104462][ T4209] usb 5-1: config 0 descriptor?? [ 378.120077][ T4209] usb 5-1: can't set config #0, error -71 [ 378.131237][ T4209] usb 5-1: USB disconnect, device number 4 [ 378.682995][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.720154][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.112603][ T7252] tipc: Enabling of bearer rejected, already enabled [ 379.125324][ T7252] tipc: Enabling of bearer rejected, already enabled [ 379.371057][ T7254] loop0: detected capacity change from 0 to 40427 [ 379.473102][ T7254] F2FS-fs (loop0): invalid crc value [ 379.520478][ T7254] F2FS-fs (loop0): Found nat_bits in checkpoint [ 379.589740][ T7254] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 380.127034][ T7266] attempt to access beyond end of device [ 380.127034][ T7266] loop0: rw=2049, want=53504, limit=40427 [ 383.932406][ T7275] loop2: detected capacity change from 0 to 1024 [ 383.987473][ T7282] bridge0: port 3(syz_tun) entered blocking state [ 384.057021][ T7282] bridge0: port 3(syz_tun) entered disabled state [ 384.166772][ T7282] device syz_tun entered promiscuous mode [ 384.195290][ T7282] bridge0: port 3(syz_tun) entered blocking state [ 384.201904][ T7282] bridge0: port 3(syz_tun) entered forwarding state [ 384.912925][ T7295] tipc: Enabling of bearer rejected, already enabled [ 384.961651][ T7295] tipc: Enabling of bearer rejected, already enabled [ 385.889098][ T7293] loop4: detected capacity change from 0 to 32768 [ 386.180506][ T7293] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.869 (7293) [ 386.424709][ T7308] loop1: detected capacity change from 0 to 764 [ 386.549953][ T7293] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 386.599971][ T7293] BTRFS info (device loop4): using free space tree [ 386.608505][ T7293] BTRFS info (device loop4): has skinny extents [ 386.651890][ T7308] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 386.908577][ T7293] BTRFS info (device loop4): enabling ssd optimizations [ 387.027854][ T7337] tipc: Resetting bearer [ 387.135701][ T7304] overlayfs: unrecognized mount option "ÇÔÁÞ^Ïb"ÎE3£³1Õ¢–‹q©Øïg®k×=ß~êÏüñý7»ÓׂÊ[t$é~˜ëýc‹ é~xþ| Ø!ÿÒ蟳v¿[§n¸e+Eþ½ÝÍ" or missing value [ 387.195981][ T7337] tipc: Disabling bearer [ 387.336288][ T7337] team0 (unregistering): Port device team_slave_0 removed [ 387.490196][ T7337] team0 (unregistering): Port device team_slave_1 removed [ 388.620933][ T7351] loop0: detected capacity change from 0 to 256 [ 388.720610][ T7351] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 388.898223][ T7331] loop2: detected capacity change from 0 to 32768 [ 389.690444][ T7331] (syz.2.874,7331,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 389.809360][ T7331] (syz.2.874,7331,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 389.971958][ T7331] (syz.2.874,7331,0):ocfs2_initialize_super:2310 ERROR: status = -12 [ 391.633033][ T7331] (syz.2.874,7331,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 392.095938][ T5362] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.289768][ T5362] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.318137][ T5362] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.346521][ T7385] loop1: detected capacity change from 0 to 64 [ 394.654486][ T5362] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.388696][ T7389] loop2: detected capacity change from 0 to 512 [ 395.446071][ T7396] loop1: detected capacity change from 0 to 256 [ 396.021274][ T7396] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 396.420087][ T7396] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 396.437593][ T7389] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 396.489235][ T7389] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 396.489791][ T5362] tipc: Disabling bearer [ 396.511449][ T7396] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 396.568622][ T7389] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 396.577842][ T5362] tipc: Left network mode [ 396.699591][ T7396] exFAT-fs (loop1): hint_cluster is invalid (17) [ 396.729898][ T7389] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 396.738843][ T7389] System zones: 0-2, 18-18, 34-34 [ 396.780340][ T7389] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 396.899525][ T7389] EXT4-fs (loop2): 1 truncate cleaned up [ 396.980139][ T7389] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,nomblk_io_submit,nodelalloc,,errors=continue. Quota mode: none. [ 397.187158][ T7394] chnl_net:caif_netlink_parms(): no params data found [ 397.395718][ T7406] loop0: detected capacity change from 0 to 40427 [ 397.507507][ T7406] F2FS-fs (loop0): invalid crc value [ 397.573648][ T7394] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.659367][ T7394] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.682740][ T7406] F2FS-fs (loop0): Found nat_bits in checkpoint [ 397.744397][ T7394] device bridge_slave_0 entered promiscuous mode [ 397.786878][ T4210] Bluetooth: hci2: command 0x0409 tx timeout [ 397.812088][ T7394] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.819445][ T7394] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.860146][ T7394] device bridge_slave_1 entered promiscuous mode [ 398.746527][ T7406] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 398.914286][ T7394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.939318][ T4166] attempt to access beyond end of device [ 398.939318][ T4166] loop0: rw=2049, want=45104, limit=40427 [ 398.951422][ T7394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.067456][ T7394] team0: Port device team_slave_0 added [ 399.133537][ T7394] team0: Port device team_slave_1 added [ 399.241408][ T7394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.302899][ T7394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.370131][ T7394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.529627][ T7394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.547328][ T7394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.635563][ T7394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.811266][ T4207] Bluetooth: hci2: command 0x041b tx timeout [ 399.865764][ T7458] loop0: detected capacity change from 0 to 256 [ 399.923343][ T7458] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 399.961633][ T7394] device hsr_slave_0 entered promiscuous mode [ 399.968426][ T7458] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 399.979577][ T7394] device hsr_slave_1 entered promiscuous mode [ 399.990740][ T7394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.007338][ T7394] Cannot create hsr debugfs directory [ 400.020311][ T7458] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 400.166643][ T7458] exFAT-fs (loop0): hint_cluster is invalid (17) [ 400.261310][ T26] audit: type=1800 audit(1743554765.747:2): pid=7458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.902" name="file1" dev="loop0" ino=1048641 res=0 errno=0 [ 400.464791][ T5362] device hsr_slave_0 left promiscuous mode [ 400.502467][ T5362] device hsr_slave_1 left promiscuous mode [ 400.548562][ T5362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.596893][ T5362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.626350][ T5362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.666528][ T5362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.706555][ T5362] device bridge_slave_1 left promiscuous mode [ 400.725611][ T5362] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.792790][ T5362] device bridge_slave_0 left promiscuous mode [ 400.850037][ T5362] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.913172][ T5362] device veth1_macvtap left promiscuous mode [ 400.942162][ T5362] device veth0_macvtap left promiscuous mode [ 400.948355][ T5362] device veth1_vlan left promiscuous mode [ 400.985133][ T5362] device veth0_vlan left promiscuous mode [ 401.154066][ T7466] loop2: detected capacity change from 0 to 32768 [ 401.170054][ T4210] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 401.269836][ T7466] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 401.394097][ T26] audit: type=1800 audit(1743554766.887:3): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.908" name="file2" dev="loop2" ino=17058 res=0 errno=0 [ 401.527779][ T4177] ocfs2: Unmounting device (7,2) on (node local) [ 401.587750][ T5362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.604919][ T5362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.690411][ T4210] usb 5-1: New USB device found, idVendor=0a5c, idProduct=bd1f, bcdDevice=53.1a [ 401.699520][ T4210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.739957][ T4210] usb 5-1: Product: syz [ 401.744183][ T4210] usb 5-1: Manufacturer: syz [ 401.748812][ T4210] usb 5-1: SerialNumber: syz [ 401.791947][ T4210] usb 5-1: config 0 descriptor?? [ 401.853906][ T5362] bond0 (unregistering): Released all slaves [ 401.880098][ T4210] Bluetooth: hci2: command 0x040f tx timeout [ 402.165773][ T7486] loop4: detected capacity change from 0 to 8 [ 402.245574][ T7500] loop2: detected capacity change from 0 to 4096 [ 402.818299][ T7486] SQUASHFS error: zlib decompression failed, data probably corrupt [ 402.867592][ T7486] SQUASHFS error: Failed to read block 0x9b: -5 [ 402.925613][ T7486] SQUASHFS error: Unable to read metadata cache entry [99] [ 402.955695][ T7495] netlink: 'syz.0.914': attribute type 4 has an invalid length. [ 402.990024][ T7486] SQUASHFS error: Unable to read inode 0x127 [ 404.087704][ T2301] Bluetooth: hci2: command 0x0419 tx timeout [ 405.414883][ T7513] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 405.515171][ T7] usb 5-1: USB disconnect, device number 5 [ 405.536495][ T154] ntfs3: loop2: ino=1c, Internal error [ 405.545891][ T154] ntfs3: loop2: ntfs3_write_inode r=1c failed, -22. [ 405.868342][ T7394] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 406.200168][ T7394] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 406.323261][ T7394] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 406.392644][ T7394] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 407.384399][ T7532] IPVS: length: 156 != 24 [ 407.433555][ T7533] loop0: detected capacity change from 0 to 512 [ 407.486238][ T7533] EXT4-fs (loop0): Unrecognized mount option "dont_hash" or missing value [ 407.717832][ T7538] loop1: detected capacity change from 0 to 8 [ 408.132140][ T7538] SQUASHFS error: lzo decompression failed, data probably corrupt [ 408.140580][ T7538] SQUASHFS error: Failed to read block 0x91: -5 [ 408.147116][ T7538] SQUASHFS error: Unable to read metadata cache entry [8f] [ 408.154477][ T7538] SQUASHFS error: Unable to read inode 0x11f [ 408.610704][ T7533] loop0: detected capacity change from 0 to 32768 [ 408.675559][ T7394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.927148][ T7533] XFS (loop0): Mounting V5 Filesystem [ 409.612481][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 409.651507][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 409.766272][ T7394] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.788716][ T7533] XFS (loop0): Starting recovery (logdev: internal) [ 409.819872][ T7533] XFS (loop0): Corruption warning: Metadata has LSN (8192:16) ahead of current LSN (1:48). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 409.835666][ T7533] XFS (loop0): Metadata corruption detected at xfs_agi_verify+0x22d/0x530, xfs_agi block 0x2 [ 409.847394][ T7533] XFS (loop0): Unmount and run xfs_repair [ 409.853193][ T7533] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 409.860759][ T7533] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00 XAGI.......... . [ 409.869950][ T7533] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 409.878918][ T7533] 00000020: 00 00 18 00 ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 409.888100][ T7533] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 409.897254][ T7533] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 409.906299][ T7533] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 409.915517][ T7533] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 409.924533][ T7533] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 409.933575][ T7533] XFS (loop0): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x37a/0x6c0 (fs/xfs/xfs_buf.c:1515). Shutting down filesystem. [ 409.949283][ T7533] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 409.958764][ T7533] XFS (loop0): log mount/recovery failed: error -117 [ 410.189641][ T7559] netlink: 'syz.1.926': attribute type 4 has an invalid length. [ 410.203227][ T7533] XFS (loop0): log mount failed [ 411.340727][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 411.360691][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 411.369441][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.376746][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.598319][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 411.626656][ T7571] team0: Port device virt_wifi0 added [ 411.665352][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 411.691921][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 411.722083][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.729200][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.768616][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 411.822946][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 411.845521][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 411.928502][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 411.985090][ T7583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.933'. [ 412.024115][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 412.975166][ T7394] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 413.091242][ T7394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.165954][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 413.202021][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 413.256740][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 413.282419][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 413.319145][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 413.364336][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 413.390631][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 415.175201][ T7394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.237457][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 415.275388][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 415.880024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 415.891568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 416.007706][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 416.038052][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 416.099289][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 416.118302][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 416.997670][ T7638] netlink: 'syz.4.940': attribute type 4 has an invalid length. [ 417.183836][ T7394] device veth0_vlan entered promiscuous mode [ 417.249470][ T7394] device veth1_vlan entered promiscuous mode [ 417.628381][ T7645] loop4: detected capacity change from 0 to 512 [ 417.817472][ T7649] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 418.453503][ T7645] EXT4-fs (loop4): Ignoring removed nobh option [ 418.882509][ T7645] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.943: invalid indirect mapped block 256 (level 2) [ 418.905921][ T7645] EXT4-fs (loop4): 2 truncates cleaned up [ 418.921373][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 418.930274][ T7645] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 418.968456][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 419.017523][ T7394] device veth0_macvtap entered promiscuous mode [ 419.033819][ T7394] device veth1_macvtap entered promiscuous mode [ 419.055085][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.094152][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.100072][ T7651] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 419.139982][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.170364][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.209855][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.244332][ T7660] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 596 with error 28 [ 419.259938][ T7660] EXT4-fs (loop4): This should not happen!! Data will be lost [ 419.259938][ T7660] [ 419.267653][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.291136][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.317360][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.325475][ T7660] EXT4-fs (loop4): Total free blocks count 0 [ 419.355963][ T7394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.368222][ T7655] loop1: detected capacity change from 0 to 8192 [ 419.371610][ T7660] EXT4-fs (loop4): Free/Dirty block details [ 419.397859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 419.420472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 419.443273][ T7660] EXT4-fs (loop4): free_blocks=0 [ 419.449089][ T7660] EXT4-fs (loop4): dirty_blocks=596 [ 419.459434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 419.463318][ T7660] EXT4-fs (loop4): Block reservation details [ 419.486820][ T7655] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 419.524884][ T7660] EXT4-fs (loop4): i_reserved_data_blocks=596 [ 419.665629][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.977826][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.252045][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.378653][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.389079][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.399886][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.413950][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.425007][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.468917][ T7394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.546110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 420.567381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 420.616753][ T7394] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.626038][ T7394] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.637793][ T7394] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.649358][ T7394] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.937312][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.969619][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.315002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 422.801586][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.838847][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.915058][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 423.052698][ T7708] netlink: 'syz.4.952': attribute type 4 has an invalid length. [ 424.276102][ T7723] loop5: detected capacity change from 0 to 128 [ 425.178678][ T7723] EXT4-fs (loop5): Ignoring removed nobh option [ 425.318496][ T7723] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 425.520256][ T7723] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 425.876106][ T7732] loop0: detected capacity change from 0 to 64 [ 427.417611][ T7750] loop5: detected capacity change from 0 to 256 [ 428.652171][ T7750] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 428.837956][ T7758] netlink: 'syz.2.965': attribute type 4 has an invalid length. [ 430.587689][ T7775] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 434.326386][ T7812] loop1: detected capacity change from 0 to 128 [ 434.519283][ T7814] loop0: detected capacity change from 0 to 128 [ 434.535935][ T7812] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 434.619105][ T7820] netlink: 'syz.2.978': attribute type 4 has an invalid length. [ 434.633970][ T7812] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.399039][ T7823] loop5: detected capacity change from 0 to 256 [ 435.626015][ T7823] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 435.918799][ T7830] netlink: 'syz.1.983': attribute type 10 has an invalid length. [ 436.161461][ T7830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.193313][ T7830] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 439.816679][ T7878] loop4: detected capacity change from 0 to 128 [ 439.975720][ T7876] tipc: Started in network mode [ 439.981954][ T7876] tipc: Node identity 7f000001, cluster identity 4711 [ 439.997028][ T7876] tipc: Enabled bearer , priority 10 [ 440.215243][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.230261][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.772069][ T4206] tipc: Node number set to 2130706433 [ 442.876728][ T7898] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 443.933255][ T7915] tipc: Enabling of bearer rejected, already enabled [ 445.236580][ T7930] loop1: detected capacity change from 0 to 128 [ 446.411938][ T7936] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 447.405797][ T7939] loop0: detected capacity change from 0 to 16 [ 447.493132][ T7939] erofs: (device loop0): mounted with root inode @ nid 36. [ 448.930247][ T146] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 449.263164][ T26] audit: type=1800 audit(1743554814.757:4): pid=7939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1011" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 449.293948][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 451.573415][ T7991] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 451.586943][ T7988] loop2: detected capacity change from 0 to 128 [ 454.468099][ T8021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1031'. [ 457.332341][ T7355] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 457.410026][ T8038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1035'. [ 457.640143][ T7355] usb 2-1: Using ep0 maxpacket: 32 [ 457.713515][ T8044] loop2: detected capacity change from 0 to 256 [ 457.833134][ T8044] exfat: Unknown parameter 'keep_last_dots' [ 457.854226][ T7355] usb 2-1: unable to get BOS descriptor or descriptor too short [ 457.995041][ T7355] usb 2-1: config 12 has an invalid interface number: 184 but max is 0 [ 458.137257][ T8048] loop5: detected capacity change from 0 to 40427 [ 458.175469][ T8048] F2FS-fs (loop5): invalid crc value [ 458.232475][ T7355] usb 2-1: config 12 has no interface number 0 [ 458.240489][ T4210] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.248787][ T7355] usb 2-1: config 12 interface 184 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 458.261608][ T8048] F2FS-fs (loop5): Found nat_bits in checkpoint [ 458.304242][ T8048] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 458.330027][ T4210] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.390042][ T4210] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.425411][ T4210] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.620190][ T1110] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 458.670196][ T7355] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 458.671047][ T4210] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.679293][ T7355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.698217][ T7355] usb 2-1: Product: syz [ 459.219968][ T7355] usb 2-1: Manufacturer: syz [ 459.224634][ T7355] usb 2-1: SerialNumber: syz [ 459.244895][ T7394] attempt to access beyond end of device [ 459.244895][ T7394] loop5: rw=2049, want=45104, limit=40427 [ 459.256819][ T1110] usb 3-1: Using ep0 maxpacket: 8 [ 459.271152][ T8024] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 459.382762][ T1110] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 459.405308][ T1110] usb 3-1: config 179 has no interface number 0 [ 459.420155][ T1110] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 459.449959][ T1110] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 459.478981][ T1110] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 459.692951][ T1110] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 459.732246][ T1110] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 459.754936][ T1110] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 460.558976][ T7355] usb 2-1: USB disconnect, device number 8 [ 460.651714][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.686383][ T4206] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 460.729087][ T1110] usb 3-1: can't set config #179, error -71 [ 460.751370][ T1110] usb 3-1: USB disconnect, device number 8 [ 460.817888][ T8070] loop4: detected capacity change from 0 to 256 [ 460.911856][ T8070] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 463.415953][ T8097] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 464.111575][ T8107] loop1: detected capacity change from 0 to 2048 [ 464.114590][ T8103] loop5: detected capacity change from 0 to 2048 [ 465.009210][ T8107] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 465.171515][ T8103] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.232664][ T8107] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,max_dir_size_kb=0x0000000000000007,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf,bsddf,usrjquota=,. Quota mode: writeback. [ 466.296130][ T8107] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1051: bg 0: block 234: padding at end of block bitmap is not set [ 466.312885][ T8107] EXT4-fs (loop1): Remounting filesystem read-only [ 467.650291][ T8134] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 478.609355][ T8261] loop5: detected capacity change from 0 to 1024 [ 479.721754][ T8296] loop4: detected capacity change from 0 to 24 [ 480.153445][ T26] audit: type=1800 audit(1743554845.647:5): pid=8308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1082" name="bus" dev="loop5" ino=27 res=0 errno=0 [ 480.287519][ T8294] hfsplus: b-tree write err: -5, ino 4 [ 480.784341][ T8334] loop4: detected capacity change from 0 to 128 [ 481.273548][ T8354] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 481.284714][ T8354] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 481.653700][ T8363] loop1: detected capacity change from 0 to 64 [ 482.200535][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 482.611041][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.692215][ T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 482.840884][ T23] usb 6-1: config 1 has no interface number 0 [ 482.944669][ T23] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.033514][ T23] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 483.733915][ T23] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 484.862497][ T8411] loop4: detected capacity change from 0 to 256 [ 486.294828][ T8411] exfat: Unknown parameter 'keep_last_dots' [ 486.329984][ T23] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 486.339541][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.347691][ T23] usb 6-1: Product: syz [ 486.351955][ T23] usb 6-1: Manufacturer: syz [ 486.400158][ T23] usb 6-1: can't set config #1, error -71 [ 486.450521][ T23] usb 6-1: USB disconnect, device number 2 [ 488.237683][ T8430] loop2: detected capacity change from 0 to 32768 [ 488.357589][ T8430] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1107 (8430) [ 488.508554][ T8430] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 488.540187][ T8430] BTRFS info (device loop2): enabling disk space caching [ 488.547562][ T8430] BTRFS info (device loop2): enabling auto defrag [ 488.627027][ T8430] BTRFS info (device loop2): doing ref verification [ 488.635178][ T8449] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1111'. [ 488.700249][ T8430] BTRFS info (device loop2): use no compression [ 488.786875][ T8430] BTRFS info (device loop2): force clearing of disk cache [ 488.816911][ T8430] BTRFS info (device loop2): disabling disk space caching [ 488.860186][ T8430] BTRFS info (device loop2): has skinny extents [ 490.240634][ T8472] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1115'. [ 490.326323][ T8477] loop0: detected capacity change from 0 to 256 [ 491.171826][ T8477] FAT-fs (loop0): Directory bread(block 64) failed [ 491.217583][ T8477] FAT-fs (loop0): Directory bread(block 65) failed [ 491.225092][ T8477] FAT-fs (loop0): Directory bread(block 66) failed [ 491.246700][ T8477] FAT-fs (loop0): Directory bread(block 67) failed [ 491.264283][ T8495] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1117'. [ 491.269982][ T8477] FAT-fs (loop0): Directory bread(block 68) failed [ 491.280341][ T8477] FAT-fs (loop0): Directory bread(block 69) failed [ 491.287018][ T8477] FAT-fs (loop0): Directory bread(block 70) failed [ 491.294927][ T8477] FAT-fs (loop0): Directory bread(block 71) failed [ 491.302622][ T8477] FAT-fs (loop0): Directory bread(block 72) failed [ 491.309199][ T8477] FAT-fs (loop0): Directory bread(block 73) failed [ 492.410506][ T8430] BTRFS error (device loop2): open_ctree failed: -22 [ 492.483296][ T8520] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 492.492403][ T8520] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 493.378796][ T8527] loop0: detected capacity change from 0 to 32768 [ 493.537310][ T8527] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 493.545673][ T8527] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 493.580108][ T8527] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 493.580108][ T8527] bh = 19 (type: exp=4, found=5) [ 493.580108][ T8527] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 493.600644][ T8527] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 493.610657][ T8527] gfs2: fsid=syz:syz.0: File system withdrawn [ 493.617059][ T8527] CPU: 0 PID: 8527 Comm: syz.0.1121 Not tainted 5.15.179-syzkaller #0 [ 493.625244][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 493.635345][ T8527] Call Trace: [ 493.638658][ T8527] [ 493.641619][ T8527] dump_stack_lvl+0x1e3/0x2d0 [ 493.646346][ T8527] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 493.652026][ T8527] ? panic+0x860/0x860 [ 493.656137][ T8527] gfs2_withdraw+0xe9e/0x14e0 [ 493.660842][ T8527] ? gfs2_lm+0x206/0x230 [ 493.665118][ T8527] ? gfs2_freeze_unlock+0x50/0x50 [ 493.670167][ T8527] ? gfs2_lm+0x230/0x230 [ 493.674429][ T8527] ? gfs2_meta_read+0x8fa/0xab0 [ 493.679291][ T8527] ? gfs2_meta_new+0x160/0x160 [ 493.684062][ T8527] gfs2_metatype_check_ii+0x75/0x90 [ 493.689272][ T8527] gfs2_meta_buffer+0x355/0x410 [ 493.694258][ T8527] ? gfs2_journal_wipe+0xcf0/0xcf0 [ 493.699375][ T8527] ? read_lock_is_recursive+0x10/0x10 [ 493.704757][ T8527] ? lockref_put_or_lock+0x71/0xb0 [ 493.709892][ T8527] gfs2_inode_refresh+0xdd/0x1070 [ 493.714940][ T8527] ? gfs2_inode_metasync+0xf0/0xf0 [ 493.720060][ T8527] ? lockref_put_or_lock+0x71/0xb0 [ 493.725222][ T8527] gfs2_inode_lookup+0x86e/0xd10 [ 493.730197][ T8527] ? set_meta_super+0x10/0x10 [ 493.734881][ T8527] ? gfs2_dirent_search+0x3ab/0x8c0 [ 493.740098][ T8527] ? gfs2_dirent_search+0x8c0/0x8c0 [ 493.745311][ T8527] ? gfs2_inode_lookup+0x519/0xd10 [ 493.750460][ T8527] ? __might_sleep+0xc0/0xc0 [ 493.755089][ T8527] gfs2_dir_search+0x225/0x2f0 [ 493.759974][ T8527] ? do_filldir_main+0x520/0x520 [ 493.764947][ T8527] ? gfs2_glock_wait+0x137/0x1c0 [ 493.769918][ T8527] gfs2_lookupi+0x45b/0x5e0 [ 493.774464][ T8527] ? gfs2_lookup_simple+0x170/0x170 [ 493.779873][ T8527] ? gfs2_lookupi+0x3f7/0x5e0 [ 493.784576][ T8527] ? init_journal+0x487/0x23c0 [ 493.789361][ T8527] init_journal+0x5f0/0x23c0 [ 493.794120][ T8527] ? end_bio_io_page+0xf0/0xf0 [ 493.798906][ T8527] ? ptr_to_hashval+0x60/0x60 [ 493.803590][ T8527] ? init_sb+0xc50/0x1340 [ 493.807958][ T8527] ? snprintf+0xd6/0x120 [ 493.812235][ T8527] ? vscnprintf+0x80/0x80 [ 493.816591][ T8527] init_inodes+0xdc/0x310 [ 493.820932][ T8527] gfs2_fill_super+0x1c2c/0x2750 [ 493.826144][ T8527] ? gfs2_reconfigure+0xcf0/0xcf0 [ 493.831289][ T8527] ? ptr_to_hashval+0x60/0x60 [ 493.836118][ T8527] ? gfs2_glock_nq_num+0x123/0x270 [ 493.841261][ T8527] ? set_blocksize+0x1ec/0x370 [ 493.846222][ T8527] get_tree_bdev+0x3fe/0x620 [ 493.850839][ T8527] ? gfs2_reconfigure+0xcf0/0xcf0 [ 493.856307][ T8527] gfs2_get_tree+0x50/0x210 [ 493.860814][ T8527] ? bpf_lsm_capable+0x5/0x10 [ 493.865508][ T8527] vfs_get_tree+0x88/0x270 [ 493.870277][ T8527] do_new_mount+0x2ba/0xb40 [ 493.874921][ T8527] ? do_move_mount_old+0x160/0x160 [ 493.880159][ T8527] ? user_path_at_empty+0x12b/0x180 [ 493.885597][ T8527] __se_sys_mount+0x2d5/0x3c0 [ 493.890375][ T8527] ? __x64_sys_mount+0xc0/0xc0 [ 493.895142][ T8527] ? syscall_enter_from_user_mode+0x2e/0x240 [ 493.901374][ T8527] ? lockdep_hardirqs_on+0x94/0x130 [ 493.906612][ T8527] ? __x64_sys_mount+0x1c/0xc0 [ 493.911387][ T8527] do_syscall_64+0x3b/0xb0 [ 493.915814][ T8527] ? clear_bhb_loop+0x15/0x70 [ 493.920619][ T8527] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 493.926670][ T8527] RIP: 0033:0x7f125f91d90a [ 493.931387][ T8527] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.951106][ T8527] RSP: 002b:00007f125d784e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 493.959561][ T8527] RAX: ffffffffffffffda RBX: 00007f125d784ef0 RCX: 00007f125f91d90a [ 493.967669][ T8527] RDX: 0000200000000040 RSI: 0000200000012500 RDI: 00007f125d784eb0 [ 493.975881][ T8527] RBP: 0000200000000040 R08: 00007f125d784ef0 R09: 0000000001000011 [ 493.983901][ T8527] R10: 0000000001000011 R11: 0000000000000246 R12: 0000200000012500 [ 493.991963][ T8527] R13: 00007f125d784eb0 R14: 00000000000125fa R15: 0000200000000100 [ 494.000083][ T8527] [ 494.005224][ T8527] gfs2: fsid=syz:syz.0: can't read journal index: -5 [ 499.186208][ T2301] hid-generic 0000:0000:0000.0001: item fetching failed at offset 0/2 [ 499.197746][ T2301] hid-generic: probe of 0000:0000:0000.0001 failed with error -22 [ 499.860301][ T8568] loop0: detected capacity change from 0 to 256 [ 499.922495][ T8568] exfat: Unknown parameter 'zero_size_dir' [ 501.562305][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.177021][ T8636] loop2: detected capacity change from 0 to 128 [ 511.825369][ T8647] loop0: detected capacity change from 0 to 256 [ 511.872424][ T155] attempt to access beyond end of device [ 511.872424][ T155] loop2: rw=1, want=233, limit=128 [ 512.117377][ T8647] FAT-fs (loop0): Unrecognized mount option "ut@" or missing value [ 512.252023][ T155] attempt to access beyond end of device [ 512.252023][ T155] loop2: rw=1, want=234, limit=128 [ 512.270258][ T155] Buffer I/O error on dev loop2, logical block 233, lost async page write [ 512.279274][ T155] attempt to access beyond end of device [ 512.279274][ T155] loop2: rw=1, want=235, limit=128 [ 512.759970][ T155] Buffer I/O error on dev loop2, logical block 234, lost async page write [ 514.226171][ T155] attempt to access beyond end of device [ 514.226171][ T155] loop2: rw=1, want=236, limit=128 [ 514.239191][ T155] Buffer I/O error on dev loop2, logical block 235, lost async page write [ 514.239268][ T155] attempt to access beyond end of device [ 514.239268][ T155] loop2: rw=1, want=237, limit=128 [ 514.239291][ T155] Buffer I/O error on dev loop2, logical block 236, lost async page write [ 514.239337][ T155] attempt to access beyond end of device [ 514.239337][ T155] loop2: rw=1, want=238, limit=128 [ 514.239357][ T155] Buffer I/O error on dev loop2, logical block 237, lost async page write [ 514.239399][ T155] attempt to access beyond end of device [ 514.239399][ T155] loop2: rw=1, want=239, limit=128 [ 514.239419][ T155] Buffer I/O error on dev loop2, logical block 238, lost async page write [ 514.239461][ T155] attempt to access beyond end of device [ 514.239461][ T155] loop2: rw=1, want=240, limit=128 [ 514.239481][ T155] Buffer I/O error on dev loop2, logical block 239, lost async page write [ 518.976753][ T8703] ODEBUG: Out of memory. ODEBUG disabled [ 519.136146][ T8707] loop4: detected capacity change from 0 to 64 [ 519.448253][ T8703] syz.1.1176 (8703): drop_caches: 2 [ 520.873325][ T8718] loop1: detected capacity change from 0 to 256 [ 520.962231][ T4208] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 520.991658][ T4208] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 521.010380][ T8718] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 521.046866][ T4208] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 527.153839][ T8752] loop2: detected capacity change from 0 to 40427 [ 529.936346][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'. [ 530.235812][ T8809] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1204'. [ 531.555073][ T8822] loop5: detected capacity change from 0 to 512 [ 531.703269][ T8823] netlink: 'syz.0.1211': attribute type 3 has an invalid length. [ 531.738102][ T8823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1211'. [ 531.770937][ T8826] input: syz0 as /devices/virtual/input/input13 [ 531.819872][ T8822] EXT4-fs (loop5): Unrecognized mount option "mask=MAY_WRITE" or missing value [ 531.941012][ T8828] netlink: 'syz.1.1205': attribute type 4 has an invalid length. [ 532.620143][ T8834] binder: 8833:8834 ioctl c0306201 0 returned -14 [ 532.770882][ T8822] 9pnet: Insufficient options for proto=fd [ 533.689961][ T8838] binder: BINDER_SET_CONTEXT_MGR already set [ 533.690108][ T8838] binder: 8833:8838 ioctl 4018620d 200000000040 returned -16 [ 533.989958][ T8838] binder: 8833:8838 unknown command 0 [ 533.989993][ T8838] binder: 8833:8838 ioctl c0306201 2000000001c0 returned -22 [ 535.635880][ T4217] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 535.678305][ T8844] loop1: detected capacity change from 0 to 256 [ 535.770950][ T8844] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 536.570302][ T8858] loop2: detected capacity change from 0 to 512 [ 536.913097][ T8858] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=6842c019, mo2=0002] [ 536.932181][ T8858] System zones: 0-5 [ 537.062945][ T8858] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,nombcache,journal_ioprio=0x0000000000000000,debug,user_xattr,noinit_itable,jqfmt=vfsv0,user_xattr,auto_da_alloc=0x0000000000000007,,errors=continue. Quota mode: none. [ 537.722210][ T26] audit: type=1800 audit(1743554903.217:6): pid=8858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1221" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 537.992347][ T8878] netlink: 'syz.4.1224': attribute type 4 has an invalid length. [ 538.162411][ T8882] loop1: detected capacity change from 0 to 512 [ 538.187261][ T8883] netlink: 'syz.2.1227': attribute type 3 has an invalid length. [ 538.215316][ T8883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1227'. [ 538.242392][ T8883] input: syz0 as /devices/virtual/input/input14 [ 538.262297][ T8882] EXT4-fs (loop1): Unrecognized mount option "mask=MAY_WRITE" or missing value [ 538.381620][ T8882] 9pnet: Insufficient options for proto=fd [ 539.157779][ T2301] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 540.120294][ T7356] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 540.379992][ T7356] usb 5-1: Using ep0 maxpacket: 16 [ 540.520885][ T7356] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.667135][ T7356] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 541.051336][ T7356] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 541.113483][ T7356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.184365][ T7356] usb 5-1: Product: syz [ 541.188594][ T7356] usb 5-1: Manufacturer: syz [ 541.196416][ T7356] usb 5-1: SerialNumber: syz [ 541.206756][ T7356] r8152-cfgselector 5-1: config 0 descriptor?? [ 541.928094][ T8888] netlink: 'syz.4.1229': attribute type 3 has an invalid length. [ 542.008408][ T8888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1229'. [ 542.148154][ T8900] loop1: detected capacity change from 0 to 256 [ 542.250883][ T8900] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 543.379909][ T7356] r8152-cfgselector 5-1: Unknown version 0x0000 [ 543.408957][ T7356] r8152-cfgselector 5-1: USB disconnect, device number 7 [ 543.538954][ T8915] loop4: detected capacity change from 0 to 2048 [ 543.595787][ T8911] loop0: detected capacity change from 0 to 40427 [ 543.748572][ T8918] ubi31: attaching mtd0 [ 543.809778][ T8918] ubi31: scanning is finished [ 543.814548][ T8918] ubi31: empty MTD device detected [ 544.086784][ T8911] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 544.094858][ T8911] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 544.480829][ T8915] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 544.505518][ T8915] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.549388][ T8923] netlink: 'syz.5.1240': attribute type 3 has an invalid length. [ 544.580333][ T8911] F2FS-fs (loop0): invalid crc value [ 544.601741][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1240'. [ 544.662462][ T8923] input: syz0 as /devices/virtual/input/input16 [ 544.814939][ T8918] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 544.830369][ T8911] F2FS-fs (loop0): Found nat_bits in checkpoint [ 545.635413][ T8918] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 545.656747][ T8911] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 545.663886][ T8911] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 545.690550][ T8918] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 545.708987][ T8918] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 545.744564][ T8918] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 545.930992][ T8918] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 545.946090][ T8918] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2386832660 [ 545.960779][ T8918] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 545.979949][ T8933] ubi31: background thread "ubi_bgt31d" started, PID 8933 [ 547.325350][ T8311] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:20: bg 0: block 345: padding at end of block bitmap is not set [ 547.446097][ T8311] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 247 with error 117 [ 547.528318][ T8311] EXT4-fs (loop4): This should not happen!! Data will be lost [ 547.528318][ T8311] [ 547.542487][ T8950] loop5: detected capacity change from 0 to 256 [ 547.634956][ T8950] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 548.129285][ T1110] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 548.849825][ T1110] usb 5-1: Using ep0 maxpacket: 32 [ 548.990167][ T1110] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 549.020587][ T1110] usb 5-1: config 0 has no interface number 0 [ 549.040059][ T1110] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 549.240478][ T1110] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 549.378866][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.565531][ T1110] usb 5-1: Product: syz [ 549.759711][ T1110] usb 5-1: Manufacturer: syz [ 549.764843][ T1110] usb 5-1: SerialNumber: syz [ 549.871774][ T8969] loop5: detected capacity change from 0 to 164 [ 549.894690][ T1110] usb 5-1: config 0 descriptor?? [ 549.953271][ T1110] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 549.979833][ T1110] em28xx 5-1:0.132: Video interface 132 found: [ 551.071663][ T8953] loop4: detected capacity change from 0 to 64 [ 551.080203][ T1110] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 551.541719][ T8988] netlink: 'syz.5.1258': attribute type 3 has an invalid length. [ 551.561581][ T8988] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1258'. [ 551.582637][ T1110] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 551.613779][ T1110] em28xx 5-1:0.132: board has no eeprom [ 551.650743][ T8988] input: syz0 as /devices/virtual/input/input17 [ 551.710038][ T1110] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 551.810236][ T1110] em28xx 5-1:0.132: analog set to bulk mode. [ 551.845849][ T1110] usb 5-1: USB disconnect, device number 8 [ 552.264407][ T8997] loop2: detected capacity change from 0 to 256 [ 552.282601][ T1110] em28xx 5-1:0.132: Disconnecting em28xx [ 552.300332][ T23] em28xx 5-1:0.132: Registering V4L2 extension [ 552.388332][ T8997] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 552.472008][ T23] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 552.491460][ T23] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 552.498731][ T23] em28xx 5-1:0.132: No AC97 audio processor [ 552.815452][ T23] usb 5-1: Decoder not found [ 552.820645][ T23] em28xx 5-1:0.132: failed to create media graph [ 552.827511][ T23] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 552.906188][ T23] em28xx 5-1:0.132: Remote control support is not available for this card. [ 552.935245][ T1110] em28xx 5-1:0.132: Closing input extension [ 553.170391][ T1110] em28xx 5-1:0.132: Freeing device [ 557.512100][ T9039] loop0: detected capacity change from 0 to 64 [ 558.055581][ T9047] loop5: detected capacity change from 0 to 256 [ 558.145343][ T9047] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 558.484645][ T9052] loop0: detected capacity change from 0 to 164 [ 559.043253][ T9054] netlink: 'syz.5.1275': attribute type 3 has an invalid length. [ 559.079612][ T9054] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1275'. [ 559.179230][ T9054] input: syz0 as /devices/virtual/input/input18 [ 560.396061][ T9065] loop2: detected capacity change from 0 to 128 [ 560.877593][ T9070] loop4: detected capacity change from 0 to 164 [ 563.002569][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.293658][ T9091] loop1: detected capacity change from 0 to 512 [ 563.475934][ T9091] EXT4-fs error (device loop1): ext4_quota_enable:6388: inode #3: comm syz.1.1286: iget: bogus i_mode (0) [ 563.494966][ T9098] loop5: detected capacity change from 0 to 64 [ 563.498088][ T9091] EXT4-fs error (device loop1): ext4_quota_enable:6391: comm syz.1.1286: Bad quota inode: 3, type: 0 [ 563.538297][ T9091] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 563.600789][ T9091] EXT4-fs (loop1): mount failed [ 565.494723][ T9114] netlink: 'syz.0.1291': attribute type 3 has an invalid length. [ 565.537393][ T9118] loop2: detected capacity change from 0 to 128 [ 565.687933][ T9114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1291'. [ 565.833644][ T9120] input: syz0 as /devices/virtual/input/input19 [ 566.289542][ T9124] loop1: detected capacity change from 0 to 512 [ 566.707947][ T9124] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=6842c019, mo2=0002] [ 566.744651][ T9124] System zones: 0-5 [ 566.900734][ T9124] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,nombcache,journal_ioprio=0x0000000000000000,debug,user_xattr,noinit_itable,jqfmt=vfsv0,user_xattr,auto_da_alloc=0x0000000000000007,,errors=continue. Quota mode: none. [ 567.070352][ T26] audit: type=1800 audit(1743554932.567:7): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1294" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 567.264825][ T9144] loop0: detected capacity change from 0 to 64 [ 567.275425][ T9146] netlink: 'syz.5.1298': attribute type 4 has an invalid length. [ 567.309629][ T9145] loop4: detected capacity change from 0 to 512 [ 567.433702][ T9148] loop2: detected capacity change from 0 to 164 [ 567.458878][ T9145] EXT4-fs error (device loop4): ext4_quota_enable:6388: inode #3: comm syz.4.1299: iget: bogus i_mode (0) [ 567.525617][ T9145] EXT4-fs error (device loop4): ext4_quota_enable:6391: comm syz.4.1299: Bad quota inode: 3, type: 0 [ 567.604535][ T9145] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 567.622387][ T9145] EXT4-fs (loop4): mount failed [ 569.006842][ T9168] overlayfs: failed to resolve './file1': -2 [ 569.359240][ T9173] loop0: detected capacity change from 0 to 128 [ 569.837824][ T9182] netlink: 'syz.1.1310': attribute type 3 has an invalid length. [ 569.884888][ T9182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1310'. [ 569.902304][ T9182] input: syz0 as /devices/virtual/input/input20 [ 570.039402][ T9185] loop0: detected capacity change from 0 to 512 [ 570.173595][ T9185] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=6842c019, mo2=0002] [ 570.195429][ T9185] System zones: 0-5 [ 570.227415][ T9185] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,nombcache,journal_ioprio=0x0000000000000000,debug,user_xattr,noinit_itable,jqfmt=vfsv0,user_xattr,auto_da_alloc=0x0000000000000007,,errors=continue. Quota mode: none. [ 570.333940][ T26] audit: type=1800 audit(1743554935.827:8): pid=9185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1312" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 570.824118][ T9191] loop0: detected capacity change from 0 to 4096 [ 570.914267][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1316'. [ 570.973295][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1316'. [ 571.008073][ T9201] loop1: detected capacity change from 0 to 512 [ 571.047927][ T9191] NILFS (loop0): unrecognized mount option "barriard" [ 571.522334][ T9201] EXT4-fs error (device loop1): ext4_quota_enable:6388: inode #3: comm syz.1.1317: iget: bogus i_mode (0) [ 571.750561][ T9201] EXT4-fs error (device loop1): ext4_quota_enable:6391: comm syz.1.1317: Bad quota inode: 3, type: 0 [ 571.849840][ T9201] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 571.880801][ T9201] EXT4-fs (loop1): mount failed [ 572.543618][ T9220] loop1: detected capacity change from 0 to 512 [ 572.677783][ T9220] EXT4-fs (loop1): Unrecognized mount option "mask=MAY_WRITE" or missing value [ 572.864434][ T9223] overlayfs: failed to resolve './file1': -2 [ 573.136563][ T9220] 9pnet: Insufficient options for proto=fd [ 574.347946][ T7356] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 574.543816][ T9226] loop2: detected capacity change from 0 to 512 [ 575.053758][ T9226] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=6842c019, mo2=0002] [ 575.097900][ T9226] System zones: 0-5 [ 575.460724][ T9226] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,nombcache,journal_ioprio=0x0000000000000000,debug,user_xattr,noinit_itable,jqfmt=vfsv0,user_xattr,auto_da_alloc=0x0000000000000007,,errors=continue. Quota mode: none. [ 575.515119][ T9232] netlink: 'syz.5.1324': attribute type 3 has an invalid length. [ 575.541007][ T26] audit: type=1800 audit(1743554941.037:9): pid=9226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1323" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 575.544947][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1324'. [ 575.580709][ T9236] loop4: detected capacity change from 0 to 128 [ 575.651067][ T9234] input: syz0 as /devices/virtual/input/input21 [ 577.010489][ T9250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1328'. [ 577.113507][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'. [ 577.137669][ T9256] loop0: detected capacity change from 0 to 512 [ 577.949365][ T9256] EXT4-fs error (device loop0): ext4_quota_enable:6388: inode #3: comm syz.0.1332: iget: bogus i_mode (0) [ 578.074027][ T9256] EXT4-fs error (device loop0): ext4_quota_enable:6391: comm syz.0.1332: Bad quota inode: 3, type: 0 [ 578.313413][ T9270] overlayfs: failed to resolve './file1': -2 [ 578.347959][ T9256] EXT4-fs warning (device loop0): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 578.601098][ T9256] EXT4-fs (loop0): mount failed [ 579.063658][ T4208] hid-generic 0000:0000:0000.0003: item fetching failed at offset 0/2 [ 579.181806][ T4208] hid-generic: probe of 0000:0000:0000.0003 failed with error -22 [ 580.674255][ T9289] loop4: detected capacity change from 0 to 40427 [ 580.738790][ T9289] F2FS-fs (loop4): inline encryption not supported [ 580.772431][ T9289] F2FS-fs (loop4): invalid crc value [ 580.879998][ T9289] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 580.936348][ T9289] F2FS-fs (loop4): Start checkpoint disabled! [ 580.975348][ T9289] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 581.099302][ T9294] loop1: detected capacity change from 0 to 512 [ 581.153235][ T9296] netlink: 'syz.5.1340': attribute type 3 has an invalid length. [ 581.210551][ T9296] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1340'. [ 581.284776][ T9294] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=6842c019, mo2=0002] [ 581.327504][ T9294] System zones: 0-5 [ 581.340707][ T9296] input: syz0 as /devices/virtual/input/input22 [ 581.366216][ T9294] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,nombcache,journal_ioprio=0x0000000000000000,debug,user_xattr,noinit_itable,jqfmt=vfsv0,user_xattr,auto_da_alloc=0x0000000000000007,,errors=continue. Quota mode: none. [ 581.555840][ T26] audit: type=1800 audit(1743554947.047:10): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1338" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 582.749698][ T9315] loop1: detected capacity change from 0 to 40427 [ 583.299227][ T9322] overlayfs: failed to resolve './file0': -2 [ 583.847344][ T9327] loop0: detected capacity change from 0 to 256 [ 583.866930][ T9315] F2FS-fs (loop1): Unrecognized mount option "whintjmode=fs-based" or missing value [ 584.285969][ T9327] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 584.397545][ T9339] loop4: detected capacity change from 0 to 128 [ 585.572199][ T9345] netlink: 'syz.5.1354': attribute type 4 has an invalid length. [ 585.695900][ T9350] loop0: detected capacity change from 0 to 512 [ 586.199849][ T9350] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_WRITE" or missing value [ 586.295374][ T9350] 9pnet: Insufficient options for proto=fd [ 589.394761][ T9382] loop0: detected capacity change from 0 to 256 [ 589.817843][ T9382] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 591.469088][ T9404] loop0: detected capacity change from 0 to 64 [ 592.884202][ T9420] loop0: detected capacity change from 0 to 512 [ 592.993124][ T9420] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_WRITE" or missing value [ 593.076365][ T9429] loop4: detected capacity change from 0 to 256 [ 593.180072][ T9429] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 593.202994][ T9420] 9pnet: Insufficient options for proto=fd [ 594.351842][ T9429] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 595.559540][ T9442] loop1: detected capacity change from 0 to 256 [ 595.927752][ T9442] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 597.545411][ T9451] loop0: detected capacity change from 0 to 128 [ 598.438503][ T2301] hid-generic 0000:0000:0000.0004: item fetching failed at offset 0/2 [ 598.590480][ T2301] hid-generic: probe of 0000:0000:0000.0004 failed with error -22 [ 600.919904][ T2301] Bluetooth: hci2: command 0x0406 tx timeout [ 601.387179][ T9485] loop5: detected capacity change from 0 to 164 [ 602.134016][ T9487] binder: 9486:9487 ioctl c0306201 0 returned -14 [ 603.430552][ T9495] binder: BINDER_SET_CONTEXT_MGR already set [ 603.438777][ T9495] binder: 9486:9495 ioctl 4018620d 200000000040 returned -16 [ 603.925196][ T9499] loop1: detected capacity change from 0 to 164 [ 603.955395][ T9497] loop5: detected capacity change from 0 to 256 [ 604.055789][ T9497] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 607.526325][ T9535] loop4: detected capacity change from 0 to 256 [ 607.961515][ T9542] loop2: detected capacity change from 0 to 256 [ 608.093960][ T9542] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 609.683911][ T9555] loop5: detected capacity change from 0 to 40427 [ 609.805844][ T9555] F2FS-fs (loop5): inline encryption not supported [ 609.845790][ T9555] F2FS-fs (loop5): invalid crc value [ 610.390695][ T9555] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 610.446275][ T9555] F2FS-fs (loop5): Start checkpoint disabled! [ 610.665394][ T9555] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 611.490058][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 611.839812][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 611.980092][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.009953][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.035517][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 612.069772][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.301273][ T9578] loop0: detected capacity change from 0 to 64 [ 612.863245][ T23] usb 3-1: config 0 descriptor?? [ 612.901020][ T23] hub 3-1:0.0: USB hub found [ 613.159660][ T9584] loop1: detected capacity change from 0 to 64 [ 613.166373][ T23] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 613.333339][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 613.339360][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 613.400778][ T23] usb 3-1: USB disconnect, device number 9 [ 614.162765][ T9597] loop2: detected capacity change from 0 to 64 [ 614.182836][ T9599] loop5: detected capacity change from 0 to 256 [ 614.280258][ T9599] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 614.883600][ T9604] loop4: detected capacity change from 0 to 256 [ 614.953816][ T9607] loop2: detected capacity change from 0 to 128 [ 614.980337][ T9604] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 616.466258][ T9618] loop2: detected capacity change from 0 to 256 [ 618.249540][ T9630] loop4: detected capacity change from 0 to 40427 [ 618.663448][ T9630] F2FS-fs (loop4): inline encryption not supported [ 618.672389][ T9630] F2FS-fs (loop4): invalid crc value [ 618.701737][ T9630] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 618.758000][ T9630] F2FS-fs (loop4): Start checkpoint disabled! [ 618.800008][ T9630] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 621.580764][ T9660] loop1: detected capacity change from 0 to 164 [ 623.435806][ T9675] loop4: detected capacity change from 0 to 128 [ 623.779888][ T7356] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 624.871135][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.810022][ T7356] usb 6-1: Using ep0 maxpacket: 16 [ 625.930032][ T7356] usb 6-1: config 0 has an invalid interface number: 194 but max is 0 [ 625.957922][ T7356] usb 6-1: config 0 has no interface number 0 [ 626.144755][ T7356] usb 6-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 626.675854][ T7356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.685182][ T7356] usb 6-1: Product: syz [ 626.689630][ T7356] usb 6-1: Manufacturer: syz [ 626.697290][ T7356] usb 6-1: SerialNumber: syz [ 626.717200][ T7356] usb 6-1: config 0 descriptor?? [ 626.739962][ T7356] usb 6-1: can't set config #0, error -71 [ 626.750545][ T7356] usb 6-1: USB disconnect, device number 4 [ 626.865947][ T9709] loop4: detected capacity change from 0 to 64 [ 628.073828][ T9717] loop5: detected capacity change from 0 to 512 [ 628.211917][ T9717] EXT4-fs (loop5): Unrecognized mount option "mask=MAY_WRITE" or missing value [ 628.630619][ T9717] 9pnet: Insufficient options for proto=fd [ 629.340201][ T4212] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 632.077946][ T9737] loop0: detected capacity change from 0 to 128 [ 632.557277][ T9737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1449'. [ 634.358920][ T9763] loop2: detected capacity change from 0 to 64 [ 635.981535][ T9775] loop2: detected capacity change from 0 to 512 [ 636.164559][ T9775] EXT4-fs (loop2): Unrecognized mount option "mask=MAY_WRITE" or missing value [ 636.208029][ T9780] loop1: detected capacity change from 0 to 128 [ 636.942167][ T9775] 9pnet: Insufficient options for proto=fd [ 642.130342][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1467'. [ 642.224906][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1467'. [ 642.450014][ T4208] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 642.719969][ T4208] usb 2-1: Using ep0 maxpacket: 16 [ 642.840147][ T4208] usb 2-1: config 0 has an invalid interface number: 194 but max is 0 [ 642.865857][ T4208] usb 2-1: config 0 has no interface number 0 [ 643.190112][ T4208] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 643.219928][ T4208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.228062][ T4208] usb 2-1: Product: syz [ 643.299885][ T4208] usb 2-1: Manufacturer: syz [ 643.325037][ T4208] usb 2-1: SerialNumber: syz [ 643.356503][ T4208] usb 2-1: config 0 descriptor?? [ 643.402167][ T9816] loop2: detected capacity change from 0 to 64 [ 643.421480][ T4208] cypress_cy7c63 2-1:0.194: Cypress CY7C63xxx device now attached [ 643.672238][ T9804] device wlan0 entered promiscuous mode [ 643.688415][ T9804] device macvtap1 entered promiscuous mode [ 643.741402][ T4210] usb 2-1: USB disconnect, device number 11 [ 643.752732][ T4210] cypress_cy7c63 2-1:0.194: Cypress CY7C63xxx device now disconnected [ 644.824240][ T4212] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 644.872261][ T4212] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 644.957603][ T4212] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 645.415620][ T9831] loop1: detected capacity change from 0 to 164 [ 646.183924][ T9835] loop5: detected capacity change from 0 to 40427 [ 646.784777][ T9835] F2FS-fs (loop5): Unrecognized mount option "whintjmode=fs-based" or missing value [ 649.586049][ T9850] loop4: detected capacity change from 0 to 40427 [ 649.662547][ T9850] F2FS-fs (loop4): Unrecognized mount option "whintjmode=fs-based" or missing value [ 651.170121][ T4207] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 651.219866][ T4207] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 651.497123][ T4207] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 652.593742][ T9884] loop0: detected capacity change from 0 to 164 [ 653.681840][ T9896] loop1: detected capacity change from 0 to 64 [ 654.046782][ T9900] loop0: detected capacity change from 0 to 256 [ 654.902907][ T9908] loop0: detected capacity change from 0 to 256 [ 654.992035][ T9908] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 657.028591][ T4208] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 657.069955][ T4208] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 657.135164][ T4208] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 658.746806][ T9940] loop1: detected capacity change from 0 to 128 [ 659.871972][ T4208] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 660.081225][ T9954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1508'. [ 660.247627][ T9959] loop0: detected capacity change from 0 to 164 [ 660.299850][ T4208] usb 5-1: Using ep0 maxpacket: 16 [ 660.480054][ T4208] usb 5-1: config 0 has an invalid interface number: 194 but max is 0 [ 660.541692][ T4208] usb 5-1: config 0 has no interface number 0 [ 660.834245][ T4208] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 660.957122][ T4208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.010378][ T4208] usb 5-1: Product: syz [ 661.014730][ T4208] usb 5-1: Manufacturer: syz [ 661.042442][ T4208] usb 5-1: SerialNumber: syz [ 661.081747][ T4208] usb 5-1: config 0 descriptor?? [ 661.151459][ T4208] cypress_cy7c63 5-1:0.194: Cypress CY7C63xxx device now attached [ 661.386464][ T9938] device wlan0 entered promiscuous mode [ 661.400189][ T9938] device macvtap1 entered promiscuous mode [ 661.462421][ T4208] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 661.622538][ T4208] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 661.693213][ T4209] usb 5-1: USB disconnect, device number 9 [ 661.709213][ T4208] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 661.731725][ T4209] cypress_cy7c63 5-1:0.194: Cypress CY7C63xxx device now disconnected [ 663.364453][ T9985] loop0: detected capacity change from 0 to 256 [ 663.665317][ T9985] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 666.138964][T10008] loop5: detected capacity change from 0 to 164 [ 666.319933][ T4207] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 666.669819][ T4207] usb 2-1: Using ep0 maxpacket: 16 [ 666.925740][ T4207] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.949847][ T4207] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 667.170564][ T4207] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 667.185825][ T4207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.221056][ T4207] usb 2-1: Product: syz [ 667.229362][ T4207] usb 2-1: Manufacturer: syz [ 667.253310][ T4207] usb 2-1: SerialNumber: syz [ 667.284774][ T4207] r8152-cfgselector 2-1: config 0 descriptor?? [ 668.263045][T10023] loop2: detected capacity change from 0 to 256 [ 669.170254][T10026] netlink: 'syz.1.1522': attribute type 3 has an invalid length. [ 669.219990][T10026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1522'. [ 669.291645][T10026] input: syz0 as /devices/virtual/input/input23 [ 669.436046][ T4207] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 670.639228][T10047] loop4: detected capacity change from 0 to 64 [ 671.475603][T10053] loop2: detected capacity change from 0 to 64 [ 671.559863][ T4207] usb 2-1: USB disconnect, device number 12 [ 671.940567][T10045] loop0: detected capacity change from 0 to 40427 [ 671.998268][T10045] F2FS-fs (loop0): inline encryption not supported [ 672.029231][T10045] F2FS-fs (loop0): invalid crc value [ 672.066203][T10045] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 672.122026][T10045] F2FS-fs (loop0): Start checkpoint disabled! [ 672.172792][T10045] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 672.329834][ T4207] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 672.949904][ T4207] usb 2-1: Using ep0 maxpacket: 16 [ 673.085076][ T4207] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.220554][ T4207] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 673.640046][ T4207] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 673.658498][ T4207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.690436][ T4207] usb 2-1: Product: syz [ 673.694760][ T4207] usb 2-1: Manufacturer: syz [ 673.707006][ T4207] usb 2-1: SerialNumber: syz [ 673.724399][ T4207] r8152-cfgselector 2-1: config 0 descriptor?? [ 674.397129][T10055] netlink: 'syz.1.1536': attribute type 3 has an invalid length. [ 674.547862][T10055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1536'. [ 675.222885][T10079] loop0: detected capacity change from 0 to 128 [ 675.381656][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'. [ 676.969210][T10094] loop4: detected capacity change from 0 to 64 [ 677.713138][ T4210] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 678.009838][ T4210] usb 5-1: Using ep0 maxpacket: 16 [ 678.160057][ T4210] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.224108][ T4210] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 678.257791][T10105] netlink: 'syz.0.1549': attribute type 3 has an invalid length. [ 678.332354][T10105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1549'. [ 678.516742][ T4210] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 678.549011][ T4210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.598724][ T4210] usb 5-1: Product: syz [ 678.614505][ T4210] usb 5-1: Manufacturer: syz [ 678.636083][ T4210] usb 5-1: SerialNumber: syz [ 678.671781][ T4210] r8152-cfgselector 5-1: config 0 descriptor?? [ 678.869931][ T4207] r8152-cfgselector 2-1: Unknown version 0x0000 [ 678.972838][ T4206] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 678.996527][T10099] netlink: 'syz.4.1547': attribute type 3 has an invalid length. [ 679.064771][T10099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1547'. [ 679.153838][T10099] input: syz0 as /devices/virtual/input/input26 [ 679.214979][ T4210] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 679.231397][ T154] usb 5-1: config 0 descriptor?? [ 679.240014][ T4206] usb 3-1: Using ep0 maxpacket: 32 [ 679.285003][ T4206] usb 3-1: no configurations [ 679.289657][ T4206] usb 3-1: can't read configurations, error -22 [ 679.448653][ T4210] usb 5-1: USB disconnect, device number 10 [ 679.459861][ T4206] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 679.459910][ T154] usb 5-1: can't set config #0, error -71 [ 679.737280][ T4206] usb 3-1: Using ep0 maxpacket: 32 [ 679.780177][ T4206] usb 3-1: no configurations [ 679.791532][ T4206] usb 3-1: can't read configurations, error -22 [ 679.817422][ T4206] usb usb3-port1: attempt power cycle [ 680.257543][ T4206] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 680.366816][ T4206] usb 3-1: Using ep0 maxpacket: 32 [ 680.410121][ T4206] usb 3-1: no configurations [ 680.415468][ T4206] usb 3-1: can't read configurations, error -22 [ 680.570055][ T4206] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 680.690587][ T4206] usb 3-1: Using ep0 maxpacket: 32 [ 680.730270][ T4206] usb 3-1: no configurations [ 680.735129][ T4206] usb 3-1: can't read configurations, error -22 [ 680.792870][ T4206] usb usb3-port1: unable to enumerate USB device [ 680.908759][T10118] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1553'. [ 681.666195][T10123] loop0: detected capacity change from 0 to 40427 [ 682.188630][T10123] F2FS-fs (loop0): Unrecognized mount option "whintjmode=fs-based" or missing value [ 682.610798][ T4208] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 682.959898][ T4208] usb 3-1: Using ep0 maxpacket: 32 [ 683.110099][ T4208] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 683.138313][ T4208] usb 3-1: config 0 has no interface number 0 [ 683.208179][ T4208] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 683.336459][ T4209] r8152-cfgselector 2-1: USB disconnect, device number 13 [ 683.490174][ T4208] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 683.549392][ T4208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.689890][ T4208] usb 3-1: Product: syz [ 683.709814][ T4208] usb 3-1: Manufacturer: syz [ 683.750303][ T4208] usb 3-1: SerialNumber: syz [ 683.789374][ T4208] usb 3-1: config 0 descriptor?? [ 683.874131][ T4208] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 683.907539][ T4208] em28xx 3-1:0.132: Video interface 132 found: [ 684.100209][ T4209] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 684.349773][ T4209] usb 6-1: Using ep0 maxpacket: 16 [ 684.384049][ T4208] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 684.829993][ T4209] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.840614][ T4209] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 684.883188][T10153] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1564'. [ 685.009948][ T4209] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 685.022185][ T4209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.043265][ T4209] usb 6-1: Product: syz [ 685.058101][ T4209] usb 6-1: Manufacturer: syz [ 685.060957][T10156] netlink: 'syz.0.1565': attribute type 3 has an invalid length. [ 685.067564][ T4209] usb 6-1: SerialNumber: syz [ 685.097071][ T4209] r8152-cfgselector 6-1: config 0 descriptor?? [ 685.124834][T10156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1565'. [ 685.171465][T10157] loop2: detected capacity change from 0 to 64 [ 685.201787][T10156] input: syz0 as /devices/virtual/input/input27 [ 685.379965][ T4208] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 685.416454][ T4208] em28xx 3-1:0.132: board has no eeprom [ 685.418858][T10159] netlink: 'syz.5.1562': attribute type 3 has an invalid length. [ 685.451631][T10159] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1562'. [ 685.477267][T10162] input: syz0 as /devices/virtual/input/input28 [ 685.509950][ T4208] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 685.523161][ T4208] em28xx 3-1:0.132: analog set to bulk mode. [ 685.551253][ T4217] em28xx 3-1:0.132: Registering V4L2 extension [ 685.663610][ T4209] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 685.687540][ T4208] usb 3-1: USB disconnect, device number 14 [ 685.724977][ T4208] em28xx 3-1:0.132: Disconnecting em28xx [ 685.742431][ T4546] usb 6-1: config 0 descriptor?? [ 685.920411][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.108140][ T4217] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 686.122993][ T4217] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 686.156995][ T4217] em28xx 3-1:0.132: No AC97 audio processor [ 686.208886][ T4217] usb 3-1: Decoder not found [ 686.227634][ T4217] em28xx 3-1:0.132: failed to create media graph [ 686.249106][ T4217] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 686.316226][ T4217] em28xx 3-1:0.132: Remote control support is not available for this card. [ 686.369912][ T4208] em28xx 3-1:0.132: Closing input extension [ 686.400955][ T4208] em28xx 3-1:0.132: Freeing device [ 686.455933][T10174] loop0: detected capacity change from 0 to 164 [ 687.271373][ T4546] usb 6-1: can't set config #0, error -71 [ 687.283639][ T4217] usb 6-1: USB disconnect, device number 6 [ 688.663917][T10190] loop0: detected capacity change from 0 to 128 [ 690.160197][T10208] netlink: 'syz.0.1577': attribute type 3 has an invalid length. [ 690.198595][T10208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1577'. [ 690.251925][T10209] input: syz0 as /devices/virtual/input/input29 [ 691.185527][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1581'. [ 691.299536][T10225] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1581'. [ 691.490606][ T4206] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 691.759864][ T4206] usb 3-1: Using ep0 maxpacket: 16 [ 691.910215][ T4206] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.965038][ T4206] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 692.252839][ T4206] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 692.290903][ T4206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.472909][ T4206] usb 3-1: Product: syz [ 692.477523][ T4206] usb 3-1: Manufacturer: syz [ 692.482775][ T4206] usb 3-1: SerialNumber: syz [ 692.513303][ T4206] r8152-cfgselector 3-1: config 0 descriptor?? [ 693.538372][T10237] netlink: 'syz.2.1582': attribute type 3 has an invalid length. [ 693.600102][T10239] loop1: detected capacity change from 0 to 64 [ 693.607385][T10237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1582'. [ 693.687793][T10237] input: syz0 as /devices/virtual/input/input30 [ 693.720302][ T4206] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 695.500693][ T4212] usb 3-1: USB disconnect, device number 15 [ 695.776174][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1594'. [ 695.822721][T10264] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1594'. [ 697.857922][T10280] loop2: detected capacity change from 0 to 256 [ 698.023200][T10280] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 698.801033][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1599'. [ 698.959853][ T4212] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 699.199803][ T4212] usb 2-1: Using ep0 maxpacket: 16 [ 699.367425][T10295] loop4: detected capacity change from 0 to 164 [ 699.434509][ T4212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.732860][ T4212] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 700.100108][ T4212] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 700.130108][ T4212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.138312][ T4212] usb 2-1: Product: syz [ 700.219786][ T4212] usb 2-1: Manufacturer: syz [ 700.224534][ T4212] usb 2-1: SerialNumber: syz [ 700.550362][ T4212] r8152-cfgselector 2-1: config 0 descriptor?? [ 700.646850][T10303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1605'. [ 700.693115][T10305] loop2: detected capacity change from 0 to 64 [ 700.720964][T10306] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1605'. [ 700.838259][T10286] netlink: 'syz.1.1600': attribute type 3 has an invalid length. [ 700.950636][T10286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1600'. [ 701.079241][T10286] input: syz0 as /devices/virtual/input/input31 [ 701.129921][ T4212] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 701.377659][ T4212] usb 2-1: USB disconnect, device number 14 [ 704.252106][T10340] loop2: detected capacity change from 0 to 40427 [ 704.333630][T10340] F2FS-fs (loop2): Unrecognized mount option "whintjmode=fs-based" or missing value [ 704.645598][T10342] loop1: detected capacity change from 0 to 256 [ 704.991355][T10342] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 707.096604][T10364] netlink: 'syz.4.1617': attribute type 4 has an invalid length. [ 707.105851][T10363] loop0: detected capacity change from 0 to 512 [ 707.283469][T10363] EXT4-fs error (device loop0): ext4_quota_enable:6388: inode #3: comm syz.0.1620: iget: bogus i_mode (0) [ 707.319549][T10363] EXT4-fs error (device loop0): ext4_quota_enable:6391: comm syz.0.1620: Bad quota inode: 3, type: 0 [ 707.366516][T10363] EXT4-fs warning (device loop0): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 707.408167][T10363] EXT4-fs (loop0): mount failed [ 708.263152][T10380] loop0: detected capacity change from 0 to 256 [ 710.301277][T10407] loop0: detected capacity change from 0 to 64 [ 710.776153][T10412] loop2: detected capacity change from 0 to 512 [ 711.096729][T10412] EXT4-fs error (device loop2): ext4_quota_enable:6388: inode #3: comm syz.2.1633: iget: bogus i_mode (0) [ 711.234738][T10425] loop5: detected capacity change from 0 to 164 [ 711.312918][T10412] EXT4-fs error (device loop2): ext4_quota_enable:6391: comm syz.2.1633: Bad quota inode: 3, type: 0 [ 711.380545][T10412] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 711.453001][T10412] EXT4-fs (loop2): mount failed [ 711.562975][T10427] loop4: detected capacity change from 0 to 256 [ 712.126490][T10429] loop4: detected capacity change from 0 to 256 [ 712.209230][T10429] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 712.300370][T10432] loop2: detected capacity change from 0 to 512 [ 712.397620][T10432] EXT4-fs (loop2): Unrecognized mount option "mask=MAY_WRITE" or missing value [ 712.911057][T10432] 9pnet: Insufficient options for proto=fd [ 716.865405][T10454] loop4: detected capacity change from 0 to 64 [ 717.417512][T10461] loop0: detected capacity change from 0 to 512 [ 717.656378][T10461] EXT4-fs error (device loop0): ext4_quota_enable:6388: inode #3: comm syz.0.1648: iget: bogus i_mode (0) [ 717.833917][T10461] EXT4-fs error (device loop0): ext4_quota_enable:6391: comm syz.0.1648: Bad quota inode: 3, type: 0 [ 718.004786][T10461] EXT4-fs warning (device loop0): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 718.074453][T10467] loop5: detected capacity change from 0 to 512 [ 718.240379][T10461] EXT4-fs (loop0): mount failed [ 718.320210][T10467] EXT4-fs (loop5): Unrecognized mount option "mask=MAY_WRITE" or missing value [ 718.525251][T10467] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1650'. [ 718.609257][T10467] 9pnet: Insufficient options for proto=fd [ 823.739646][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 823.746633][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8314/1:b..l [ 823.755256][ C0] (detected by 0, t=10502 jiffies, g=48601, q=146) [ 823.762134][ C0] task:kworker/u4:21 state:R running task stack:20760 pid: 8314 ppid: 2 flags:0x00004000 [ 823.774543][ C0] Workqueue: bat_events batadv_nc_worker [ 823.780214][ C0] Call Trace: [ 823.783622][ C0] [ 823.786571][ C0] __schedule+0x12c4/0x45b0 [ 823.791093][ C0] ? validate_chain+0x112/0x5930 [ 823.796185][ C0] ? mark_lock+0x98/0x340 [ 823.800537][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 823.806529][ C0] ? release_firmware_map_entry+0x190/0x190 [ 823.812528][ C0] ? reacquire_held_locks+0x660/0x660 [ 823.817913][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 823.823214][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 823.828353][ C0] ? __cond_resched+0xf0/0xf0 [ 823.833195][ C0] irqentry_exit+0x53/0x80 [ 823.837864][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 823.843852][ C0] RIP: 0010:lock_acquire+0x252/0x4f0 [ 823.849161][ C0] Code: 2b 00 74 08 4c 89 f7 e8 0c ac 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 823.869202][ C0] RSP: 0018:ffffc9000327fa80 EFLAGS: 00000206 [ 823.875329][ C0] RAX: 0000000000000001 RBX: 1ffff9200064ff5c RCX: 1ffff9200064fefc [ 823.883867][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab3d00 RDI: ffffffff8af9fa80 [ 823.891976][ C0] RBP: ffffc9000327fbd8 R08: dffffc0000000000 R09: fffffbfff2131e19 [ 823.899981][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200064ff58 [ 823.907956][ C0] R13: dffffc0000000000 R14: ffffc9000327fae0 R15: 0000000000000246 [ 823.915943][ C0] ? read_lock_is_recursive+0x10/0x10 [ 823.921322][ C0] ? rcu_lock_release+0x5/0x20 [ 823.926101][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 823.931463][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 823.937476][ C0] rcu_lock_acquire+0x2a/0x30 [ 823.942171][ C0] ? rcu_lock_acquire+0x5/0x30 [ 823.946937][ C0] batadv_nc_worker+0xc1/0x5b0 [ 823.951808][ C0] process_one_work+0x8a1/0x10c0 [ 823.956780][ C0] ? worker_detach_from_pool+0x260/0x260 [ 823.962548][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 823.968098][ C0] ? kthread_data+0x4e/0xc0 [ 823.972607][ C0] ? wq_worker_running+0x97/0x170 [ 823.977650][ C0] worker_thread+0xaca/0x1280 [ 823.982352][ C0] kthread+0x3f6/0x4f0 [ 823.986434][ C0] ? rcu_lock_release+0x20/0x20 [ 823.991308][ C0] ? kthread_blkcg+0xd0/0xd0 [ 823.996067][ C0] ret_from_fork+0x1f/0x30 [ 824.000515][ C0] [ 824.003531][ C0] rcu: rcu_preempt kthread starved for 9848 jiffies! g48601 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 824.014652][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 824.024615][ C0] rcu: RCU grace-period kthread stack dump: [ 824.030493][ C0] task:rcu_preempt state:R running task stack:27000 pid: 15 ppid: 2 flags:0x00004000 [ 824.041527][ C0] Call Trace: [ 824.044801][ C0] [ 824.047928][ C0] __schedule+0x12c4/0x45b0 [ 824.052556][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 824.058681][ C0] ? release_firmware_map_entry+0x190/0x190 [ 824.064587][ C0] ? mod_timer_pending+0x20/0x20 [ 824.069560][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 824.074937][ C0] schedule+0x11b/0x1f0 [ 824.079128][ C0] schedule_timeout+0x1b9/0x300 [ 824.084019][ C0] ? console_conditional_schedule+0x40/0x40 [ 824.089922][ C0] ? update_process_times+0x200/0x200 [ 824.095339][ C0] ? prepare_to_swait_event+0x321/0x340 [ 824.100943][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 824.105809][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 824.111985][ C0] ? rcu_gp_init+0x1140/0x1140 [ 824.116773][ C0] ? finish_swait+0xc5/0x1d0 [ 824.121401][ C0] rcu_gp_kthread+0xa4/0x360 [ 824.126086][ C0] ? _raw_spin_unlock+0x40/0x40 [ 824.130946][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 824.136073][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 824.141966][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 824.147096][ C0] kthread+0x3f6/0x4f0 [ 824.151185][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 824.156309][ C0] ? kthread_blkcg+0xd0/0xd0 [ 824.160915][ C0] ret_from_fork+0x1f/0x30 [ 824.165428][ C0] [ 824.168442][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 824.174760][ C0] Sending NMI from CPU 0 to CPUs 1: [ 824.180008][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_idle_do_entry+0x10f/0x340