last executing test programs: 10m16.788524856s ago: executing program 3 (id=186): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a", 0xf2}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7", 0x1f}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad1253", 0xe5}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c3b0fa44d9ca5ffbccfd9", 0x55}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m15.287797144s ago: executing program 3 (id=190): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7", 0x1f}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad1253", 0xe5}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c3b0fa44d9ca5ffbccfd9", 0x55}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m13.571391443s ago: executing program 3 (id=197): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa75528", 0xb2}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7", 0x1f}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad1253", 0xe5}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c3b0fa44d9ca5ffbccfd9", 0x55}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m12.133104977s ago: executing program 3 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x42c0}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4a6c0, 0x42) 10m11.134543206s ago: executing program 3 (id=205): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0x81ad}}}, 0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 10m10.263919156s ago: executing program 3 (id=212): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040044) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="01"]) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r1, 0xffffffffffffffff, 0x0) close(0x3) 10m8.956650912s ago: executing program 32 (id=212): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040044) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="01"]) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r1, 0xffffffffffffffff, 0x0) close(0x3) 13.410046481s ago: executing program 1 (id=2335): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 12.847012386s ago: executing program 4 (id=2338): r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8015) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x223}}, './file1\x00'}) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x4000) sendmsg$kcm(r0, 0x0, 0x44) 11.221674205s ago: executing program 4 (id=2339): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x20, 0x0, 0x80, 0xfffff024}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x290, 0x140, 0x19, 0x0, 0x140, 0x0, 0x1f8, 0x1f0, 0x1f0, 0x1f8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @common=@SET={0x60}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2709fb5a2bab03dc, 0xff0000ff, 'bridge_slave_0\x00', 'pimreg\x00', {}, {0xe8835d89a38d226f}, 0xff, 0x2, 0x1}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0xded, 0x8008, 0x400, 0x80, 0x0, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 11.034480546s ago: executing program 1 (id=2340): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)=0x0) timer_settime(r2, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pipe(&(0x7f0000000200)) r3 = getpgid(r1) r4 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x69d, &(0x7f0000000840)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000600)={0x23e3, 0x0, 0xd, 0x2}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./file1\x00') 8.056638259s ago: executing program 0 (id=2341): r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000580)={{r1, r2/1000+60000}, {0x0, 0x2710}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a"], 0x14}}, 0x20008050) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 8.055919378s ago: executing program 2 (id=2342): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x9, 0x7fff0006}]}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2c, 0x6, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x1) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) chmod(0x0, 0xe0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7.945524385s ago: executing program 1 (id=2343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.927344006s ago: executing program 4 (id=2344): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r0, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000640)=ANY=[], 0x31) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) 7.839379031s ago: executing program 5 (id=2345): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 7.771109225s ago: executing program 0 (id=2346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x64008044}, 0x4000110) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)=ANY=[@ANYRES64=r3, @ANYRES8=r2, @ANYRESHEX=r0, @ANYRESDEC], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x200000c0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.548600039s ago: executing program 1 (id=2347): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, 0x0, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.497555873s ago: executing program 4 (id=2348): r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @remote, 0x9}, 0x1c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x5000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) listen(r2, 0x100) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x49, &(0x7f0000000100)=0x101, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000080)=0x5, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaa8acd356f23085597b06e080041811a4600002000000000000000000703400000004e2000"], 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0x3, @empty, 0x8}, 0x1c) 6.487428704s ago: executing program 5 (id=2349): fsopen(&(0x7f0000000000)='overlay\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000002c0)="60c82a1b033e8df65ab80c7356fdb4394d258509f248de1e6e4549d7e1", 0x1d, 0x4008000, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 5.461398717s ago: executing program 1 (id=2350): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2d, 'pids'}]}, 0x6) 5.41584902s ago: executing program 0 (id=2351): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0xb6, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x2, 0x899, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x10001, 0x2, 0x3, 0x8, 0xffffff7f, 0x4, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x1, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0xfffffffc, 0x1, 0x1c7, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0x5c, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x1, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x1b3a, 0x81, 0x3, 0x7, 0x3, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000400)=0x1c) setsockopt$inet6_int(r2, 0x29, 0x1ce, &(0x7f0000000440)=0x8001, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000010000107"], 0x1c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.170084595s ago: executing program 2 (id=2352): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000140), 0x0, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r5, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 5.036635743s ago: executing program 5 (id=2353): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)=0x0) timer_settime(r2, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pipe(&(0x7f0000000200)) r3 = getpgid(r1) r4 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x69d, &(0x7f0000000840)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000600)={0x23e3, 0x0, 0xd, 0x2}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./file1\x00') 1.951950891s ago: executing program 2 (id=2354): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f", 0xe3}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7", 0x1f}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad1253", 0xe5}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c3b0fa44d9ca5ffbccfd9", 0x55}], 0x1, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.951586301s ago: executing program 5 (id=2355): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@grpid}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@debug}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") 1.919751413s ago: executing program 4 (id=2356): r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000580)={{r1, r2/1000+60000}, {0x0, 0x2710}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a"], 0x14}}, 0x20008050) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 1.873817706s ago: executing program 0 (id=2357): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bind$inet6(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x8, 0x3, 0x9f8, 0xc8, 0x8, 0xfa04, 0x0, 0x6c02, 0x960, 0x194, 0x194, 0x960, 0x194, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[0x0, 0x4e21], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x878, 0x898, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x9c}, {0x6, 0x3}, {0x2f9, 0x3}, {0x0, 0x3}, {}, {0x3, 0x3}, {0xc, 0x2}, {0x1, 0x2}, {0x8000, 0x2}, {0x8}, {0x7}], [{0x2, 0x401}, {0x8, 0x6}, {0x0, 0x2}, {0x7c9d2e67, 0x200}, {0x8, 0x3}, {0x2, 0x3c}, {0x4, 0x3}, {0x81, 0x9}, {0x5, 0x6a}, {0x3}, {0x80000f, 0x876c}], 0x11, 0xa}, {[{0x6, 0x3}, {0x4, 0x1}, {0x4, 0x3}, {0x7, 0x3}, {0x5}, {0x100}, {0x0, 0x1}, {0xe03, 0x1}, {0x8}, {0x6, 0x3}, {0x9, 0x1}], [{0xb, 0xa}, {0xfe7, 0x10000}, {0x1, 0x77656ee}, {0xfffffffb, 0x8}, {0x4, 0xfffffffc}, {0x3, 0x9}, {0x7, 0xcccb}, {0xe, 0x1}, {0x100, 0x4}, {0x9, 0x5}, {0x800, 0x7}], 0x4, 0x6}, {[{0x5, 0x2}, {0x3ff}, {0x0, 0x2}, {0x7, 0x3}, {0xff}, {0x1, 0x2}, {0x6, 0x3}, {0x8, 0x3}, {0x81, 0x2}, {0x60dc, 0x3}, {0x5, 0x3}], [{0x4, 0x43c}, {0xe229, 0xa2e9}, {0x8a0c, 0x8a5}, {0x9}, {0x7, 0x3}, {0x8, 0x9}, {0xffff, 0x80000000}, {0x7, 0x3}, {0xfffffff8, 0x40}, {0x9, 0x1}, {0x100, 0x80}], 0xb, 0x6}, {[{0x81, 0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x401}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x1}, {0x1}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x1}], [{0x8, 0x6}, {0x3, 0x4}, {0x4, 0x10000}, {0x30, 0xffffffbc}, {0x4800000, 0x2}, {0x7, 0x7fffffff}, {0x7, 0x1}, {0x7, 0x2}, {0x0, 0x6}, {0x80, 0x8}, {0x9, 0xffff}], 0x2, 0x1}, {[{0xcd9e, 0x3}, {0x1, 0x1}, {0xfff, 0x3}, {0x2000000, 0x2}, {0x4, 0x1}, {0x3c000000, 0x3}, {0x6, 0x3}, {0x3}, {0x7, 0x1}, {0x7f}, {0x4, 0x3}], [{0x63, 0x4}, {0xd20, 0xfdcb}, {0x47, 0x9}, {0xb, 0x2}, {0x0, 0x4}, {0x6, 0x1e}, {0x1, 0x7}, {}, {0x5, 0xba07ba8}, {0xfffffff8, 0x7fffffff}, {0xd, 0x4}], 0x6, 0x3}, {[{0x430558a8, 0x2}, {0x3743, 0x3}, {0x4, 0x4}, {0x3}, {0xffff7142, 0x2}, {0x8, 0x1}, {0x0, 0x3}, {0x5, 0x1}, {0x8}, {0x12, 0x2}, {0x80, 0x3}], [{0x80, 0x4}, {0xc71e, 0x7f}, {0x441, 0x1}, {0x6, 0xffffffff}, {0xa0e, 0x9}, {0x21c, 0x200}, {0x7, 0x8a}, {0x2, 0xfffffff9}, {0x1000, 0x40}, {0x4, 0x400}, {0x408b, 0x89a}], 0x4, 0x3}, {[{0x8000}, {0x1, 0x2}, {0x1ff, 0x3}, {0xffffffff, 0x2}, {0x7}, {0x0, 0x3}, {0x58d, 0x1}, {0x7}, {0xc6, 0x2}, {0x7}, {0x3}], [{0x7, 0xe}, {0x3, 0x7}, {0x0, 0x10000}, {0x5, 0x5}, {0xf, 0x9}, {0x5, 0x1ff}, {0x9, 0x1ff}, {0x4, 0x649}, {0x4, 0x9}, {0x6, 0x8}, {0x5, 0x7f}], 0x8}, {[{0x8}, {0x9, 0x3}, {0x5}, {0xb, 0x3}, {0x3, 0x2}, {0x1ff, 0x1}, {0x1000, 0x1}, {0x4, 0x1}, {0xc2, 0x1}, {0xc, 0x2}, {0x5, 0x2}], [{0xf0, 0x6}, {0xfffffffc, 0x1}, {0x7f, 0x9}, {0xfffffffe, 0x2}, {0x7f, 0x4}, {0x7, 0xfffffff8}, {0x1, 0x2}, {0x400, 0x401}, {0x9, 0xf15d}, {0x2, 0x7}, {0x6, 0x3}], 0xa, 0x6}, {[{0x3f, 0xcddfd284d7cd064b}, {0x4, 0x1}, {0x101, 0x2}, {0x5}, {0x9, 0x3}, {0x100, 0x2}, {0x80, 0x3}, {0x5, 0x1}, {0xb, 0x1}, {0x1590d48c, 0x2}, {0xea9a026b, 0x3}], [{0x2, 0x3b1}, {0x6, 0x700}, {0x1, 0x6}, {0x2, 0x8001}, {0x9, 0x9}, {0x5}, {0x8fe4, 0x31b2b08f}, {0x800, 0xb0e}, {0x8c9, 0x7}, {0x1, 0x9}, {0xfffffffd, 0x2}], 0x4, 0x4}, {[{0x5, 0x2}, {0x3, 0x2}, {0xc518, 0x1}, {0x8, 0x3}, {0x7, 0x1}, {0x2, 0x3}, {0xe7a, 0x1}, {0x0, 0x3}, {0x2000000}, {0x8, 0x2}, {0xfffffffd, 0x1}], [{0x3, 0xa4b}, {0x2, 0x568e2110}, {0x9, 0x5}, {0xfffffb66, 0x2}, {0xb8b, 0x9}, {0x2, 0x2}, {0xfffffff9, 0xffff0001}, {0x2, 0x8}, {0x3a, 0xbc}, {0xd, 0x1}, {0xc1, 0x4}], 0x8, 0x1}, {[{0x5, 0x3}, {0x10000}, {0x5, 0x2}, {0x4, 0x3}, {0xe}, {0x3ff, 0x1}, {0x1, 0x1}, {0x4}, {0x200008, 0x1}, {0x1, 0x2}, {0x7, 0x1}], [{0x6, 0x45}, {0xfffffffa, 0x6}, {0x81, 0x56}, {0x100, 0x1}, {0x5734, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x398, 0x2}, {0x2, 0x1}, {0x4, 0xb4}, {0x40, 0x603}], 0x9, 0x2}], 0x3}}, @common=@unspec=@connlabel={{0x28}, {0xffff}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa58) 1.80998996s ago: executing program 1 (id=2358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2a042, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.80930331s ago: executing program 2 (id=2359): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r0, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x31) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) 1.733420584s ago: executing program 0 (id=2360): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.563762605s ago: executing program 5 (id=2361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x64008044}, 0x4000110) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYRES8=r2, @ANYRESHEX=r0, @ANYRESDEC], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x200000c0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.455894811s ago: executing program 4 (id=2362): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x87fff, [0x9, 0x7fffffff], 0x24a4}, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a00"], 0x0) 1.15031101s ago: executing program 2 (id=2363): r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8015) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x223}}, './file1\x00'}) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x4000) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44) 966.894541ms ago: executing program 0 (id=2364): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000140)="280320ff6900140000007ef506be00000000000000000000000000143baa111f", 0x20, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r5, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 57.048847ms ago: executing program 2 (id=2365): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x538, &(0x7f0000003480)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffede) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 0s ago: executing program 5 (id=2366): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)=0x0) timer_settime(r2, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pipe(&(0x7f0000000200)) r3 = getpgid(r1) r4 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x69d, &(0x7f0000000840)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000600)={0x23e3, 0x0, 0xd, 0x2}) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./file1\x00') kernel console output (not intermixed with test programs): rock-ridge attributes [ 387.118693][ T7973] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 387.609710][ T7983] loop4: detected capacity change from 0 to 256 [ 387.692723][ T7983] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 388.013062][ T7992] loop5: detected capacity change from 0 to 164 [ 388.529085][ T7992] Unable to read rock-ridge attributes [ 394.175135][ T8053] loop0: detected capacity change from 0 to 512 [ 394.359643][ T8053] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,block_validity,,errors=continue. Quota mode: writeback. [ 394.435271][ T8053] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.605129][ T8064] kvm: vcpu 0: requested 40 ns lapic timer period limited to 200000 ns [ 394.651383][ T8064] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 395.090020][ T8073] loop0: detected capacity change from 0 to 512 [ 396.108310][ T8073] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,block_validity,,errors=continue. Quota mode: writeback. [ 396.137394][ T8073] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 398.094142][ T8108] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 398.172633][ T8119] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 399.756517][ T8134] loop1: detected capacity change from 0 to 128 [ 400.222483][ T8146] 9pnet: Insufficient options for proto=fd [ 404.395892][ T8198] loop0: detected capacity change from 0 to 128 [ 406.146144][ T8223] loop2: detected capacity change from 0 to 512 [ 406.341290][ T8223] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 406.393308][ T8223] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 408.760904][ T8255] loop5: detected capacity change from 0 to 1024 [ 408.823274][ T8255] EXT4-fs (loop5): Mount option "delalloc" incompatible with ext2 [ 409.588444][ T8274] loop2: detected capacity change from 0 to 512 [ 409.727279][ T8274] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 409.753943][ T8274] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 409.989306][ T8282] loop4: detected capacity change from 0 to 512 [ 410.183175][ T8282] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 410.200048][ T8282] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 411.115202][ T8310] loop5: detected capacity change from 0 to 512 [ 411.609447][ T8310] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nogrpid,block_validity,,errors=continue. Quota mode: writeback. [ 411.818441][ T8310] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 412.241103][ T8323] loop4: detected capacity change from 0 to 512 [ 412.756888][ T8327] loop1: detected capacity change from 0 to 164 [ 413.056987][ T8327] Unable to read rock-ridge attributes [ 413.081537][ T8325] Unable to read rock-ridge attributes [ 413.093265][ T8325] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 413.111368][ T8323] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 413.161444][ T8323] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 413.414419][ T8337] loop1: detected capacity change from 0 to 1024 [ 413.463786][ T8337] EXT4-fs (loop1): Mount option "delalloc" incompatible with ext2 [ 415.488697][ T8362] loop4: detected capacity change from 0 to 164 [ 415.928527][ T8362] Unable to read rock-ridge attributes [ 416.012194][ T8357] Unable to read rock-ridge attributes [ 416.041951][ T8357] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 416.228206][ T8368] loop2: detected capacity change from 0 to 512 [ 416.416434][ T8376] loop1: detected capacity change from 0 to 512 [ 416.594107][ T8368] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 416.616733][ T8376] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 416.842139][ T8384] loop4: detected capacity change from 0 to 164 [ 416.854933][ T8376] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 416.867435][ T8368] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 416.958222][ T8384] Unable to read rock-ridge attributes [ 416.980806][ T8382] Unable to read rock-ridge attributes [ 417.005804][ T8382] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 417.319244][ T8390] loop1: detected capacity change from 0 to 128 [ 417.456774][ T8390] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 417.488225][ T8390] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 418.243613][ T8418] loop1: detected capacity change from 0 to 164 [ 418.439645][ T8418] Unable to read rock-ridge attributes [ 418.472843][ T8417] Unable to read rock-ridge attributes [ 418.512185][ T8417] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 418.894835][ T8429] loop1: detected capacity change from 0 to 512 [ 419.048849][ T8429] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 419.114046][ T8429] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 419.885781][ T8445] loop1: detected capacity change from 0 to 164 [ 419.916862][ T8445] Unable to read rock-ridge attributes [ 419.940161][ T8443] Unable to read rock-ridge attributes [ 419.956525][ T8443] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 420.047703][ T8450] loop4: detected capacity change from 0 to 512 [ 420.144548][ T8450] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,block_validity,,errors=continue. Quota mode: writeback. [ 420.331167][ T8450] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 421.354880][ T8478] loop4: detected capacity change from 0 to 512 [ 421.441625][ T4235] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 421.459466][ T8478] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 421.536987][ T8478] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 421.691345][ T4235] usb 1-1: Using ep0 maxpacket: 8 [ 422.030190][ T4235] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 422.051422][ T4235] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 422.062123][ T4235] usb 1-1: config 3 has no interface number 0 [ 422.068324][ T4235] usb 1-1: config 3 interface 45 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 422.082079][ T4235] usb 1-1: config 3 interface 45 has no altsetting 0 [ 422.351835][ T4235] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 422.674232][ T8505] loop5: detected capacity change from 0 to 164 [ 422.755334][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.764215][ T4235] usb 1-1: Product: syz [ 422.768460][ T4235] usb 1-1: Manufacturer: syz [ 422.773353][ T4235] usb 1-1: SerialNumber: syz [ 423.285939][ T8505] Unable to read rock-ridge attributes [ 423.329101][ T8502] Unable to read rock-ridge attributes [ 423.339275][ T8502] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 423.439890][ T4235] usb 1-1: USB disconnect, device number 2 [ 423.773954][ T4554] udevd[4554]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.779266][ T4621] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 424.141582][ T4621] usb 3-1: Using ep0 maxpacket: 8 [ 424.639408][ T4621] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 424.658319][ T4621] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 424.678952][ T4621] usb 3-1: config 3 has no interface number 0 [ 424.687784][ T4621] usb 3-1: config 3 interface 45 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 424.708727][ T4621] usb 3-1: config 3 interface 45 has no altsetting 0 [ 425.317604][ T4621] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 425.326861][ T4621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.335514][ T4621] usb 3-1: Product: syz [ 425.339727][ T4621] usb 3-1: Manufacturer: syz [ 425.345012][ T4621] usb 3-1: SerialNumber: syz [ 426.518011][ T4621] usb 3-1: USB disconnect, device number 3 [ 426.784312][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.968544][ T8545] loop0: detected capacity change from 0 to 4096 [ 427.020137][ T8545] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 428.447515][ T4190] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 428.456514][ T4190] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 428.463568][ T4190] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 429.460208][ T8578] loop4: detected capacity change from 0 to 512 [ 429.598116][ T8578] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,block_validity,,errors=continue. Quota mode: writeback. [ 429.943338][ T8578] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 434.604733][ T8669] loop5: detected capacity change from 0 to 512 [ 434.842262][ T8673] loop2: detected capacity change from 0 to 512 [ 435.012992][ T8669] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 435.043713][ T8673] EXT4-fs (loop2): Ignoring removed nobh option [ 435.918991][ T8673] EXT4-fs (loop2): Ignoring removed oldalloc option [ 435.971835][ T8669] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 436.020736][ T8673] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 436.036860][ T8673] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1154: invalid indirect mapped block 256 (level 1) [ 436.074719][ T8673] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1154: invalid indirect mapped block 2683928664 (level 1) [ 436.154543][ T8673] EXT4-fs (loop2): 1 truncate cleaned up [ 436.160307][ T8673] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 437.627488][ T8714] loop4: detected capacity change from 0 to 512 [ 437.767972][ T8714] EXT4-fs (loop4): Ignoring removed nobh option [ 437.786930][ T8714] EXT4-fs (loop4): Ignoring removed oldalloc option [ 438.086055][ T8714] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 438.272576][ T8714] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1165: invalid indirect mapped block 256 (level 1) [ 438.641917][ T8714] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1165: invalid indirect mapped block 2683928664 (level 1) [ 438.663168][ T8732] loop2: detected capacity change from 0 to 512 [ 438.675836][ T8714] EXT4-fs (loop4): 1 truncate cleaned up [ 438.688892][ T8714] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 438.990561][ T8732] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 439.773673][ T8732] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 439.870120][ T8749] loop0: detected capacity change from 0 to 512 [ 439.924682][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.931007][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.069795][ T8749] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 440.099971][ T8749] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 440.671834][ T8769] loop4: detected capacity change from 0 to 164 [ 440.773189][ T8769] Unable to read rock-ridge attributes [ 440.884067][ T8763] Unable to read rock-ridge attributes [ 440.938303][ T8763] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 441.363945][ T8775] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 444.654939][ T8844] loop4: detected capacity change from 0 to 512 [ 445.642746][ T8854] loop2: detected capacity change from 0 to 512 [ 445.695178][ T8854] EXT4-fs (loop2): Ignoring removed nobh option [ 445.731485][ T8854] EXT4-fs (loop2): Ignoring removed oldalloc option [ 445.800000][ T8844] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 445.843821][ T8854] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 445.877313][ T8844] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 445.948424][ T8854] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1208: invalid indirect mapped block 256 (level 1) [ 446.031687][ T8854] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1208: invalid indirect mapped block 2683928664 (level 1) [ 446.062752][ T8854] EXT4-fs (loop2): 1 truncate cleaned up [ 446.131526][ T8854] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 447.874560][ T8858] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 449.401565][ T8907] loop0: detected capacity change from 0 to 164 [ 450.743452][ T8907] Unable to read rock-ridge attributes [ 450.802864][ T8906] Unable to read rock-ridge attributes [ 450.809668][ T8906] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 451.057202][ T8916] loop4: detected capacity change from 0 to 512 [ 451.233628][ T8916] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 451.353170][ T8916] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 453.498562][ T8960] loop5: detected capacity change from 0 to 164 [ 453.666970][ T8960] Unable to read rock-ridge attributes [ 453.695167][ T8959] Unable to read rock-ridge attributes [ 453.710179][ T8959] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 454.517661][ T8970] loop4: detected capacity change from 0 to 164 [ 455.189268][ T8974] loop0: detected capacity change from 0 to 1024 [ 455.207514][ T8970] Unable to read rock-ridge attributes [ 455.224111][ T8969] Unable to read rock-ridge attributes [ 455.230808][ T8969] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 455.299314][ T8976] loop2: detected capacity change from 0 to 512 [ 455.337590][ T8974] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 455.411405][ T8974] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 455.476475][ T8974] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c02c, mo2=0103] [ 455.479216][ T8976] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.1244: invalid block [ 455.531398][ T8974] System zones: 0-1, 3-36 [ 455.563662][ T8976] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1244: invalid indirect mapped block 10 (level 1) [ 455.590162][ T8974] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=./bus,delalloc,bsdgroups,debug,dioread_nolock,bsddf,abort,noauto_da_alloc,errors=remount-ro,mb_optimize_scan=0x0000000000000000,auto_da_alloc,auto_da_alloc,. Quota mode: writeback. [ 455.685462][ T8976] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1244: invalid indirect mapped block 8 (level 1) [ 455.773003][ T8976] EXT4-fs (loop2): 1 truncate cleaned up [ 455.778695][ T8976] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 455.901942][ T4471] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 456.262376][ T4471] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.286000][ T4471] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 456.306758][ T4471] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.352890][ T4471] usb 6-1: config 0 descriptor?? [ 456.452488][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 456.731417][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 456.851532][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 456.882946][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.904844][ T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 456.911940][ T4471] usbhid 6-1:0.0: can't add hid device: -71 [ 456.927524][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 456.932046][ T4471] usbhid: probe of 6-1:0.0 failed with error -71 [ 456.947806][ T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 456.968264][ T21] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 456.981496][ T4471] usb 6-1: USB disconnect, device number 2 [ 456.988482][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.038284][ T21] usb 3-1: config 0 descriptor?? [ 457.158272][ T4197] Bluetooth: hci5: urb ffff888020042100 submission failed (90) [ 457.431422][ T4291] usb 3-1: USB disconnect, device number 4 [ 459.366581][ T9065] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 460.319178][ T9103] loop0: detected capacity change from 0 to 512 [ 460.365422][ T9103] EXT4-fs (loop0): Ignoring removed nobh option [ 460.372999][ T9103] EXT4-fs (loop0): Ignoring removed oldalloc option [ 460.433807][ T9103] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 460.448807][ T9103] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1290: invalid indirect mapped block 256 (level 1) [ 460.470542][ T9103] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1290: invalid indirect mapped block 2683928664 (level 1) [ 460.493123][ T9103] EXT4-fs (loop0): 1 truncate cleaned up [ 460.498818][ T9103] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 461.838812][ T9144] loop5: detected capacity change from 0 to 512 [ 461.968812][ T9152] loop1: detected capacity change from 0 to 512 [ 461.985054][ T9148] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 462.453862][ T9144] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nogrpid,block_validity,,errors=continue. Quota mode: writeback. [ 462.768252][ T9144] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 462.906801][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 463.012931][ T9152] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 463.050099][ T9152] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 463.169185][ T9169] loop2: detected capacity change from 0 to 8192 [ 463.259938][ T9169] FAT-fs (loop2): bogus logical sector size 516 [ 463.269222][ T9169] FAT-fs (loop2): Can't find a valid FAT filesystem [ 463.573883][ T9181] loop1: detected capacity change from 0 to 164 [ 463.586203][ T9181] Unable to read rock-ridge attributes [ 463.595055][ T9181] Unable to read rock-ridge attributes [ 463.601810][ T9181] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 464.064944][ T9190] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 464.460173][ T9202] loop1: detected capacity change from 0 to 1024 [ 464.716581][ T3045] hfsplus: b-tree write err: -5, ino 4 [ 464.738089][ T9208] loop2: detected capacity change from 0 to 512 [ 464.874541][ T9208] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 465.030381][ T9208] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 465.091330][ T4474] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 466.113990][ T9227] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 466.261629][ T4474] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.279156][ T4474] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 466.302997][ T4474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.333193][ T4474] usb 1-1: config 0 descriptor?? [ 466.871921][ T9240] loop2: detected capacity change from 0 to 164 [ 467.041873][ T4474] usbhid 1-1:0.0: can't add hid device: -71 [ 467.053571][ T4474] usbhid: probe of 1-1:0.0 failed with error -71 [ 467.243820][ T4474] usb 1-1: USB disconnect, device number 3 [ 467.465715][ T9240] Unable to read rock-ridge attributes [ 467.787552][ T9250] loop0: detected capacity change from 0 to 512 [ 467.972296][ T9251] loop2: detected capacity change from 0 to 164 [ 468.042472][ T9251] Unable to read rock-ridge attributes [ 468.050985][ T9251] Unable to read rock-ridge attributes [ 468.057319][ T9251] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 468.064933][ T9250] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 468.211783][ T9250] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 469.328348][ T9280] loop4: detected capacity change from 0 to 164 [ 470.019798][ T9280] Unable to read rock-ridge attributes [ 470.310675][ T9278] loop0: detected capacity change from 0 to 4096 [ 470.378351][ T9278] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 471.411854][ T4190] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 471.425255][ T4190] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 471.460409][ T4190] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 471.590120][ T9288] loop2: detected capacity change from 0 to 512 [ 471.707641][ T9288] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 471.721535][ T9288] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 472.252928][ T9301] loop2: detected capacity change from 0 to 164 [ 472.265301][ T9301] Unable to read rock-ridge attributes [ 472.273462][ T9301] Unable to read rock-ridge attributes [ 472.281873][ T9301] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 472.398907][ T9304] loop0: detected capacity change from 0 to 512 [ 472.511884][ T9304] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 472.562193][ T9304] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 473.461586][ T9324] loop0: detected capacity change from 0 to 4096 [ 473.510597][ T9324] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 474.164480][ T4190] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 474.170995][ T4190] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 474.182730][ T4190] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 474.849959][ T9336] loop0: detected capacity change from 0 to 164 [ 475.504910][ T9336] Unable to read rock-ridge attributes [ 475.514324][ T9336] Unable to read rock-ridge attributes [ 475.520675][ T9336] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 475.937756][ T9364] loop0: detected capacity change from 0 to 512 [ 476.044453][ T9364] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,block_validity,,errors=continue. Quota mode: writeback. [ 476.160809][ T9364] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 476.528061][ T9375] loop2: detected capacity change from 0 to 4096 [ 476.590023][ T9375] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 477.297932][ T9376] syz.0.1372 (9376) used greatest stack depth: 20664 bytes left [ 477.445143][ T4187] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 477.456019][ T4187] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 477.483799][ T4187] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 477.513990][ T9380] loop5: detected capacity change from 0 to 512 [ 477.912103][ T9380] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 479.671444][ T9380] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 480.628804][ T9419] loop5: detected capacity change from 0 to 4096 [ 480.722164][ T9419] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 482.434902][ T5070] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 482.497314][ T9427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1391'. [ 483.143502][ T5070] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 483.196105][ T9430] loop0: detected capacity change from 0 to 512 [ 483.202250][ T5070] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 483.423201][ T9434] loop2: detected capacity change from 0 to 164 [ 483.446677][ T9434] Unable to read rock-ridge attributes [ 483.454260][ T9434] Unable to read rock-ridge attributes [ 483.526275][ T9434] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 483.542361][ T9439] loop5: detected capacity change from 0 to 512 [ 483.596688][ T9439] EXT4-fs (loop5): Ignoring removed nobh option [ 483.604793][ T9430] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 483.629940][ T9439] EXT4-fs (loop5): Ignoring removed oldalloc option [ 483.665033][ T9430] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 483.725453][ T9439] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 483.777110][ T9439] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1393: invalid indirect mapped block 256 (level 1) [ 483.801160][ T9439] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1393: invalid indirect mapped block 2683928664 (level 1) [ 483.822449][ T9439] EXT4-fs (loop5): 1 truncate cleaned up [ 483.828553][ T9439] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 484.929417][ T4474] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 485.181399][ T4474] usb 2-1: Using ep0 maxpacket: 8 [ 485.443137][ T4474] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 485.465190][ T4474] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 485.479871][ T4474] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 485.500406][ T4474] usb 2-1: config 3 has no interface number 0 [ 485.523272][ T4474] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.550007][ T4474] usb 2-1: config 3 interface 45 has no altsetting 0 [ 485.581936][ T9486] loop5: detected capacity change from 0 to 164 [ 485.651797][ T9486] Unable to read rock-ridge attributes [ 485.659622][ T9486] Unable to read rock-ridge attributes [ 485.669099][ T9486] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 485.761825][ T4474] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 485.774392][ T4474] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.797720][ T4474] usb 2-1: Product: syz [ 485.802635][ T4474] usb 2-1: Manufacturer: syz [ 485.807344][ T4474] usb 2-1: SerialNumber: syz [ 485.881088][ T9493] loop0: detected capacity change from 0 to 512 [ 487.297732][ T9500] loop5: detected capacity change from 0 to 164 [ 487.656331][ T9493] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 487.731513][ T9493] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 487.839804][ T9500] Unable to read rock-ridge attributes [ 488.062505][ T4474] usb 2-1: USB disconnect, device number 2 [ 488.422738][ T4554] udevd[4554]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.607556][ T9526] capability: warning: `syz.0.1424' uses deprecated v2 capabilities in a way that may be insecure [ 488.671947][ T9528] loop4: detected capacity change from 0 to 164 [ 488.709212][ T9528] Unable to read rock-ridge attributes [ 488.717028][ T9528] Unable to read rock-ridge attributes [ 488.723507][ T9528] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 488.891815][ T9537] loop4: detected capacity change from 0 to 512 [ 488.914362][ T9537] EXT4-fs (loop4): Ignoring removed nobh option [ 488.931439][ T4331] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 488.937129][ T9537] EXT4-fs (loop4): Ignoring removed oldalloc option [ 488.983529][ T9539] loop5: detected capacity change from 0 to 512 [ 489.004366][ T9537] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 489.041821][ T9537] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1427: invalid indirect mapped block 256 (level 1) [ 489.107154][ T9537] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1427: invalid indirect mapped block 2683928664 (level 1) [ 489.144007][ T9539] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 489.162407][ T9539] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 489.181652][ T9537] EXT4-fs (loop4): 1 truncate cleaned up [ 489.221412][ T4331] usb 1-1: Using ep0 maxpacket: 8 [ 489.228816][ T9537] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 489.501711][ T4331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 489.519648][ T4331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 489.533986][ T4331] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 489.688560][ T4331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 490.381379][ T4331] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 490.425740][ T4331] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 490.626790][ T9552] loop2: detected capacity change from 0 to 164 [ 490.690567][ T9552] Unable to read rock-ridge attributes [ 490.971741][ T4331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.228369][ T4331] usb 1-1: config 0 descriptor?? [ 492.014505][ T4197] Bluetooth: hci5: urb ffff8880230c0800 submission failed (90) [ 492.015123][ T4331] usb 1-1: USB disconnect, device number 4 [ 492.296646][ T9579] loop0: detected capacity change from 0 to 256 [ 492.417088][ T26] audit: type=1800 audit(1770520886.490:3): pid=9579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1440" name="file1" dev="loop0" ino=1048600 res=0 errno=0 [ 494.745024][ T9614] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1450'. [ 495.432250][ T4291] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 495.961469][ T4291] usb 6-1: Using ep0 maxpacket: 16 [ 496.741538][ T4291] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.770025][ T4291] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.809131][ T4291] usb 6-1: config 0 interface 0 has no altsetting 0 [ 496.859261][ T4291] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 496.908337][ T4291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.005664][ T4291] usb 6-1: config 0 descriptor?? [ 497.610915][ T4291] cougar 0003:060B:500A.0001: unexpected long global item [ 497.620504][ T4291] cougar 0003:060B:500A.0001: parse failed [ 497.635812][ T4291] cougar: probe of 0003:060B:500A.0001 failed with error -22 [ 497.829576][ T4243] usb 6-1: USB disconnect, device number 3 [ 501.007870][ T9725] loop0: detected capacity change from 0 to 512 [ 501.028246][ T9727] loop4: detected capacity change from 0 to 164 [ 501.088474][ T9725] EXT4-fs (loop0): Ignoring removed nobh option [ 501.098432][ T9727] Unable to read rock-ridge attributes [ 501.109672][ T9725] EXT4-fs (loop0): Ignoring removed oldalloc option [ 501.139793][ T9727] Unable to read rock-ridge attributes [ 501.152230][ T9727] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 501.337173][ T9725] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 501.363914][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.370246][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.399601][ T9725] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1485: invalid indirect mapped block 256 (level 1) [ 501.421857][ T9725] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1485: invalid indirect mapped block 2683928664 (level 1) [ 501.458112][ T9725] EXT4-fs (loop0): 1 truncate cleaned up [ 501.481357][ T9725] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 501.830052][ T9745] loop1: detected capacity change from 0 to 512 [ 502.899954][ T9745] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,block_validity,,errors=continue. Quota mode: writeback. [ 502.925662][ T9745] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 503.982985][ T9772] loop0: detected capacity change from 0 to 164 [ 504.246824][ T9772] Unable to read rock-ridge attributes [ 504.351478][ T4292] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 504.570994][ T9792] loop2: detected capacity change from 0 to 512 [ 504.631783][ T4292] usb 6-1: Using ep0 maxpacket: 16 [ 504.639135][ T9792] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 504.652048][ T9792] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 504.781570][ T4292] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.813771][ T4292] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.868001][ T4292] usb 6-1: config 0 interface 0 has no altsetting 0 [ 504.889445][ T4292] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 504.980064][ T4292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.021894][ T4292] usb 6-1: config 0 descriptor?? [ 505.981939][ T4292] usbhid 6-1:0.0: can't add hid device: -71 [ 506.017471][ T4292] usbhid: probe of 6-1:0.0 failed with error -71 [ 506.068575][ T4292] usb 6-1: USB disconnect, device number 4 [ 506.357768][ T9821] loop4: detected capacity change from 0 to 164 [ 506.387521][ T9821] Unable to read rock-ridge attributes [ 506.484699][ T9826] loop2: detected capacity change from 0 to 512 [ 506.746769][ T9826] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 506.766817][ T9826] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 509.874906][ T9868] loop2: detected capacity change from 0 to 164 [ 509.947161][ T9868] Unable to read rock-ridge attributes [ 515.069841][ T9930] loop1: detected capacity change from 0 to 512 [ 515.276025][ T9930] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 515.288170][ T9930] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.596460][ T9938] ODEBUG: Out of memory. ODEBUG disabled [ 517.652476][ T4292] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 517.921372][ T4292] usb 3-1: Using ep0 maxpacket: 8 [ 518.111690][ T4292] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 518.200613][ T9981] loop4: detected capacity change from 0 to 512 [ 518.332434][ T4292] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 518.383644][ T9981] EXT4-fs (loop4): Ignoring removed nobh option [ 518.485039][ T9981] EXT4-fs (loop4): Ignoring removed oldalloc option [ 518.516290][ T4292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.689379][ T4292] usb 3-1: Product: syz [ 518.778063][ T9981] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 518.819135][ T4292] usb 3-1: Manufacturer: syz [ 518.886430][ T4292] usb 3-1: SerialNumber: syz [ 518.902403][ T9981] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1567: invalid indirect mapped block 256 (level 1) [ 519.021677][ T9981] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1567: invalid indirect mapped block 2683928664 (level 1) [ 519.090491][ T9989] loop0: detected capacity change from 0 to 4096 [ 519.094068][ T9981] EXT4-fs (loop4): 1 truncate cleaned up [ 519.145823][ T9989] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 519.146357][ T9981] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 519.381401][ T4292] usb 3-1: USB disconnect, device number 5 [ 519.812608][ T9985] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 520.970902][T10015] loop0: detected capacity change from 0 to 164 [ 521.149808][T10017] loop4: detected capacity change from 0 to 512 [ 521.333790][T10015] Unable to read rock-ridge attributes [ 521.572567][T10017] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1573: bg 0: block 5: invalid block bitmap [ 521.710568][T10017] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 521.766683][T10017] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1573: invalid indirect mapped block 3 (level 2) [ 521.804479][T10017] EXT4-fs (loop4): 1 orphan inode deleted [ 521.810455][T10017] EXT4-fs (loop4): 1 truncate cleaned up [ 521.847407][T10017] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 523.705046][T10053] loop4: detected capacity change from 0 to 512 [ 523.881416][ T4292] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 523.987336][T10053] EXT4-fs (loop4): Ignoring removed nobh option [ 524.147233][T10053] EXT4-fs (loop4): Ignoring removed oldalloc option [ 524.291479][ T4292] usb 3-1: Using ep0 maxpacket: 8 [ 524.500730][T10053] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 524.531509][ T4292] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 524.563018][T10053] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1586: invalid indirect mapped block 256 (level 1) [ 524.668111][T10053] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1586: invalid indirect mapped block 2683928664 (level 1) [ 524.692056][T10053] EXT4-fs (loop4): 1 truncate cleaned up [ 524.706091][T10053] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 525.117658][ T4292] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 525.126937][ T4292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.135096][ T4292] usb 3-1: Product: syz [ 525.139397][ T4292] usb 3-1: Manufacturer: syz [ 525.847221][ T4292] usb 3-1: SerialNumber: syz [ 525.921480][ T9985] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 526.183066][ T4292] usb 3-1: USB disconnect, device number 6 [ 526.416689][ T4191] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 526.701485][ T4191] usb 1-1: Using ep0 maxpacket: 8 [ 526.841816][ T4191] usb 1-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.956667][ T4191] usb 1-1: config 0 interface 0 has no altsetting 0 [ 527.048495][ T4191] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 527.211786][ T4191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.313396][ T4191] usb 1-1: config 0 descriptor?? [ 528.663165][ T4191] usbhid 1-1:0.0: can't add hid device: -71 [ 528.675073][ T4191] usbhid: probe of 1-1:0.0 failed with error -71 [ 528.717506][ T4191] usb 1-1: USB disconnect, device number 5 [ 528.891340][ T4292] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 529.083655][T10123] loop2: detected capacity change from 0 to 512 [ 529.234786][T10123] EXT4-fs (loop2): Ignoring removed nobh option [ 529.271151][T10123] EXT4-fs (loop2): Ignoring removed oldalloc option [ 529.538875][T10123] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 529.645824][T10123] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1611: invalid indirect mapped block 256 (level 1) [ 529.837465][T10123] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1611: invalid indirect mapped block 2683928664 (level 1) [ 529.962209][T10123] EXT4-fs (loop2): 1 truncate cleaned up [ 529.981317][T10123] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 530.099238][ T4292] usb 5-1: Using ep0 maxpacket: 8 [ 530.104427][ T4291] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 530.681245][ T4292] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 530.700923][ T4292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 531.339282][ T4292] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 531.358462][ T4292] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 531.368930][ T4292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.387988][ T4292] usb 5-1: config 0 descriptor?? [ 531.393406][ T4291] usb 2-1: Using ep0 maxpacket: 8 [ 531.537867][ T4291] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 531.546353][ T4291] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 531.562448][ T4291] usb 2-1: config 3 has no interface number 0 [ 531.568893][ T4291] usb 2-1: config 3 interface 45 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 531.588009][ T4291] usb 2-1: config 3 interface 45 has no altsetting 0 [ 531.618625][ T4292] usb 5-1: USB disconnect, device number 2 [ 531.796361][ T4291] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 531.827860][ T4291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.851535][ T4291] usb 2-1: Product: syz [ 531.856134][ T4291] usb 2-1: Manufacturer: syz [ 531.908200][ T4291] usb 2-1: SerialNumber: syz [ 531.951506][ T4291] usb 2-1: can't set config #3, error -71 [ 531.979916][ T4291] usb 2-1: USB disconnect, device number 3 [ 532.147646][T10159] loop5: detected capacity change from 0 to 512 [ 532.356297][T10159] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 532.366322][T10159] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 532.376205][T10159] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 532.446582][T10159] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 532.454756][T10159] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 532.463102][T10159] EXT4-fs (loop5): failed to initialize system zone (-117) [ 532.470581][T10159] EXT4-fs (loop5): mount failed [ 532.941147][T10162] loop4: detected capacity change from 0 to 4096 [ 533.856956][T10162] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 534.108390][T10162] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 534.191412][T10162] File: /350/file0/file1 PID: 10162 Comm: syz.4.1623 [ 534.251330][ T4251] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 534.274265][T10178] loop2: detected capacity change from 0 to 512 [ 534.615917][T10179] loop5: detected capacity change from 0 to 1024 [ 535.006218][T10179] hfsplus: catalog name length corrupted [ 535.297857][T10178] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1628: bad orphan inode 11862016 [ 535.334505][T10178] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 535.371334][ T4251] usb 1-1: Using ep0 maxpacket: 8 [ 535.398297][T10178] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.491445][ T4251] usb 1-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 535.507493][ T4251] usb 1-1: config 0 interface 0 has no altsetting 0 [ 535.514209][ T4251] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 535.523353][ T4251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.554654][ T4251] usb 1-1: config 0 descriptor?? [ 536.761354][ T4251] usbhid 1-1:0.0: can't add hid device: -71 [ 536.767560][ T4251] usbhid: probe of 1-1:0.0 failed with error -71 [ 536.811574][ T4251] usb 1-1: USB disconnect, device number 6 [ 537.292808][ T4243] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 537.691571][ T4243] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 537.707670][ T4243] usb 6-1: can't read configurations, error -61 [ 537.721420][ T4292] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 537.891297][ T4243] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 538.091316][ T4292] usb 1-1: Using ep0 maxpacket: 16 [ 538.351972][ T4292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.852607][ T4292] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 538.881367][ T4292] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 538.890449][ T4292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.919152][ T4292] usb 1-1: config 0 descriptor?? [ 538.941510][ T4243] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 538.967560][ T4243] usb 6-1: can't read configurations, error -61 [ 538.994987][ T4243] usb usb6-port1: attempt power cycle [ 539.433765][ T4292] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 539.447714][ T4292] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 539.461281][ T4292] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 539.467526][ T4243] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 539.475396][ T4292] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 539.501676][ T4292] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 539.524579][ T4292] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 539.546166][ T4292] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 539.771187][ T4292] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 539.896683][ T4292] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 539.992550][ T4292] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 540.361434][ T4243] usb 6-1: device descriptor read/8, error -71 [ 540.371319][ T4292] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input5 [ 540.482527][ T4292] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 540.702536][ T4291] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 540.719698][ T4235] usb 1-1: USB disconnect, device number 7 [ 540.743566][T10247] fido_id[10247]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 541.151390][ T4291] usb 2-1: Using ep0 maxpacket: 16 [ 541.302823][ T4291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.511026][ T4291] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 541.701817][ T4291] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 541.801245][ T4291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.955283][T10262] loop5: detected capacity change from 0 to 164 [ 542.027831][T10262] Unable to read rock-ridge attributes [ 542.052354][ T4291] usb 2-1: config 0 descriptor?? [ 542.085308][T10261] Unable to read rock-ridge attributes [ 542.094889][T10261] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 542.238162][T10266] loop2: detected capacity change from 0 to 2048 [ 542.246284][T10268] loop0: detected capacity change from 0 to 4096 [ 542.555874][ T4291] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 542.566821][ T4291] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 542.577358][ T4291] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 542.586484][ T4291] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 542.595242][ T4291] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 542.603956][ T4291] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 542.612281][ T4291] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 542.619619][ T4291] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 542.649224][ T4291] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 542.660108][ T4291] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 542.694800][ T4291] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input6 [ 542.849028][ T4291] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 542.875420][T10266] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 542.886187][T10268] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 543.456912][ T4291] usb 2-1: USB disconnect, device number 4 [ 544.047872][T10294] fido_id[10294]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 544.268720][T10304] loop1: detected capacity change from 0 to 512 [ 544.301889][ T4235] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 544.340431][T10304] EXT4-fs (loop1): Test dummy encryption mode enabled [ 544.382107][T10304] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 544.402220][T10304] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1672: bad orphan inode 131083 [ 544.421663][T10304] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 544.571410][ T4235] usb 3-1: Using ep0 maxpacket: 8 [ 544.691440][ T4235] usb 3-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.722208][T10304] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 544.745527][ T4235] usb 3-1: config 0 interface 0 has no altsetting 0 [ 544.770078][ T4235] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 544.813829][ T4235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.852829][ T4235] usb 3-1: config 0 descriptor?? [ 545.044691][T10320] loop4: detected capacity change from 0 to 4096 [ 545.211410][T10320] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 545.411593][ T4235] usbhid 3-1:0.0: can't add hid device: -71 [ 545.418860][ T4235] usbhid: probe of 3-1:0.0 failed with error -71 [ 545.451575][T10320] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 545.471337][ T4235] usb 3-1: USB disconnect, device number 7 [ 545.491899][T10320] File: /364/file0/file1 PID: 10320 Comm: syz.4.1677 [ 547.233109][T10357] loop0: detected capacity change from 0 to 512 [ 547.987234][T10357] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 548.002811][T10357] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 549.821415][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 550.591508][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 550.751574][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 550.784278][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 550.819749][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 550.855008][T10393] loop5: detected capacity change from 0 to 512 [ 550.988279][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 551.824398][T10393] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nogrpid,block_validity,,errors=continue. Quota mode: writeback. [ 551.901310][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 551.911110][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 551.930798][T10393] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 552.049789][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.099674][ T7] usb 5-1: config 0 descriptor?? [ 552.151499][ T7] usb 5-1: can't set config #0, error -71 [ 552.167710][ T7] usb 5-1: USB disconnect, device number 3 [ 552.516217][T10411] loop4: detected capacity change from 0 to 4096 [ 552.632422][T10416] loop5: detected capacity change from 0 to 512 [ 552.696987][T10416] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 552.707227][T10416] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 552.717156][T10416] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 553.348423][T10416] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 553.356523][T10416] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 553.364920][T10416] EXT4-fs (loop5): failed to initialize system zone (-117) [ 553.372536][T10416] EXT4-fs (loop5): mount failed [ 553.601131][T10411] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 553.746202][T10411] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 553.855979][T10411] File: /372/file0/file1 PID: 10411 Comm: syz.4.1703 [ 554.321313][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 554.799576][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 555.420816][ T21] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 555.445781][ T21] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 555.457367][ T21] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 555.469577][ T21] usb 2-1: config 3 has no interface number 0 [ 555.477419][ T21] usb 2-1: config 3 interface 45 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 555.492328][ T21] usb 2-1: config 3 interface 45 has no altsetting 0 [ 558.328198][T10454] loop2: detected capacity change from 0 to 4096 [ 558.361428][ T21] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 558.371303][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.392881][T10462] loop4: detected capacity change from 0 to 512 [ 558.429886][ T21] usb 2-1: can't set config #3, error -71 [ 558.442371][ T21] usb 2-1: USB disconnect, device number 5 [ 558.516522][T10462] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 558.526356][T10462] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 558.536680][T10462] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 558.765016][T10462] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 558.772961][T10462] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 558.780739][T10462] EXT4-fs (loop4): failed to initialize system zone (-117) [ 558.788059][T10462] EXT4-fs (loop4): mount failed [ 559.311614][T10454] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 559.544677][T10454] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 559.608166][T10454] File: /327/file0/file1 PID: 10454 Comm: syz.2.1714 [ 561.367997][T10495] loop0: detected capacity change from 0 to 512 [ 561.403925][T10496] loop1: detected capacity change from 0 to 164 [ 561.613390][T10495] EXT4-fs (loop0): filesystem is read-only [ 562.382191][T10495] EXT4-fs (loop0): filesystem is read-only [ 562.388527][T10495] EXT4-fs (loop0): orphan cleanup on readonly fs [ 562.436459][T10495] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.1724: bad orphan inode 16 [ 562.493462][T10495] ext4_test_bit(bit=15, block=3) = 0 [ 562.498808][T10495] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 562.807439][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.814619][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.936149][T10516] loop2: detected capacity change from 0 to 512 [ 562.950604][T10520] loop0: detected capacity change from 0 to 512 [ 563.073767][T10520] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 563.089689][T10516] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 563.131415][T10516] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 563.141930][T10520] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 566.388812][T10548] loop0: detected capacity change from 0 to 512 [ 566.459283][T10548] EXT4-fs (loop0): filesystem is read-only [ 566.529526][T10548] EXT4-fs (loop0): filesystem is read-only [ 566.551323][T10548] EXT4-fs (loop0): orphan cleanup on readonly fs [ 566.580809][T10548] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.1738: bad orphan inode 16 [ 566.627631][T10548] ext4_test_bit(bit=15, block=3) = 0 [ 566.657062][T10548] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 567.803832][T10557] loop0: detected capacity change from 0 to 512 [ 568.283911][T10557] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 568.293875][T10557] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 568.303702][T10557] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 569.032915][T10557] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 569.041037][T10557] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 569.049548][T10557] EXT4-fs (loop0): failed to initialize system zone (-117) [ 569.057178][T10557] EXT4-fs (loop0): mount failed [ 570.265440][T10578] loop1: detected capacity change from 0 to 512 [ 570.481935][T10584] loop0: detected capacity change from 0 to 512 [ 570.524617][T10578] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1746: bad orphan inode 11862016 [ 570.539831][T10578] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 570.557015][T10578] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.576925][ T4474] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 570.607922][T10584] EXT4-fs (loop0): Ignoring removed nobh option [ 570.643855][T10584] EXT4-fs (loop0): Ignoring removed oldalloc option [ 572.132585][T10584] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 572.171347][ T4474] usb 5-1: Using ep0 maxpacket: 8 [ 572.229667][T10584] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1748: invalid indirect mapped block 256 (level 1) [ 572.301594][ T4474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 572.352964][T10584] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1748: invalid indirect mapped block 2683928664 (level 1) [ 572.374201][T10584] EXT4-fs (loop0): 1 truncate cleaned up [ 572.379968][T10584] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 572.523023][ T4474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 572.536593][ T4474] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 572.546353][ T4474] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.651241][ T4474] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 573.660333][ T4474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.682300][ T4474] usb 5-1: config 0 descriptor?? [ 573.901386][ T4474] usb 5-1: can't set config #0, error -71 [ 573.908256][ T4474] usb 5-1: USB disconnect, device number 4 [ 576.432108][T10637] loop0: detected capacity change from 0 to 164 [ 576.563273][T10640] loop5: detected capacity change from 0 to 512 [ 578.084152][T10640] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1764: bad orphan inode 11862016 [ 578.128194][T10640] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 578.270312][T10640] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.150527][T10694] loop1: detected capacity change from 0 to 512 [ 581.219747][T10700] loop0: detected capacity change from 0 to 512 [ 581.325263][T10700] EXT4-fs (loop0): Ignoring removed nobh option [ 581.340940][T10700] EXT4-fs (loop0): Ignoring removed oldalloc option [ 581.437451][T10694] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1778: bad orphan inode 11862016 [ 581.458453][T10700] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 581.472696][T10711] loop2: detected capacity change from 0 to 4096 [ 581.549976][T10694] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 581.583454][T10700] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1782: invalid indirect mapped block 256 (level 1) [ 581.764843][T10694] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.825352][T10700] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1782: invalid indirect mapped block 2683928664 (level 1) [ 582.107283][T10700] EXT4-fs (loop0): 1 truncate cleaned up [ 582.136588][T10700] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 582.274220][T10715] loop4: detected capacity change from 0 to 512 [ 582.600348][T10711] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 583.106699][T10715] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 583.214619][T10715] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 583.352514][T10741] loop2: detected capacity change from 0 to 256 [ 583.457996][T10741] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 583.506949][T10753] loop1: detected capacity change from 0 to 512 [ 583.619622][T10753] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1794: bad orphan inode 11862016 [ 583.732751][T10753] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 583.821415][T10753] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.930961][T10776] loop0: detected capacity change from 0 to 512 [ 585.062453][T10786] loop4: detected capacity change from 0 to 512 [ 586.695595][T10776] EXT4-fs (loop0): Ignoring removed nobh option [ 586.752764][T10776] EXT4-fs (loop0): Ignoring removed oldalloc option [ 586.777140][T10786] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 586.838515][T10776] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 586.857340][T10786] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 586.902421][T10776] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1799: invalid indirect mapped block 256 (level 1) [ 587.067977][T10776] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1799: invalid indirect mapped block 2683928664 (level 1) [ 587.142659][T10776] EXT4-fs (loop0): 1 truncate cleaned up [ 587.148502][T10776] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 589.980282][T10838] loop5: detected capacity change from 0 to 4096 [ 590.069353][T10838] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 590.313080][T10838] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 590.481951][T10838] File: /305/file0/file1 PID: 10838 Comm: syz.5.1815 [ 595.307419][T10911] loop5: detected capacity change from 0 to 512 [ 595.419768][T10911] EXT4-fs (loop5): Ignoring removed nobh option [ 595.452457][T10911] EXT4-fs (loop5): Ignoring removed oldalloc option [ 595.676640][T10922] loop0: detected capacity change from 0 to 164 [ 595.781395][T10911] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 595.802216][T10911] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1834: invalid indirect mapped block 256 (level 1) [ 595.839598][T10911] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1834: invalid indirect mapped block 2683928664 (level 1) [ 596.506649][T10911] EXT4-fs (loop5): 1 truncate cleaned up [ 596.531449][T10911] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 596.949699][T10932] loop4: detected capacity change from 0 to 4096 [ 597.393864][T10932] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 597.438925][T10939] loop5: detected capacity change from 0 to 512 [ 597.519691][T10939] EXT4-fs (loop5): Ignoring removed oldalloc option [ 597.543721][T10939] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 597.589838][T10932] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 597.622319][T10945] loop2: detected capacity change from 0 to 164 [ 597.658579][T10932] File: /397/file0/file1 PID: 10932 Comm: syz.4.1841 [ 597.672933][T10939] EXT4-fs (loop5): 1 truncate cleaned up [ 597.678631][T10939] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x000000000000007c,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 598.349885][T10951] loop1: detected capacity change from 0 to 4096 [ 598.486468][T10951] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 598.662044][T10965] loop2: detected capacity change from 0 to 1024 [ 598.770588][T10965] hfsplus: catalog name length corrupted [ 599.905088][ T4240] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 600.271771][ T4240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.338419][ T4240] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 600.381476][ T4240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.695428][ T4240] usb 6-1: config 0 descriptor?? [ 601.081350][ T4292] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 601.124498][T11004] loop0: detected capacity change from 0 to 1024 [ 601.261772][ T4240] usbhid 6-1:0.0: can't add hid device: -71 [ 601.272135][T11004] hfsplus: catalog name length corrupted [ 601.288381][ T4240] usbhid: probe of 6-1:0.0 failed with error -71 [ 601.492919][ T4240] usb 6-1: USB disconnect, device number 9 [ 601.612456][ T4292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.719565][ T4292] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 601.951074][ T4292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.975040][ T4292] usb 2-1: config 0 descriptor?? [ 602.811714][ T4292] usbhid 2-1:0.0: can't add hid device: -71 [ 602.820946][ T4292] usbhid: probe of 2-1:0.0 failed with error -71 [ 603.001536][ T4292] usb 2-1: USB disconnect, device number 6 [ 604.457225][T11038] loop1: detected capacity change from 0 to 512 [ 604.532903][T11038] EXT4-fs (loop1): Ignoring removed nobh option [ 604.559267][T11038] EXT4-fs (loop1): Ignoring removed oldalloc option [ 604.610988][T11038] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 604.678524][T11038] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1870: invalid indirect mapped block 256 (level 1) [ 604.744347][T11038] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1870: invalid indirect mapped block 2683928664 (level 1) [ 604.791939][T11038] EXT4-fs (loop1): 1 truncate cleaned up [ 604.804447][T11038] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 605.204548][T11046] loop4: detected capacity change from 0 to 512 [ 605.480327][T11046] EXT4-fs (loop4): filesystem is read-only [ 605.612228][T11046] EXT4-fs (loop4): filesystem is read-only [ 605.752332][T11046] EXT4-fs (loop4): orphan cleanup on readonly fs [ 605.857761][T11046] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.1873: bad orphan inode 16 [ 606.020935][T11046] ext4_test_bit(bit=15, block=3) = 0 [ 606.184498][T11046] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 607.566696][T11078] loop5: detected capacity change from 0 to 512 [ 607.659076][T11077] loop0: detected capacity change from 0 to 4096 [ 607.668283][T11078] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1881: bad orphan inode 11862016 [ 607.730352][T11078] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 607.743519][T11078] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.812453][T11077] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 607.868489][ T26] audit: type=1800 audit(1770521001.940:4): pid=11077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1882" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 608.234835][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 608.298370][T11091] loop5: detected capacity change from 0 to 512 [ 608.402310][T11091] EXT4-fs (loop5): Ignoring removed nobh option [ 608.429634][T11091] EXT4-fs (loop5): Ignoring removed oldalloc option [ 608.501406][T11091] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 608.511950][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 608.548021][T11091] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1886: invalid indirect mapped block 256 (level 1) [ 608.617668][T11091] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1886: invalid indirect mapped block 2683928664 (level 1) [ 608.664425][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 608.775276][T11097] loop2: detected capacity change from 0 to 1024 [ 608.833123][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 609.009568][T11097] hfsplus: catalog name length corrupted [ 609.067516][T11091] EXT4-fs (loop5): 1 truncate cleaned up [ 609.104625][T11091] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 609.412628][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 609.565468][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 609.598954][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 609.613395][ T7] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 609.627426][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.668559][ T7] usb 2-1: config 0 descriptor?? [ 609.775653][ T4197] Bluetooth: hci5: urb ffff888148058a00 submission failed (90) [ 609.824452][T11111] loop4: detected capacity change from 0 to 164 [ 609.833214][T11110] loop0: detected capacity change from 0 to 256 [ 609.884745][T11110] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 610.217451][T11110] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 610.301786][ T21] usb 2-1: USB disconnect, device number 7 [ 611.853660][T11138] loop4: detected capacity change from 0 to 512 [ 612.016855][T11138] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000000008,noquota,norecovery,bsddf,,errors=continue. Quota mode: writeback. [ 612.041855][T11138] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.644419][T11151] loop0: detected capacity change from 0 to 512 [ 613.588483][T11151] EXT4-fs (loop0): Ignoring removed nobh option [ 613.631266][T11151] EXT4-fs (loop0): Ignoring removed oldalloc option [ 613.644315][T11151] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 613.658728][T11151] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1904: invalid indirect mapped block 256 (level 1) [ 613.680281][T11151] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1904: invalid indirect mapped block 2683928664 (level 1) [ 613.729944][T11151] EXT4-fs (loop0): 1 truncate cleaned up [ 613.741568][T11151] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 614.074929][T11168] loop1: detected capacity change from 0 to 4096 [ 614.151364][ T4292] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 614.179854][T11168] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 614.290652][ T26] audit: type=1800 audit(1770521008.360:5): pid=11168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1911" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 614.628783][ T4292] usb 6-1: Using ep0 maxpacket: 8 [ 615.015639][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 615.131907][ T4292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 615.253211][ T4292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.423311][ T4292] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.433474][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 615.459105][ T4292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 615.482378][ T4292] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 615.522392][ T4292] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 615.549139][ T4292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.561302][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 615.579767][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.590836][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.607253][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 615.617446][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 615.633493][ T21] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 615.647915][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.657341][ T4292] usb 6-1: config 0 descriptor?? [ 615.676270][ T21] usb 5-1: config 0 descriptor?? [ 615.720307][ T4197] Bluetooth: hci5: urb ffff8881483d7d00 submission failed (90) [ 615.992431][ T4197] Bluetooth: hci6: urb ffff888147238700 submission failed (90) [ 616.491433][ T4292] usb 6-1: USB disconnect, device number 10 [ 616.511113][ T21] usb 5-1: USB disconnect, device number 5 [ 616.696751][T11201] loop1: detected capacity change from 0 to 4096 [ 616.942641][T11201] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 617.067861][T11217] loop2: detected capacity change from 0 to 164 [ 617.167468][T11217] Unable to read rock-ridge attributes [ 618.367965][T11227] loop4: detected capacity change from 0 to 512 [ 618.398757][T11228] loop1: detected capacity change from 0 to 512 [ 618.603448][T11228] EXT4-fs (loop1): Ignoring removed nobh option [ 618.603475][T11228] EXT4-fs (loop1): Ignoring removed oldalloc option [ 618.632995][T11228] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 618.633584][T11228] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1925: invalid indirect mapped block 256 (level 1) [ 618.634097][T11228] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1925: invalid indirect mapped block 2683928664 (level 1) [ 618.634719][T11228] EXT4-fs (loop1): 1 truncate cleaned up [ 618.634743][T11228] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 619.799081][T11227] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #16: comm syz.4.1929: corrupted inode contents [ 619.819837][T11227] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #16: comm syz.4.1929: mark_inode_dirty error [ 619.837514][T11227] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #16: comm syz.4.1929: corrupted inode contents [ 620.037770][T11227] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.1929: mark_inode_dirty error [ 620.522947][T11227] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #16: comm syz.4.1929: corrupted inode contents [ 620.561656][T11212] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 620.707666][T11227] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 620.742291][T11227] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #16: comm syz.4.1929: corrupted inode contents [ 620.832006][T11227] EXT4-fs error (device loop4): ext4_truncate:4279: inode #16: comm syz.4.1929: mark_inode_dirty error [ 620.895106][T11227] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 620.967024][T11227] EXT4-fs (loop4): 1 truncate cleaned up [ 621.003979][T11227] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 621.051367][T11227] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.216365][T11256] loop0: detected capacity change from 0 to 4096 [ 621.377574][T11256] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 621.717089][T11256] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 622.163128][T11256] File: /394/file0/file1 PID: 11256 Comm: syz.0.1936 [ 622.569125][T11278] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 624.261617][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.268041][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.588078][ T4469] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 628.607289][T11339] 9pnet: Insufficient options for proto=fd [ 628.621951][T11341] loop2: detected capacity change from 0 to 164 [ 628.709244][T11343] loop0: detected capacity change from 0 to 256 [ 628.727039][ T4469] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 628.736658][ T4469] usb 2-1: can't read configurations, error -61 [ 628.782977][T11337] loop5: detected capacity change from 0 to 164 [ 628.827066][T11337] Unable to read rock-ridge attributes [ 628.881844][ T4469] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 628.923354][T11343] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 629.891537][ T4469] usb 2-1: device descriptor read/all, error -71 [ 629.928605][ T4469] usb usb2-port1: attempt power cycle [ 631.021652][T11378] 9pnet: Insufficient options for proto=fd [ 632.021259][ T1107] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 632.292064][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 632.412231][ T7] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 632.506243][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 632.523726][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 632.620306][ T1107] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 632.635558][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 632.648761][ T1107] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 632.663071][ T1107] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 632.695844][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.223666][ T1107] usb 3-1: config 0 descriptor?? [ 633.300301][ T4197] Bluetooth: hci5: urb ffff888022b7e600 submission failed (90) [ 633.341582][ T7] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 633.359942][ T7] usb 6-1: can't read configurations, error -61 [ 633.475434][ T1107] usb 3-1: USB disconnect, device number 8 [ 633.517271][ T7] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 633.763139][T11414] 9pnet: Insufficient options for proto=fd [ 633.941527][ T7] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 633.964817][ T7] usb 6-1: can't read configurations, error -61 [ 633.978893][T11418] loop1: detected capacity change from 0 to 512 [ 634.011086][ T7] usb usb6-port1: attempt power cycle [ 634.535858][T11418] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 634.640650][T11418] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 636.451723][ T4331] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 636.751588][ T4331] usb 1-1: Using ep0 maxpacket: 8 [ 636.871420][ T4331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 636.928309][ T4331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 636.982142][ T4331] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 637.012609][ T4331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 637.190289][ T4331] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 637.221556][ T4331] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 637.230660][ T4331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.539337][ T4331] usb 1-1: config 0 descriptor?? [ 638.008299][ T4331] usb 1-1: USB disconnect, device number 8 [ 639.356378][T11503] 9pnet: Insufficient options for proto=fd [ 639.595146][T11509] loop2: detected capacity change from 0 to 4096 [ 639.823075][T11509] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 640.291962][T11528] loop0: detected capacity change from 0 to 164 [ 640.388779][T11528] Unable to read rock-ridge attributes [ 640.471848][T11523] Unable to read rock-ridge attributes [ 640.483134][T11523] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 640.591355][ T7] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 640.921734][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 640.984069][T11541] loop1: detected capacity change from 0 to 164 [ 641.052649][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 641.092888][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 641.133111][ T7] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 641.172333][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 641.275875][ T7] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 642.143547][T11556] 9pnet: Insufficient options for proto=fd [ 642.161467][ T7] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 642.170552][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.195090][ T7] usb 6-1: config 0 descriptor?? [ 642.247947][ T4197] Bluetooth: hci5: urb ffff888148032d00 submission failed (90) [ 642.342484][T11564] loop2: detected capacity change from 0 to 512 [ 642.464303][ T4469] usb 6-1: USB disconnect, device number 14 [ 642.509340][T11560] loop0: detected capacity change from 0 to 4096 [ 642.528923][T11564] EXT4-fs (loop2): Ignoring removed nobh option [ 642.535380][T11564] EXT4-fs (loop2): Ignoring removed oldalloc option [ 642.567731][T11564] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 642.605461][T11564] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2036: invalid indirect mapped block 256 (level 1) [ 643.060923][T11560] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 643.258238][T11564] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2036: invalid indirect mapped block 2683928664 (level 1) [ 643.280249][T11564] EXT4-fs (loop2): 1 truncate cleaned up [ 643.286242][T11564] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 643.370283][T11560] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 643.413312][T11560] File: /417/file0/file1 PID: 11560 Comm: syz.0.2037 [ 643.445073][T11574] loop5: detected capacity change from 0 to 512 [ 643.645203][T11574] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 643.771990][T11574] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 645.219804][T11597] 9pnet: Insufficient options for proto=fd [ 645.281409][T11568] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 646.761240][T11114] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 646.888972][T11621] loop4: detected capacity change from 0 to 4096 [ 646.948679][T11621] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 647.817768][T11631] loop5: detected capacity change from 0 to 512 [ 647.841243][T11114] usb 1-1: Using ep0 maxpacket: 8 [ 647.881568][ T26] audit: type=1800 audit(1770521041.930:6): pid=11621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2056" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 647.902559][T11631] EXT4-fs (loop5): Ignoring removed oldalloc option [ 647.909267][T11631] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 648.351737][T11114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 649.126638][T11631] EXT4-fs (loop5): 1 truncate cleaned up [ 649.132470][T11631] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x000000000000007c,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 649.170909][T11114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 649.261203][T11114] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 649.321199][T11114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 649.362397][T11114] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 649.389241][ T26] audit: type=1800 audit(1770521043.460:7): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2059" name="bus" dev="loop5" ino=21 res=0 errno=0 [ 649.430624][T11114] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 649.495261][T11114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.554544][T11114] usb 1-1: config 0 descriptor?? [ 649.636223][T11114] usb 1-1: can't set config #0, error -71 [ 649.847809][T11114] usb 1-1: USB disconnect, device number 9 [ 650.191616][ T4331] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 650.713132][T11664] loop4: detected capacity change from 0 to 512 [ 650.849665][ T4331] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 650.910679][ T4331] usb 2-1: can't read configurations, error -61 [ 651.278754][T11664] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 651.347892][T11664] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 651.356434][T11664] System zones: 1-12 [ 651.372199][T11664] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.2061: corrupted in-inode xattr [ 651.394244][T11664] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2061: couldn't read orphan inode 15 (err -117) [ 651.407783][T11664] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,grpid,noauto_da_alloc,commit=0x0000000000000005,debug,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 651.582467][ T4331] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 653.181434][ T4331] usb 2-1: device descriptor read/all, error -71 [ 653.188098][ T4331] usb usb2-port1: attempt power cycle [ 653.321296][T11689] loop0: detected capacity change from 0 to 4096 [ 653.434117][T11689] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 653.451504][ T4621] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 653.475707][T11698] loop1: detected capacity change from 0 to 256 [ 653.510589][T11698] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 653.741415][ T4621] usb 3-1: Using ep0 maxpacket: 8 [ 653.883114][ T4621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 654.101046][ T4621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 654.339154][ T4621] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 654.434778][T11704] loop1: detected capacity change from 0 to 164 [ 654.515796][ T4621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 654.526204][ T4621] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 654.536793][ T4621] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 654.546100][ T4621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.566838][ T4621] usb 3-1: config 0 descriptor?? [ 654.626953][ T4197] Bluetooth: hci5: urb ffff888062cc9b00 submission failed (90) [ 654.831888][ T4621] usb 3-1: USB disconnect, device number 9 [ 659.044783][T11739] loop1: detected capacity change from 0 to 4096 [ 659.126485][T11739] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 663.811324][ T4235] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 666.450760][T11821] loop4: detected capacity change from 0 to 4096 [ 666.621249][T11657] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 666.730167][T11821] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 667.591313][T11657] usb 6-1: Using ep0 maxpacket: 8 [ 667.801603][ T4243] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 668.282116][T11845] loop4: detected capacity change from 0 to 2048 [ 668.331865][ T4243] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 668.359820][ T4243] usb 3-1: can't read configurations, error -61 [ 668.551547][T11657] usb 6-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 668.616332][T11657] usb 6-1: config 0 interface 0 has no altsetting 0 [ 668.633938][T11657] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 668.636997][T11845] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=4096, location=4096 [ 668.683373][T11845] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 668.701760][T11657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.731075][T11657] usb 6-1: config 0 descriptor?? [ 668.735604][T11845] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 668.746462][ T4243] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 668.779779][T11845] UDF-fs: Scanning with blocksize 512 failed [ 669.055737][T11845] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 669.159191][T11845] UDF-fs: Scanning with blocksize 1024 failed [ 669.231655][ T4243] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 669.277075][ T4243] usb 3-1: can't read configurations, error -61 [ 669.355548][T11845] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 669.404066][ T4243] usb usb3-port1: attempt power cycle [ 669.634630][T11845] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 669.667348][T11845] UDF-fs: Scanning with blocksize 2048 failed [ 669.675331][T11657] usb 6-1: can't set config #0, error -71 [ 669.682546][T11657] usb 6-1: USB disconnect, device number 15 [ 669.732783][T11845] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 669.762426][T11845] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 669.811458][T11845] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 669.836730][T11860] loop1: detected capacity change from 0 to 4096 [ 669.858135][T11845] UDF-fs: Scanning with blocksize 4096 failed [ 669.870536][T11845] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 669.926960][ T4243] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 670.104831][T11860] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 670.991304][ T4243] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 670.998935][ T4243] usb 3-1: can't read configurations, error -71 [ 671.012478][T11881] loop4: detected capacity change from 0 to 2048 [ 671.637543][T11881] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 673.401261][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 673.671254][ T7] usb 1-1: device descriptor read/64, error -71 [ 673.961399][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 674.091240][ T4292] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 674.187671][ T7] usb 1-1: device descriptor read/64, error -71 [ 674.270030][T11926] loop1: detected capacity change from 0 to 512 [ 674.591906][ T4292] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 674.618041][ T4292] usb 3-1: can't read configurations, error -61 [ 674.851420][ T4292] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 675.101540][T11926] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 675.146617][T11926] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 675.155394][T11926] System zones: 1-12 [ 675.161436][T11926] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.2147: corrupted in-inode xattr [ 675.181954][T11926] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2147: couldn't read orphan inode 15 (err -117) [ 675.199003][T11926] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,grpid,noauto_da_alloc,commit=0x0000000000000005,debug,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 675.219925][ T7] usb usb1-port1: attempt power cycle [ 676.096001][ T4292] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 676.103790][ T4292] usb 3-1: can't read configurations, error -61 [ 676.110468][ T4292] usb usb3-port1: attempt power cycle [ 676.216195][ T7] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 676.441513][ T7] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 676.623790][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 676.802145][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 676.887119][ T7] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 677.117408][T11944] loop1: detected capacity change from 0 to 2048 [ 677.144147][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.282457][ T7] usb 1-1: config 0 descriptor?? [ 677.364319][T11944] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=4096, location=4096 [ 679.152443][T11944] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 679.545727][T11944] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 679.630920][T11966] loop2: detected capacity change from 0 to 512 [ 679.642058][T11944] UDF-fs: Scanning with blocksize 512 failed [ 679.670821][T11944] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 679.692822][T11944] UDF-fs: Scanning with blocksize 1024 failed [ 679.718412][T11944] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 679.728293][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 679.734340][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 679.758130][ T7] usb 1-1: USB disconnect, device number 13 [ 679.841823][T11966] EXT4-fs (loop2): Ignoring removed oldalloc option [ 680.009659][T11966] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 680.026668][T11944] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 680.386385][T11944] UDF-fs: Scanning with blocksize 2048 failed [ 680.648778][T11966] EXT4-fs (loop2): 1 truncate cleaned up [ 680.654860][T11944] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 680.695047][T11966] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x000000000000007c,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 680.727378][T11944] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 680.744241][T11944] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 680.755505][T11944] UDF-fs: Scanning with blocksize 4096 failed [ 680.763931][T11944] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 680.871347][ T26] audit: type=1800 audit(1770521074.930:8): pid=11984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2157" name="bus" dev="loop2" ino=20 res=0 errno=0 [ 681.033532][T11990] loop5: detected capacity change from 0 to 512 [ 681.312507][T11990] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 681.681487][T11990] EXT4-fs (loop5): 1 truncate cleaned up [ 681.731374][T11990] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 681.804603][T11994] loop1: detected capacity change from 0 to 256 [ 681.809419][T11657] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 682.082674][T11994] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 682.161403][T11657] usb 5-1: device descriptor read/64, error -71 [ 682.431368][T11657] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 682.771287][T11657] usb 5-1: device descriptor read/64, error -71 [ 682.891935][T11657] usb usb5-port1: attempt power cycle [ 683.301331][T11657] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 683.393652][T11657] usb 5-1: device descriptor read/8, error -71 [ 683.581244][ T4331] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 683.601455][ T4240] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 683.702334][T11657] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 683.835781][ T4331] usb 2-1: Using ep0 maxpacket: 16 [ 683.841268][ T4240] usb 6-1: Using ep0 maxpacket: 8 [ 683.941612][T11657] usb 5-1: device not accepting address 9, error -71 [ 683.953438][T11657] usb usb5-port1: unable to enumerate USB device [ 683.962066][ T4331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.981980][ T4240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 684.010100][ T4331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.025113][ T4240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 684.069935][ T4331] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 684.101633][ T4240] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 684.179527][ T4240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 684.204750][ T4331] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 684.239641][ T4240] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 684.255528][ T4331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.306459][ T4240] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 684.512145][ T4331] usb 2-1: config 0 descriptor?? [ 684.630131][ T4240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.788144][ T4240] usb 6-1: config 0 descriptor?? [ 685.113989][ T4197] Bluetooth: hci5: urb ffff888148309000 submission failed (90) [ 685.291194][ T4240] usb 6-1: USB disconnect, device number 16 [ 685.321786][ T4331] usbhid 2-1:0.0: can't add hid device: -71 [ 685.334601][ T4331] usbhid: probe of 2-1:0.0 failed with error -71 [ 685.672273][ T4331] usb 2-1: USB disconnect, device number 15 [ 685.685141][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.691505][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.367122][T12073] loop1: detected capacity change from 0 to 512 [ 692.031330][T12073] EXT4-fs (loop1): Ignoring removed nobh option [ 692.043243][T12073] EXT4-fs (loop1): Ignoring removed oldalloc option [ 692.269655][T12073] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 692.308137][T12073] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2189: invalid indirect mapped block 256 (level 1) [ 692.346023][T12085] loop4: detected capacity change from 0 to 512 [ 693.102928][T12073] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2189: invalid indirect mapped block 2683928664 (level 1) [ 693.142046][T12073] EXT4-fs (loop1): 1 truncate cleaned up [ 693.157749][T12073] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 693.187717][T12085] EXT4-fs (loop4): Ignoring removed nobh option [ 693.204382][T12085] EXT4-fs (loop4): Ignoring removed oldalloc option [ 693.260240][T12085] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 693.390218][T12101] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 693.402969][T12085] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2193: invalid indirect mapped block 256 (level 1) [ 693.477421][T12085] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2193: invalid indirect mapped block 2683928664 (level 1) [ 693.500300][T12085] EXT4-fs (loop4): 1 truncate cleaned up [ 693.507898][T12085] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,oldalloc,acl,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,usrquota,,,errors=continue. Quota mode: writeback. [ 693.587134][T12103] loop5: detected capacity change from 0 to 512 [ 693.846803][T12103] EXT4-fs (loop5): Ignoring removed oldalloc option [ 693.861321][T12103] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 694.001417][T12086] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 694.430026][T12103] EXT4-fs (loop5): 1 truncate cleaned up [ 694.447430][T12103] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x000000000000007c,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 694.927169][ T5070] EXT4-fs error (device loop5): mb_free_blocks:1876: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 695.035577][T12116] loop2: detected capacity change from 0 to 512 [ 695.088692][T12116] EXT4-fs (loop2): Ignoring removed oldalloc option [ 695.123290][T12116] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 695.179634][T12116] EXT4-fs (loop2): 1 truncate cleaned up [ 695.337305][T12116] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x000000000000007c,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 696.221094][T12128] loop5: detected capacity change from 0 to 2048 [ 696.385262][ T4187] EXT4-fs error (device loop2): mb_free_blocks:1876: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 696.433699][T12128] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 697.467644][T11114] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 699.211380][T11114] usb 6-1: device descriptor read/64, error -71 [ 699.777812][T12161] loop2: detected capacity change from 0 to 164 [ 700.981617][T12169] loop4: detected capacity change from 0 to 512 [ 701.161391][T11114] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 701.657141][T12161] Unable to read rock-ridge attributes [ 701.681942][T12169] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 701.742009][T12169] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 701.750128][T12169] System zones: 1-12 [ 701.778474][T12169] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.2216: corrupted in-inode xattr [ 701.802655][T12169] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2216: couldn't read orphan inode 15 (err -117) [ 701.815253][T12169] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,grpid,noauto_da_alloc,commit=0x0000000000000005,debug,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 702.236080][T12188] loop4: detected capacity change from 0 to 4096 [ 702.305544][T12190] loop1: detected capacity change from 0 to 512 [ 702.419057][T12190] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 702.443672][T12188] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 702.525216][T12190] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 702.558569][T12190] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2224: attempt to clear invalid blocks 2 len 1 [ 702.930326][T12190] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 703.233882][T12190] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2224: invalid indirect mapped block 1819239214 (level 0) [ 703.320575][T12190] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2224: invalid indirect mapped block 1819239214 (level 1) [ 703.443507][T12190] EXT4-fs (loop1): 1 truncate cleaned up [ 703.449233][T12190] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 705.335392][T11114] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 705.359597][T12224] loop2: detected capacity change from 0 to 512 [ 705.621623][T12224] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 705.729301][T12231] xt_socket: unknown flags 0xc [ 705.981381][T11114] usb 6-1: Using ep0 maxpacket: 8 [ 706.162018][T11114] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.447309][T11114] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 706.456837][T11114] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.467095][T11114] usb 6-1: config 0 descriptor?? [ 706.531415][T11114] usb 6-1: can't set config #0, error -71 [ 706.542799][T11114] usb 6-1: USB disconnect, device number 19 [ 706.584794][T12224] EXT4-fs (loop2): 1 truncate cleaned up [ 706.590520][T12224] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 707.483815][T12248] loop5: detected capacity change from 0 to 512 [ 708.491326][T12248] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 708.580171][T12248] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 708.588298][T12248] System zones: 1-12 [ 708.598837][T12261] loop1: detected capacity change from 0 to 16 [ 708.611914][T12248] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz.5.2237: corrupted in-inode xattr [ 708.633764][T12248] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2237: couldn't read orphan inode 15 (err -117) [ 708.646771][T12248] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,grpid,noauto_da_alloc,commit=0x0000000000000005,debug,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 709.758374][T12268] loop0: detected capacity change from 0 to 1024 [ 709.813819][T12261] erofs: (device loop1): mounted with root inode @ nid 36. [ 710.261540][ T4191] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 710.641331][ T4191] usb 3-1: Using ep0 maxpacket: 8 [ 710.802850][ T4191] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.076749][ T4191] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 711.086257][ T4191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.096562][ T4191] usb 3-1: config 0 descriptor?? [ 711.103557][T12284] loop5: detected capacity change from 0 to 1024 [ 711.375063][ T21] usb 3-1: USB disconnect, device number 17 [ 713.350424][T12323] loop1: detected capacity change from 0 to 16 [ 715.383585][T12331] loop0: detected capacity change from 0 to 512 [ 716.297015][T12323] erofs: (device loop1): mounted with root inode @ nid 36. [ 716.336011][T12331] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 716.427267][T12331] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 716.435658][T12331] System zones: 1-12 [ 716.457009][T12331] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.2257: corrupted in-inode xattr [ 716.483947][T12331] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2257: couldn't read orphan inode 15 (err -117) [ 716.498459][T12331] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,grpid,noauto_da_alloc,commit=0x0000000000000005,debug,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 716.564837][T12351] loop1: detected capacity change from 0 to 512 [ 716.645146][T12352] xt_socket: unknown flags 0xc [ 717.423976][T12351] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 717.436481][T12351] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 717.445536][T12351] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2266: attempt to clear invalid blocks 2 len 1 [ 717.459687][T12351] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 717.475117][T12351] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2266: invalid indirect mapped block 1819239214 (level 0) [ 717.494144][T12351] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2266: invalid indirect mapped block 1819239214 (level 1) [ 717.513186][T12351] EXT4-fs (loop1): 1 truncate cleaned up [ 717.519010][T12351] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 720.154117][T12388] xt_socket: unknown flags 0xc [ 720.310215][T12389] loop0: detected capacity change from 0 to 16 [ 721.066427][T12389] erofs: (device loop0): mounted with root inode @ nid 36. [ 721.265233][T12399] loop4: detected capacity change from 0 to 512 [ 721.373483][T12399] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 721.488321][T12399] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 721.496935][T12399] System zones: 1-12 [ 721.699557][T12399] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.2277: corrupted in-inode xattr [ 721.715032][T12399] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2277: couldn't read orphan inode 15 (err -117) [ 721.728966][T12399] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,grpid,noauto_da_alloc,commit=0x0000000000000005,debug,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 722.525921][T12415] xt_socket: unknown flags 0xc [ 723.479968][T12421] loop5: detected capacity change from 0 to 164 [ 725.528857][T12433] netlink: 'syz.1.2290': attribute type 4 has an invalid length. [ 725.621257][ T4251] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 725.639826][T12438] loop0: detected capacity change from 0 to 2048 [ 725.659322][T12440] 9pnet: Insufficient options for proto=fd [ 725.718319][T12444] loop4: detected capacity change from 0 to 512 [ 725.731025][T12438] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 725.799966][ T26] audit: type=1800 audit(1770521119.870:9): pid=12438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2291" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 725.849829][T12444] EXT4-fs (loop4): Ignoring removed oldalloc option [ 725.856856][ T26] audit: type=1800 audit(1770521119.900:10): pid=12438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2291" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 725.862591][T12444] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 725.991916][T12444] EXT4-fs (loop4): 1 truncate cleaned up [ 726.011278][T12444] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x000000000000007c,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 726.042002][ T4251] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 726.051243][ T4251] usb 3-1: can't read configurations, error -61 [ 726.080830][ T26] audit: type=1800 audit(1770521120.150:11): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2295" name="bus" dev="loop4" ino=21 res=0 errno=0 [ 726.301305][ T4251] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 727.651191][ T4251] usb 3-1: device not accepting address 19, error -71 [ 727.658296][ T4251] usb usb3-port1: attempt power cycle [ 728.022457][T12466] xt_socket: unknown flags 0xc [ 728.887882][T12468] loop4: detected capacity change from 0 to 164 [ 729.655810][T12477] 9pnet: Insufficient options for proto=fd [ 730.032668][ T4471] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 730.385398][T12498] xt_socket: unknown flags 0xc [ 731.395292][T12506] loop0: detected capacity change from 0 to 164 [ 732.441409][ T4471] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 732.467021][ T4471] usb 6-1: can't read configurations, error -61 [ 733.145081][ T4471] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 734.163368][ T4471] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 734.171480][ T4471] usb 6-1: can't read configurations, error -71 [ 734.586187][ T4471] usb usb6-port1: attempt power cycle [ 735.228246][T12541] loop5: detected capacity change from 0 to 512 [ 736.200710][T12547] loop1: detected capacity change from 0 to 164 [ 736.279401][T12550] xt_socket: unknown flags 0xc [ 737.024966][T12541] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 737.046830][T12541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 737.055447][T12541] System zones: 1-12 [ 737.192454][T12541] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz.5.2326: corrupted in-inode xattr [ 737.214242][T12541] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2326: couldn't read orphan inode 15 (err -117) [ 737.226768][T12541] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,grpid,noauto_da_alloc,commit=0x0000000000000005,debug,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 737.251992][T12556] loop2: detected capacity change from 0 to 164 [ 737.890061][T12563] loop0: detected capacity change from 0 to 512 [ 739.664922][T12563] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 739.691102][T12563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 739.699653][T12563] System zones: 1-12 [ 739.710097][T12563] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.2333: corrupted in-inode xattr [ 739.722944][T12563] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2333: couldn't read orphan inode 15 (err -117) [ 739.736938][T12563] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,grpid,noauto_da_alloc,commit=0x0000000000000005,debug,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 739.981859][T12580] loop1: detected capacity change from 0 to 1024 [ 740.056342][T12583] xt_socket: unknown flags 0xc [ 740.872719][T12572] loop5: detected capacity change from 0 to 512 [ 741.011393][ T4621] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 741.421357][ T4621] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 741.437602][ T4621] usb 3-1: can't read configurations, error -61 [ 741.591322][ T4621] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 742.001382][ T4621] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 742.010601][ T4621] usb 3-1: can't read configurations, error -61 [ 742.023662][ T4621] usb usb3-port1: attempt power cycle [ 742.431247][ T4621] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 742.692409][ T4621] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 742.716351][ T4621] usb 3-1: can't read configurations, error -71 [ 742.761337][T12572] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 742.796886][T12572] EXT4-fs: failed to create workqueue [ 742.806762][T12572] EXT4-fs (loop5): mount failed [ 745.240530][T12618] loop4: detected capacity change from 0 to 4096 [ 745.852990][T12636] loop5: detected capacity change from 0 to 1024 [ 747.071671][T12618] EXT4-fs: error -4 creating inode table initialization thread [ 747.087879][T12618] EXT4-fs (loop4): mount failed [ 748.758627][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.765092][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.951313][ T4621] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 750.771020][T12677] loop2: detected capacity change from 0 to 164 [ 862.371110][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 862.377759][ C0] rcu: 0-...!: (10844 ticks this GP) idle=203/1/0x4000000000000000 softirq=43039/43041 fqs=5 [ 862.389117][ C0] (t=10500 jiffies g=50929 q=4) [ 862.394053][ C0] rcu: rcu_preempt kthread starved for 10489 jiffies! g50929 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 862.405241][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 862.415201][ C0] rcu: RCU grace-period kthread stack dump: [ 862.421089][ C0] task:rcu_preempt state:R running task stack:27760 pid: 15 ppid: 2 flags:0x00004000 [ 862.431882][ C0] Call Trace: [ 862.435156][ C0] [ 862.438086][ C0] __schedule+0x11ef/0x43c0 [ 862.442618][ C0] ? rcu_is_watching+0x11/0xa0 [ 862.447376][ C0] ? release_firmware_map_entry+0x190/0x190 [ 862.453362][ C0] schedule+0x11b/0x1e0 [ 862.457515][ C0] schedule_timeout+0x184/0x2d0 [ 862.462363][ C0] ? console_conditional_schedule+0x40/0x40 [ 862.468253][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 862.474138][ C0] ? update_process_times+0x200/0x200 [ 862.479511][ C0] ? prepare_to_swait_event+0x331/0x350 [ 862.485059][ C0] rcu_gp_fqs_loop+0x2be/0x11d0 [ 862.489917][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 862.496067][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 862.500833][ C0] ? finish_swait+0xc0/0x1d0 [ 862.505425][ C0] rcu_gp_kthread+0x9b/0x370 [ 862.510015][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 862.515909][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 862.521023][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 862.526944][ C0] ? __kthread_parkme+0x157/0x1b0 [ 862.531981][ C0] kthread+0x436/0x520 [ 862.536053][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 862.541171][ C0] ? kthread_blkcg+0xd0/0xd0 [ 862.545789][ C0] ret_from_fork+0x1f/0x30 [ 862.550225][ C0] [ 862.553246][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 862.559575][ C0] Sending NMI from CPU 0 to CPUs 1: [ 862.564803][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10 [ 862.565783][ C0] NMI backtrace for cpu 0 [ 862.578018][ C0] CPU: 0 PID: 12673 Comm: syz.5.2366 Not tainted syzkaller #0 [ 862.585473][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 862.595526][ C0] Call Trace: [ 862.598829][ C0] [ 862.601673][ C0] dump_stack_lvl+0x188/0x250 [ 862.606359][ C0] ? show_regs_print_info+0x20/0x20 [ 862.611561][ C0] ? load_image+0x400/0x400 [ 862.616067][ C0] ? try_to_wake_up+0x3d4/0x1050 [ 862.621007][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 862.625946][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 862.632109][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 862.637561][ C0] ? _raw_spin_lock+0x40/0x40 [ 862.642241][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 862.648309][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 862.654294][ C0] rcu_dump_cpu_stacks+0x22f/0x380 [ 862.659430][ C0] print_cpu_stall+0x31d/0x5f0 [ 862.664213][ C0] rcu_sched_clock_irq+0x6ea/0x1120 [ 862.669419][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 862.674284][ C0] ? account_process_tick+0x22a/0x3a0 [ 862.679655][ C0] update_process_times+0x193/0x200 [ 862.684853][ C0] tick_sched_timer+0x37d/0x560 [ 862.689701][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 862.695244][ C0] __hrtimer_run_queues+0x4ad/0xb70 [ 862.700451][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 862.705559][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 862.711649][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 862.716604][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 862.722584][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 862.728295][ C0] [ 862.731253][ C0] [ 862.734197][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 862.740199][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 862.746015][ C0] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ee fa 97 f7 48 89 df e8 26 d3 98 f7 e8 01 c4 b9 f7 fb bf 01 00 00 00 a6 d9 8c f7 65 8b 05 47 e7 3c 76 85 c0 74 02 5b c3 e8 94 f4 3a [ 862.765628][ C0] RSP: 0018:ffffc900034dfcf0 EFLAGS: 00000286 [ 862.771707][ C0] RAX: 4b99fcbf26cd6400 RBX: ffff88807cb5d340 RCX: 4b99fcbf26cd6400 [ 862.779688][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001 [ 862.787665][ C0] RBP: ffffc900034dff10 R08: ffff88807cb5d343 R09: 1ffff1100f96ba68 [ 862.795648][ C0] R10: dffffc0000000000 R11: ffffed100f96ba69 R12: 1ffff9200069bfa8 [ 862.803623][ C0] R13: dffffc0000000000 R14: 00007ffd9f12a4f8 R15: ffff8880296d9dc0 [ 862.811606][ C0] __ia32_sys_rt_sigreturn+0x1ad/0x760 [ 862.817073][ C0] ? load_gs_index+0x130/0x130 [ 862.821842][ C0] ? __context_tracking_exit+0x4c/0x80 [ 862.827303][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 862.832333][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 862.838313][ C0] ? lock_chain_count+0x20/0x20 [ 862.843166][ C0] ? vtime_user_exit+0x2c8/0x3e0 [ 862.848101][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 862.853296][ C0] do_syscall_64+0x4c/0xa0 [ 862.857707][ C0] ? clear_bhb_loop+0x30/0x80 [ 862.862378][ C0] ? clear_bhb_loop+0x30/0x80 [ 862.867056][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 862.872946][ C0] RIP: 0033:0x7f350131d2d9 [ 862.877360][ C0] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 862.896965][ C0] RSP: 002b:00007ffd9f12a500 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 862.905463][ C0] RAX: ffffffffffffffda RBX: 00000000000b8017 RCX: 00007f350131d2d9 [ 862.913434][ C0] RDX: 00007ffd9f12a500 RSI: 00007ffd9f12a630 RDI: 0000000000000021 [ 862.921402][ C0] RBP: 0000000000000032 R08: 0028080dfd77e514 R09: 0000000000000000 [ 862.929371][ C0] R10: 00007ffd9f12abb0 R11: 0000000000000206 R12: 00007ffd9f12abd0 [ 862.937341][ C0] R13: 00007f35015f6fac R14: 00000000000b8049 R15: 00007ffd9f12abb0 [ 862.945423][ C0]