last executing test programs: 3m36.707607291s ago: executing program 0 (id=158): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x807) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m36.528987406s ago: executing program 0 (id=161): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000540)={{0xdddd0000, 0x5000, 0xe, 0xee, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x2, 0x7, 0x6}, {0x5000, 0xeeee0000, 0xd, 0x9, 0x8, 0x13, 0x6, 0x8, 0x5, 0x9, 0x3, 0xca}, {0xdddd0000, 0xe6e50002, 0x9, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x7, 0x6, 0x5}, {0xeeef0000, 0x3000, 0x9, 0xf, 0x3, 0x46, 0x2, 0xd, 0x3, 0x3, 0xfc, 0x1}, {0x4, 0x100000, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x8}, {0x2, 0xd000, 0xc, 0x7, 0x4, 0x6e, 0x1, 0xff, 0x8, 0x80, 0x0, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0xd6, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0x3, 0x5, 0x3, 0x3, 0xa, 0x49, 0x54, 0x6, 0x2, 0x8}, {0x80a0000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x1, 0x0, 0xeeee0000, [0x2, 0x401, 0x7, 0x4]}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) 3m36.308796603s ago: executing program 0 (id=163): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xd8ef}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 3m36.015928836s ago: executing program 0 (id=166): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a010000000000000030aa2ae2c084a0ea1000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) pivot_root(0x0, &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 3m35.435891953s ago: executing program 0 (id=168): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x634, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2000044, &(0x7f0000000000)={[{@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x4128}}, {@lazytime}, {@norecovery}, {@auto_da_alloc}]}, 0x2, 0x516, &(0x7f0000000500)="$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") r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}}, 0x108) 3m34.9760602s ago: executing program 0 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x382) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 3m34.663593635s ago: executing program 32 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x382) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 3m33.597703591s ago: executing program 1 (id=179): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x1, @buffer={0x20, 0x56, &(0x7f0000000440)=""/86}, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0}) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 3m32.395875398s ago: executing program 1 (id=183): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x17) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@float={0xc, 0x0, 0x0, 0x10, 0x8}, @volatile={0x7fff}, @volatile={0x7}]}, {0x0, [0x61, 0x99f469a90d6e8c8]}}, &(0x7f0000000040)=""/16, 0x40, 0x10, 0x1, 0x2}, 0x28) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x36b6, &(0x7f0000000140)={0x0, 0xa41f, 0x10000, 0x1, 0x2d9}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) connect$l2tp6(r3, &(0x7f0000000a80)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4, 0x3}, 0x20) r4 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2a800, 0x0) preadv(r5, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x5, 0x4, 0x4, 0x5, 0x6, 0x6, 0x7, 0xa, 0x100, 0x2, 0x80000, 0x1, 0x8, 0x1e, 0x1, 0x7308, 0x1a449, 0x3, 0x5, 0x81, 0xcaa7, 0x0, 0x1e58, 0xb, 0x3, 0x3c, 0x8, 0x6, 0x0, 0x5]}) read(r0, 0x0, 0x0) 3m31.938965464s ago: executing program 1 (id=184): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000a00)={'ip_vti0\x00', r1, 0x0, 0x0, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) 3m31.513048498s ago: executing program 1 (id=187): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a010000000000000030aa2ae2c084a0ea1000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) pivot_root(0x0, &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 3m31.415325466s ago: executing program 2 (id=188): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141b82, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r2], 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, 0x0, 0x0) 3m31.214192433s ago: executing program 1 (id=189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000200)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m30.431904245s ago: executing program 1 (id=190): syz_mount_image$exfat(&(0x7f0000003100), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000001980)=ANY=[@ANYBLOB='allow_utime=00000000000000000000304,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=cp775,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,uid=', @ANYRESOCT, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303000303030303030302c001a4af40afdf2008daebfe0008a71d27a1fbdb03ca45609020000000000003541b21712409b2be51dbf8ac71f8bed396828b513284df710f07abeaa71ffc9874e1e247e98de84b6a448f1bb2a8a25c4b9e37c374b45edd5270a8e38fb93f07b922d"], 0x1, 0x152a, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 3m29.959077044s ago: executing program 33 (id=190): syz_mount_image$exfat(&(0x7f0000003100), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000001980)=ANY=[@ANYBLOB='allow_utime=00000000000000000000304,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=cp775,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,uid=', @ANYRESOCT, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303000303030303030302c001a4af40afdf2008daebfe0008a71d27a1fbdb03ca45609020000000000003541b21712409b2be51dbf8ac71f8bed396828b513284df710f07abeaa71ffc9874e1e247e98de84b6a448f1bb2a8a25c4b9e37c374b45edd5270a8e38fb93f07b922d"], 0x1, 0x152a, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 3m29.556827256s ago: executing program 2 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3m28.39547976s ago: executing program 2 (id=194): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) close(r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") open(0x0, 0x0, 0x1b5) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d31352c7561736b3d303030303030303030303030ba303030303030303030332c6e616d65636173653d312c7569643d00", @ANYRESHEX, @ANYBLOB=',fmask=00040000000000000000253,discard,dmask=00000000000000000000002,utf8,iocharset=macinuit,allow_utime=00000000000000000147070,\x00'], 0x41, 0x1528, &(0x7f00000037c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) creat(0x0, 0x83) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x0) r3 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b) ftruncate(r3, 0x2007ffb) sendfile(r2, r3, 0x0, 0x1000000201001) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000"]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000300000000000086dd63269fe000283a1721"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 3m27.087663965s ago: executing program 2 (id=196): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a010000000000000030aa2ae2c084a0ea1000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) pivot_root(&(0x7f00000001c0)='.\x00', 0x0) 3m26.777014029s ago: executing program 2 (id=197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6071, 0x0, 0xe7}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x4, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x2}]}}}}}}}, 0x0) 3m25.224028085s ago: executing program 2 (id=199): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000004c0), 0x1, 0x57b, &(0x7f0000000640)="$eJzs3T9sG9UfAPDvXeJf/+VHigQSVB0qQCpSVScpLRSmdkUUVeqAxAKR40ZVnDiKHWiiDOleITogQF3KBgMjiIEBsTCysoCYkSoagdR0AKPznzRN7OC0TYziz0e6+L17Z3/f+fx99p3ucgH0rWPZnzTi2Yi4mEQMr2sbjGbjscZyqytLhXsrS4UkarVLvyeRRMTdlaVCa/mk+XgoIpYj4pmI+D4XcSLdHLeysDg1XioV55r1ker07EhlYfHklenxyeJkcealV149c/b0mbFTY+ufdq+2vpbb3rpe/+XGB9d/fP3WjS++PLpc+Gg8iXMx1Gxbvx6PU+M9ycW5DfNP70SwHkp63QEeykAzz7NUejqGY6CZ9e3Uhne1a8AOq+2LqAF9KpH/0KdavwOy/d/WtJu/P26fb+yAZHFXm1OjZbBxbCL21/dNDv6RPLBnku1vHt7NjrInLV+LiNHBwc2f/6T5+Xt4o4+jg+yo7843NtTm7Z+ujT/RZvwZah07fUSt8W910/h3P/5Ah/HvYpcx/nr71087xr8WcaRt/GQtftImfhoR73YZ/+Zb35zt1Fb7LOJ4tI/fkmx9fHjk8pVScbTxt22Mb48ffW2r9T/YIX7jmO3++tdMu/d/tsv1//qHr55b3iL+i89vvf3bvf8HIuLDLuM/effzNzq13b6W3Ml+BWx3+2fzbnUZ/+Vzx37uclEAAAAAAAAAAGAb0vq5bEmaXyunaT7fuIb3qTiYlsqV6onL5fmZicY5b4cjl7bOtBpu1JOsPtY8H7dVP7Whvnbu0MCBej1fKJcmervqAAAAAAAAAAAAAAAAAAAA8J9xaMP1/38O1K//33i7amCv6nzLb2Cvk//Qvx7M/6Rn/QB2n+9/6Fs1+Q/9S/5D/5L/0L/kP/SvDvmf2+1+ALvP9z/0L/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74uKFC9lUu7eyVMjqE4ML81Pl905OFCtT+en5Qr5QnpvNT5bLk6VivlCe/rfXS8rl2dGYmb86Ui1WqiOVhcV3psvzM617ihb9T3EAAAAAAAAAAAAAAAAAAADYbKg+JWk+ItJ6OU3z+Yj/R8ThyCWXr5SKoxHxRET8NJDbl9XHet1pAAAAAAAAAAAAAAAAAAAA2GMqC4tT46VSca5PCoPbWTgilh9vN7JX3Pazcs1t1abpzSMdmxQUHqXQy1EJAAAAAAAAAAAAAAAAAAD60/2Lfrt9xt872yEAAAAAAAAAAAAAAAAAAADoS+lvSURk0/HhF4Y2tv4vWR2oP0bE+zcvfXx1vFqdG8vm31mbX/2kOf9UL/oPdKuVp608BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO6rLCxOjZdKxbkdLPR6HQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAexj8BAAD//+q51EI=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 3m24.775696621s ago: executing program 34 (id=199): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000004c0), 0x1, 0x57b, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2m31.402897862s ago: executing program 5 (id=344): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x4050) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x8, 0xb, 0x6, 0x0, 0xffffffffffffffff, 0xcb02}, 0x50) setfsgid(0xee00) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() r0 = getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r1, 0x10001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="796104000000000000007e00001b7010cbb6e72e75dbe73bdb4324de446be7bcaf7c1a894d2f9620d101e2b5ec841fe88b6ad4d05bdfc027292e3acb9eb6d14addb938a7690c075d462c823e1f34bed03dc0ed038874f30b49"], 0x14}}, 0x0) 2m26.935585971s ago: executing program 5 (id=359): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 2m26.57152724s ago: executing program 5 (id=362): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x17) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@float={0xc, 0x0, 0x0, 0x10, 0x8}, @volatile={0x7fff}, @volatile={0x7}]}, {0x0, [0x61, 0x99f469a90d6e8c8]}}, &(0x7f0000000040)=""/16, 0x40, 0x10, 0x1, 0x2}, 0x28) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x36b6, &(0x7f0000000140)={0x0, 0xa41f, 0x10000, 0x1, 0x2d9}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) connect$l2tp6(r3, &(0x7f0000000a80)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4, 0x3}, 0x20) r4 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x5, 0x4, 0x4, 0x5, 0x6, 0x6, 0x7, 0xa, 0x100, 0x2, 0x80000, 0x1, 0x8, 0x1e, 0x1, 0x7308, 0x1a449, 0x3, 0x5, 0x81, 0xcaa7, 0x0, 0x1e58, 0xb, 0x3, 0x3c, 0x8, 0x6, 0x0, 0x5]}) read(r0, 0x0, 0x0) 2m26.290754583s ago: executing program 5 (id=363): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/797], 0x1, 0x27a, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4, 0x4f57]}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x42, 0x83) 2m25.8319385s ago: executing program 5 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f000001f9c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sched_setscheduler(0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) io_setup(0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x5) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 2m24.846157719s ago: executing program 5 (id=371): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x17) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@float={0xc, 0x0, 0x0, 0x10, 0x8}, @volatile={0x7fff}, @volatile={0x7}]}, {0x0, [0x61, 0x99f469a90d6e8c8]}}, &(0x7f0000000040)=""/16, 0x40, 0x10, 0x1, 0x2}, 0x28) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x36b6, &(0x7f0000000140)={0x0, 0xa41f, 0x10000, 0x1, 0x2d9}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) connect$l2tp6(r3, &(0x7f0000000a80)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4, 0x3}, 0x20) r4 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x5, 0x4, 0x4, 0x5, 0x6, 0x6, 0x7, 0xa, 0x100, 0x2, 0x80000, 0x1, 0x8, 0x1e, 0x1, 0x7308, 0x1a449, 0x3, 0x5, 0x81, 0xcaa7, 0x0, 0x1e58, 0xb, 0x3, 0x3c, 0x8, 0x6, 0x0, 0x5]}) read(r0, 0x0, 0x0) 2m22.22527249s ago: executing program 35 (id=371): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x17) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@float={0xc, 0x0, 0x0, 0x10, 0x8}, @volatile={0x7fff}, @volatile={0x7}]}, {0x0, [0x61, 0x99f469a90d6e8c8]}}, &(0x7f0000000040)=""/16, 0x40, 0x10, 0x1, 0x2}, 0x28) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x36b6, &(0x7f0000000140)={0x0, 0xa41f, 0x10000, 0x1, 0x2d9}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) connect$l2tp6(r3, &(0x7f0000000a80)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4, 0x3}, 0x20) r4 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x5, 0x4, 0x4, 0x5, 0x6, 0x6, 0x7, 0xa, 0x100, 0x2, 0x80000, 0x1, 0x8, 0x1e, 0x1, 0x7308, 0x1a449, 0x3, 0x5, 0x81, 0xcaa7, 0x0, 0x1e58, 0xb, 0x3, 0x3c, 0x8, 0x6, 0x0, 0x5]}) read(r0, 0x0, 0x0) 5.120607078s ago: executing program 7 (id=903): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@grpid}, {@noblock_validity}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") lsetxattr$security_ima(0x0, &(0x7f0000000340), &(0x7f0000000380)=@ng={0x4, 0x5}, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) 4.523128935s ago: executing program 7 (id=908): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.138237537s ago: executing program 7 (id=913): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000001600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x456, &(0x7f00000016c0)="$eJzs28tvG8UfAPDvbuL0/Yt/VXn0AQQKouKRNGkpPXABgcQBJCQ4lGNI0qrUbVATJFpVUBAqR1SJO+KIxF/ACS4IOCFxBc6oUoV6aeFktPZuY7u2m7R2HeLPR9pmZnfcme/OTjy7kw1gaE1k/yQR2yPit4gYr2ebC0zUf9y4dmHu72sX5pKoVt/8K6mVu37twlxRtPjctiIzGpF+msTeNvUunTt/arZSWTib56eWT783tXTu/LMnT8+eWDixcGbm6NHDh6afPzLzXE/izOK6vufDxX27X3378utzxy6/89M3SRF/Sxw9MtHt4BPVao+rG6wdDelkdIANYU1G6sM0SrXxPx4jsdJ54/HKJwNtHNBX1Wq1en/nwxerwAaWxKBbAAxG8UWf3f8W2z2aeqwLV1+s3wBlcd/It/qR0UjzMqWW+9temoiIYxf/+TLbovU5xJY+VQoADLXvsvnPM+3mf2k0Phf6X76GUo6I/0fEzog4EhG7IuK+iFrZByLiwTXW37pIcuv8M71yR4GtUjb/eyFf22qe/xWzvyiP5LkdtfhLyfGTlYWD+Tk5EKVNWX66Sx3fv/zr552ONc7/si2rv5gL5u0YG93U/Jn52eXZu4m50dWPI/aMtos/ubkSkETE7ojYc4d1nHzq632djnWIf2xV/3EP1pmqX0U8We//i9ESfyHpvj45tTkqCweniqviVj//cumNTvXfvv/7K+v/rW2v/yL+P8pJ43rt0trruPT7Zx3vKVdx/V9pd/2PJW817ftgdnn57HTEWPJaLV9u3D/TUm5mpXwW/4H97cf/zlg5E3sjIruIH4qIhyPikbztj0bEYxGxv0v8P770+Lt3Hn9/ZfHPd+3/aOn/lcRYNO1Jo02ZLDFy6odvmyotryX+rP8P11IH8j2r+f13ayvaJ+72/AEAAMB/QRoR2yNJJ2+m03Rysv43/Ltia1pZXFp++vji+2fm6+8IlKOUFk+6xhueh07nt/VFfqYlfyh/bvzFyJZafnJusTI/6OBhyG3rMP4zf44MunVA33lfC4aX8Q/Dy/iH4WX8w/BqM/69egZDot33/0f1H6V73Rbg3moZ/12X/UwMYGNx/w/Dy/iH4WX8w1Ba2hK3f0l+YyTSiFjzpzavk8avm8TNcxjpumiPRJ8Sg/7NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BgAA//900eJ2") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff03000100"/66]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c9002000600000003000100"/34]) 3.689880953s ago: executing program 7 (id=916): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001a00dda6f1c6"], 0x1c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\tI'], 0x0, 0x0}) 3.525948076s ago: executing program 4 (id=918): syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180)={[{@pquota}, {@bsdgroups}, {@prjquota}, {@gquota}, {@pquota}, {@bsdgroups}, {@inode32}, {@quota}]}, 0xff, 0x9838, &(0x7f0000009780)="$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") r0 = open(&(0x7f0000000000)='./file2\x00', 0x144c82, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x1d) 3.524939276s ago: executing program 6 (id=919): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)="e8700e444d50a969ff", 0x9}], 0x1, &(0x7f0000000840)=[@iv={0xb0, 0x117, 0x2, 0x96, "74d9d85b7c8cc2e547cdba26a513fb74268d4109187d6f3dd3bb5ad00bfe285743c68dff980e06fbd5b9da3b2971f81c8dd844325d20e7ba7c96e6fcfedae5e025e8021367b9a64ad02bf3b86efaeef3dae0dce6720412277bd4718d0e9604df6bd9a85a0241632a115472315f7993a45c86bffc8c3a1c757b5cadd2a46ca141dc29611712e2ab66c3b95c444cc33ad5e63f02275ff1"}], 0xb0}], 0x1, 0x44000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r0, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.34805262s ago: executing program 6 (id=920): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpeername$netrom(r1, 0x0, 0x0) 3.319481982s ago: executing program 6 (id=921): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.23165192s ago: executing program 6 (id=922): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.775347546s ago: executing program 4 (id=924): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000001600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x456, &(0x7f00000016c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff03000100"/66]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c9002000600000003000100"/34]) 2.120864019s ago: executing program 4 (id=927): unshare(0x6020480) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) 1.916094415s ago: executing program 4 (id=929): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@grpid}, {@noblock_validity}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") lsetxattr$security_ima(&(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000380)=@ng={0x4, 0x5}, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) 1.709528832s ago: executing program 4 (id=932): syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180)={[{@pquota}, {@bsdgroups}, {@prjquota}, {@gquota}, {@pquota}, {@bsdgroups}, {@inode32}, {@quota}]}, 0xff, 0x9838, &(0x7f0000009780)="$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") r0 = open(&(0x7f0000000000)='./file2\x00', 0x144c82, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x1d) 1.221637471s ago: executing program 3 (id=936): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0xac}, 0x0, &(0x7f00000001c0)=0x0) unshare(0x22020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0xfa20, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 1.023934907s ago: executing program 3 (id=937): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$loop(0x0, 0x7b, 0x42042) preadv2(r1, &(0x7f00000019c0)=[{&(0x7f0000000640)=""/149, 0x95}], 0x1, 0xaad, 0x9, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0xc8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001f00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @remote}, 0x1c, 0x0}}], 0x1, 0x20002041) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600c, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10) r5 = dup2(r3, r3) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0xd, 0x1, 0x8}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x7, @mcast1, 0xdf}}, 0x0, 0x0, 0x80000005, 0x0, 0x10}, 0x9c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 767.479038ms ago: executing program 3 (id=938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x20000000, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x8c}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) 587.569492ms ago: executing program 4 (id=939): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x353, 0x78, 0x300, 0x0, 0x8, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x1, 0x7, 0x5f, 0x202, 0x1}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x109482) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) 581.780423ms ago: executing program 3 (id=940): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20040004) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000180)={0x7, 0x14, 0x13da, 0x0, 0x3b1a}) 397.560268ms ago: executing program 3 (id=941): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x810410, &(0x7f00000016c0)=ANY=[], 0x2, 0x1d6, &(0x7f0000000200)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x111000, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x2e, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="22cf86ebcba3de8714b4a50c5e77d111e07ba4b1182309e4682bb72dd787d80508e8d16ba531441330999ffeae5a743f676398883f62635034224d47f5203108affa", @ANYRES32, @ANYRES8], 0x4c}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) pidfd_send_signal(r2, 0x0, &(0x7f0000000640)={0x0, 0x0, 0xfffffff8}, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000001640)) 271.836878ms ago: executing program 7 (id=942): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0x10) 244.8285ms ago: executing program 6 (id=943): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000300)=0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$xdp(r2, 0x0, 0xc00e884) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0xebec93e830f96115}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@empty, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@updpolicy={0x19c, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@sa={0xe4, 0x6, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4, 0x4e24, 0xb, 0x2, 0x40, 0x10, 0x5c, r6}, {@in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x4d6, 0x32}, @in6=@local, {0x2, 0x7, 0x7, 0x6, 0x5, 0xae, 0x400, 0x2}, {0x7, 0x7, 0x2, 0x69}, {0xc, 0x8000, 0x8}, 0x70bd2d, 0x3503, 0xa, 0x0, 0xb, 0x64}}]}, 0x19c}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)={0x94, 0x0, 0x1020, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008084}, 0x800) close(0x3) timer_create(0x3, 0x0, &(0x7f0000000340)=0x0) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r7, &(0x7f00000001c0)) timer_settime(r7, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f00000002c0)) syz_init_net_socket$x25(0x9, 0x5, 0x0) 113.80009ms ago: executing program 7 (id=944): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000001600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x456, &(0x7f00000016c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff03000100"/99]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c9002000600000003000100"/34]) 90.017712ms ago: executing program 3 (id=945): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0xac}, 0x0, &(0x7f00000001c0)=0x0) unshare(0x22020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0xfa20, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 0s ago: executing program 6 (id=946): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0xfe37, 0x0) kernel console output (not intermixed with test programs): 0-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.908503][ T5906] usb 5-1: USB disconnect, device number 5 [ 211.955695][ T5906] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 212.030887][ T5906] cp210x 5-1:0.0: device disconnected [ 212.057796][ T7668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.143512][ T8010] loop6: detected capacity change from 0 to 128 [ 212.183579][ T8010] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.216064][ T8010] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.287112][ T6583] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.422806][ T8021] loop6: detected capacity change from 0 to 512 [ 212.491581][ T5848] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 212.544219][ T8021] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.617273][ T8021] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.619915][ T8028] loop4: detected capacity change from 0 to 2048 [ 212.698163][ T5848] usb 8-1: Using ep0 maxpacket: 16 [ 212.714046][ T8028] NILFS (loop4): invalid segment: Magic number mismatch [ 212.732680][ T5848] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 212.749674][ T5848] usb 8-1: config 0 has no interface number 0 [ 212.759384][ T8028] NILFS (loop4): trying rollback from an earlier position [ 212.767266][ T5848] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 212.817362][ T5848] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 212.832061][ T6583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.850898][ T8032] random: crng reseeded on system resumption [ 212.855517][ T8028] NILFS (loop4): recovery complete [ 212.863359][ T8034] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.876789][ T5848] usb 8-1: config 0 interface 41 has no altsetting 0 [ 212.903269][ T5848] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 212.951827][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.984886][ T5848] usb 8-1: Product: syz [ 212.989131][ T5848] usb 8-1: Manufacturer: syz [ 213.034835][ T5848] usb 8-1: SerialNumber: syz [ 213.046268][ T5848] usb 8-1: config 0 descriptor?? [ 213.080154][ T8014] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 213.087712][ T8014] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 213.244402][ T8039] loop6: detected capacity change from 0 to 4096 [ 213.407990][ T8014] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 213.466958][ T8014] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 213.881046][ C0] hrtimer: interrupt took 59854 ns [ 214.094305][ T5869] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 214.330841][ T5848] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 214.745247][ T8062] loop6: detected capacity change from 0 to 1024 [ 214.852970][ T8062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.930558][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 214.947896][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.958536][ T5848] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 214.980264][ T5848] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 215.002432][ T5848] CoreChips: probe of 8-1:0.41 failed with error -71 [ 215.019901][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.026339][ T5848] usb 8-1: USB disconnect, device number 2 [ 215.057113][ T5869] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 215.080726][ T6583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.115785][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.139365][ T8073] loop3: detected capacity change from 0 to 128 [ 215.144081][ T5869] usb 5-1: config 0 descriptor?? [ 215.157497][ T5869] hub 5-1:0.0: USB hub found [ 215.284750][ T8073] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.365264][ T8073] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.395123][ T5869] hub 5-1:0.0: 1 port detected [ 215.469345][ T8082] loop6: detected capacity change from 0 to 2048 [ 215.480370][ T8082] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 215.526371][ T8082] NILFS (loop6): mounting unchecked fs [ 215.561188][ T6213] udevd[6213]: incorrect nilfs2 checksum on /dev/loop6 [ 215.579227][ T5782] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.610307][ T8082] NILFS (loop6): recovery complete [ 215.646699][ T8083] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.748956][ T27] audit: type=1800 audit(1755299298.015:94): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.448" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 215.802736][ T8089] loop3: detected capacity change from 0 to 512 [ 215.888589][ T27] audit: type=1800 audit(1755299298.146:95): pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.448" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 216.178673][ T8089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.446652][ T8089] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.589465][ T5821] usb 5-1: USB disconnect, device number 6 [ 218.078134][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.696414][ T8105] loop3: detected capacity change from 0 to 4096 [ 219.788324][ T8110] loop7: detected capacity change from 0 to 1024 [ 220.571908][ T8110] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.977487][ T7668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.014721][ T8128] loop4: detected capacity change from 0 to 2048 [ 221.099685][ T8128] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 221.141676][ T8128] NILFS (loop4): mounting unchecked fs [ 221.161557][ T8136] netlink: 'syz.6.459': attribute type 1 has an invalid length. [ 221.169857][ T8136] netlink: 16 bytes leftover after parsing attributes in process `syz.6.459'. [ 221.210232][ T6213] udevd[6213]: incorrect nilfs2 checksum on /dev/loop4 [ 221.275681][ T8128] NILFS (loop4): recovery complete [ 221.310116][ T8140] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.528771][ T27] audit: type=1800 audit(1755299303.392:96): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.457" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 225.642672][ T8159] loop6: detected capacity change from 0 to 2048 [ 225.677669][ T8159] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 225.711184][ T5821] kernel write not supported for file /adsp1 (pid: 5821 comm: kworker/1:4) [ 225.725557][ T8159] NILFS (loop6): mounting unchecked fs [ 225.777072][ T5793] udevd[5793]: incorrect nilfs2 checksum on /dev/loop6 [ 225.798289][ T8159] NILFS (loop6): recovery complete [ 225.863847][ T8167] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.875478][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 225.999125][ T8165] loop3: detected capacity change from 0 to 32768 [ 226.035954][ T8165] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.471 (8165) [ 226.054354][ T27] audit: type=1800 audit(1755299307.647:97): pid=8159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.468" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 226.055930][ T8165] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 226.085737][ T8165] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 226.094611][ T8165] BTRFS info (device loop3): enabling auto defrag [ 226.101061][ T8165] BTRFS info (device loop3): disabling tree log [ 226.107381][ T8165] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 226.118341][ T8165] BTRFS info (device loop3): trying to use backup root at mount time [ 226.127404][ T8165] BTRFS info (device loop3): max_inline at 4096 [ 226.133687][ T8165] BTRFS info (device loop3): enabling ssd optimizations [ 226.140768][ T8165] BTRFS info (device loop3): using spread ssd allocation scheme [ 226.148532][ T8165] BTRFS info (device loop3): using free space tree [ 226.216033][ T8172] loop4: detected capacity change from 0 to 512 [ 226.244342][ T27] audit: type=1800 audit(1755299307.825:98): pid=8177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.468" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 226.714610][ T8172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.862915][ T8165] BTRFS info (device loop3): auto enabling async discard [ 227.053027][ T8172] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.682797][ T8172] EXT4-fs (loop4): shut down requested (2) [ 228.364262][ T5782] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 228.848326][ T6449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.356790][ T8198] loop7: detected capacity change from 0 to 2048 [ 230.442345][ T8198] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 230.502116][ T8198] NILFS (loop7): mounting unchecked fs [ 230.553985][ T6947] udevd[6947]: incorrect nilfs2 checksum on /dev/loop7 [ 230.638512][ T8198] NILFS (loop7): recovery complete [ 230.714829][ T8209] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.805864][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 231.044879][ T27] audit: type=1800 audit(1755299312.313:99): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.475" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 231.653719][ T27] audit: type=1800 audit(1755299312.865:100): pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.475" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 231.716034][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 231.901197][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.238690][ T9] usb 4-1: config 0 descriptor?? [ 232.430026][ T9] cp210x 4-1:0.0: cp210x converter detected [ 233.035826][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 233.193952][ T9] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 233.292884][ T8218] loop6: detected capacity change from 0 to 736 [ 233.316894][ T9] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 233.630200][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 233.890944][ T9] usb 4-1: USB disconnect, device number 9 [ 234.238416][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 234.424528][ T9] cp210x 4-1:0.0: device disconnected [ 234.506584][ T8218] rock: directory entry would overflow storage [ 234.626963][ T8218] rock: sig=0x3b10, size=4, remaining=3 [ 235.734825][ T8229] loop7: detected capacity change from 0 to 128 [ 235.788539][ T8231] loop4: detected capacity change from 0 to 64 [ 235.837438][ T8235] loop3: detected capacity change from 0 to 512 [ 235.958265][ T8235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.972186][ T8229] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.029419][ T8235] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.052252][ T8229] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 236.116882][ T8235] EXT4-fs (loop3): shut down requested (2) [ 236.195410][ T8243] loop6: detected capacity change from 0 to 512 [ 236.268445][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.290797][ T7668] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.580122][ T8249] loop7: detected capacity change from 0 to 2048 [ 236.649628][ T8249] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 236.693276][ T8249] NILFS (loop7): mounting unchecked fs [ 236.950997][ T8249] NILFS (loop7): recovery complete [ 237.126445][ T8259] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.607140][ T27] audit: type=1800 audit(1755299318.448:101): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.487" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 239.929731][ T8277] loop3: detected capacity change from 0 to 736 [ 240.156869][ T8277] rock: directory entry would overflow storage [ 240.190281][ T8277] rock: sig=0x3b10, size=4, remaining=3 [ 240.275085][ T8286] loop7: detected capacity change from 0 to 128 [ 240.333702][ T8286] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.377832][ T8286] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.449877][ T8295] loop4: detected capacity change from 0 to 2048 [ 240.506024][ T8295] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 240.530425][ T23] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 240.552146][ T8295] NILFS (loop4): mounting unchecked fs [ 240.569759][ T6947] udevd[6947]: incorrect nilfs2 checksum on /dev/loop4 [ 240.614378][ T8295] NILFS (loop4): recovery complete [ 240.623439][ T7668] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.679877][ T8298] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.753179][ T23] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 240.786594][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.793677][ T27] audit: type=1800 audit(1755299321.421:102): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.498" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 241.136749][ T27] audit: type=1800 audit(1755299321.515:103): pid=8303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.498" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 241.334977][ T23] usb 7-1: config 0 descriptor?? [ 241.345541][ T23] cp210x 7-1:0.0: cp210x converter detected [ 241.620449][ T8312] random: crng reseeded on system resumption [ 241.732368][ T8317] loop4: detected capacity change from 0 to 1024 [ 241.792961][ T23] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 241.811824][ T8317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.837749][ T23] usb 7-1: cp210x converter now attached to ttyUSB0 [ 241.897846][ T8317] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #14: comm syz.4.501: attempt to clear invalid blocks 1886221359 len 1 [ 242.040202][ T23] usb 7-1: USB disconnect, device number 7 [ 242.062046][ T6449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.074926][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 242.111593][ T23] cp210x 7-1:0.0: device disconnected [ 242.350428][ T8328] loop4: detected capacity change from 0 to 2048 [ 242.385680][ T8328] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 242.414610][ T8328] NILFS (loop4): mounting unchecked fs [ 242.471352][ T8328] NILFS (loop4): recovery complete [ 242.510023][ T8334] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.651523][ T27] audit: type=1800 audit(1755299323.179:104): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.503" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 243.874263][ T8321] loop7: detected capacity change from 0 to 32768 [ 244.775275][ T8321] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 245.602964][ T7668] ocfs2: Unmounting device (7,7) on (node local) [ 245.653862][ T8348] loop3: detected capacity change from 0 to 128 [ 245.722394][ T8348] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.843099][ T8348] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 245.890849][ T8358] loop7: detected capacity change from 0 to 736 [ 246.013845][ T8361] loop4: detected capacity change from 0 to 2048 [ 246.086409][ T8361] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 246.103625][ T8358] rock: directory entry would overflow storage [ 246.109917][ T8358] rock: sig=0x3b10, size=4, remaining=3 [ 246.123264][ T8361] NILFS (loop4): mounting unchecked fs [ 246.132962][ T5782] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.155416][ T8366] random: crng reseeded on system resumption [ 246.257994][ T8361] NILFS (loop4): recovery complete [ 246.340990][ T8373] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.400790][ T27] audit: type=1800 audit(1755299326.677:105): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.510" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 246.561678][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 246.711633][ T27] audit: type=1800 audit(1755299326.780:106): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.510" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 246.865936][ T8378] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 246.985291][ T8378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.109371][ T8380] bond1: (slave geneve2): making interface the new active one [ 247.167917][ T8380] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 247.301745][ T8387] loop4: detected capacity change from 0 to 1024 [ 247.350018][ T8387] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 247.385606][ T8387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.556956][ T8398] netlink: 332 bytes leftover after parsing attributes in process `syz.7.517'. [ 247.697556][ T6449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.886323][ T8406] loop7: detected capacity change from 0 to 512 [ 248.005754][ T8415] loop6: detected capacity change from 0 to 64 [ 248.029987][ T8406] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.058695][ T8406] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.076202][ T8406] EXT4-fs (loop7): shut down requested (2) [ 248.227520][ T7668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.265846][ T5869] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 248.358873][ T8421] loop6: detected capacity change from 0 to 736 [ 248.465539][ T8393] loop3: detected capacity change from 0 to 32768 [ 248.470224][ T8421] rock: directory entry would overflow storage [ 248.486255][ T8421] rock: sig=0x3b10, size=4, remaining=3 [ 248.497237][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 248.515580][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.563480][ T8393] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 248.602770][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.651550][ T8393] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has bad signature GRUP01 [ 248.684684][ T5869] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 248.711206][ T8393] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 248.743089][ T8393] OCFS2: File system is now read-only. [ 248.748974][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.763893][ T8393] (syz.3.518,8393,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 248.788394][ T8393] (syz.3.518,8393,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 248.800245][ T5869] usb 5-1: config 0 descriptor?? [ 248.828712][ T5869] hub 5-1:0.0: USB hub found [ 248.844527][ T8393] (syz.3.518,8393,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 248.854124][ T8393] (syz.3.518,8393,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 248.862628][ T8393] (syz.3.518,8393,1):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 248.870770][ T8393] (syz.3.518,8393,1):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 248.879318][ T8393] (syz.3.518,8393,1):ocfs2_block_group_alloc_contig:433 ERROR: status = -30 [ 248.918542][ T8393] (syz.3.518,8393,1):ocfs2_block_group_alloc:705 ERROR: status = -30 [ 248.974166][ T8393] (syz.3.518,8393,1):ocfs2_block_group_alloc:758 ERROR: status = -30 [ 249.013960][ T8393] (syz.3.518,8393,1):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30 [ 249.046541][ T5869] hub 5-1:0.0: 1 port detected [ 249.051578][ T8393] (syz.3.518,8393,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 249.089610][ T8393] (syz.3.518,8393,1):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 249.123809][ T8393] (syz.3.518,8393,1):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 249.181354][ T8393] (syz.3.518,8393,1):ocfs2_expand_inline_dir:2841 ERROR: status = -30 [ 249.189770][ T8393] (syz.3.518,8393,1):ocfs2_extend_dir:3205 ERROR: status = -30 [ 249.217604][ T8393] (syz.3.518,8393,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 249.245064][ T8393] (syz.3.518,8393,1):ocfs2_mknod:298 ERROR: status = -30 [ 249.273408][ T8393] (syz.3.518,8393,1):ocfs2_mknod:502 ERROR: status = -30 [ 249.281415][ T8393] (syz.3.518,8393,1):ocfs2_mkdir:659 ERROR: status = -30 [ 249.303487][ T8443] netlink: 332 bytes leftover after parsing attributes in process `syz.6.530'. [ 249.349932][ T5782] ocfs2: Unmounting device (7,3) on (node local) [ 249.463718][ T8448] loop6: detected capacity change from 0 to 64 [ 249.616727][ T8] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 249.725268][ T8455] netlink: 72 bytes leftover after parsing attributes in process `syz.6.534'. [ 249.797762][ T8] usb 8-1: device descriptor read/64, error -71 [ 249.875958][ T8460] loop3: detected capacity change from 0 to 512 [ 250.016321][ T5869] hub 5-1:0.0: activate --> -90 [ 250.068662][ T8465] loop6: detected capacity change from 0 to 736 [ 250.111820][ T8] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 250.129591][ T8465] rock: directory entry would overflow storage [ 250.173523][ T8465] rock: sig=0x3b10, size=4, remaining=3 [ 250.325877][ T8] usb 8-1: device descriptor read/64, error -71 [ 250.351163][ T5869] usb 5-1-port1: cannot disable (err = -71) [ 250.358713][ T6857] usb 5-1: USB disconnect, device number 7 [ 250.486765][ T8] usb usb8-port1: attempt power cycle [ 250.947036][ T8] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 251.000143][ T8] usb 8-1: device descriptor read/8, error -71 [ 251.008023][ T8496] netlink: 332 bytes leftover after parsing attributes in process `syz.4.541'. [ 251.052951][ T5869] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 251.210873][ T8502] loop6: detected capacity change from 0 to 64 [ 251.290603][ T5869] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 251.299047][ T8] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 251.329329][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.342330][ T8] usb 8-1: device descriptor read/8, error -71 [ 251.362674][ T5869] usb 4-1: config 0 descriptor?? [ 251.404831][ T5869] cp210x 4-1:0.0: cp210x converter detected [ 251.473773][ T8] usb usb8-port1: unable to enumerate USB device [ 251.532055][ T8507] loop6: detected capacity change from 0 to 2048 [ 251.569505][ T8507] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 251.587592][ T8507] NILFS (loop6): mounting unchecked fs [ 251.624318][ T8507] NILFS (loop6): recovery complete [ 251.662433][ T8510] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.742762][ T27] audit: type=1800 audit(1755299331.680:107): pid=8507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.544" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 251.759479][ T8498] loop4: detected capacity change from 0 to 32768 [ 251.862539][ T5869] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 252.114086][ T27] audit: type=1800 audit(1755299331.773:108): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.544" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 252.278786][ T5869] usb 4-1: cp210x converter now attached to ttyUSB0 [ 252.428083][ T8498] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 252.439489][ T5869] usb 4-1: USB disconnect, device number 10 [ 252.497598][ T5869] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 252.539324][ T8498] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has bad signature GRUP01 [ 252.572759][ T8498] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 252.588587][ T5869] cp210x 4-1:0.0: device disconnected [ 252.638773][ T8498] OCFS2: File system is now read-only. [ 252.702256][ T8498] (syz.4.542,8498,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 252.710207][ T8498] (syz.4.542,8498,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 252.793743][ T8498] (syz.4.542,8498,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 252.812484][ T8522] loop6: detected capacity change from 0 to 512 [ 252.839669][ T8498] (syz.4.542,8498,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 252.876043][ T8498] (syz.4.542,8498,0):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 252.939819][ T8498] (syz.4.542,8498,0):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 252.980063][ T8498] (syz.4.542,8498,0):ocfs2_block_group_alloc_contig:433 ERROR: status = -30 [ 253.020734][ T8498] (syz.4.542,8498,0):ocfs2_block_group_alloc:705 ERROR: status = -30 [ 253.028944][ T8498] (syz.4.542,8498,0):ocfs2_block_group_alloc:758 ERROR: status = -30 [ 253.060786][ T8498] (syz.4.542,8498,0):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30 [ 253.077274][ T8498] (syz.4.542,8498,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 253.090986][ T8498] (syz.4.542,8498,0):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 253.116810][ T8498] (syz.4.542,8498,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 253.145701][ T8532] loop7: detected capacity change from 0 to 1024 [ 253.153488][ T8498] (syz.4.542,8498,0):ocfs2_expand_inline_dir:2841 ERROR: status = -30 [ 253.186426][ T8498] (syz.4.542,8498,0):ocfs2_extend_dir:3205 ERROR: status = -30 [ 253.217100][ T8498] (syz.4.542,8498,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 253.246623][ T8498] (syz.4.542,8498,0):ocfs2_mknod:298 ERROR: status = -30 [ 253.253327][ T8536] netlink: 332 bytes leftover after parsing attributes in process `syz.6.550'. [ 253.280330][ T8532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.312635][ T8498] (syz.4.542,8498,0):ocfs2_mknod:502 ERROR: status = -30 [ 253.351084][ T8498] (syz.4.542,8498,0):ocfs2_mkdir:659 ERROR: status = -30 [ 253.467882][ T8532] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #14: comm syz.7.549: attempt to clear invalid blocks 1886221359 len 1 [ 253.548091][ T8545] loop6: detected capacity change from 0 to 2048 [ 253.595786][ T8545] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 253.608292][ T6449] ocfs2: Unmounting device (7,4) on (node local) [ 253.626600][ T8545] NILFS (loop6): mounting unchecked fs [ 253.627951][ T8549] 9pnet_fd: Insufficient options for proto=fd [ 253.654426][ T7668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.721365][ T8545] NILFS (loop6): recovery complete [ 253.767638][ T8551] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.842057][ T27] audit: type=1800 audit(1755299333.634:109): pid=8545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.551" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 254.002831][ T27] audit: type=1800 audit(1755299333.737:110): pid=8553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.551" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 256.956935][ T8565] loop7: detected capacity change from 0 to 64 [ 257.120545][ T8565] hfs: unable to parse mount options [ 258.419925][ T8581] loop4: detected capacity change from 0 to 128 [ 258.719140][ T6857] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 258.958080][ T6857] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 258.982745][ T6857] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.014554][ T6857] usb 8-1: config 0 descriptor?? [ 259.038606][ T6857] cp210x 8-1:0.0: cp210x converter detected [ 259.473303][ T8607] loop4: detected capacity change from 0 to 736 [ 259.606261][ T8607] rock: directory entry would overflow storage [ 259.630248][ T8607] rock: sig=0x3b10, size=4, remaining=3 [ 259.708910][ T6857] cp210x 8-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 259.731688][ T6857] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 259.775771][ T6857] usb 8-1: cp210x converter now attached to ttyUSB0 [ 259.806314][ T6857] usb 8-1: USB disconnect, device number 7 [ 259.835289][ T6857] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 259.866057][ T6857] cp210x 8-1:0.0: device disconnected [ 260.556260][ T8612] loop3: detected capacity change from 0 to 32768 [ 260.912760][ T8642] loop4: detected capacity change from 0 to 128 [ 260.919644][ T8612] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 261.044075][ T8612] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has bad signature GRUP01 [ 261.169312][ T8612] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 261.219874][ T8633] loop6: detected capacity change from 0 to 65536 [ 261.248978][ T8612] OCFS2: File system is now read-only. [ 261.265177][ T8633] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 261.276938][ T8612] (syz.3.564,8612,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 261.302428][ T8612] (syz.3.564,8612,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 261.311978][ T8612] (syz.3.564,8612,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 261.333159][ T8612] (syz.3.564,8612,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 261.375431][ T8633] XFS (loop6): Ending clean mount [ 261.393502][ T8612] (syz.3.564,8612,0):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 261.423464][ T8612] (syz.3.564,8612,0):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 261.443376][ T3065] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 261.478383][ T8612] (syz.3.564,8612,0):ocfs2_block_group_alloc_contig:433 ERROR: status = -30 [ 261.488849][ T8612] (syz.3.564,8612,0):ocfs2_block_group_alloc:705 ERROR: status = -30 [ 261.498281][ T8612] (syz.3.564,8612,0):ocfs2_block_group_alloc:758 ERROR: status = -30 [ 261.504156][ T3065] XFS (loop6): Unmount and run xfs_repair [ 261.507128][ T8612] (syz.3.564,8612,0):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30 [ 261.543584][ T3065] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 261.548664][ T8612] (syz.3.564,8612,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 261.551003][ T3065] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 261.551020][ T3065] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 261.551032][ T3065] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 261.551043][ T3065] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 261.551055][ T3065] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 261.570013][ T8612] (syz.3.564,8612,0):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 261.660623][ T8663] random: crng reseeded on system resumption [ 261.718513][ T3065] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 261.722334][ T8612] (syz.3.564,8612,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 261.757330][ T3065] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 261.785651][ T3065] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 261.794652][ T8612] (syz.3.564,8612,0):ocfs2_expand_inline_dir:2841 ERROR: status = -30 [ 261.794683][ T8612] (syz.3.564,8612,0):ocfs2_extend_dir:3205 ERROR: status = -30 [ 261.794733][ T8612] (syz.3.564,8612,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 261.794752][ T8612] (syz.3.564,8612,0):ocfs2_mknod:298 ERROR: status = -30 [ 261.794772][ T8612] (syz.3.564,8612,0):ocfs2_mknod:502 ERROR: status = -30 [ 261.794788][ T8612] (syz.3.564,8612,0):ocfs2_mkdir:659 ERROR: status = -30 [ 261.893405][ T8633] XFS (loop6): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 261.918115][ T8633] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 261.933529][ T8633] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 261.993768][ T5782] ocfs2: Unmounting device (7,3) on (node local) [ 262.007053][ T6583] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 262.586700][ T8683] loop4: detected capacity change from 0 to 128 [ 262.617631][ T8683] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 262.656801][ T8683] FAT-fs (loop4): Filesystem has been set read-only [ 263.149186][ T8691] loop4: detected capacity change from 0 to 32768 [ 263.239695][ T8691] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 263.601854][ T6449] ocfs2: Unmounting device (7,4) on (node local) [ 263.751535][ T8710] loop6: detected capacity change from 0 to 32768 [ 263.814455][ T8710] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 264.281786][ T8706] loop7: detected capacity change from 0 to 32768 [ 264.429096][ T8726] random: crng reseeded on system resumption [ 264.484895][ T8706] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 264.532835][ T8706] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has bad signature GRUP01 [ 264.554987][ T8706] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 264.567591][ T8706] OCFS2: File system is now read-only. [ 264.573714][ T8706] (syz.7.583,8706,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 264.585703][ T8706] (syz.7.583,8706,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 264.622925][ T8706] (syz.7.583,8706,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 264.644472][ T8706] (syz.7.583,8706,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 264.674164][ T8706] (syz.7.583,8706,1):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 264.691913][ T8706] (syz.7.583,8706,1):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 264.710048][ T8706] (syz.7.583,8706,1):ocfs2_block_group_alloc_contig:433 ERROR: status = -30 [ 264.727069][ T8706] (syz.7.583,8706,1):ocfs2_block_group_alloc:705 ERROR: status = -30 [ 264.747403][ T8706] (syz.7.583,8706,1):ocfs2_block_group_alloc:758 ERROR: status = -30 [ 264.768151][ T8706] (syz.7.583,8706,1):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30 [ 264.822929][ T8706] (syz.7.583,8706,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 264.851431][ T8706] (syz.7.583,8706,1):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 264.880028][ T8706] (syz.7.583,8706,1):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 264.914574][ T8706] (syz.7.583,8706,1):ocfs2_expand_inline_dir:2841 ERROR: status = -30 [ 264.952120][ T8706] (syz.7.583,8706,1):ocfs2_extend_dir:3205 ERROR: status = -30 [ 264.967935][ T8706] (syz.7.583,8706,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 264.991887][ T8706] (syz.7.583,8706,1):ocfs2_mknod:298 ERROR: status = -30 [ 265.021369][ T8706] (syz.7.583,8706,1):ocfs2_mknod:502 ERROR: status = -30 [ 265.028479][ T8706] (syz.7.583,8706,1):ocfs2_mkdir:659 ERROR: status = -30 [ 265.131792][ T7668] ocfs2: Unmounting device (7,7) on (node local) [ 265.225522][ T6583] ocfs2: Unmounting device (7,6) on (node local) [ 265.347989][ T8745] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 265.554561][ T8745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.038492][ T8771] geneve1: entered promiscuous mode [ 266.044574][ T8771] vlan2: entered promiscuous mode [ 266.091386][ T8774] sg_read: process 94 (syz.7.597) changed security contexts after opening file descriptor, this is not allowed. [ 266.251250][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.257799][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.441604][ T8782] random: crng reseeded on system resumption [ 266.500688][ T8779] loop4: detected capacity change from 0 to 32768 [ 266.605716][ T8779] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 266.936920][ T8796] loop6: detected capacity change from 0 to 512 [ 267.038644][ T8796] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.057223][ T8796] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.164915][ T6583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.316533][ T6449] ocfs2: Unmounting device (7,4) on (node local) [ 268.051037][ T8821] loop7: detected capacity change from 0 to 32768 [ 268.059325][ T8821] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.610 (8821) [ 268.127493][ T8821] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 268.138127][ T8821] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 268.147046][ T8821] BTRFS info (device loop7): unrecognized rescue option 'ignoremetacsums' [ 268.155677][ T8821] BTRFS error (device loop7): unrecognized rescue value ignoremetacsums [ 268.168476][ T8821] BTRFS error (device loop7): open_ctree failed: -22 [ 268.447609][ T8831] loop3: detected capacity change from 0 to 32768 [ 268.531776][ T8831] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 268.562736][ T6947] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by udevd (6947) [ 268.674810][ T8841] loop6: detected capacity change from 0 to 512 [ 268.885915][ T8841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.011614][ T8845] IPVS: Scheduler module ip_vs_ not found [ 269.017661][ T8841] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.139207][ T8850] random: crng reseeded on system resumption [ 269.155697][ T5782] ocfs2: Unmounting device (7,3) on (node local) [ 269.200456][ T8841] EXT4-fs (loop6): shut down requested (2) [ 269.341247][ T6583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.583281][ T8862] netlink: 332 bytes leftover after parsing attributes in process `syz.6.619'. [ 269.884099][ T8869] Bluetooth: MGMT ver 1.22 [ 269.893305][ T8866] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 270.491061][ T8890] loop6: detected capacity change from 0 to 512 [ 270.526704][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.628'. [ 270.570025][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.628'. [ 270.575576][ T8890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.593333][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.628'. [ 270.688204][ T8890] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.700972][ T8892] netlink: 332 bytes leftover after parsing attributes in process `syz.3.628'. [ 270.782003][ T8890] EXT4-fs (loop6): shut down requested (2) [ 270.852968][ T8883] loop7: detected capacity change from 0 to 32768 [ 270.863071][ T6583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.889715][ T8883] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 scanned by syz.7.625 (8883) [ 270.970187][ T8883] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 271.015775][ T8883] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 271.043335][ T8883] BTRFS info (device loop7): using free space tree [ 271.113650][ T8914] random: crng reseeded on system resumption [ 271.261398][ T8883] BTRFS info (device loop7): enabling ssd optimizations [ 271.303750][ T8883] BTRFS info (device loop7): auto enabling async discard [ 271.411537][ T7668] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 271.624731][ T8938] tipc: Started in network mode [ 271.671478][ T8938] tipc: Node identity 3a9168f8510c, cluster identity 4711 [ 271.704848][ T8938] tipc: Enabled bearer , priority 0 [ 271.733897][ T8938] syzkaller0: entered promiscuous mode [ 271.755638][ T8938] syzkaller0: entered allmulticast mode [ 271.826773][ T8947] loop6: detected capacity change from 0 to 512 [ 271.978561][ T8947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.055612][ T5789] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 272.066057][ T8953] tipc: Resetting bearer [ 272.072642][ T8947] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.203790][ T8937] tipc: Resetting bearer [ 272.242707][ T8960] EXT4-fs (loop6): shut down requested (2) [ 272.316218][ T8937] tipc: Disabling bearer [ 272.337690][ T6583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.368954][ T8963] netlink: 332 bytes leftover after parsing attributes in process `syz.7.641'. [ 272.379759][ T8958] netlink: 12 bytes leftover after parsing attributes in process `syz.7.641'. [ 272.392332][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.7.641'. [ 272.443156][ T8961] loop4: detected capacity change from 0 to 2048 [ 272.478751][ T8961] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 272.526041][ T8961] NILFS (loop4): mounting unchecked fs [ 272.711736][ T8961] NILFS (loop4): recovery complete [ 272.769584][ T8972] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 272.975271][ T27] audit: type=1800 audit(1755299351.495:111): pid=8961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.642" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 273.182810][ T8976] loop6: detected capacity change from 0 to 32768 [ 273.190891][ T27] audit: type=1800 audit(1755299351.682:112): pid=8979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.642" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 273.416139][ T8976] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 273.689226][ T8976] XFS (loop6): Ending clean mount [ 273.713193][ T8976] XFS (loop6): Quotacheck needed: Please wait. [ 273.883720][ T8976] XFS (loop6): Quotacheck: Done. [ 273.914079][ T8993] random: crng reseeded on system resumption [ 274.038246][ T6583] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 274.170078][ T8970] loop7: detected capacity change from 0 to 32768 [ 274.263876][ T8970] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 274.337139][ T8970] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has bad signature GRUP01 [ 274.369976][ T8974] loop3: detected capacity change from 0 to 32768 [ 274.443339][ T8970] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 274.455589][ T8974] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.644 (8974) [ 274.495621][ T8970] OCFS2: File system is now read-only. [ 274.501153][ T8970] (syz.7.645,8970,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 274.515687][ T8970] (syz.7.645,8970,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 274.541150][ T8974] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 274.550778][ T8970] (syz.7.645,8970,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 274.573299][ T8974] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 274.592540][ T8974] BTRFS info (device loop3): using free space tree [ 274.599489][ T8970] (syz.7.645,8970,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 274.639853][ T8970] (syz.7.645,8970,0):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 274.670638][ T8970] (syz.7.645,8970,0):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 274.705283][ T8970] (syz.7.645,8970,0):ocfs2_block_group_alloc_contig:433 ERROR: status = -30 [ 274.752803][ T8970] (syz.7.645,8970,1):ocfs2_block_group_alloc:705 ERROR: status = -30 [ 274.761214][ T8970] (syz.7.645,8970,1):ocfs2_block_group_alloc:758 ERROR: status = -30 [ 274.771452][ T8970] (syz.7.645,8970,1):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30 [ 274.782545][ T8970] (syz.7.645,8970,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 274.808816][ T8970] (syz.7.645,8970,0):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 274.826041][ T8974] BTRFS info (device loop3): enabling ssd optimizations [ 274.833257][ T8974] BTRFS info (device loop3): auto enabling async discard [ 274.846711][ T8970] (syz.7.645,8970,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 274.873701][ T8970] (syz.7.645,8970,0):ocfs2_expand_inline_dir:2841 ERROR: status = -30 [ 274.891130][ T8970] (syz.7.645,8970,0):ocfs2_extend_dir:3205 ERROR: status = -30 [ 274.898861][ T8970] (syz.7.645,8970,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 274.913207][ T8970] (syz.7.645,8970,0):ocfs2_mknod:298 ERROR: status = -30 [ 274.930542][ T8970] (syz.7.645,8970,0):ocfs2_mknod:502 ERROR: status = -30 [ 274.946950][ T8970] (syz.7.645,8970,0):ocfs2_mkdir:659 ERROR: status = -30 [ 275.074278][ T7668] ocfs2: Unmounting device (7,7) on (node local) [ 275.131797][ T5782] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 275.221423][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 275.232007][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 275.253759][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 275.325334][ T9038] netlink: 332 bytes leftover after parsing attributes in process `syz.4.653'. [ 275.767818][ T9046] loop7: detected capacity change from 0 to 512 [ 275.860151][ T9046] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.871445][ T9050] loop4: detected capacity change from 0 to 2048 [ 275.894842][ T9050] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 275.904478][ T9050] NILFS (loop4): mounting unchecked fs [ 275.949882][ T9046] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.012855][ T9059] random: crng reseeded on system resumption [ 276.052099][ T6947] udevd[6947]: incorrect nilfs2 checksum on /dev/loop4 [ 276.081813][ T9046] EXT4-fs (loop7): shut down requested (2) [ 276.110907][ T9050] NILFS (loop4): recovery complete [ 276.131770][ T9060] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.181582][ T27] audit: type=1800 audit(1755299354.525:113): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.655" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 276.356575][ T7668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.437400][ T27] audit: type=1800 audit(1755299354.656:114): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.655" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 280.477785][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.662'. [ 280.506516][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.662'. [ 280.529602][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.662'. [ 280.560137][ T9084] netlink: 332 bytes leftover after parsing attributes in process `syz.4.662'. [ 280.705338][ T9073] loop7: detected capacity change from 0 to 32768 [ 280.819205][ T9073] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 280.852462][ T9073] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has bad signature GRUP01 [ 280.895640][ T9073] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 280.944711][ T9073] OCFS2: File system is now read-only. [ 280.975275][ T9073] (syz.7.659,9073,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 280.984430][ T9073] (syz.7.659,9073,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 281.081842][ T9073] (syz.7.659,9073,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 281.114282][ T9073] (syz.7.659,9073,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 281.130333][ T9103] loop4: detected capacity change from 0 to 512 [ 281.166712][ T9073] (syz.7.659,9073,1):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 281.174958][ T9073] (syz.7.659,9073,1):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 281.220558][ T9073] (syz.7.659,9073,1):ocfs2_block_group_alloc_contig:433 ERROR: status = -30 [ 281.252007][ T9073] (syz.7.659,9073,1):ocfs2_block_group_alloc:705 ERROR: status = -30 [ 281.273433][ T9073] (syz.7.659,9073,1):ocfs2_block_group_alloc:758 ERROR: status = -30 [ 281.284422][ T9073] (syz.7.659,9073,0):ocfs2_reserve_suballoc_bits:833 ERROR: status = -30 [ 281.290228][ T9078] loop6: detected capacity change from 0 to 32768 [ 281.301818][ T9103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.321789][ T9078] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 scanned by syz.6.660 (9078) [ 281.327068][ T9073] (syz.7.659,9073,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 281.343871][ T9103] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.357878][ T9078] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 281.392683][ T9103] EXT4-fs (loop4): shut down requested (2) [ 281.408405][ T9078] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 281.409916][ T9073] (syz.7.659,9073,0):ocfs2_reserve_new_metadata_blocks:990 ERROR: status = -30 [ 281.451003][ T9078] BTRFS info (device loop6): using free space tree [ 281.582418][ T6449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.659137][ T9073] (syz.7.659,9073,0):ocfs2_reserve_new_metadata_blocks:1013 ERROR: status = -30 [ 281.695715][ T9073] (syz.7.659,9073,0):ocfs2_expand_inline_dir:2841 ERROR: status = -30 [ 281.720445][ T9073] (syz.7.659,9073,0):ocfs2_extend_dir:3205 ERROR: status = -30 [ 281.781342][ T9114] loop3: detected capacity change from 0 to 32768 [ 281.783334][ T9073] (syz.7.659,9073,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 281.816594][ T9073] (syz.7.659,9073,1):ocfs2_mknod:298 ERROR: status = -30 [ 281.824129][ T9073] (syz.7.659,9073,1):ocfs2_mknod:502 ERROR: status = -30 [ 281.831947][ T9073] (syz.7.659,9073,1):ocfs2_mkdir:659 ERROR: status = -30 [ 281.884515][ T9114] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 281.974950][ T9078] BTRFS info (device loop6): enabling ssd optimizations [ 282.016963][ T9078] BTRFS info (device loop6): auto enabling async discard [ 282.020647][ T7668] ocfs2: Unmounting device (7,7) on (node local) [ 282.123591][ T9114] XFS (loop3): Ending clean mount [ 282.134687][ T9114] XFS (loop3): Quotacheck needed: Please wait. [ 282.216639][ T9114] XFS (loop3): Quotacheck: Done. [ 282.431583][ T6583] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 282.447543][ T5782] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 282.604619][ T9151] loop4: detected capacity change from 0 to 128 [ 282.622299][ T6947] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop6 scanned by udevd (6947) [ 282.717707][ T9151] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 282.719009][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.673'. [ 282.743650][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.673'. [ 282.755569][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.673'. [ 282.815029][ T9151] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 282.891894][ T9157] netlink: 332 bytes leftover after parsing attributes in process `syz.6.673'. [ 283.058909][ T6449] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.220722][ T9166] netlink: 'syz.7.680': attribute type 1 has an invalid length. [ 283.359780][ T9166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.551984][ T5906] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 283.744680][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 283.761662][ T5906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 283.772453][ T5906] usb 5-1: config 15 has an invalid interface number: 174 but max is 1 [ 283.786640][ T5906] usb 5-1: config 15 has an invalid interface number: 5 but max is 1 [ 283.818880][ T5906] usb 5-1: config 15 has an invalid interface descriptor of length 2, skipping [ 283.840236][ T5906] usb 5-1: config 15 has no interface number 0 [ 283.857498][ T5906] usb 5-1: config 15 has no interface number 1 [ 283.879185][ T5906] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.893925][ T5906] usb 5-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 283.916246][ T5906] usb 5-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 283.938402][ T5906] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 283.971519][ T5906] usb 5-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 284.015106][ T5906] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 284.026557][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 284.054014][ T5906] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 284.063386][ T9175] loop6: detected capacity change from 0 to 32768 [ 284.094398][ T5906] usb 5-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 284.113054][ T5906] usb 5-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 284.126433][ T9175] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 284.135302][ T5906] usb 5-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 284.169429][ T5906] usb 5-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 284.178996][ T9175] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 284.211837][ T5906] usb 5-1: config 15 interface 5 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 284.215957][ T9175] BTRFS info (device loop6): using free space tree [ 284.236105][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 284.246043][ T9] usb 8-1: config 0 has an invalid interface number: 227 but max is 0 [ 284.257872][ T9190] loop3: detected capacity change from 0 to 64 [ 284.261132][ T5906] usb 5-1: config 15 interface 174 has no altsetting 0 [ 284.279202][ T9] usb 8-1: config 0 has no interface number 0 [ 284.308808][ T9] usb 8-1: config 0 interface 227 has no altsetting 0 [ 284.320665][ T5906] usb 5-1: config 15 interface 5 has no altsetting 0 [ 284.370580][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=28.6b [ 284.394368][ T5906] usb 5-1: string descriptor 0 read error: -22 [ 284.419071][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.428862][ T5906] usb 5-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 284.438068][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.457800][ T9] usb 8-1: Product: syz [ 284.462425][ T9175] BTRFS info (device loop6): enabling ssd optimizations [ 284.465999][ T9] usb 8-1: Manufacturer: syz [ 284.486084][ T9171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 284.491962][ T9175] BTRFS info (device loop6): auto enabling async discard [ 284.495768][ T9] usb 8-1: SerialNumber: syz [ 284.536348][ T9] usb 8-1: config 0 descriptor?? [ 284.542515][ T5906] sierra 5-1:15.174: Sierra USB modem converter detected [ 284.601265][ T9] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.227/input/input7 [ 284.755707][ T6583] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 284.789940][ T5143] bcm5974 8-1:0.227: could not read from device [ 284.799867][ T5906] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 284.835735][ T5906] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 284.853458][ T5143] bcm5974 8-1:0.227: could not read from device [ 284.896507][ T5906] sierra 5-1:15.5: Sierra USB modem converter detected [ 284.938541][ T5143] bcm5974 8-1:0.227: could not read from device [ 284.960103][ T9] usb 8-1: USB disconnect, device number 8 [ 284.971144][ T5906] usb 5-1: Sierra USB modem converter now attached to ttyUSB2 [ 285.108228][ T6213] udevd[6213]: Error opening device "/dev/input/event4": No such file or directory [ 285.137012][ T5906] usb 5-1: USB disconnect, device number 8 [ 285.150774][ T6213] udevd[6213]: Unable to EVIOCGABS device "/dev/input/event4" [ 285.180234][ T6213] udevd[6213]: Unable to EVIOCGABS device "/dev/input/event4" [ 285.215339][ T6213] udevd[6213]: Unable to EVIOCGABS device "/dev/input/event4" [ 285.223412][ T5906] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 285.239912][ T6213] udevd[6213]: Unable to EVIOCGABS device "/dev/input/event4" [ 285.259275][ T5906] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 285.298610][ T5906] sierra 5-1:15.174: device disconnected [ 285.358797][ T5906] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 285.401059][ T5906] sierra 5-1:15.5: device disconnected [ 285.432748][ T9219] loop6: detected capacity change from 0 to 128 [ 285.552202][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 285.576958][ T9219] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 285.585265][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 285.604853][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 285.609399][ T9219] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 285.714886][ T9221] netlink: 332 bytes leftover after parsing attributes in process `syz.4.687'. [ 285.738171][ T6583] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 285.950674][ T9233] netlink: 'syz.7.690': attribute type 1 has an invalid length. [ 286.060508][ T9211] loop3: detected capacity change from 0 to 32768 [ 286.095288][ T9233] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.128612][ T9211] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 286.349329][ T9211] XFS (loop3): Ending clean mount [ 286.369442][ T9211] XFS (loop3): Quotacheck needed: Please wait. [ 286.435562][ T9211] XFS (loop3): Quotacheck: Done. [ 286.504051][ T9258] loop6: detected capacity change from 0 to 512 [ 286.531323][ T9258] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 286.559701][ T5782] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 286.588701][ T5869] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 286.590584][ T9258] EXT4-fs (loop6): 1 truncate cleaned up [ 286.605759][ T9258] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.745354][ T6583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.829724][ T5869] usb 8-1: Using ep0 maxpacket: 16 [ 286.838454][ T5869] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 286.850320][ T5869] usb 8-1: config 0 has no interface number 0 [ 286.874808][ T5869] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 286.905436][ T9262] loop6: detected capacity change from 0 to 128 [ 286.907447][ T5869] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 286.953215][ T9262] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.959419][ T5869] usb 8-1: config 0 interface 41 has no altsetting 0 [ 286.983656][ T9262] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 287.014661][ T5869] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 287.045963][ T5869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.089284][ T5869] usb 8-1: Product: syz [ 287.128389][ T5869] usb 8-1: Manufacturer: syz [ 287.153505][ T5869] usb 8-1: SerialNumber: syz [ 287.175670][ T5869] usb 8-1: config 0 descriptor?? [ 287.188451][ T9254] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 287.195840][ T9254] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 287.206686][ T9256] loop4: detected capacity change from 0 to 32768 [ 287.237077][ T9256] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.694 (9256) [ 287.240274][ T9268] loop3: detected capacity change from 0 to 512 [ 287.271463][ T6583] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.286197][ T9256] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 287.301433][ T9268] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 287.314905][ T9256] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 287.342383][ T9256] BTRFS info (device loop4): using free space tree [ 287.406468][ T9268] EXT4-fs (loop3): 1 truncate cleaned up [ 287.429919][ T9254] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 287.432107][ T9268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.461552][ T9254] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 287.562212][ T9256] BTRFS info (device loop4): enabling ssd optimizations [ 287.569234][ T9256] BTRFS info (device loop4): auto enabling async discard [ 287.646265][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.664300][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.699'. [ 287.702010][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.699'. [ 287.772524][ T6449] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 288.019296][ T9293] loop6: detected capacity change from 0 to 2048 [ 288.094241][ T9293] NILFS (loop6): invalid segment: Magic number mismatch [ 288.111030][ T9293] NILFS (loop6): trying rollback from an earlier position [ 288.163237][ T5869] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 288.183479][ T9293] NILFS (loop6): recovery complete [ 288.203195][ T9299] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 288.484274][ T9303] netlink: 'syz.4.701': attribute type 1 has an invalid length. [ 288.646080][ T9303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.780483][ T9310] loop6: detected capacity change from 0 to 128 [ 288.841242][ T9301] loop3: detected capacity change from 0 to 32768 [ 288.856826][ T9310] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 288.926371][ T9301] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 288.939903][ T9310] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 289.051101][ T6583] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 289.125062][ T9327] __nla_validate_parse: 2 callbacks suppressed [ 289.125079][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.710'. [ 289.141467][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.710'. [ 289.156314][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.710'. [ 289.174770][ T9327] netlink: 332 bytes leftover after parsing attributes in process `syz.4.710'. [ 289.215737][ T9301] XFS (loop3): Ending clean mount [ 289.234759][ T9301] XFS (loop3): Quotacheck needed: Please wait. [ 289.301816][ T9301] XFS (loop3): Quotacheck: Done. [ 289.321325][ T9330] loop6: detected capacity change from 0 to 1024 [ 289.361547][ T9330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.415937][ T9330] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #14: comm syz.6.709: attempt to clear invalid blocks 1886221359 len 1 [ 289.495592][ T5869] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 289.541522][ T5782] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 289.558283][ T5869] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 289.571459][ T6583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.581840][ T5869] CoreChips: probe of 8-1:0.41 failed with error -71 [ 289.597020][ T5869] usb 8-1: USB disconnect, device number 9 [ 289.837152][ T9342] netlink: 'syz.4.715': attribute type 1 has an invalid length. [ 289.976143][ T9342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 290.085941][ T9340] loop6: detected capacity change from 0 to 32768 [ 290.115827][ T9340] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.714 (9340) [ 290.131334][ T9340] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 290.141750][ T9340] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 290.150480][ T9340] BTRFS info (device loop6): enabling auto defrag [ 290.156987][ T9340] BTRFS info (device loop6): max_inline at 0 [ 290.163133][ T9340] BTRFS info (device loop6): force clearing of disk cache [ 290.170759][ T9340] BTRFS info (device loop6): turning on sync discard [ 290.177637][ T9340] BTRFS info (device loop6): using free space tree [ 290.317214][ T9340] BTRFS info (device loop6): enabling ssd optimizations [ 290.332913][ T9340] BTRFS info (device loop6): rebuilding free space tree [ 290.387814][ T9365] loop7: detected capacity change from 0 to 64 [ 290.409944][ T9368] loop4: detected capacity change from 0 to 128 [ 290.456793][ T9365] hfs: unable to parse mount options [ 290.527809][ T9368] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.559233][ T9368] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 290.574542][ T6583] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 290.910346][ T6449] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 291.056161][ T9377] loop7: detected capacity change from 0 to 32768 [ 291.153745][ T9377] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 291.215549][ T9385] input: syz1 as /devices/virtual/input/input8 [ 291.331056][ T9377] XFS (loop7): Ending clean mount [ 291.446897][ T9377] XFS (loop7): Quotacheck needed: Please wait. [ 291.608241][ T9377] XFS (loop7): Quotacheck: Done. [ 291.727081][ T27] audit: type=1800 audit(1755299369.066:115): pid=9377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.719" name="file2" dev="loop7" ino=4423 res=0 errno=0 [ 291.819519][ T9400] loop6: detected capacity change from 0 to 1024 [ 291.920826][ T7668] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 291.955125][ T9400] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.092479][ T9380] loop3: detected capacity change from 0 to 32768 [ 292.105173][ T9400] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #14: comm syz.6.722: attempt to clear invalid blocks 1886221359 len 1 [ 292.241624][ T9380] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 292.253183][ T9411] loop4: detected capacity change from 0 to 32768 [ 292.301963][ T9411] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 292.371958][ T6583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.437423][ T6449] ocfs2: Unmounting device (7,4) on (node local) [ 292.588312][ T9380] XFS (loop3): Ending clean mount [ 292.641466][ T9380] XFS (loop3): Quotacheck needed: Please wait. [ 292.781935][ T9425] netlink: 'syz.6.725': attribute type 1 has an invalid length. [ 292.865865][ T9380] XFS (loop3): Quotacheck: Done. [ 292.922121][ T9424] loop4: detected capacity change from 0 to 32768 [ 292.932153][ T9424] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.726 (9424) [ 292.962466][ T9424] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 292.973176][ T9424] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 292.981867][ T9424] BTRFS info (device loop4): enabling auto defrag [ 292.988471][ T9424] BTRFS info (device loop4): max_inline at 0 [ 292.994656][ T9424] BTRFS info (device loop4): force clearing of disk cache [ 293.001804][ T9424] BTRFS info (device loop4): turning on sync discard [ 293.008668][ T9424] BTRFS info (device loop4): using free space tree [ 293.053193][ T5782] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 293.065131][ T9425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.203295][ T9424] BTRFS info (device loop4): enabling ssd optimizations [ 293.207223][ T9446] loop7: detected capacity change from 0 to 128 [ 293.230645][ T9424] BTRFS info (device loop4): rebuilding free space tree [ 293.307189][ T9446] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 293.413843][ T9446] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 293.521731][ T6449] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 293.638549][ T7668] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 293.765865][ T6947] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop4 scanned by udevd (6947) [ 293.855718][ T9456] loop3: detected capacity change from 0 to 64 [ 293.895234][ T9456] hfs: unable to parse mount options [ 294.448452][ T5869] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 294.696898][ T5869] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 294.721184][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.760375][ T5869] usb 5-1: config 0 descriptor?? [ 294.805448][ T5869] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 294.905508][ T9487] loop7: detected capacity change from 0 to 128 [ 295.016329][ T5773] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 295.141619][ T9474] loop6: detected capacity change from 0 to 32768 [ 295.186080][ T9474] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 295.284356][ T5869] gp8psk: usb in 128 operation failed. [ 295.302298][ T5773] usb 4-1: config 64 has an invalid interface number: 19 but max is 0 [ 295.342999][ T5869] gp8psk: usb in 137 operation failed. [ 295.358634][ T5773] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 295.374976][ T6583] ocfs2: Unmounting device (7,6) on (node local) [ 295.385410][ T5869] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 295.406491][ T5773] usb 4-1: config 64 has no interface number 0 [ 295.422712][ T5869] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 295.431859][ T5773] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 295.468021][ T5869] usb 5-1: USB disconnect, device number 9 [ 295.475253][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.540864][ T5773] usb 4-1: probing VID:PID(2201:012C) [ 295.585677][ T5773] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 295.627677][ T5773] vub300: probe of 4-1:64.19 failed with error -22 [ 295.737033][ T9505] loop6: detected capacity change from 0 to 512 [ 295.836112][ T9505] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2244: inode #15: comm syz.6.744: corrupted in-inode xattr: e_value size too large [ 295.871136][ T5869] usb 4-1: USB disconnect, device number 11 [ 295.979800][ T9505] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.744: couldn't read orphan inode 15 (err -117) [ 296.038889][ T9505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.083353][ T9506] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.262594][ T6583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.350263][ T9506] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.580268][ T9506] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.795761][ T9506] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.961800][ T5773] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 297.033606][ T9506] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.085002][ T9506] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.135442][ T9506] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.196787][ T5773] usb 7-1: Using ep0 maxpacket: 32 [ 297.208813][ T9506] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.236274][ T5773] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.258528][ T5773] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.285474][ T5773] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 297.316766][ T5773] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.347130][ T5773] usb 7-1: config 0 descriptor?? [ 297.365904][ T5773] hub 7-1:0.0: USB hub found [ 297.473725][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.750'. [ 297.488084][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.750'. [ 297.494445][ T9530] loop3: detected capacity change from 0 to 32768 [ 297.504880][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'. [ 297.563871][ T9530] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.590519][ T5773] hub 7-1:0.0: 1 port detected [ 297.778711][ T9530] XFS (loop3): Ending clean mount [ 297.798075][ T9530] XFS (loop3): Quotacheck needed: Please wait. [ 297.949031][ T9530] XFS (loop3): Quotacheck: Done. [ 298.127404][ T5782] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 298.265797][ T5828] hub 7-1:0.0: activate --> -90 [ 298.532092][ T9580] loop4: detected capacity change from 0 to 512 [ 298.551866][ T9580] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 298.635176][ T9580] EXT4-fs (loop4): 1 truncate cleaned up [ 298.642996][ T9580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.768999][ T9] usb 7-1: USB disconnect, device number 8 [ 298.786508][ T6449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.009573][ T9586] loop3: detected capacity change from 0 to 32768 [ 299.069534][ T9586] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 299.245023][ T9586] XFS (loop3): Ending clean mount [ 299.253590][ T9586] XFS (loop3): Quotacheck needed: Please wait. [ 299.373644][ T9586] XFS (loop3): Quotacheck: Done. [ 299.547990][ T9616] netlink: 87 bytes leftover after parsing attributes in process `syz.7.761'. [ 299.584375][ T5782] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 299.782497][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'. [ 299.834522][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'. [ 299.860927][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'. [ 299.862967][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 300.107724][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 300.119056][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 300.160083][ T9] usb 7-1: config 15 has an invalid interface number: 174 but max is 2 [ 300.168418][ T9] usb 7-1: config 15 has an invalid interface number: 99 but max is 2 [ 300.191365][ T9] usb 7-1: config 15 has an invalid interface number: 5 but max is 2 [ 300.210630][ T9] usb 7-1: config 15 has an invalid interface descriptor of length 2, skipping [ 300.232221][ T9] usb 7-1: config 15 has no interface number 0 [ 300.259277][ T9] usb 7-1: config 15 has no interface number 1 [ 300.276702][ T9] usb 7-1: config 15 has no interface number 2 [ 300.282998][ T9] usb 7-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.324876][ T9] usb 7-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 300.354375][ T9] usb 7-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 300.376634][ T9] usb 7-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 300.398741][ T9] usb 7-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 300.420797][ T9] usb 7-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 300.463134][ T9] usb 7-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 300.490432][ T9] usb 7-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 300.515545][ T9] usb 7-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 300.538116][ T9] usb 7-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 300.560396][ T9] usb 7-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 300.584114][ T9] usb 7-1: config 15 interface 5 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 300.627716][ T9] usb 7-1: config 15 interface 174 has no altsetting 0 [ 300.656667][ T9] usb 7-1: config 15 interface 99 has no altsetting 0 [ 300.674888][ T9] usb 7-1: config 15 interface 5 has no altsetting 0 [ 300.708374][ T9] usb 7-1: language id specifier not provided by device, defaulting to English [ 300.732541][ T9] usb 7-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 300.751611][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.769186][ T9] usb 7-1: Product: syz [ 300.780406][ T9] usb 7-1: Manufacturer: syz [ 300.795964][ T9] usb 7-1: SerialNumber: syz [ 300.821058][ T9620] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 301.117080][ T9] sierra 7-1:15.174: Sierra USB modem converter detected [ 301.142926][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.775'. [ 301.191061][ T9] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 301.199274][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.775'. [ 301.222369][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.775'. [ 301.239394][ T9] usb 7-1: Sierra USB modem converter now attached to ttyUSB1 [ 301.275877][ T9] sierra 7-1:15.99: Sierra USB modem converter detected [ 301.325776][ T9] usb 7-1: Sierra USB modem converter now attached to ttyUSB2 [ 301.348189][ T9] sierra 7-1:15.5: Sierra USB modem converter detected [ 301.372927][ T9] usb 7-1: Sierra USB modem converter now attached to ttyUSB3 [ 301.398934][ T9] usb 7-1: USB disconnect, device number 9 [ 301.475566][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 301.503697][ T9] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 301.536976][ T9] sierra 7-1:15.174: device disconnected [ 301.566237][ T9] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 301.585289][ T9] sierra 7-1:15.99: device disconnected [ 301.608230][ T9] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 301.627727][ T9] sierra 7-1:15.5: device disconnected [ 302.180196][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 302.349863][ T9682] loop3: detected capacity change from 0 to 32768 [ 302.426546][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 302.436457][ T9682] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 302.502187][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 302.537394][ T9704] loop7: detected capacity change from 0 to 32768 [ 302.575806][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 302.613906][ T9] usb 7-1: can't read configurations, error -71 [ 302.623229][ T9704] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 302.780095][ T6947] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 302.803225][ T9704] XFS (loop7): Ending clean mount [ 302.820755][ T9704] XFS (loop7): Quotacheck needed: Please wait. [ 302.924281][ T9704] XFS (loop7): Quotacheck: Done. [ 302.999020][ T7668] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 303.285812][ T9735] loop7: detected capacity change from 0 to 64 [ 303.403821][ T27] audit: type=1800 audit(1755299379.988:116): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.790" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 303.720597][ T9749] loop6: detected capacity change from 0 to 128 [ 303.771785][ T9749] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.909826][ T9749] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 304.108243][ T6583] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.305476][ T9745] loop4: detected capacity change from 0 to 32768 [ 304.336544][ T9745] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.796 (9745) [ 304.392074][ T9760] loop7: detected capacity change from 0 to 32768 [ 304.407483][ T9760] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.798 (9760) [ 304.423763][ T9745] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 304.441717][ T9760] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 304.452410][ T9760] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 304.461943][ T9760] BTRFS info (device loop7): enabling auto defrag [ 304.468545][ T9760] BTRFS info (device loop7): max_inline at 0 [ 304.474589][ T9760] BTRFS info (device loop7): force clearing of disk cache [ 304.481869][ T9760] BTRFS info (device loop7): turning on sync discard [ 304.488728][ T9760] BTRFS info (device loop7): using free space tree [ 304.493637][ T9745] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 304.534420][ T9745] BTRFS info (device loop4): using free space tree [ 304.582182][ T9760] BTRFS info (device loop7): enabling ssd optimizations [ 304.590962][ T9760] BTRFS info (device loop7): rebuilding free space tree [ 304.668241][ T9780] __nla_validate_parse: 3 callbacks suppressed [ 304.668257][ T9780] netlink: 332 bytes leftover after parsing attributes in process `syz.6.799'. [ 304.710186][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 304.741562][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 304.797009][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 304.806517][ T9745] BTRFS info (device loop4): enabling ssd optimizations [ 304.828057][ T9745] BTRFS info (device loop4): auto enabling async discard [ 304.997651][ T7668] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 305.124161][ T6449] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 305.156256][ T27] audit: type=1326 audit(1755299381.624:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c5d8ebe9 code=0x7ffc0000 [ 305.260598][ T27] audit: type=1326 audit(1755299381.652:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c5d8ebe9 code=0x7ffc0000 [ 305.316952][ T9805] loop6: detected capacity change from 0 to 64 [ 305.337870][ T27] audit: type=1326 audit(1755299381.652:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c5d8ebe9 code=0x7ffc0000 [ 305.466110][ T27] audit: type=1326 audit(1755299381.652:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f46c5d8ebe9 code=0x7ffc0000 [ 305.524414][ T9810] loop3: detected capacity change from 0 to 512 [ 305.551874][ T27] audit: type=1326 audit(1755299381.652:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c5d8ebe9 code=0x7ffc0000 [ 305.605679][ T27] audit: type=1326 audit(1755299381.652:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c5d8ebe9 code=0x7ffc0000 [ 305.674507][ T9814] loop7: detected capacity change from 0 to 128 [ 305.756433][ T27] audit: type=1326 audit(1755299381.652:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c5d8ebe9 code=0x7ffc0000 [ 305.770336][ T9810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.837638][ T9810] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.839807][ T9814] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.862028][ T9814] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.921615][ T27] audit: type=1326 audit(1755299381.652:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c5d8ebe9 code=0x7ffc0000 [ 306.011170][ T7668] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.025684][ T27] audit: type=1326 audit(1755299381.652:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c5d8ebe9 code=0x7ffc0000 [ 306.158701][ T5869] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 306.264503][ T9827] netlink: 332 bytes leftover after parsing attributes in process `syz.7.810'. [ 306.337163][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.392794][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 306.458337][ T5869] usb 5-1: unable to get BOS descriptor or descriptor too short [ 306.469512][ T5869] usb 5-1: config 15 has an invalid interface number: 174 but max is 2 [ 306.477930][ T5869] usb 5-1: config 15 has an invalid interface number: 99 but max is 2 [ 306.505271][ T5869] usb 5-1: config 15 has an invalid interface number: 5 but max is 2 [ 306.521158][ T5869] usb 5-1: config 15 has an invalid interface descriptor of length 2, skipping [ 306.542154][ T5869] usb 5-1: config 15 has no interface number 0 [ 306.558920][ T5869] usb 5-1: config 15 has no interface number 1 [ 306.570745][ T5869] usb 5-1: config 15 has no interface number 2 [ 306.606891][ T5869] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.637369][ T5869] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 306.652066][ T5869] usb 5-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 306.697652][ T5869] usb 5-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 306.725919][ T5869] usb 5-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 306.751898][ T5869] usb 5-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 306.778802][ T5869] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 306.797097][ T9833] loop3: detected capacity change from 0 to 1024 [ 306.810524][ T5869] usb 5-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 306.856887][ T5869] usb 5-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 306.877912][ T5869] usb 5-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 306.893611][ T9837] loop7: detected capacity change from 0 to 64 [ 306.900525][ T5869] usb 5-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 306.926011][ T5869] usb 5-1: config 15 interface 5 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 306.949085][ T5869] usb 5-1: config 15 interface 174 has no altsetting 0 [ 306.956677][ T5869] usb 5-1: config 15 interface 99 has no altsetting 0 [ 306.958071][ T9833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.971566][ T5869] usb 5-1: config 15 interface 5 has no altsetting 0 [ 306.984686][ T5869] usb 5-1: language id specifier not provided by device, defaulting to English [ 307.004987][ T5869] usb 5-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 307.024628][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.035293][ T5869] usb 5-1: Product: syz [ 307.039521][ T5869] usb 5-1: Manufacturer: syz [ 307.045637][ T5869] usb 5-1: SerialNumber: syz [ 307.062586][ T9822] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 307.093196][ T9825] loop6: detected capacity change from 0 to 32768 [ 307.121611][ T9825] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 scanned by syz.6.811 (9825) [ 307.159962][ T9825] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 307.172409][ T9825] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 307.212074][ T9825] BTRFS info (device loop6): using free space tree [ 307.239263][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.342963][ T5869] sierra 5-1:15.174: Sierra USB modem converter detected [ 307.383579][ T5869] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 307.442229][ T5869] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 307.444371][ T9858] loop3: detected capacity change from 0 to 128 [ 307.494969][ T9825] BTRFS info (device loop6): enabling ssd optimizations [ 307.501988][ T9825] BTRFS info (device loop6): auto enabling async discard [ 307.523360][ T5869] sierra 5-1:15.99: Sierra USB modem converter detected [ 307.535856][ T9858] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 307.536967][ T5869] usb 5-1: Sierra USB modem converter now attached to ttyUSB2 [ 307.571294][ T5869] sierra 5-1:15.5: Sierra USB modem converter detected [ 307.585383][ T9858] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 307.610539][ T5869] usb 5-1: Sierra USB modem converter now attached to ttyUSB3 [ 307.631751][ T5869] usb 5-1: USB disconnect, device number 10 [ 307.719172][ T5869] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 307.780901][ T5869] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 307.799615][ T6583] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 307.802184][ T5869] sierra 5-1:15.174: device disconnected [ 307.832423][ T5782] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.893100][ T5869] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 307.930755][ T5869] sierra 5-1:15.99: device disconnected [ 307.974228][ T5869] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 308.019433][ T5869] sierra 5-1:15.5: device disconnected [ 308.042888][ T6213] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop6 scanned by udevd (6213) [ 308.240365][ T9875] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 308.283857][ T9869] loop7: detected capacity change from 0 to 4096 [ 308.306315][ T9869] ntfs3: loop7: Different NTFS sector size (1024) and media sector size (512). [ 308.430600][ T9878] loop3: detected capacity change from 0 to 64 [ 308.779678][ T5869] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 308.992169][ T5869] usb 7-1: Using ep0 maxpacket: 32 [ 309.000559][ T5869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.022592][ T5869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.057552][ T5869] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 309.069122][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.110954][ T5869] usb 7-1: config 0 descriptor?? [ 309.132326][ T5869] hub 7-1:0.0: USB hub found [ 309.157028][ T9893] loop4: detected capacity change from 0 to 2048 [ 309.186810][ T9893] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 309.204036][ T9893] NILFS (loop4): mounting unchecked fs [ 309.261905][ T9893] NILFS (loop4): recovery complete [ 309.288999][ T9896] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.355771][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 309.355787][ T27] audit: type=1800 audit(1755299385.542:147): pid=9893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.831" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 309.386271][ T5869] hub 7-1:0.0: 1 port detected [ 309.604392][ T9884] loop3: detected capacity change from 0 to 32768 [ 309.636749][ T27] audit: type=1800 audit(1755299385.655:148): pid=9897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.831" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 309.824787][ T9884] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 310.212179][ T5869] hub 7-1:0.0: activate --> -90 [ 310.927481][ T5849] usb 7-1: USB disconnect, device number 12 [ 312.577839][ T6947] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 312.968648][ T9906] loop7: detected capacity change from 0 to 512 [ 313.359612][ T9910] loop6: detected capacity change from 0 to 64 [ 313.393220][ T9906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.478496][ T9906] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.805929][ T7668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.816737][ T9918] netlink: 24 bytes leftover after parsing attributes in process `syz.6.840'. [ 313.829166][ T9915] loop3: detected capacity change from 0 to 2048 [ 313.854006][ T9915] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 313.897030][ T9915] NILFS (loop3): mounting unchecked fs [ 313.937015][ T6947] udevd[6947]: incorrect nilfs2 checksum on /dev/loop3 [ 314.005135][ T9915] NILFS (loop3): recovery complete [ 314.025616][ T9926] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.072343][ T27] audit: type=1800 audit(1755299389.966:149): pid=9915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.838" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 314.093316][ T9925] loop7: detected capacity change from 0 to 1024 [ 314.197903][ T27] audit: type=1800 audit(1755299390.078:150): pid=9928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.838" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 314.485138][ T9925] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.703468][ T9935] loop4: detected capacity change from 0 to 512 [ 314.711184][ T7668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.751726][ T6947] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 314.775342][ T5789] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 314.970610][ T9942] netlink: 'syz.3.846': attribute type 8 has an invalid length. [ 315.045680][ T9946] loop7: detected capacity change from 0 to 4096 [ 315.100821][ T9949] loop6: detected capacity change from 0 to 64 [ 315.176813][ T5906] kernel read not supported for file [userfaultfd] (pid: 5906 comm: kworker/0:5) [ 315.226546][ T5828] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 315.472637][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 315.498299][ T5828] usb 5-1: unable to get BOS descriptor or descriptor too short [ 315.514622][ T9957] loop6: detected capacity change from 0 to 1024 [ 315.531058][ T5828] usb 5-1: config 15 has an invalid interface number: 174 but max is 2 [ 315.542361][ T5828] usb 5-1: config 15 has an invalid interface number: 99 but max is 2 [ 315.569029][ T5828] usb 5-1: config 15 has an invalid interface number: 5 but max is 2 [ 315.588425][ T5828] usb 5-1: config 15 has an invalid interface descriptor of length 2, skipping [ 315.620860][ T5828] usb 5-1: config 15 has no interface number 0 [ 315.627407][ T9957] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.649443][ T5828] usb 5-1: config 15 has no interface number 1 [ 315.664997][ T5828] usb 5-1: config 15 has no interface number 2 [ 315.671425][ T5828] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.693749][ T5828] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 315.696643][ T9955] loop3: detected capacity change from 0 to 4096 [ 315.718426][ T5828] usb 5-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 315.728640][ T5828] usb 5-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 315.739645][ T5828] usb 5-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 315.750876][ T5828] usb 5-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 315.763332][ T5828] usb 5-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 315.774852][ T5828] usb 5-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 315.786004][ T9955] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 315.801524][ T5828] usb 5-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 315.816477][ T5828] usb 5-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 315.827454][ T5828] usb 5-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 315.840040][ T5828] usb 5-1: config 15 interface 5 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 315.855204][ T6583] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.867147][ T5828] usb 5-1: config 15 interface 174 has no altsetting 0 [ 315.876138][ T5828] usb 5-1: config 15 interface 99 has no altsetting 0 [ 315.886589][ T5828] usb 5-1: config 15 interface 5 has no altsetting 0 [ 315.896780][ T5828] usb 5-1: language id specifier not provided by device, defaulting to English [ 315.910650][ T5828] usb 5-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 315.925852][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.962686][ T5828] usb 5-1: Product: syz [ 315.986013][ T5828] usb 5-1: Manufacturer: syz [ 315.991218][ T5828] usb 5-1: SerialNumber: syz [ 316.033113][ T9940] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 316.323314][ T5828] sierra 5-1:15.174: Sierra USB modem converter detected [ 316.353261][ T9977] loop3: detected capacity change from 0 to 64 [ 316.371529][ T5828] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 316.673174][ T9981] loop7: detected capacity change from 0 to 32768 [ 316.690019][ T5828] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 316.701808][ T9981] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 316.757214][ T5828] sierra 5-1:15.99: Sierra USB modem converter detected [ 316.790789][ T5828] usb 5-1: Sierra USB modem converter now attached to ttyUSB2 [ 316.821440][ T5828] sierra 5-1:15.5: Sierra USB modem converter detected [ 316.871132][ T5828] usb 5-1: Sierra USB modem converter now attached to ttyUSB3 [ 316.895404][ T6213] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 316.895451][ T5828] usb 5-1: USB disconnect, device number 11 [ 316.980781][ T5906] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 316.991649][ T5828] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 317.032671][ T5828] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 317.069549][ T5828] sierra 5-1:15.174: device disconnected [ 317.094531][ T5828] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 317.130679][ T9992] loop4: detected capacity change from 0 to 512 [ 317.133007][ T5828] sierra 5-1:15.99: device disconnected [ 317.177170][ T5828] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 317.195534][ T5828] sierra 5-1:15.5: device disconnected [ 317.201646][ T5906] usb 4-1: config 64 has an invalid interface number: 19 but max is 0 [ 317.222090][ T5906] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 317.237212][ T8] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 317.247734][ T6947] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 317.262681][ T9990] loop6: detected capacity change from 0 to 4096 [ 317.270169][ T5906] usb 4-1: config 64 has no interface number 0 [ 317.290172][ T5906] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 317.300763][ T5789] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 317.306485][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.323383][ T9990] ntfs3: loop6: Different NTFS sector size (1024) and media sector size (512). [ 317.400589][ T5906] usb 4-1: probing VID:PID(2201:012C) [ 317.437339][ T5906] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 317.461594][ T8] usb 8-1: Using ep0 maxpacket: 32 [ 317.474830][ T5906] vub300: probe of 4-1:64.19 failed with error -22 [ 317.486177][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.520358][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.535224][ T8] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 317.564826][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.595943][ T8] usb 8-1: config 0 descriptor?? [ 317.614025][ T5906] usb 4-1: USB disconnect, device number 12 [ 317.626244][ T8] hub 8-1:0.0: USB hub found [ 317.856553][ T8] hub 8-1:0.0: 1 port detected [ 318.380444][T10013] loop3: detected capacity change from 0 to 1024 [ 318.414745][T10016] loop4: detected capacity change from 0 to 512 [ 318.441010][ T6947] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 318.443369][T10013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.489555][ T5789] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 318.516103][ T5906] hub 8-1:0.0: activate --> -90 [ 318.623037][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.669845][T10021] loop4: detected capacity change from 0 to 4096 [ 318.682440][T10021] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 318.692808][ T5906] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 318.779607][T10023] netlink: 332 bytes leftover after parsing attributes in process `syz.3.876'. [ 318.905442][ T5906] usb 7-1: Using ep0 maxpacket: 16 [ 318.925651][ T5906] usb 7-1: unable to get BOS descriptor or descriptor too short [ 318.946688][ T5906] usb 7-1: config 15 has an invalid interface number: 174 but max is 2 [ 318.965097][ T5906] usb 7-1: config 15 has an invalid interface number: 99 but max is 2 [ 318.985032][ T5906] usb 7-1: config 15 has an invalid interface number: 5 but max is 2 [ 319.007113][ T5906] usb 7-1: config 15 has an invalid interface descriptor of length 2, skipping [ 319.042378][ T5906] usb 7-1: config 15 has no interface number 0 [ 319.061732][ T5906] usb 7-1: config 15 has no interface number 1 [ 319.087916][ T5906] usb 7-1: config 15 has no interface number 2 [ 319.106322][ T5906] usb 7-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.125414][ T5789] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 319.130907][ T5906] usb 7-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 319.134472][ T5789] Bluetooth: hci2: Injecting HCI hardware error event [ 319.156335][ T5789] Bluetooth: hci2: hardware error 0x00 [ 319.174874][ T6857] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 319.183894][ T9] usb 8-1: USB disconnect, device number 10 [ 319.191801][ T5906] usb 7-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 319.242019][ T5906] usb 7-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 319.561179][T10034] loop4: detected capacity change from 0 to 32768 [ 319.575286][T10034] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.881 (10034) [ 319.590527][ T5906] usb 7-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 319.602475][T10034] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 319.613276][T10034] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 319.622195][T10034] BTRFS info (device loop4): enabling auto defrag [ 319.628958][T10034] BTRFS info (device loop4): doing ref verification [ 319.635823][T10034] BTRFS info (device loop4): use no compression [ 319.642925][T10034] BTRFS info (device loop4): force clearing of disk cache [ 319.650288][T10034] BTRFS info (device loop4): use zlib compression, level 3 [ 319.658111][T10034] BTRFS info (device loop4): max_inline at 4096 [ 319.664713][T10034] BTRFS info (device loop4): disabling free space tree [ 319.672826][ T5906] usb 7-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 319.694606][ T5906] usb 7-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 319.707312][ T5906] usb 7-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 319.724905][ T5906] usb 7-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 319.742244][ T5906] usb 7-1: config 15 interface 5 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 319.755601][ T5906] usb 7-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 319.769960][ T5906] usb 7-1: config 15 interface 5 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 319.814251][T10034] BTRFS info (device loop4): enabling ssd optimizations [ 319.821266][T10034] BTRFS info (device loop4): auto enabling async discard [ 319.837282][T10034] BTRFS info (device loop4): rebuilding free space tree [ 319.854285][T10034] BTRFS info (device loop4): disabling free space tree [ 319.861892][T10034] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 319.872159][T10034] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 319.887054][T10032] loop3: detected capacity change from 0 to 32768 [ 319.891172][ T5906] usb 7-1: config 15 interface 174 has no altsetting 0 [ 319.903002][ T5906] usb 7-1: config 15 interface 99 has no altsetting 0 [ 319.910573][ T5906] usb 7-1: config 15 interface 5 has no altsetting 0 [ 319.919007][ T5906] usb 7-1: language id specifier not provided by device, defaulting to English [ 319.944480][ T5906] usb 7-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 319.953236][T10032] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 319.964120][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.974796][ T5906] usb 7-1: Product: syz [ 319.979031][ T5906] usb 7-1: Manufacturer: syz [ 319.992366][ T5906] usb 7-1: SerialNumber: syz [ 319.997630][ T6449] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 320.001659][T10012] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 320.100119][T10032] XFS (loop3): Ending clean mount [ 320.136243][T10032] XFS (loop3): Quotacheck needed: Please wait. [ 320.239599][T10032] XFS (loop3): Quotacheck: Done. [ 320.308176][ T5906] sierra 7-1:15.174: Sierra USB modem converter detected [ 320.374515][ T5791] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 320.392880][ T5782] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 320.407312][ T5906] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 320.438141][ T5906] usb 7-1: Sierra USB modem converter now attached to ttyUSB1 [ 320.460798][ T5906] sierra 7-1:15.99: Sierra USB modem converter detected [ 320.483469][ T5906] usb 7-1: Sierra USB modem converter now attached to ttyUSB2 [ 320.502838][ T5906] sierra 7-1:15.5: Sierra USB modem converter detected [ 320.532849][ T5906] usb 7-1: Sierra USB modem converter now attached to ttyUSB3 [ 320.574421][ T5906] usb 7-1: USB disconnect, device number 13 [ 320.629756][ T5906] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 320.683243][ T5906] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 320.720490][ T5906] sierra 7-1:15.174: device disconnected [ 320.749430][ T5906] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 320.764631][ T5906] sierra 7-1:15.99: device disconnected [ 320.802633][ T5906] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 320.839656][ T5906] sierra 7-1:15.5: device disconnected [ 321.138395][T10080] loop7: detected capacity change from 0 to 512 [ 321.170449][T10084] loop4: detected capacity change from 0 to 1024 [ 321.228136][T10080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.304584][T10084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 321.317022][T10080] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.343875][ T5789] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 321.357457][T10084] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.425079][T10084] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #15: block 3: comm syz.4.891: lblock 3 mapped to illegal pblock 3 (length 3) [ 321.524785][T10084] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 321.572099][ T7668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.584491][T10084] EXT4-fs (loop4): This should not happen!! Data will be lost [ 321.584491][T10084] [ 321.657615][T10093] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #15: block 7: comm syz.4.891: lblock 7 mapped to illegal pblock 7 (length 9) [ 321.688881][T10093] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 321.723342][T10093] EXT4-fs (loop4): This should not happen!! Data will be lost [ 321.723342][T10093] [ 321.796435][T10100] loop7: detected capacity change from 0 to 64 [ 321.820906][T10100] hfs: unable to parse mount options [ 321.871217][ T6449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 322.072834][T10104] loop7: detected capacity change from 0 to 1024 [ 322.191583][T10111] loop4: detected capacity change from 0 to 512 [ 322.222653][T10104] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.279767][T10111] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 322.340712][T10111] EXT4-fs (loop4): 1 truncate cleaned up [ 322.347772][T10111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.424262][ T7668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.448030][T10090] loop6: detected capacity change from 0 to 32768 [ 322.499697][ T6449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.524125][T10090] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 322.610397][T10126] loop7: detected capacity change from 0 to 512 [ 322.724541][T10126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.761971][T10090] XFS (loop6): Ending clean mount [ 322.787405][T10126] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.815518][T10090] XFS (loop6): Quotacheck needed: Please wait. [ 322.962229][T10090] XFS (loop6): Quotacheck: Done. [ 323.023051][ T7668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.136649][ T6583] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 323.287734][T10142] loop4: detected capacity change from 0 to 1024 [ 323.376501][T10142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.539871][T10152] loop7: detected capacity change from 0 to 512 [ 323.556643][T10152] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 323.557731][ T6449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.644641][T10152] EXT4-fs (loop7): 1 truncate cleaned up [ 323.682212][T10152] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.851823][ T7668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.241585][ T5906] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 324.412708][ T5906] usb 8-1: device descriptor read/64, error -71 [ 324.435770][T10169] loop4: detected capacity change from 0 to 32768 [ 324.459121][T10169] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 324.504691][T10169] XFS (loop4): Ending clean mount [ 324.517335][T10169] XFS (loop4): Quotacheck needed: Please wait. [ 324.608701][T10169] XFS (loop4): Quotacheck: Done. [ 324.648638][ T27] audit: type=1800 audit(1755299399.859:151): pid=10169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.918" name="file2" dev="loop4" ino=4423 res=0 errno=0 [ 324.689260][ T5849] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 324.706557][ T5906] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 324.748099][T10187] loop3: detected capacity change from 0 to 128 [ 324.760518][ T6449] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 324.785580][T10187] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 324.806800][T10187] ext4 filesystem being mounted at /246/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 324.885827][ T5906] usb 8-1: device descriptor read/64, error -71 [ 324.936836][ T5849] usb 7-1: Using ep0 maxpacket: 32 [ 324.944438][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.958079][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.967898][ T5849] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 324.982052][ T5782] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 325.022118][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.022431][ T5906] usb usb8-port1: attempt power cycle [ 325.049314][ T5849] usb 7-1: config 0 descriptor?? [ 325.078533][ T5849] hub 7-1:0.0: USB hub found [ 325.167792][T10190] netlink: 332 bytes leftover after parsing attributes in process `syz.3.925'. [ 325.219658][T10192] loop4: detected capacity change from 0 to 512 [ 325.257769][T10192] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 325.306729][T10192] EXT4-fs (loop4): 1 truncate cleaned up [ 325.308870][ T5849] hub 7-1:0.0: 1 port detected [ 325.318921][T10192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.320780][T10195] netlink: 'syz.3.926': attribute type 10 has an invalid length. [ 325.371864][T10195] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 325.417447][ T6449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.504194][ T5906] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 325.548370][ T5906] usb 8-1: device descriptor read/8, error -71 [ 325.621937][T10201] loop4: detected capacity change from 0 to 512 [ 325.652745][T10201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.676429][T10201] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.837627][ T6449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.847238][ T5906] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 325.899684][ T5906] usb 8-1: device descriptor read/8, error -71 [ 325.975671][ T5828] hub 7-1:0.0: activate --> -90 [ 326.028904][T10211] netlink: 332 bytes leftover after parsing attributes in process `syz.3.934'. [ 326.043649][ T5906] usb usb8-port1: unable to enumerate USB device [ 326.162107][T10215] loop3: detected capacity change from 0 to 512 [ 326.191083][T10215] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 326.226747][T10215] EXT4-fs (loop3): 1 truncate cleaned up [ 326.233860][T10215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.322511][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.536252][T10213] loop4: detected capacity change from 0 to 32768 [ 326.629152][ T5828] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 326.642742][ T5849] usb 7-1: USB disconnect, device number 14 [ 326.647894][T10213] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 326.743080][T10213] XFS (loop4): Ending clean mount [ 326.777721][T10213] XFS (loop4): Quotacheck needed: Please wait. [ 326.857738][T10213] XFS (loop4): Quotacheck: Done. [ 326.899742][ T27] audit: type=1800 audit(1755299401.954:152): pid=10213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.932" name="file2" dev="loop4" ino=4423 res=0 errno=0 [ 326.952273][ T6449] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 327.223507][T10235] loop3: detected capacity change from 0 to 16 [ 327.277549][T10235] erofs: (device loop3): mounted with root inode @ nid 36. [ 327.427253][T10241] netlink: 332 bytes leftover after parsing attributes in process `syz.6.943'. [ 327.489181][T10242] program syz.4.939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.520134][T10244] loop7: detected capacity change from 0 to 512 [ 327.563501][T10244] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 327.588063][T10244] EXT4-fs (loop7): 1 truncate cleaned up [ 327.591140][T10244] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.607139][T10249] loop6: detected capacity change from 0 to 1024 [ 327.634586][T10249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.699992][T10249] ================================================================== [ 327.700007][T10249] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90 [ 327.700038][T10249] Read of size 18446744073709551588 at addr ffff88805f702040 by task syz.6.946/10249 [ 327.700055][T10249] [ 327.700065][T10249] CPU: 1 PID: 10249 Comm: syz.6.946 Not tainted 6.6.102-syzkaller #0 [ 327.700083][T10249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.700097][T10249] Call Trace: [ 327.700105][T10249] [ 327.700113][T10249] dump_stack_lvl+0x16c/0x230 [ 327.700140][T10249] ? read_lock_is_recursive+0x20/0x20 [ 327.700160][T10249] ? show_regs_print_info+0x20/0x20 [ 327.700178][T10249] ? load_image+0x3b0/0x3b0 [ 327.700200][T10249] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 327.700225][T10249] ? __virt_addr_valid+0x18c/0x540 [ 327.700244][T10249] ? __virt_addr_valid+0x469/0x540 [ 327.700264][T10249] print_report+0xac/0x220 [ 327.700279][T10249] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 327.700298][T10249] kasan_report+0x117/0x150 [ 327.700317][T10249] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 327.700339][T10249] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 327.700359][T10249] kasan_check_range+0x288/0x290 [ 327.700375][T10249] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 327.700393][T10249] __asan_memmove+0x29/0x70 [ 327.700412][T10249] ext4_xattr_set_entry+0x94b/0x1e90 [ 327.700442][T10249] ext4_xattr_block_set+0xae3/0x32a0 [ 327.700461][T10249] ? ext4_destroy_inode+0xe8/0x1b0 [ 327.700480][T10249] ? ext4_destroy_inode+0x1b0/0x1b0 [ 327.700502][T10249] ? proc_nr_inodes+0x230/0x230 [ 327.700521][T10249] ? do_raw_spin_unlock+0x121/0x230 [ 327.700542][T10249] ? _raw_spin_unlock+0x28/0x40 [ 327.700565][T10249] ? ext4_xattr_block_find+0x350/0x350 [ 327.700585][T10249] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 327.700608][T10249] ext4_xattr_set_handle+0xbff/0x1290 [ 327.700647][T10249] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 327.700673][T10249] ? __ext4_journal_start_sb+0x259/0x570 [ 327.700697][T10249] ext4_xattr_set+0x22d/0x320 [ 327.700721][T10249] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 327.700742][T10249] ? evm_protected_xattr_common+0x170/0x190 [ 327.700765][T10249] ? evm_protect_xattr+0x534/0x7a0 [ 327.700785][T10249] ? ext4_xattr_security_get+0x40/0x40 [ 327.700807][T10249] __vfs_setxattr+0x431/0x470 [ 327.700830][T10249] __vfs_setxattr_noperm+0x12d/0x5e0 [ 327.700852][T10249] vfs_setxattr+0x16c/0x2f0 [ 327.700872][T10249] ? xattr_permission+0x470/0x470 [ 327.700889][T10249] ? __mnt_want_write+0x223/0x2a0 [ 327.700911][T10249] ? path_setxattr+0x314/0x550 [ 327.700931][T10249] path_setxattr+0x362/0x550 [ 327.700953][T10249] ? simple_xattrs_free+0x150/0x150 [ 327.700983][T10249] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 327.701001][T10249] ? lock_chain_count+0x20/0x20 [ 327.701021][T10249] __x64_sys_setxattr+0xbb/0xd0 [ 327.701041][T10249] do_syscall_64+0x55/0xb0 [ 327.701058][T10249] ? clear_bhb_loop+0x40/0x90 [ 327.701074][T10249] ? clear_bhb_loop+0x40/0x90 [ 327.701090][T10249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.701112][T10249] RIP: 0033:0x7fd5af18ebe9 [ 327.701136][T10249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.701152][T10249] RSP: 002b:00007fd5aff69038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 327.701171][T10249] RAX: ffffffffffffffda RBX: 00007fd5af3b5fa0 RCX: 00007fd5af18ebe9 [ 327.701184][T10249] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 327.701197][T10249] RBP: 00007fd5af211e19 R08: 0000000000000000 R09: 0000000000000000 [ 327.701209][T10249] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 327.701219][T10249] R13: 00007fd5af3b6038 R14: 00007fd5af3b5fa0 R15: 00007ffce16ddcd8 [ 327.701240][T10249] [ 327.701245][T10249] [ 327.701249][T10249] Allocated by task 10249: [ 327.701258][T10249] kasan_set_track+0x4e/0x70 [ 327.701273][T10249] __kasan_kmalloc+0x8f/0xa0 [ 327.701288][T10249] __kmalloc_node_track_caller+0xb2/0x230 [ 327.701308][T10249] kmemdup+0x2b/0x70 [ 327.701323][T10249] ext4_xattr_block_set+0x9e5/0x32a0 [ 327.701341][T10249] ext4_xattr_set_handle+0xbff/0x1290 [ 327.701359][T10249] ext4_xattr_set+0x22d/0x320 [ 327.701377][T10249] __vfs_setxattr+0x431/0x470 [ 327.701393][T10249] __vfs_setxattr_noperm+0x12d/0x5e0 [ 327.701411][T10249] vfs_setxattr+0x16c/0x2f0 [ 327.701427][T10249] path_setxattr+0x362/0x550 [ 327.701443][T10249] __x64_sys_setxattr+0xbb/0xd0 [ 327.701460][T10249] do_syscall_64+0x55/0xb0 [ 327.701475][T10249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.701496][T10249] [ 327.701499][T10249] Last potentially related work creation: [ 327.701505][T10249] kasan_save_stack+0x3e/0x60 [ 327.701528][T10249] __kasan_record_aux_stack+0xaf/0xc0 [ 327.701547][T10249] call_rcu+0x158/0x930 [ 327.701565][T10249] sctp_association_free+0x6a1/0x7f0 [ 327.701586][T10249] sctp_do_sm+0x3e64/0x59a0 [ 327.701603][T10249] sctp_assoc_bh_rcv+0x3f2/0x630 [ 327.701622][T10249] sctp_backlog_rcv+0x163/0x3e0 [ 327.701638][T10249] __release_sock+0x1bd/0x430 [ 327.701653][T10249] release_sock+0x5f/0x1c0 [ 327.701666][T10249] sctp_sendmsg+0x1b54/0x27e0 [ 327.701684][T10249] ____sys_sendmsg+0x5bf/0x950 [ 327.701702][T10249] ___sys_sendmsg+0x220/0x290 [ 327.701719][T10249] __se_sys_sendmsg+0x1a5/0x270 [ 327.701736][T10249] do_syscall_64+0x55/0xb0 [ 327.701751][T10249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.701772][T10249] [ 327.701775][T10249] Second to last potentially related work creation: [ 327.701780][T10249] kasan_save_stack+0x3e/0x60 [ 327.701794][T10249] __kasan_record_aux_stack+0xaf/0xc0 [ 327.701810][T10249] kvfree_call_rcu+0xee/0x780 [ 327.701825][T10249] neigh_periodic_work+0x3f7/0xd70 [ 327.701837][T10249] process_scheduled_works+0xa45/0x15b0 [ 327.701854][T10249] worker_thread+0xa55/0xfc0 [ 327.701870][T10249] kthread+0x2fa/0x390 [ 327.701882][T10249] ret_from_fork+0x48/0x80 [ 327.701899][T10249] ret_from_fork_asm+0x11/0x20 [ 327.701915][T10249] [ 327.701918][T10249] The buggy address belongs to the object at ffff88805f702000 [ 327.701918][T10249] which belongs to the cache kmalloc-1k of size 1024 [ 327.701931][T10249] The buggy address is located 64 bytes inside of [ 327.701931][T10249] 1024-byte region [ffff88805f702000, ffff88805f702400) [ 327.701948][T10249] [ 327.701951][T10249] The buggy address belongs to the physical page: [ 327.701965][T10249] page:ffffea00017dc000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f700 [ 327.701984][T10249] head:ffffea00017dc000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 327.701998][T10249] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 327.702019][T10249] page_type: 0xffffffff() [ 327.702036][T10249] raw: 00fff00000000840 ffff888017841dc0 dead000000000100 dead000000000122 [ 327.702051][T10249] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 327.702059][T10249] page dumped because: kasan: bad access detected [ 327.702072][T10249] page_owner tracks the page as allocated [ 327.702078][T10249] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5781, tgid 5781 (syz-executor), ts 69601461967, free_ts 18388178435 [ 327.702106][T10249] post_alloc_hook+0x1cd/0x210 [ 327.702131][T10249] get_page_from_freelist+0x195c/0x19f0 [ 327.702152][T10249] __alloc_pages+0x1e3/0x460 [ 327.702171][T10249] alloc_slab_page+0x5d/0x170 [ 327.702190][T10249] new_slab+0x87/0x2e0 [ 327.702206][T10249] ___slab_alloc+0xc6d/0x12f0 [ 327.702224][T10249] __kmem_cache_alloc_node+0x1a2/0x260 [ 327.702241][T10249] kmalloc_trace+0x2a/0xe0 [ 327.702259][T10249] batadv_hard_if_event+0xde9/0x15b0 [ 327.702274][T10249] notifier_call_chain+0x197/0x390 [ 327.702290][T10249] register_netdevice+0x160c/0x1ae0 [ 327.702307][T10249] veth_newlink+0x7bb/0xc30 [ 327.702326][T10249] rtnl_newlink+0x14d0/0x2020 [ 327.702343][T10249] rtnetlink_rcv_msg+0x7c7/0xf10 [ 327.702362][T10249] netlink_rcv_skb+0x216/0x480 [ 327.702378][T10249] netlink_unicast+0x751/0x8d0 [ 327.702393][T10249] page last free stack trace: [ 327.702398][T10249] free_unref_page_prepare+0x7ce/0x8e0 [ 327.702417][T10249] free_unref_page+0x32/0x2e0 [ 327.702434][T10249] free_contig_range+0xa1/0x160 [ 327.702446][T10249] destroy_args+0x87/0x770 [ 327.702465][T10249] debug_vm_pgtable+0x3cc/0x410 [ 327.702482][T10249] do_one_initcall+0x1fd/0x750 [ 327.702500][T10249] do_initcall_level+0x137/0x1f0 [ 327.702520][T10249] do_initcalls+0x69/0xd0 [ 327.702538][T10249] kernel_init_freeable+0x3d2/0x570 [ 327.702556][T10249] kernel_init+0x1d/0x1c0 [ 327.702569][T10249] ret_from_fork+0x48/0x80 [ 327.702585][T10249] ret_from_fork_asm+0x11/0x20 [ 327.702603][T10249] [ 327.702606][T10249] Memory state around the buggy address: [ 327.702615][T10249] ffff88805f701f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 327.702626][T10249] ffff88805f701f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 327.702637][T10249] >ffff88805f702000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.702645][T10249] ^ [ 327.702654][T10249] ffff88805f702080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.702665][T10249] ffff88805f702100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 327.702674][T10249] ================================================================== [ 327.702690][T10249] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 327.702699][T10249] CPU: 1 PID: 10249 Comm: syz.6.946 Not tainted 6.6.102-syzkaller #0 [ 327.702715][T10249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.702725][T10249] Call Trace: [ 327.702731][T10249] [ 327.702737][T10249] dump_stack_lvl+0x16c/0x230 [ 327.702757][T10249] ? show_regs_print_info+0x20/0x20 [ 327.702774][T10249] ? load_image+0x3b0/0x3b0 [ 327.702800][T10249] panic+0x2c0/0x710 [ 327.702823][T10249] ? bpf_jit_dump+0xd0/0xd0 [ 327.702844][T10249] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 327.702867][T10249] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 327.702890][T10249] ? _raw_spin_unlock+0x40/0x40 [ 327.702913][T10249] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 327.702934][T10249] check_panic_on_warn+0x84/0xa0 [ 327.702953][T10249] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 327.702972][T10249] end_report+0x6f/0x140 [ 327.702989][T10249] kasan_report+0x128/0x150 [ 327.703006][T10249] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 327.703026][T10249] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 327.703045][T10249] kasan_check_range+0x288/0x290 [ 327.703062][T10249] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 327.703081][T10249] __asan_memmove+0x29/0x70 [ 327.703100][T10249] ext4_xattr_set_entry+0x94b/0x1e90 [ 327.703136][T10249] ext4_xattr_block_set+0xae3/0x32a0 [ 327.703157][T10249] ? ext4_destroy_inode+0xe8/0x1b0 [ 327.703177][T10249] ? ext4_destroy_inode+0x1b0/0x1b0 [ 327.703200][T10249] ? proc_nr_inodes+0x230/0x230 [ 327.703220][T10249] ? do_raw_spin_unlock+0x121/0x230 [ 327.703258][T10249] ? _raw_spin_unlock+0x28/0x40 [ 327.703281][T10249] ? ext4_xattr_block_find+0x350/0x350 [ 327.703301][T10249] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 327.703322][T10249] ext4_xattr_set_handle+0xbff/0x1290 [ 327.703348][T10249] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 327.703371][T10249] ? __ext4_journal_start_sb+0x259/0x570 [ 327.703393][T10249] ext4_xattr_set+0x22d/0x320 [ 327.703417][T10249] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 327.703435][T10249] ? evm_protected_xattr_common+0x170/0x190 [ 327.703458][T10249] ? evm_protect_xattr+0x534/0x7a0 [ 327.703476][T10249] ? ext4_xattr_security_get+0x40/0x40 [ 327.703500][T10249] __vfs_setxattr+0x431/0x470 [ 327.703523][T10249] __vfs_setxattr_noperm+0x12d/0x5e0 [ 327.703544][T10249] vfs_setxattr+0x16c/0x2f0 [ 327.703563][T10249] ? xattr_permission+0x470/0x470 [ 327.703579][T10249] ? __mnt_want_write+0x223/0x2a0 [ 327.703599][T10249] ? path_setxattr+0x314/0x550 [ 327.703616][T10249] path_setxattr+0x362/0x550 [ 327.703634][T10249] ? simple_xattrs_free+0x150/0x150 [ 327.703661][T10249] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 327.703677][T10249] ? lock_chain_count+0x20/0x20 [ 327.703693][T10249] __x64_sys_setxattr+0xbb/0xd0 [ 327.703710][T10249] do_syscall_64+0x55/0xb0 [ 327.703727][T10249] ? clear_bhb_loop+0x40/0x90 [ 327.703741][T10249] ? clear_bhb_loop+0x40/0x90 [ 327.703754][T10249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.703777][T10249] RIP: 0033:0x7fd5af18ebe9 [ 327.703791][T10249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.703805][T10249] RSP: 002b:00007fd5aff69038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 327.703823][T10249] RAX: ffffffffffffffda RBX: 00007fd5af3b5fa0 RCX: 00007fd5af18ebe9 [ 327.703836][T10249] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 327.703847][T10249] RBP: 00007fd5af211e19 R08: 0000000000000000 R09: 0000000000000000 [ 327.703858][T10249] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 327.703868][T10249] R13: 00007fd5af3b6038 R14: 00007fd5af3b5fa0 R15: 00007ffce16ddcd8 [ 327.703885][T10249] [ 327.704189][T10249] Kernel Offset: disabled