last executing test programs: 13m44.032590521s ago: executing program 2 (id=122): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) eventfd2(0x50, 0x80001) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x83, 0x2, "37a0"}, 0x0, 0x0}) 13m40.671596577s ago: executing program 2 (id=126): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8413, &(0x7f0000000080)={[{@noload}, {@acl}, {@jqfmt_vfsold}, {@mblk_io_submit}, {@usrquota}]}, 0x0, 0x533, &(0x7f0000000a80)="$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") 13m39.911050372s ago: executing program 2 (id=128): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000180)=ANY=[], 0x6, 0x2ab, &(0x7f0000000d40)="$eJzs3b1rLFUUAPAzyX6pxW5hJYIDWlg9Xl5rs0HyILiVsoVa6MP3Hkh2ERII+IFrKlsbS/8CQbDzn7CxsBdsBTtTBEZmZya7ibObTHATP36/Jjd3zrn3zOQmYYs9+/6L04PHaTw9+eyX6PWS2BrGME6TGMRWVL6IC4ZfBQDwb3aaZfF7VmiSl0REb3NlAQAb1Pj///cbLwkA2LC33n7njd3RaO/NNO3Fw+mXx+P8lX3+tbi++zQ+jEk8ifvRj7OI7Fwxfphl2ayV5gbxynR2PM4zp+/9WK6/+1vEPH8n+jGYT13M3x/t7aSFpfxZXsez5f7DPP9B9OP5mv33R3sPavJj3IlXX16q/17046cP4qOYxON5EYv8z3fS9PXs6z8+fTcvL89PZsfj7jxuIdu+5R8NAAAAAAAAAAAAAAAAAAAAAAD/YffK3jndmPfvyafK/jvbZ/k37Ugrg4v9eYr8pFroUn+gWRbfVP117qdpmpWBi/xWvNCK1t3cNQAAAAAAAAAAAAAAAAAAAPyzHH38ycGjyeTJ4d8yqLoBVG/rv+k6w6WZl6ImZhDnM93FllvltmtWju0qJolYW0a+YqPi21fvvmLwzKqsb79r+uh6V8e0b1Bhw0F1ug4eJfXPsBvVTK86JD8sx3Timnt1Vl3KGh2/Tu2lfuN77zw3H8zWxESyrrDXfi2eXDmTXL6Lzvyp1qa3y0Hxu1B3Nhqd57/+rUh06wAAAAAAAAAAAAAAAAAAgI1avOm35uLJiqSf94sP+Y/BhqsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNux+Pz/BoNZmXyN4E4cHt3xLQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/8GcAAAD//wrtYeE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 13m37.152210652s ago: executing program 2 (id=132): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 13m36.976184172s ago: executing program 2 (id=133): openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) unshare(0x2c020400) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 13m35.994263099s ago: executing program 2 (id=134): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file2\x00', 0x84835c, &(0x7f0000000000)={[{@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@usrjquota}, {@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0x2, 0x456, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 13m20.937324868s ago: executing program 32 (id=134): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file2\x00', 0x84835c, &(0x7f0000000000)={[{@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@usrjquota}, {@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0x2, 0x456, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 13m6.474042661s ago: executing program 3 (id=183): openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 13m5.503136728s ago: executing program 3 (id=184): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8004, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x1, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xfc) 12m59.933320542s ago: executing program 3 (id=193): openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 12m58.994901127s ago: executing program 3 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0xa) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r5, 0xd, 0x1) 12m54.796819242s ago: executing program 3 (id=200): r0 = getpgrp(0x0) sched_setaffinity(r0, 0xffffffffffffffdd, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup(r5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) dup3(r4, r6, 0x0) r7 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) close(0x3) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, 0x0, 0x0) 12m48.371590867s ago: executing program 3 (id=207): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x3, "5652359c3245d1c423170c010100000028a24f1700008000000000f4c077ce00", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r4, 0x4050}], 0x1, 0xffffffb3) close_range(r3, 0xffffffffffffffff, 0x0) 12m32.624922855s ago: executing program 33 (id=207): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x3, "5652359c3245d1c423170c010100000028a24f1700008000000000f4c077ce00", 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r4, 0x4050}], 0x1, 0xffffffb3) close_range(r3, 0xffffffffffffffff, 0x0) 5m33.243898035s ago: executing program 0 (id=991): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r4 = getpgrp(r1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000280)={'\x00', 0xff7f, 0x4389, 0xb978, 0x3d7, 0x75b1, r4}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000600)=[{0x0}], 0x1) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 5m31.79395318s ago: executing program 0 (id=992): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@flushsa={0x14, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfd, {0x3c}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 5m25.489171947s ago: executing program 0 (id=1002): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x50, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000140)={0xb, 0x0, 0x100000}, 0x20) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000002c0)=@routing={0x6, 0x0, 0x1, 0x7f}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 5m23.231611669s ago: executing program 0 (id=1006): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000a40)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d303e002804de526a2962c96269574f352812653af3f6cd668c31a51bb3ea504a07f361244709ddea94f616bfbdb1850c78c12060f961cc4c0f80ed3390fb03dbe82a2014852c59665501cd64f0a6a4ba839cf58fe10e184c735b4692a267d276169f0c203459a3f8899e6c3ac3bd115cdd185ca2972692171eed646eb083d9c646931c7987d8c087efbb77b881ceaaef4cf13f59d8417bf2ba94f6f9bcf2d707ff2c4f28415a5fa5517f85d05882"], 0x4, 0x2d1, &(0x7f0000000740)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x2a) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r0, 0x54a6) creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r1, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x40009, 0x1b) 5m21.464710512s ago: executing program 0 (id=1010): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 5m17.74041486s ago: executing program 0 (id=1016): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000040)=0xcd, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="03"], 0x3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x0, 0x0, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x5, 0x0, 0x0, 0x5, 0xa3, &(0x7f0000000080)=""/163, 0x0, 0xd0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x34, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 5m17.271823137s ago: executing program 34 (id=1016): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000040)=0xcd, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="03"], 0x3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x0, 0x0, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x5, 0x0, 0x0, 0x5, 0xa3, &(0x7f0000000080)=""/163, 0x0, 0xd0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x34, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3m11.224569202s ago: executing program 6 (id=1261): r0 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x400, 0x1}, &(0x7f00000001c0), &(0x7f00000003c0)) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x7}, {0x3, 0xc9, 0x46}}}}, 0xa) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)) ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0) select(0x0, 0x0, &(0x7f0000000140)={0x0, 0x4, 0xfffffffffffffffc, 0xfe, 0x7, 0x4, 0x0, 0x8}, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x100, 0x0, r0}, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x501000) 3m10.39555753s ago: executing program 6 (id=1263): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m9.972625615s ago: executing program 6 (id=1266): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f0000001800)="b9ff03030018698cb89e40f0311d90904ff7494c1100630677390b0f10b6079e76ec8e65f0d0a214603bca432121e48296db6707d4576dea9b4eab077d3f1a80c6ffcb28a92f86e5ec0f17e82f0c572e0e37a969a809018d5fe9025bc34eb25e9ed37f1e034a78e4804e316b1fa23a9042fbe7926901acdedfbdd81815b3f844579a66ab7bba58e349bac530b81a9c83ae63b39d6ebedfc6", 0x0, 0x100, 0x2000000, 0x2c, 0x0, &(0x7f0000000440)}, 0x28) 3m6.068754133s ago: executing program 6 (id=1273): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r0, 0x1, 0x0) ptrace$setregset(0x4205, r0, 0x200, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 3m5.656295677s ago: executing program 6 (id=1276): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x1, 0x9f8, 0x1, 0x6, 0x1}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0xfc, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xe8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x4, 0x8000446, {}, {0x7, 0x0, 0x0, 0x0, 0x3}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x78, 0x2, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x405}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x10000}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8010}, 0x44830) 3m5.288430559s ago: executing program 6 (id=1277): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r0 = epoll_create1(0x0) syz_clone3(&(0x7f0000000080)={0x941400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x90000001}) 3m5.065734462s ago: executing program 35 (id=1277): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r0 = epoll_create1(0x0) syz_clone3(&(0x7f0000000080)={0x941400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x90000001}) 1m5.938363223s ago: executing program 8 (id=1561): r0 = socket$inet6(0xa, 0x3, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x4814) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r1, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x3}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1, 0xe}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r2, 0x1) shutdown(r2, 0xffffffffffffff80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) poll(&(0x7f0000000080)=[{r3, 0x1143}], 0x1, 0xfc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4ad00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x1052050, &(0x7f00000001c0)={[{@grpquota}, {@nodioread_nolock}, {@nolazytime}, {@stripe={'stripe', 0x3d, 0x6}}, {@jqfmt_vfsv0}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x62, 0x51, 0x65, 0x33, 0x62, 0x0, 0x64], 0x2d, [0x63, 0x66, 0x38, 0x62], 0x2d, [0x39, 0x37, 0x31, 0x33], 0x2d, [0x66, 0x36, 0x37, 0x39], 0x2d, [0x35, 0x64, 0x38, 0x34, 0x31, 0x33, 0x30, 0x32]}}}, {@flag='async'}]}, 0x0, 0x599, &(0x7f00000008c0)="$eJzs3U9sG1UaAPBvxnHTP9lNV9qVdlc9VLtIRarqJP0DhVN7RVSq1AMSF4gcN6rixFWcQBNFIr1XiB4QoF7KDQ4cQRw4IC4cuXIBcUaqaARS0wMYOR6HNHWKE+IYMr+fNPZ7M2N/73n8PXtGM5oAcut48yGN+E9EXE4ihjcsG4hs4fHWeqsrS+WHK0vlJBqNKz8kkUTEg5Wlcnv9JHs+EhHLEfHviPiiGHEyXX/LA+1CfWFxarxarcxm9ZG56esj9YXFU9emxycrk5WZM88+d+782XNjp8c2NvdhY2OtuL2+3vr29pu3vnrh7u0PPzq2XH57PIkLMZQt29iP3dT6TIpxYdP8s70I1kdJvxvAjhSyPG+m0r9iOApZ1nfS2Dg4DO5J84AeagxGNICcSuQ/5FT7f0Bz/7c97eX/j3sXWzsgzbirK0vlN6Idf6B1bCIOru2bHP4xeWTPpLm/eXQvG8q+tHwzIkYHBh7//ifZ92/nRnejgfTU5xdbG+rx7Z+ujz/RYfwZah87/YPa499qNv6tdohf2GL8u9xljJ9f/u69LePfHIz/doyfrMdPOsRPI+LVLuPfeenT81sta7wfcSI6x29Lnnx8eOTqtWpltPXYMcZnJ449v3X/Iw5vEb91zPbg2s/Mxv4fyNqUdtn/T778+H/LT4j/9P+fvP07ff6HIuKtLuP/48EHL2617N7N5H7zX8B2t38SxbjbZfxnLhz/Jis6aggAAAAAAAAAALsoXTuXLUlL6+U0LZVa1/D+Mw6n1Vp97uTV2vzMROuct6NRTNtnWg236kmzPpadj9uun95UP1PIAhYOrdVL5Vp1os99BwAAAAAAAAAAAAAAAAAAgD+LI5uu//+psHb9/+bbVQP71da3/Ab2O/kP+fVo/id9awew9/z+Q2415D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA9cfnSpebUeLiyVG7WJwYW5qdqr52aqNSnStPz5VK5Nnu9NFmrTVYrpXJt+vfeL6nVro/GzPyNkblKfW6kvrD4ynRtfqZ9T9FKsec9AgAAAAAAAAAAAAAAAAAAgL+eobUpSUsRxVY9TUuliL9FxNEkkqvXqpXRiPh7RHxdKA4262P9bjQAAAAAAAAAAAAAAAAAAADsM/WFxanxarUy27vCQBaqu1dFb9szsJ2VI2J5d5vRfMdtv6qYfYC93Uw5KRS6/B7mvtDHQQkAAAAAAAAAAAAAAAAAAHJqw4X3Xfqltw0CAAAAAAAAAAAAAAAAAACAXEq/TyKiOZ0Yfmpo89IDyWph7TkiXr9z5Z0b43Nzs2PN+ffX58+9m80/3Y/2A91q52kaEc08BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5TX1icGq9WK7M7LAx2sU6/+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwE78GAAD//6lQzuY=") ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r5, 0x4068aea3, &(0x7f0000000140)) 1m5.541929176s ago: executing program 8 (id=1564): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0xff1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0x191f, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) 1m4.706798115s ago: executing program 8 (id=1566): sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) dup3(r2, r4, 0x0) r5 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, 0x0, 0x0) 1m4.476393258s ago: executing program 8 (id=1568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x30008894}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 1m1.112600814s ago: executing program 8 (id=1574): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getresuid(&(0x7f0000000200), 0x0, 0x0) 57.271636608s ago: executing program 8 (id=1584): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x2, 0x3}, {0xe8}, {0x0, 0x1}, @raw32}], 0x1c) 40.884681634s ago: executing program 36 (id=1584): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x2, 0x3}, {0xe8}, {0x0, 0x1}, @raw32}], 0x1c) 25.327874083s ago: executing program 9 (id=1629): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0x40c989, 0x0, 0xffffffdf, 0x173}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00"], 0x30}, 0x1, 0x0, 0x0, 0x48015}, 0x8000) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x9, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x31, &(0x7f0000001600), 0x4) openat$misdntimer(0xffffff9c, &(0x7f00000000c0), 0xa4200, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000", 0x4d}], 0x1) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0) 20.487787395s ago: executing program 9 (id=1686): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) io_setup(0x6, &(0x7f0000001380)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x25a5, 0x4) 19.746731278s ago: executing program 9 (id=1689): r0 = socket(0xa, 0x802, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0xfffffff8}, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 18.136494702s ago: executing program 9 (id=1691): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 18.110621494s ago: executing program 4 (id=1693): socket(0x1e, 0x805, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x1e, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x806, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7f, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x401c000, 0x3fe, 0x403, 0x200006, 0x3, 0x9, 0x5, 0x7, 0x577e, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x9, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x6, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000008, 0x80, 0x1000, 0xa2, 0x7, 0xa9, 0x4002, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x3, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x8, 0x9602, 0x40006, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x1fd, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 17.82840103s ago: executing program 4 (id=1694): sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, 0x0) dup3(r2, r4, 0x0) r5 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, 0x0, 0x0) 13.111709145s ago: executing program 4 (id=1702): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 12.851241951s ago: executing program 4 (id=1703): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)="09115e35b314816be54d4401d0bc9b8054c2ffa2f84bef8cc3d4033e8dbd8270a29dbee2331f792c331171e7033bc018825119e5877124ef4574b0de96233956b21ed824f569a4977d440bd52e757c3ff427ad73bf24f1c8226e06208275f828cc9e664056734a1e0da5bf38b45a4e93fbf0339b773c713ac5ec861c75b394ae8bff", 0x82}, 0x1, 0x0, 0x0, 0x4}, 0x800) 11.598842963s ago: executing program 7 (id=1706): mkdir(&(0x7f0000000140)='./control\x00', 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000090) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0x2000040a) 11.592911464s ago: executing program 9 (id=1707): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x4, 0x4}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, r2}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, 0x0) write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4044014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = socket$inet(0x2, 0x2, 0xfffffffd) getsockopt$inet_int(r7, 0x0, 0x2, 0x0, &(0x7f0000000100)) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, ':%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\x00\x00\x00\x00\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file1'}, 0x237) 11.504477159s ago: executing program 4 (id=1708): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e6405000000be9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578ead8ec76b17acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022e2731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181224175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329924b8b39e6dc4b2077a4b9645d8e0a445ae2c7be53d66007"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f0000001800)="b9ff03030018698cb89e40f0311d90904ff7494c1100630677390b0f10b6079e76ec8e65f0d0a214603bca432121e48296db6707d4576dea9b4eab077d3f1a80c6ffcb28a92f86e5ec0f17e82f0c572e0e37a969a809018d5fe9025bc34eb25e9ed37f1e034a78e4804e316b1fa23a9042fbe7926901acdedfbdd81815b3f844579a66ab7bba58e349bac530b81a9c83ae63b39d6ebedfc6", 0x0, 0x100, 0x2000000, 0x2c, 0x0, &(0x7f0000000440)}, 0x28) 10.228808984s ago: executing program 9 (id=1709): ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000080)={0xfffffffffffffff7, 0x1, 0x1, 0x3ff, 0x1, 0x0, [{0x9, 0x7fff, 0x101, '\x00', 0x7b42d44761708903}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000100)='=', 0x1, 0x4fed3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 10.174777987s ago: executing program 7 (id=1710): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.048523464s ago: executing program 1 (id=1711): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) io_setup(0x6, &(0x7f0000001380)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x25a5, 0x4) 7.903342589s ago: executing program 1 (id=1724): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) waitid(0x2, 0x0, 0x0, 0x1000000, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r3, 0x0, 0xfce1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 7.452678105s ago: executing program 1 (id=1716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) 7.186042421s ago: executing program 4 (id=1717): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_open_dev$loop(&(0x7f0000000040), 0x95, 0x44542) 7.124726454s ago: executing program 5 (id=1718): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 6.840576521s ago: executing program 1 (id=1719): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000bc0)="1db6614c0076db6f2d2eec8e0b", 0xd}, {&(0x7f0000000c00)="04cf1100ead80373a238e134031bf233ebd26ca93abe415348562de15e4382e939097a6de10988bd7c498174ee27b5c058c44467ba9acf25741161745cc1657c3d40960ba1dd663a49281f645a8a211708a39b97f9d1005744d0bfaba293ce4b6d6c17e05d9bd79dbe4fc0120c", 0x6d}, {&(0x7f0000000c80)="d24a40d7b32a1e02eabdff74a8ed2a5b25a3231fa131e390a9b5fb9236a3f852573b0c4eaefc3ad86bcba65826c1eb27ff9f7e265ddbe033296d2cfb9e1c45d74737aabd219f8d7a7bcd87d8d190f0799886f492b86a579d35febbde103b55606a765a856431", 0x66}, {&(0x7f0000000d00)="f9552cc2b6796d5681e5e696ed18b2e19d65ae7cbd390f471fffc646dc03ff8a8be3e3edfe4e628a65d929", 0x2b}, {&(0x7f0000003880)="93deb55a8bb65ad7dc8d60c0df52e713cd273bb21aff39ced1a3cfbb8cf7a99969e8e58b0f3acbea19653b01acae8a0541a51bc41f66921157ca6cc5180baf76ea7d10f1fa975c9708db3066204b10cf5f27de670fd7bfde8e48d9ae01a16d2f84b6e3e8a0e925f40221ee3e2547ce149578a9abca758dd42f6c66d97e9644fac6cdcb4dd20ce4f814f89fa871da61f713100ff2435de67daebc9d0fe9a97d437ac415199082e606388d42eb3ee8f0707f8183f1bc610458a1d351d9a3f681dcb15a8e76f94ba63a0e5a9acc5718bc92c29179bf07b931caf39df5c808ed8ad61a505e4355a6be75b571c9ea23d1c941041fe4a652c89060309b1684bbd80b08437d3b8099eff926e7d8af2a1cbb26f1f41987302d248f5561d140e27a2fd313aad9c417a5f2b33b5bce0398ac738935d7072cfbb5eec09fe7c0a00d5d3c1a70969d20909c44f09f2e0d2cb8c68fe61ea318699efd0456c99bd8ed3150f84e83729808136a2acaf3c960b482e8c0e2c077dbe3c546e36b0e2e0c9c5c1f2fd08c90def91d99f22a4e2cf3b0cd941966696fd72e40a994716035548eaa4a4f419b403b2f744ccd7efd8552573509bba9d4874a83c1bc23503173a4a52248d9bf8e2ecf4196fd95496b2beb13298ccd1483c76f59021ee775025fb17eb96d88fc4d3b788d0cf6abb184222eaa447605286241e6f6b6691792e57454efef48ffb2fc6b714cdf456e0d67a86746d3a55b6585831004135229df73bf6dcd42e28613c427f3d466406979efc0d82cc646acc7263ea32ff0da5c6c2192dcb4ea2e9a8b3b16746ddb787227d0e706bf66543a3f1afb2181047e9a92522993e7551944fd79fd5873f45557dc3357fc98cc84370c1caaae4a2313a4f99b96991c407991594ca95d66f2ff12ce85736a0d480ba9351132aca319842b03821899b8c9d8438f51e67fc929d8062b7a3c65baaff65a1ea1c31fa33e4c0cac0d455f0059d676ea2e8a6b3324aae118535362e3cb6a17ee5506d87a0c0b8b6978d791c591bfd0c8da5192bc2c0f03df89fafe59f0", 0x2ec}, {&(0x7f0000000d40)=']', 0x1}], 0x6}}], 0x1, 0x4040) 5.625811462s ago: executing program 5 (id=1720): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0xff1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0x191f, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) 5.577880035s ago: executing program 7 (id=1721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="17000000020001000003be8c5e687a8a12003200020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df018000000000", 0x6a) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'ip6tnl0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) 2.972206707s ago: executing program 7 (id=1722): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x2c020400) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x351e, 0x483, 0x0, 0x0, 0x0) 2.798209397s ago: executing program 5 (id=1723): sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) dup3(r2, r4, 0x0) r5 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, 0x0, 0x0) 2.633126837s ago: executing program 7 (id=1725): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 2.053685201s ago: executing program 5 (id=1726): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) 1.969581685s ago: executing program 7 (id=1727): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) waitid(0x2, 0x0, 0x0, 0x1000000, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r3, 0x0, 0xfce1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 1.969025166s ago: executing program 1 (id=1728): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e6405000000be9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578ead8ec76b17acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022e2731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181224175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329924b8b39e6dc4b2077a4b9645d8e0a445ae2c7be53d66007d491ab0f6851a2cc1cffeed1"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f0000001800)="b9ff03030018698cb89e40f0311d90904ff7494c1100630677390b0f10b6079e76ec8e65f0d0a214603bca432121e48296db6707d4576dea9b4eab077d3f1a80c6ffcb28a92f86e5ec0f17e82f0c572e0e37a969a809018d5fe9025bc34eb25e9ed37f1e034a78e4804e316b1fa23a9042fbe7926901acdedfbdd81815b3f844579a66ab7bba58e349bac530b81a9c83ae63b39d6ebedfc6", 0x0, 0x100, 0x2000000, 0x2c, 0x0, &(0x7f0000000440)}, 0x28) 1.73265486s ago: executing program 5 (id=1729): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) r2 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.54364305s ago: executing program 5 (id=1730): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x20000) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x140}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002100), 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) 0s ago: executing program 1 (id=1731): getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x4000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x40400, 0x8) fcntl$notify(r1, 0x402, 0x8000003b) kernel console output (not intermixed with test programs): [ 323.190286][ T6033] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.404: iget: bad i_size value: 38620345925642 [ 323.321592][ T6033] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.404: couldn't read orphan inode 15 (err -117) [ 323.437310][ T6033] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 324.194201][ T4698] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm kworker/u4:11: bg 0: block 5: invalid block bitmap [ 324.264325][ T4698] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 324.320044][ T4698] EXT4-fs (loop5): This should not happen!! Data will be lost [ 324.320044][ T4698] [ 324.370325][ T4698] EXT4-fs (loop5): Total free blocks count 0 [ 324.395012][ T4698] EXT4-fs (loop5): Free/Dirty block details [ 324.400983][ T4698] EXT4-fs (loop5): free_blocks=0 [ 324.426253][ T4698] EXT4-fs (loop5): dirty_blocks=16001 [ 324.457026][ T4698] EXT4-fs (loop5): Block reservation details [ 324.463671][ T4698] EXT4-fs (loop5): i_reserved_data_blocks=16001 [ 324.522358][ T6047] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 324.534824][ T6047] EXT4-fs (loop5): This should not happen!! Data will be lost [ 324.534824][ T6047] [ 324.962782][ T4199] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 327.876964][ T6071] loop5: detected capacity change from 0 to 2048 [ 327.972459][ T6071] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.800440][ T6101] loop0: detected capacity change from 0 to 512 [ 332.057564][ T6101] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.415: iget: bad i_size value: 38620345925642 [ 332.085157][ T6101] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.415: couldn't read orphan inode 15 (err -117) [ 332.111790][ T6101] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 332.789750][ T4698] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:11: bg 0: block 5: invalid block bitmap [ 332.863214][ T4698] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 332.927055][ T4698] EXT4-fs (loop0): This should not happen!! Data will be lost [ 332.927055][ T4698] [ 332.971789][ T4698] EXT4-fs (loop0): Total free blocks count 0 [ 332.977868][ T4698] EXT4-fs (loop0): Free/Dirty block details [ 333.041981][ T4698] EXT4-fs (loop0): free_blocks=0 [ 333.054419][ T4698] EXT4-fs (loop0): dirty_blocks=16001 [ 333.091598][ T4698] EXT4-fs (loop0): Block reservation details [ 333.097693][ T4698] EXT4-fs (loop0): i_reserved_data_blocks=16001 [ 333.924564][ T6107] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 333.937464][ T6107] EXT4-fs (loop0): This should not happen!! Data will be lost [ 333.937464][ T6107] [ 334.130758][ T6121] loop4: detected capacity change from 0 to 512 [ 334.198895][ T6121] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 334.273981][ T6121] EXT4-fs (loop4): 1 truncate cleaned up [ 334.279793][ T6121] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,resgid=0x0000000000000000,errors=remount-ro,noload,data_err=ignore,noblock_validity,. Quota mode: none. [ 334.407652][ T6121] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.421: Invalid inode table block 1433565978 in block_group 0 [ 334.457536][ T6121] EXT4-fs (loop4): Remounting filesystem read-only [ 337.795245][ T6148] loop0: detected capacity change from 0 to 256 [ 337.852070][ T6148] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 337.897655][ T6148] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 337.951041][ T6148] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 339.761649][ T4756] Bluetooth: hci5: command 0x0406 tx timeout [ 339.948972][ T6180] loop0: detected capacity change from 0 to 1764 [ 340.101617][ T6186] loop5: detected capacity change from 0 to 1024 [ 341.818529][ T6223] loop6: detected capacity change from 0 to 256 [ 341.944251][ T6223] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 342.544158][ T6223] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 343.959972][ T6223] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 344.626039][ T6240] loop5: detected capacity change from 0 to 1024 [ 344.778699][ T6246] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 345.521665][ T4252] Bluetooth: hci1: command 0x0406 tx timeout [ 351.396669][ T6302] loop5: detected capacity change from 0 to 512 [ 351.493351][ T6302] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 351.623015][ T6304] loop4: detected capacity change from 0 to 4096 [ 351.651408][ T6302] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.462: bad orphan inode 11862016 [ 351.709101][ T6302] EXT4-fs (loop5): Remounting filesystem read-only [ 351.785575][ T6302] EXT4-fs (loop5): mounted filesystem without journal. Opts: noquota,errors=remount-ro,jqfmt=vfsv0,auto_da_alloc=0x0000000000000009,nouid32,mb_optimize_scan=0x0000000000000001,. Quota mode: writeback. [ 351.847590][ T6302] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.097967][ T6304] EXT4-fs (loop4): Test dummy encryption mode enabled [ 352.138419][ T6304] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 352.181823][ T6304] System zones: 0-5 [ 352.252377][ T6304] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 354.475044][ T6304] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 355.059925][ T6351] loop4: detected capacity change from 0 to 512 [ 355.203164][ T6351] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 355.240949][ T6351] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 356.524451][ T6370] loop4: detected capacity change from 0 to 512 [ 356.613286][ T6370] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.470: iget: bad i_size value: 38620345925642 [ 356.665564][ T6370] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.470: couldn't read orphan inode 15 (err -117) [ 356.690377][ T6370] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 357.343183][ T1433] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 358.608918][ T4756] Bluetooth: hci2: command 0x0401 tx timeout [ 358.635977][ T1433] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 358.698955][ T1433] EXT4-fs (loop4): This should not happen!! Data will be lost [ 358.698955][ T1433] [ 358.741628][ T1433] EXT4-fs (loop4): Total free blocks count 0 [ 358.747717][ T1433] EXT4-fs (loop4): Free/Dirty block details [ 358.783575][ T1433] EXT4-fs (loop4): free_blocks=0 [ 358.807526][ T1433] EXT4-fs (loop4): dirty_blocks=16001 [ 358.823723][ T1433] EXT4-fs (loop4): Block reservation details [ 358.851560][ T1433] EXT4-fs (loop4): i_reserved_data_blocks=16001 [ 358.930777][ T6379] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 358.943445][ T6379] EXT4-fs (loop4): This should not happen!! Data will be lost [ 358.943445][ T6379] [ 359.113742][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.475'. [ 359.147766][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.354089][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.053341][ T6413] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 360.700201][ T6417] loop4: detected capacity change from 0 to 512 [ 361.242041][ T6417] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 361.324733][ T6417] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 361.353143][ T6423] loop0: detected capacity change from 0 to 1024 [ 363.022792][ T6433] loop4: detected capacity change from 0 to 512 [ 363.163455][ T6433] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 363.203674][ T6433] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.329667][ T6461] loop4: detected capacity change from 0 to 1024 [ 365.428371][ T6464] loop6: detected capacity change from 0 to 8 [ 365.444698][ T6461] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 365.471613][ T6461] EXT4-fs (loop4): Ignoring removed bh option [ 365.545858][ T6461] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nomblk_io_submit,usrquota,nobarrier,bh,init_itable,,errors=continue. Quota mode: writeback. [ 365.602228][ T6464] SQUASHFS error: zlib decompression failed, data probably corrupt [ 365.610232][ T6464] SQUASHFS error: Failed to read block 0x4de: -5 [ 365.693905][ T6464] SQUASHFS error: Failed to read block 0x4e2: -5 [ 365.751808][ T6464] SQUASHFS error: Failed to read block 0x9ca: -5 [ 365.758294][ T6464] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 365.807374][ T6464] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 365.837444][ T6464] SQUASHFS error: Failed to read block 0x535f2: -5 [ 365.869590][ T26] audit: type=1800 audit(1769320968.174:6): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.488" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 366.000476][ T6480] fuse: Bad value for 'group_id' [ 368.109470][ T6492] loop4: detected capacity change from 0 to 1024 [ 368.961862][ T21] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 370.231696][ T21] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 370.277324][ T21] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 370.367637][ T21] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 371.851642][ T21] usb 7-1: string descriptor 0 read error: -71 [ 371.857958][ T21] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 371.908297][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.991907][ T21] usb 7-1: can't set config #1, error -71 [ 372.032862][ T21] usb 7-1: USB disconnect, device number 2 [ 372.636679][ T6540] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 372.912661][ T6545] loop6: detected capacity change from 0 to 1024 [ 373.050946][ T6545] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 373.089985][ T6545] EXT4-fs (loop6): Ignoring removed bh option [ 373.181940][ T6554] fuse: Bad value for 'fd' [ 373.204306][ T6545] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nomblk_io_submit,usrquota,nobarrier,bh,init_itable,,errors=continue. Quota mode: writeback. [ 374.064774][ T6561] loop0: detected capacity change from 0 to 1024 [ 374.145537][ T6561] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 374.177520][ T6561] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 374.520960][ T6561] netlink: 452 bytes leftover after parsing attributes in process `syz.0.504'. [ 376.534652][ T6568] loop6: detected capacity change from 0 to 512 [ 376.798954][ T6568] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 377.822262][ T6568] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 377.883522][ T6584] loop4: detected capacity change from 0 to 512 [ 377.946005][ T6584] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 378.029828][ T6584] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.509: bad orphan inode 11862016 [ 378.073314][ T6584] EXT4-fs (loop4): Remounting filesystem read-only [ 378.079889][ T6584] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,errors=remount-ro,jqfmt=vfsv0,auto_da_alloc=0x0000000000000009,nouid32,mb_optimize_scan=0x0000000000000001,. Quota mode: writeback. [ 378.231777][ T6584] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.644387][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.650918][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.900998][ T6594] loop4: detected capacity change from 0 to 1024 [ 379.081646][ T6594] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 379.194754][ T6594] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 379.540735][ T6592] netlink: 452 bytes leftover after parsing attributes in process `syz.4.512'. [ 380.358202][ T6611] loop0: detected capacity change from 0 to 1024 [ 380.384288][ T6613] loop4: detected capacity change from 0 to 736 [ 380.413448][ T6616] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 380.481771][ T4756] Bluetooth: hci1: command 0x0405 tx timeout [ 384.415686][ T6636] fuse: Bad value for 'fd' [ 384.808710][ T6641] netlink: 452 bytes leftover after parsing attributes in process `syz.1.530'. [ 391.571295][ T6679] fuse: Bad value for 'fd' [ 393.874366][ T6692] loop4: detected capacity change from 0 to 1024 [ 394.037300][ T6699] loop0: detected capacity change from 0 to 1024 [ 394.315599][ T6699] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 394.430433][ T6699] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 394.884597][ T6693] netlink: 452 bytes leftover after parsing attributes in process `syz.0.542'. [ 396.519571][ T6713] fuse: Bad value for 'fd' [ 396.710537][ T6717] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 398.391066][ T6734] loop6: detected capacity change from 0 to 128 [ 399.783639][ T6734] FAT-fs (loop6): Unrecognized mount option "U [ 399.783639][ T6734] nonumtail" or missing value [ 403.380468][ T6749] loop0: detected capacity change from 0 to 1024 [ 403.463616][ T6749] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 403.492177][ T6749] EXT4-fs (loop0): Ignoring removed bh option [ 403.564276][ T6749] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nomblk_io_submit,usrquota,nobarrier,bh,init_itable,,errors=continue. Quota mode: writeback. [ 404.568632][ T6770] loop6: detected capacity change from 0 to 1024 [ 407.098178][ T6770] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 407.131605][ T6770] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 407.240939][ T4199] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 407.324144][ T6769] netlink: 452 bytes leftover after parsing attributes in process `syz.6.561'. [ 407.521677][ T7] Bluetooth: hci2: command 0x0401 tx timeout [ 411.355200][ T6807] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 411.752786][ T6813] fuse: Bad value for 'fd' [ 415.678124][ T6830] loop0: detected capacity change from 0 to 1024 [ 422.078228][ T6863] fuse: Bad value for 'fd' [ 423.670193][ T6879] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 425.592840][ T4199] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 428.721662][ T4252] Bluetooth: hci2: command 0x0401 tx timeout [ 431.273865][ T6922] fuse: Bad value for 'fd' [ 433.610149][ T6941] loop4: detected capacity change from 0 to 1024 [ 435.845754][ T6959] fuse: Bad value for 'fd' [ 436.879083][ T6968] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 440.728600][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.734965][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.911382][ T6998] fuse: Unknown parameter 'grou00000000000000000000' [ 444.378698][ T7004] loop6: detected capacity change from 0 to 1024 [ 445.239294][ T7008] loop6: detected capacity change from 0 to 256 [ 445.373344][ T7008] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 445.401590][ T7008] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 445.449339][ T7008] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 445.835317][ T7021] exFAT-fs (loop6): hint_cluster is invalid (17) [ 445.843881][ T7021] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff) [ 445.852571][ T7021] exFAT-fs (loop6): Filesystem has been set read-only [ 449.756480][ T1110] Bluetooth: hci2: command 0x0401 tx timeout [ 451.330926][ T7047] fuse: Bad value for 'fd' [ 452.499803][ T7058] loop6: detected capacity change from 0 to 1024 [ 452.639871][ T7062] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 459.635872][ T7105] loop4: detected capacity change from 0 to 1024 [ 459.743609][ T7111] fuse: Unknown parameter 'group_i00000000000000000000' [ 460.547587][ T7116] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 460.791294][ T7120] loop5: detected capacity change from 0 to 256 [ 460.902087][ T7120] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 460.931939][ T7120] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 461.011747][ T7120] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 461.385769][ T7124] exFAT-fs (loop5): hint_cluster is invalid (17) [ 461.393501][ T7124] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 461.401713][ T7124] exFAT-fs (loop5): Filesystem has been set read-only [ 472.832230][ T7183] fuse: Unknown parameter 'group_i00000000000000000000' [ 475.924695][ T7195] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 476.457960][ T7207] loop4: detected capacity change from 0 to 1024 [ 479.558123][ T7227] fuse: Unknown parameter 'group_id00000000000000000000' [ 482.851581][ T4199] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 484.224535][ T7253] loop5: detected capacity change from 0 to 1024 [ 486.006577][ T7276] fuse: Unknown parameter 'group_id00000000000000000000' [ 486.015616][ T7277] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 488.411660][ T4199] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 489.501616][ T4251] Bluetooth: hci2: command 0x0401 tx timeout [ 489.718309][ T7296] loop0: detected capacity change from 0 to 256 [ 490.129854][ T7296] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 490.362860][ T7296] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 490.436473][ T7296] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 490.860944][ T7296] exFAT-fs (loop0): hint_cluster is invalid (17) [ 490.868349][ T7296] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 490.876397][ T7296] exFAT-fs (loop0): Filesystem has been set read-only [ 491.206480][ T7309] loop5: detected capacity change from 0 to 1024 [ 493.002500][ T7317] fuse: Unknown parameter 'group_id00000000000000000000' [ 493.224583][ T7319] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 494.221581][ T4199] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 498.896391][ T7345] loop6: detected capacity change from 0 to 128 [ 498.965927][ T7352] fuse: Bad value for 'user_id' [ 498.976811][ T7345] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 500.371954][ T7345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 500.462796][ T26] audit: type=1800 audit(1769321102.774:7): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.733" name="file1" dev="loop6" ino=104 res=0 errno=0 [ 500.503323][ T7362] loop0: detected capacity change from 0 to 512 [ 500.704254][ T7362] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.738: iget: bad i_size value: 38620345925642 [ 500.730429][ T7370] loop6: detected capacity change from 0 to 512 [ 500.777985][ T7362] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.738: couldn't read orphan inode 15 (err -117) [ 500.840155][ T7362] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 500.867598][ T7370] EXT4-fs (loop6): mb_optimize_scan should be set to 0 or 1. [ 501.532465][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.539070][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.403990][ T7398] loop6: detected capacity change from 0 to 128 [ 505.453077][ T7398] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 506.525315][ T7398] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 507.788536][ T7408] fuse: Bad value for 'fd' [ 512.243049][ T7435] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 514.287755][ T7445] loop5: detected capacity change from 0 to 512 [ 514.433433][ T7445] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.765: iget: bad i_size value: 38620345925642 [ 514.468774][ T7445] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.765: couldn't read orphan inode 15 (err -117) [ 514.525350][ T7445] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 517.344152][ T7458] fuse: Bad value for 'fd' [ 519.844366][ T7473] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 522.150694][ T7485] loop6: detected capacity change from 0 to 1024 [ 523.252218][ T7485] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 523.259671][ T7485] hfsplus: xattr search failed [ 523.422869][ T1433] hfsplus: b-tree write err: -5, ino 4 [ 524.233832][ T7497] fuse: Bad value for 'fd' [ 524.292955][ T7482] usb usb8: usbfs: process 7482 (syz.0.764) did not claim interface 0 before use [ 527.332385][ T7517] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 527.410945][ T7518] loop4: detected capacity change from 0 to 512 [ 527.608706][ T7518] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.776: iget: bad i_size value: 38620345925642 [ 527.866024][ T7518] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.776: couldn't read orphan inode 15 (err -117) [ 528.028988][ T7518] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 528.721582][ T7523] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 528.881706][ T4252] Bluetooth: hci2: command 0x0401 tx timeout [ 529.019858][ T7529] fuse: Bad value for 'fd' [ 530.455763][ T7541] loop4: detected capacity change from 0 to 256 [ 531.391030][ T7541] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 531.431913][ T7541] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 531.444575][ T7541] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 531.758492][ T7550] exFAT-fs (loop4): hint_cluster is invalid (17) [ 531.767084][ T7550] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff) [ 531.775207][ T7550] exFAT-fs (loop4): Filesystem has been set read-only [ 533.484765][ T4199] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 535.840825][ T7575] fuse: Bad value for 'fd' [ 537.041658][ T4252] Bluetooth: hci2: command 0x0401 tx timeout [ 537.078465][ T7587] loop4: detected capacity change from 0 to 512 [ 538.623265][ T7587] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 538.671603][ T7587] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 538.957139][ T7595] loop0: detected capacity change from 0 to 512 [ 540.493125][ T7595] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.813: iget: bad i_size value: 38620345925642 [ 541.317698][ T7595] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.813: couldn't read orphan inode 15 (err -117) [ 541.942275][ T7595] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 544.522623][ T7621] fuse: Bad value for 'fd' [ 544.742031][ T7623] loop0: detected capacity change from 0 to 1024 [ 544.881635][ T7623] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 544.888144][ T7623] hfsplus: xattr search failed [ 545.421886][ T4698] hfsplus: b-tree write err: -5, ino 4 [ 549.626481][ T7646] loop0: detected capacity change from 0 to 512 [ 549.808481][ T7646] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.827: iget: bad i_size value: 38620345925642 [ 549.851945][ T7646] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.827: couldn't read orphan inode 15 (err -117) [ 549.919171][ T7646] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 555.545616][ T7675] loop5: detected capacity change from 0 to 764 [ 555.589701][ T7677] loop6: detected capacity change from 0 to 256 [ 555.645597][ T7677] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 555.666640][ T7677] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 555.737240][ T7677] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 556.074791][ T7680] exFAT-fs (loop6): hint_cluster is invalid (17) [ 556.094467][ T7680] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff) [ 556.102646][ T7680] exFAT-fs (loop6): Filesystem has been set read-only [ 557.598352][ T4199] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 560.762670][ T4301] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 561.030107][ T4301] usb 6-1: Using ep0 maxpacket: 16 [ 561.082897][ T7707] fuse: Bad value for 'fd' [ 561.950647][ T4301] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 562.522536][ T4199] Bluetooth: Unknown LE signaling command 0x38 [ 562.529053][ T4199] Bluetooth: Wrong link type (-22) [ 562.655199][ T4301] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 562.681436][ T4301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.719292][ T4301] usb 6-1: Product: syz [ 562.745519][ T4301] usb 6-1: Manufacturer: syz [ 562.772657][ T4301] usb 6-1: SerialNumber: syz [ 562.789085][ T4301] usb 6-1: config 0 descriptor?? [ 562.976105][ T4301] usb 6-1: can't set config #0, error -71 [ 563.022968][ T4301] usb 6-1: USB disconnect, device number 3 [ 563.414619][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.423025][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.364325][ T7734] loop4: detected capacity change from 0 to 512 [ 565.555494][ T7734] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 565.874962][ T4199] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 567.545349][ T7734] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.852: bg 0: block 5: invalid block bitmap [ 567.622938][ T7734] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 567.677622][ T7734] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.852: invalid indirect mapped block 3 (level 2) [ 567.745635][ T7734] EXT4-fs (loop4): 2 truncates cleaned up [ 567.752680][ T7734] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,grpquota,,errors=continue. Quota mode: writeback. [ 568.172782][ T7749] fuse: Bad value for 'fd' [ 571.735259][ T7767] loop4: detected capacity change from 0 to 256 [ 572.938778][ T7767] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 573.209923][ T7767] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 573.261059][ T7767] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 573.633667][ T7773] exFAT-fs (loop4): hint_cluster is invalid (17) [ 573.641641][ T7773] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff) [ 573.650625][ T7773] exFAT-fs (loop4): Filesystem has been set read-only [ 581.375009][ T7813] fuse: Invalid rootmode [ 587.615005][ T7846] fuse: Invalid rootmode [ 596.980547][ T7890] fuse: Invalid rootmode [ 597.389893][ T7897] netlink: 'syz.6.901': attribute type 13 has an invalid length. [ 597.532658][ T7901] loop0: detected capacity change from 0 to 1024 [ 597.554082][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 597.619716][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 597.655676][ T7897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 597.782377][ T7901] attempt to access beyond end of device [ 597.782377][ T7901] loop0: rw=0, want=5780, limit=1024 [ 597.845554][ T7901] Buffer I/O error on dev loop0, logical block 2889, async page read [ 597.902565][ T7901] attempt to access beyond end of device [ 597.902565][ T7901] loop0: rw=0, want=393218, limit=1024 [ 597.998222][ T7901] Buffer I/O error on dev loop0, logical block 196608, async page read [ 598.062656][ T7901] attempt to access beyond end of device [ 598.062656][ T7901] loop0: rw=0, want=393220, limit=1024 [ 598.099569][ T7901] Buffer I/O error on dev loop0, logical block 196609, async page read [ 598.282053][ T7901] attempt to access beyond end of device [ 598.282053][ T7901] loop0: rw=0, want=393222, limit=1024 [ 598.678264][ T7901] Buffer I/O error on dev loop0, logical block 196610, async page read [ 598.713561][ T7901] attempt to access beyond end of device [ 598.713561][ T7901] loop0: rw=0, want=393224, limit=1024 [ 599.279187][ T7901] Buffer I/O error on dev loop0, logical block 196611, async page read [ 599.306002][ T7901] attempt to access beyond end of device [ 599.306002][ T7901] loop0: rw=0, want=393226, limit=1024 [ 600.446244][ T7901] Buffer I/O error on dev loop0, logical block 196612, async page read [ 600.486076][ T7927] loop5: detected capacity change from 0 to 256 [ 600.494525][ T7901] attempt to access beyond end of device [ 600.494525][ T7901] loop0: rw=0, want=393228, limit=1024 [ 600.540262][ T7901] Buffer I/O error on dev loop0, logical block 196613, async page read [ 600.562962][ T7901] attempt to access beyond end of device [ 600.562962][ T7901] loop0: rw=0, want=393230, limit=1024 [ 601.413397][ T7901] Buffer I/O error on dev loop0, logical block 196614, async page read [ 601.468609][ T7901] attempt to access beyond end of device [ 601.468609][ T7901] loop0: rw=0, want=393232, limit=1024 [ 601.526045][ T7901] Buffer I/O error on dev loop0, logical block 196615, async page read [ 601.605825][ T7927] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 601.665275][ T7927] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 601.694284][ T7901] attempt to access beyond end of device [ 601.694284][ T7901] loop0: rw=0, want=393234, limit=1024 [ 601.770389][ T7901] Buffer I/O error on dev loop0, logical block 196616, async page read [ 601.878384][ T26] audit: type=1800 audit(1769321201.248:8): pid=7901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.903" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 602.068797][ T7927] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 602.232235][ T7935] fuse: Bad value for 'fd' [ 602.958084][ T7947] loop5: detected capacity change from 0 to 256 [ 603.058552][ T7947] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 606.215266][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 606.232169][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 606.240754][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 608.114367][ T7969] fuse: Bad value for 'rootmode' [ 608.302542][ T7973] loop0: detected capacity change from 0 to 256 [ 608.423461][ T7973] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 608.474920][ T7973] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 609.416475][ T7973] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 612.093853][ T8003] fuse: Bad value for 'fd' [ 613.409658][ T8015] loop0: detected capacity change from 0 to 512 [ 616.106656][ T8015] EXT4-fs (loop0): Ignoring removed oldalloc option [ 616.183405][ T8015] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,inode_readahead_blks=0x0000000000000000,lazytime,oldalloc,. Quota mode: writeback. [ 616.259241][ T8015] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 616.274998][ T8026] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 616.338123][ T8026] EXT4-fs (loop0): Remounting filesystem read-only [ 616.351879][ T8015] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.943: bg 0: block 217: padding at end of block bitmap is not set [ 616.436949][ T8015] EXT4-fs (loop0): Remounting filesystem read-only [ 616.471604][ T8015] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 616.503559][ T8015] EXT4-fs (loop0): Remounting filesystem read-only [ 619.550544][ T8048] fuse: Bad value for 'fd' [ 620.519381][ T8057] loop5: detected capacity change from 0 to 512 [ 620.674800][ T8057] EXT4-fs (loop5): 1 truncate cleaned up [ 620.680595][ T8057] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 620.713299][ T8061] process 'syz.4.945' launched './file1' with NULL argv: empty string added [ 620.922276][ T8067] loop4: detected capacity change from 0 to 128 [ 621.122996][ T8073] handle_bad_sector: 10 callbacks suppressed [ 621.123011][ T8073] attempt to access beyond end of device [ 621.123011][ T8073] loop4: rw=2049, want=625, limit=128 [ 621.221050][ T8073] loop9: detected capacity change from 0 to 7 [ 621.247403][ T8073] Dev loop9: unable to read RDB block 7 [ 621.265335][ T8073] loop9: unable to read partition table [ 621.283924][ T8073] loop9: partition table beyond EOD, truncated [ 621.325097][ T8073] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 622.058835][ T8081] loop5: detected capacity change from 0 to 256 [ 622.075983][ T4871] attempt to access beyond end of device [ 622.075983][ T4871] loop4: rw=1, want=617, limit=128 [ 622.126629][ T8081] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 622.158487][ T4871] attempt to access beyond end of device [ 622.158487][ T4871] loop4: rw=1, want=1041, limit=128 [ 623.736286][ T8081] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 624.079504][ T8081] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 624.583243][ T8089] fuse: Unknown parameter 'use00000000000000000000' [ 625.718892][ T4173] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 626.035800][ T4199] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 626.895254][ T4173] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.460795][ T4173] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 4 [ 627.569381][ T4173] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 627.632595][ T4173] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 627.825684][ T4173] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 628.776570][ T4173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 629.115414][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.200854][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.229619][ T4173] usb 6-1: SerialNumber: syz [ 629.385994][ T4173] usb 6-1: can't set config #1, error -71 [ 629.434840][ T4173] usb 6-1: USB disconnect, device number 4 [ 629.670315][ T8123] loop5: detected capacity change from 0 to 4096 [ 631.326506][ T8123] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 631.344348][ T8123] EXT4-fs (loop5): Test dummy encryption mode enabled [ 632.156815][ T8123] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,discard,noblock_validity,discard,,errors=continue. Quota mode: writeback. [ 632.519607][ T8142] loop5: detected capacity change from 0 to 256 [ 632.639354][ T8142] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119ac00, checksum : 0x1119ad80) [ 632.667740][ T8142] exFAT-fs (loop5): invalid boot region [ 632.673361][ T8142] exFAT-fs (loop5): failed to recognize exfat type [ 635.314050][ T8159] fuse: Unknown parameter 'use00000000000000000000' [ 636.371719][ T26] audit: type=1326 audit(1769321233.501:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a9e6cb9 code=0x7ffc0000 [ 636.902834][ T26] audit: type=1326 audit(1769321233.510:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a9e6cb9 code=0x7ffc0000 [ 636.970815][ T26] audit: type=1326 audit(1769321233.510:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7ff92a9e6cb9 code=0x7ffc0000 [ 637.036658][ T26] audit: type=1326 audit(1769321233.510:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a9e6cb9 code=0x7ffc0000 [ 637.098399][ T26] audit: type=1326 audit(1769321233.510:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a9e6cb9 code=0x7ffc0000 [ 638.547981][ T26] audit: type=1326 audit(1769321233.510:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff92a9e6cb9 code=0x7ffc0000 [ 638.617065][ T26] audit: type=1326 audit(1769321233.519:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a9e6cb9 code=0x7ffc0000 [ 638.681883][ T26] audit: type=1326 audit(1769321233.519:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92a9e6cb9 code=0x7ffc0000 [ 639.780558][ T8175] loop6: detected capacity change from 0 to 2048 [ 639.908314][ T7563] loop6: p3 < > p4 < > [ 639.912555][ T7563] loop6: partition table partially beyond EOD, truncated [ 639.942978][ T7563] loop6: p3 start 4284289 is beyond EOD, truncated [ 639.999492][ T8175] loop6: p3 < > p4 < > [ 640.055130][ T8175] loop6: partition table partially beyond EOD, truncated [ 640.062423][ T8175] loop6: p3 start 4284289 is beyond EOD, truncated [ 640.294051][ T7563] udevd[7563]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 640.380635][ T7563] udevd[7563]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 643.891924][ T8203] fuse: Bad value for 'fd' [ 647.129181][ T8225] loop0: detected capacity change from 0 to 256 [ 648.771449][ T8232] loop5: detected capacity change from 0 to 128 [ 648.872303][ T4187] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 648.920480][ T4187] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 652.489686][ T8248] loop5: detected capacity change from 0 to 256 [ 652.508915][ T4446] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.567232][ T8248] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 652.599316][ T8248] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 652.621258][ T4446] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.654810][ T8248] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 652.816193][ T4446] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.010718][ T4446] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.356268][ T26] audit: type=1326 audit(1769321251.208:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f4a41cb9 code=0x7ffc0000 [ 656.628168][ T26] audit: type=1326 audit(1769321251.208:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f4a41cb9 code=0x7ffc0000 [ 656.749847][ T26] audit: type=1326 audit(1769321251.264:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f53f4a41cb9 code=0x7ffc0000 [ 656.920119][ T26] audit: type=1326 audit(1769321251.264:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f4a41cb9 code=0x7ffc0000 [ 656.982538][ T8279] fuse: Bad value for 'fd' [ 657.172533][ T26] audit: type=1326 audit(1769321251.264:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f4a41cb9 code=0x7ffc0000 [ 657.293927][ T8283] capability: warning: `syz.1.1023' uses 32-bit capabilities (legacy support in use) [ 657.337007][ T26] audit: type=1326 audit(1769321251.273:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f53f4a41cb9 code=0x7ffc0000 [ 657.454031][ T26] audit: type=1326 audit(1769321251.273:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f4a41cb9 code=0x7ffc0000 [ 658.432205][ T26] audit: type=1326 audit(1769321251.273:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8261 comm="syz.5.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f4a41cb9 code=0x7ffc0000 [ 658.631188][ T4446] device hsr_slave_0 left promiscuous mode [ 658.689135][ T4446] device hsr_slave_1 left promiscuous mode [ 658.742860][ T4446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.750347][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.764247][ T8298] fuse: Unknown parameter 'user_i00000000000000000000' [ 658.828479][ T4446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.835988][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.235462][ T4238] Bluetooth: hci3: command 0x0409 tx timeout [ 660.261266][ T4446] device bridge_slave_1 left promiscuous mode [ 660.267530][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.322240][ T4446] device bridge_slave_0 left promiscuous mode [ 660.356523][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.452479][ T4446] device veth1_macvtap left promiscuous mode [ 660.469426][ T4446] device veth0_macvtap left promiscuous mode [ 660.480394][ T8306] loop6: detected capacity change from 0 to 256 [ 660.486074][ T4446] device veth1_vlan left promiscuous mode [ 660.525358][ T4446] device veth0_vlan left promiscuous mode [ 660.586204][ T8306] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 660.645315][ T8306] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 660.702192][ T8306] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 662.441136][ T4792] Bluetooth: hci3: command 0x041b tx timeout [ 662.448217][ T4446] team0 (unregistering): Port device team_slave_1 removed [ 662.526475][ T4446] team0 (unregistering): Port device team_slave_0 removed [ 662.576375][ T4446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.652958][ T4446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.976714][ T4446] bond0 (unregistering): Released all slaves [ 663.095161][ T8274] chnl_net:caif_netlink_parms(): no params data found [ 664.300752][ T8274] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.334677][ T8330] loop5: detected capacity change from 0 to 2048 [ 664.370334][ T8274] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.431257][ T8274] device bridge_slave_0 entered promiscuous mode [ 664.449166][ T8274] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.472548][ T8274] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.266604][ T4792] Bluetooth: hci3: command 0x040f tx timeout [ 665.506818][ T8330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 665.553922][ T8274] device bridge_slave_1 entered promiscuous mode [ 665.994294][ T8343] fuse: Unknown parameter 'user_id00000000000000000000' [ 666.062843][ T8274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.075498][ T8349] loop6: detected capacity change from 0 to 256 [ 666.126228][ T8274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.138689][ T8349] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 666.183131][ T8349] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 667.065588][ T8274] team0: Port device team_slave_0 added [ 667.278144][ T8274] team0: Port device team_slave_1 added [ 667.292168][ T8349] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 667.368015][ T8274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.465590][ T8274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.599483][ T7225] Bluetooth: hci3: command 0x0419 tx timeout [ 667.621258][ T8274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.702861][ T8274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.709864][ T8274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.877309][ T8274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.099220][ T8274] device hsr_slave_0 entered promiscuous mode [ 668.156029][ T8274] device hsr_slave_1 entered promiscuous mode [ 668.170484][ T8274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 668.204731][ T8274] Cannot create hsr debugfs directory [ 669.147024][ T8373] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 669.405739][ T8274] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 669.479017][ T8274] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 669.535311][ T8274] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 669.575852][ T8274] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 670.020150][ T8274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.122924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 670.141196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 671.060785][ T8274] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.393076][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 672.538522][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 672.572538][ T4871] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.579753][ T4871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.645161][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 672.718521][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 672.732275][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 672.773103][ T4871] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.780300][ T4871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.846967][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 672.947163][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 672.982852][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 673.055588][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 673.118978][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 673.162971][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 674.522723][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 674.611509][ T8424] loop5: detected capacity change from 0 to 256 [ 674.669256][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 674.688965][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 674.734560][ T8274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 674.745347][ T8424] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 674.778171][ T8424] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 674.811026][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 674.820538][ T8424] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 674.845563][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 674.884267][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 675.485203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 675.492831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 675.543534][ T8274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.511123][ T8449] fuse: Unknown parameter 'user_id00000000000000000000' [ 676.649071][ T8455] fuse: Bad value for 'fd' [ 676.905965][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 676.918089][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 678.090296][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 678.147437][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 679.576356][ T8274] device veth0_vlan entered promiscuous mode [ 679.617766][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 679.696967][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 679.769080][ T8274] device veth1_vlan entered promiscuous mode [ 681.302702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 681.321218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 681.357278][ T8274] device veth0_macvtap entered promiscuous mode [ 681.383027][ T8274] device veth1_macvtap entered promiscuous mode [ 681.481210][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.518968][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.548016][ T8491] fuse: Bad value for 'fd' [ 681.553950][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.616240][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.683648][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.741284][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.765134][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.787391][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.821428][ T8274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.844254][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 681.864938][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 681.899051][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 681.926017][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.947739][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.982322][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.982344][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.982388][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.982403][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.046934][ T8274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.050884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 682.053070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 682.077128][ T8274] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.077207][ T8274] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.077238][ T8274] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.077268][ T8274] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.760623][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.760707][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.763423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 683.073007][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.073078][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.092147][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 683.660470][ T8520] loop7: detected capacity change from 0 to 512 [ 683.897952][ T8520] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 684.034229][ T8520] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 684.084292][ T8520] EXT4-fs (loop7): 1 truncate cleaned up [ 684.122593][ T8520] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 684.212181][ T7563] udevd[7563]: incorrect jbd checksum on /dev/loop7 [ 684.234854][ T8520] EXT4-fs error (device loop7): __ext4_get_inode_loc:4327: comm syz.7.1070: Invalid inode table block 0 in block_group 0 [ 684.261096][ T8520] EXT4-fs (loop7): Remounting filesystem read-only [ 684.267897][ T8520] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 684.314903][ T8520] EXT4-fs (loop7): Remounting filesystem read-only [ 685.290401][ T8550] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 685.311456][ T8550] loop5: detected capacity change from 0 to 2048 [ 685.818466][ T8550] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 687.398812][ T8556] fuse: Bad value for 'fd' [ 688.272636][ T8561] loop6: detected capacity change from 0 to 1024 [ 689.444184][ T8585] loop6: detected capacity change from 0 to 8 [ 689.571810][ T26] audit: type=1800 audit(1769321283.283:25): pid=8585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1084" name="file1" dev="loop6" ino=1 res=0 errno=0 [ 693.034876][ T8612] loop7: detected capacity change from 0 to 8 [ 694.820422][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.826797][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.131581][ T8612] SQUASHFS error: zlib decompression failed, data probably corrupt [ 695.183799][ T8612] SQUASHFS error: Failed to read block 0x4de: -5 [ 695.236090][ T8612] SQUASHFS error: Failed to read block 0x4e2: -5 [ 695.283628][ T8612] SQUASHFS error: Failed to read block 0x9ca: -5 [ 695.314915][ T8612] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 695.325639][ T8612] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 695.354904][ T8612] SQUASHFS error: Failed to read block 0x535f2: -5 [ 695.384393][ T26] audit: type=1800 audit(1769321288.727:26): pid=8612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1079" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 695.417203][ T8626] loop4: detected capacity change from 0 to 1024 [ 696.576414][ T4251] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 698.318952][ T4251] usb 5-1: Using ep0 maxpacket: 8 [ 700.489427][ T4251] usb 5-1: device descriptor read/all, error -71 [ 700.845811][ T8681] fuse: Bad value for 'fd' [ 708.037820][ T8733] loop6: detected capacity change from 0 to 8 [ 709.201660][ T8733] SQUASHFS error: zlib decompression failed, data probably corrupt [ 710.154413][ T8733] SQUASHFS error: Failed to read block 0x4de: -5 [ 710.161181][ T8733] SQUASHFS error: Failed to read block 0x4e2: -5 [ 710.207753][ T8733] SQUASHFS error: Failed to read block 0x9ca: -5 [ 710.250474][ T8733] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 710.257184][ T8733] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 710.303156][ T8733] SQUASHFS error: Failed to read block 0x535f2: -5 [ 710.349999][ T26] audit: type=1800 audit(1769321302.720:27): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1107" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 714.947673][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1128'. [ 722.194865][ T8871] loop5: detected capacity change from 0 to 1024 [ 722.601748][ T8881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1142'. [ 724.419452][ T7225] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 724.774208][ T7225] usb 8-1: Using ep0 maxpacket: 8 [ 724.907301][ T7225] usb 8-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 724.954349][ T7225] usb 8-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 725.289771][ T8892] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 725.483586][ T7225] usb 8-1: config 0 interface 0 has no altsetting 0 [ 725.505849][ T7225] usb 8-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 726.092904][ T7225] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.985199][ T7225] usb 8-1: config 0 descriptor?? [ 727.045453][ T8920] loop6: detected capacity change from 0 to 7 [ 727.052249][ T7225] usb 8-1: can't set config #0, error -71 [ 727.081472][ T8920] Dev loop6: unable to read RDB block 7 [ 727.087601][ T7225] usb 8-1: USB disconnect, device number 2 [ 727.116674][ T8920] loop6: unable to read partition table [ 727.151344][ T144] loop: Write error at byte offset 50, length 3584. [ 727.159670][ T8920] loop6: partition table beyond EOD, truncated [ 727.173139][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 727.184538][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 727.212012][ T8920] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 728.823759][ T8935] loop6: detected capacity change from 0 to 1024 [ 738.002971][ T9004] fuse: Unknown parameter 'fd0x0000000000000003' [ 740.782008][ T4301] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 741.049162][ T4301] usb 6-1: Using ep0 maxpacket: 16 [ 741.177708][ T4301] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.220155][ T4301] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.242716][ T9033] loop4: detected capacity change from 0 to 1024 [ 741.263002][ T4301] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 741.284443][ T4301] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 741.304622][ T4301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.328231][ T4301] usb 6-1: config 0 descriptor?? [ 742.549767][ T4301] microsoft 0003:045E:07DA.0002: unbalanced collection at end of report description [ 742.639339][ T4301] microsoft 0003:045E:07DA.0002: parse failed [ 743.522716][ T4301] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 743.566201][ T4301] usb 6-1: USB disconnect, device number 5 [ 743.799536][ T9065] loop4: detected capacity change from 0 to 256 [ 743.865824][ T9065] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 743.892520][ T9065] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 743.947302][ T9065] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 744.170052][ T9069] fuse: Unknown parameter 'fd0x0000000000000003' [ 744.199082][ T9070] loop5: detected capacity change from 0 to 512 [ 744.420630][ T9070] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 746.399232][ T9086] loop7: detected capacity change from 0 to 1024 [ 747.679539][ T9100] loop7: detected capacity change from 0 to 128 [ 747.724307][ T9102] fuse: Unknown parameter 'fd0x0000000000000003' [ 752.095953][ T9126] loop7: detected capacity change from 0 to 128 [ 752.154811][ T9124] loop5: detected capacity change from 0 to 1024 [ 752.755149][ T9124] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000001,bsddf,auto_da_alloc=0x0000000000000008,errors=remount-ro,max_batch_time=0x0000000000000009,errors=continue,. Quota mode: none. [ 754.510579][ T9136] loop4: detected capacity change from 0 to 1024 [ 758.909008][ T9172] loop7: detected capacity change from 0 to 128 [ 759.130012][ T9172] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 759.148805][ T9172] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 759.223622][ T9172] fscrypt (loop7, inode 12): Unsupported encryption flags (0x10) [ 759.389568][ T9176] loop6: detected capacity change from 0 to 16 [ 759.428678][ T9182] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.1213' sets config #0 [ 759.487787][ T9182] loop7: detected capacity change from 0 to 512 [ 759.560400][ T9176] erofs: (device loop6): mounted with root inode @ nid 36. [ 759.584755][ T9182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 759.618795][ T9182] System zones: 1-12 [ 759.623684][ T9176] erofs: (device loop6): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 759.652705][ T9182] EXT4-fs error (device loop7): dx_probe:823: inode #2: comm syz.7.1213: Directory hole found for htree index block 0 [ 760.538582][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 760.544923][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.552107][ T9176] attempt to access beyond end of device [ 760.552107][ T9176] loop6: rw=524288, want=524304, limit=16 [ 760.592077][ T9182] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117 [ 760.600910][ T9182] EXT4-fs error (device loop7): dx_probe:823: inode #2: comm syz.7.1213: Directory hole found for htree index block 0 [ 760.640378][ T8277] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4100] [ 760.668802][ T9182] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 760.677666][ T9176] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 760.741669][ T9182] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota=",,errors=continue. Quota mode: writeback. [ 760.894962][ T26] audit: type=1800 audit(1769321350.005:28): pid=9176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1202" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 762.118088][ T9206] loop7: detected capacity change from 0 to 1024 [ 763.640876][ T4637] hfsplus: b-tree write err: -5, ino 4 [ 765.718304][ T9234] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.1230' sets config #0 [ 765.862358][ T9234] loop5: detected capacity change from 0 to 512 [ 766.122688][ T9234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 766.279140][ T9234] System zones: 1-12 [ 766.403038][ T9234] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.1230: Directory hole found for htree index block 0 [ 766.479217][ T9234] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 766.531353][ T9234] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.1230: Directory hole found for htree index block 0 [ 767.462251][ T9234] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 767.479839][ T9234] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota=",,errors=continue. Quota mode: writeback. [ 767.536368][ T9257] loop4: detected capacity change from 0 to 2048 [ 767.618104][ T9251] loop4: p1 p3 p4 [ 767.632886][ T9251] loop4: p4 size 589824 extends beyond EOD, truncated [ 767.680754][ T9257] loop4: p1 p3 p4 [ 767.695153][ T9257] loop4: p4 size 589824 extends beyond EOD, truncated [ 767.955691][ T9261] loop5: detected capacity change from 0 to 16 [ 768.003041][ T9261] erofs: (device loop5): mounted with root inode @ nid 36. [ 768.169398][ T9259] udevd[9259]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 768.196836][ T26] audit: type=1800 audit(1769321356.833:29): pid=9261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1238" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 768.239855][ T9180] udevd[9180]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 768.271382][ T9251] udevd[9251]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 768.418224][ T9259] udevd[9259]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 768.429102][ T9180] udevd[9180]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 769.825094][ T9251] udevd[9251]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 772.456226][ T9281] fuse: Bad value for 'fd' [ 774.545237][ T9301] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1250' sets config #0 [ 775.797871][ T9309] loop4: detected capacity change from 0 to 512 [ 777.260960][ T9309] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 777.305816][ T9309] System zones: 1-12 [ 777.360204][ T9309] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.1250: Directory hole found for htree index block 0 [ 777.396365][ T9328] loop6: detected capacity change from 0 to 8 [ 777.439186][ T9309] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 777.471581][ T9309] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.1250: Directory hole found for htree index block 0 [ 777.509901][ T9309] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 777.543324][ T9309] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota=",,errors=continue. Quota mode: writeback. [ 778.511822][ T9334] SQUASHFS error: Failed to read block 0x2d7: -5 [ 778.650031][ T9334] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 780.028091][ T9347] binder_alloc: 9346: binder_alloc_buf, no vma [ 782.207640][ T26] audit: type=1326 audit(1769321369.929:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ca50ecb9 code=0x7ffc0000 [ 782.276031][ T26] audit: type=1326 audit(1769321369.976:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29ca50ecb9 code=0x7ffc0000 [ 783.170618][ T26] audit: type=1326 audit(1769321369.976:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ca50ecb9 code=0x7ffc0000 [ 783.250824][ T26] audit: type=1326 audit(1769321369.976:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f29ca50ecb9 code=0x7ffc0000 [ 783.334321][ T26] audit: type=1326 audit(1769321369.976:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ca50ecb9 code=0x7ffc0000 [ 783.833092][ T5158] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 784.228950][ T5158] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.391600][ T5158] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 784.409429][ T5158] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 784.441150][ T5158] usb 8-1: Product: syz [ 784.455440][ T5158] usb 8-1: SerialNumber: syz [ 784.748154][ T9385] loop4: detected capacity change from 0 to 512 [ 784.838030][ T9385] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 784.893042][ T9385] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1268: iget: bad i_size value: 38620345925642 [ 784.952961][ T9385] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1268: couldn't read orphan inode 15 (err -117) [ 784.975867][ T9385] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,delalloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 785.056700][ T4871] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.211646][ T4871] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.356155][ T4871] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.271087][ T5158] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 786.277794][ T5158] cdc_ncm 8-1:1.0: setting rx_max = 16384 [ 786.820310][ T4871] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.854489][ T5158] cdc_ncm 8-1:1.0: setting tx_max = 184 [ 786.918444][ T5158] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM, 42:42:42:42:42:42 [ 786.996702][ T5158] usb 8-1: USB disconnect, device number 3 [ 787.050641][ T5158] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM [ 788.369271][ T9408] loop5: detected capacity change from 0 to 8 [ 788.466006][ T9397] chnl_net:caif_netlink_parms(): no params data found [ 788.572814][ T9415] loop7: detected capacity change from 0 to 1024 [ 788.620464][ T9421] SQUASHFS error: Failed to read block 0x2d7: -5 [ 788.639190][ T9421] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 788.815246][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.823905][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.862984][ T9397] device bridge_slave_0 entered promiscuous mode [ 788.987366][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.994522][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.038266][ T9397] device bridge_slave_1 entered promiscuous mode [ 789.117177][ T9436] loop5: detected capacity change from 0 to 256 [ 789.179239][ T9436] exfat: Deprecated parameter 'namecase' [ 789.185059][ T9436] exfat: Deprecated parameter 'utf8' [ 789.222347][ T9436] exfat: Unknown parameter 'icharset' [ 790.291327][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 790.599440][ T9397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.770606][ T9397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.891075][ T9397] team0: Port device team_slave_0 added [ 792.125401][ T9397] team0: Port device team_slave_1 added [ 792.996935][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 793.094353][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.101516][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.176595][ T9397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.344914][ T4871] device hsr_slave_0 left promiscuous mode [ 793.370858][ T4871] device hsr_slave_1 left promiscuous mode [ 793.405711][ T4871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.424255][ T4871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.445359][ T4871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.474581][ T4871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.509522][ T4871] device bridge_slave_1 left promiscuous mode [ 793.515838][ T4871] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.552634][ T4871] device bridge_slave_0 left promiscuous mode [ 793.569810][ T4871] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.607649][ T4871] device veth1_macvtap left promiscuous mode [ 793.635595][ T4871] device veth0_macvtap left promiscuous mode [ 793.657228][ T4871] device veth1_vlan left promiscuous mode [ 793.668900][ T7225] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 793.679251][ T4871] device veth0_vlan left promiscuous mode [ 793.924843][ T7225] usb 5-1: Using ep0 maxpacket: 32 [ 794.053374][ T7225] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.074405][ T7225] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 794.245788][ T7225] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 794.268091][ T7225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.276170][ T7225] usb 5-1: Product: syz [ 795.136519][ T7225] usb 5-1: Manufacturer: syz [ 795.158842][ T7225] usb 5-1: SerialNumber: syz [ 795.616881][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 796.021939][ T4871] team0 (unregistering): Port device team_slave_1 removed [ 796.170369][ T4871] team0 (unregistering): Port device team_slave_0 removed [ 796.375539][ T4871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.561241][ T4871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.699848][ T4871] bond0 (unregistering): Released all slaves [ 797.977409][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 798.081041][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.088451][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.144310][ T9397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.176091][ T7225] usb 5-1: 0:2 : does not exist [ 799.330486][ T7225] usb 5-1: USB disconnect, device number 4 [ 799.433597][ T9397] device hsr_slave_0 entered promiscuous mode [ 799.446548][ T9397] device hsr_slave_1 entered promiscuous mode [ 799.658685][ T9170] udevd[9170]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 800.064142][ T9397] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 800.112129][ T9397] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 800.149362][ T9397] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 800.192803][ T9397] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 800.544155][ T9397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.592501][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 800.619052][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 800.664032][ T9397] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.692416][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 800.719646][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 801.401228][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.408425][ T5623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.491087][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 801.537321][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 802.134312][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 802.179327][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.186537][ T5623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.287612][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 802.328743][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 802.348258][ T9527] loop5: detected capacity change from 0 to 1024 [ 802.383131][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 802.423732][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 802.479529][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 802.517074][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 803.964481][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 804.006856][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 804.057940][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 804.139961][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 804.234348][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 804.289877][ T9397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 805.134266][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 805.155855][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 806.609483][ T9397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.722971][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 807.751677][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 808.686519][ T9397] device veth0_vlan entered promiscuous mode [ 808.748168][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 808.757430][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 808.807622][ T9397] device veth1_vlan entered promiscuous mode [ 808.844526][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 808.861213][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 808.869144][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 808.967956][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 808.976572][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 809.114738][ T9397] device veth0_macvtap entered promiscuous mode [ 809.157818][ T9397] device veth1_macvtap entered promiscuous mode [ 809.279440][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.346009][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.400664][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.447566][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.457443][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.562493][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.597274][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.607757][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.673694][ T9397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.682329][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 809.730752][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 809.753651][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 809.850133][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 809.901130][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.934547][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.955654][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 809.992794][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.002672][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.035544][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.082576][ T9397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.103797][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 810.122117][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 810.163347][ T9397] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.176939][ T9397] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.196068][ T9397] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.224000][ T9397] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.127692][ T9636] loop5: detected capacity change from 0 to 512 [ 812.285389][ T9636] EXT4-fs (loop5): Ignoring removed oldalloc option [ 812.448222][ T9636] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.1322: dx entry: limit 1024 != root limit 124 [ 812.501963][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.527680][ T9636] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1322: Corrupt directory, running e2fsck is recommended [ 812.563076][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.583226][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 812.627664][ T9636] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 812.638889][ T5623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.681471][ T5623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.698226][ T9636] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz.5.1322: corrupted in-inode xattr [ 812.739762][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 812.754823][ T9636] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1322: couldn't read orphan inode 15 (err -117) [ 812.801713][ T9636] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,sb=0x0000000000008000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.usrquota,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback. [ 817.968155][ T13] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 818.265749][ T13] usb 9-1: Using ep0 maxpacket: 32 [ 819.230643][ T13] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.272237][ T13] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 819.507992][ T13] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 819.517126][ T13] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.625271][ T13] usb 9-1: Product: syz [ 819.629579][ T13] usb 9-1: Manufacturer: syz [ 819.635443][ T13] usb 9-1: SerialNumber: syz [ 821.068507][ T13] usb 9-1: can't set config #1, error -71 [ 821.079860][ T13] usb 9-1: USB disconnect, device number 2 [ 821.172682][ T9170] udevd[9170]: setting mode of /dev/bus/usb/009/002 to 020664 failed: No such file or directory [ 821.269752][ T9170] udevd[9170]: setting owner of /dev/bus/usb/009/002 to uid=0, gid=0 failed: No such file or directory [ 826.715343][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 826.869714][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 827.306870][ T9805] loop8: detected capacity change from 0 to 1024 [ 829.854537][ T9857] loop8: detected capacity change from 0 to 1024 [ 834.164240][ C0] hrtimer: interrupt took 38538 ns [ 834.883012][ T9903] loop4: detected capacity change from 0 to 1024 [ 838.869418][ T9951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1403'. [ 839.003592][ T9954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1403'. [ 840.136414][ T9973] loop7: detected capacity change from 0 to 1024 [ 843.887299][T10013] loop5: detected capacity change from 0 to 1024 [ 846.395705][T10045] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1416'. [ 853.950324][T10116] loop5: detected capacity change from 0 to 1024 [ 858.375241][T10209] loop4: detected capacity change from 0 to 1024 [ 862.455603][T10232] netlink: 'syz.4.1458': attribute type 4 has an invalid length. [ 864.061249][T10238] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20003 [ 865.002292][T10242] loop7: detected capacity change from 0 to 1024 [ 867.114632][T10261] netlink: 'syz.8.1456': attribute type 4 has an invalid length. [ 867.440024][T10262] netlink: 'syz.8.1456': attribute type 4 has an invalid length. [ 868.235332][ T4259] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 868.502686][ T4259] usb 5-1: Using ep0 maxpacket: 16 [ 868.631795][ T4259] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 868.651112][ T4259] usb 5-1: config 0 has no interface number 0 [ 868.682178][ T4259] usb 5-1: config 0 interface 251 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 16 [ 868.737395][ T4259] usb 5-1: config 0 interface 251 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 64 [ 868.792964][ T4259] usb 5-1: config 0 interface 251 has no altsetting 0 [ 868.994707][ T4259] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 869.047838][ T4259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.097717][ T4259] usb 5-1: Product: syz [ 869.127875][ T4259] usb 5-1: Manufacturer: syz [ 869.132596][ T4259] usb 5-1: SerialNumber: syz [ 869.166087][ T4259] usb 5-1: config 0 descriptor?? [ 869.208490][T10281] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 869.216053][T10281] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 870.205560][T10281] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 870.212670][T10281] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 870.909233][T10293] loop5: detected capacity change from 0 to 1024 [ 871.822161][ T4259] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 871.872654][ T4259] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 872.005314][ T7225] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 872.017629][ T4259] asix: probe of 5-1:0.251 failed with error -71 [ 872.090572][ T4259] usb 5-1: USB disconnect, device number 5 [ 872.187538][ T4297] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 872.436773][ T4297] Bluetooth: hci1: Injecting HCI hardware error event [ 872.447562][ T7225] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 872.476293][ T7225] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 872.486572][ T8277] Bluetooth: hci1: hardware error 0x00 [ 872.597318][ T7225] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 872.647005][ T7225] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 872.688021][ T7225] usb 8-1: SerialNumber: syz [ 873.017432][ T7225] usb 8-1: 0:2 : does not exist [ 873.028366][ T7225] usb 8-1: unit 255 not found! [ 873.097252][ T7225] usb 8-1: USB disconnect, device number 4 [ 873.510914][ T9170] udevd[9170]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 883.355217][T10378] loop7: detected capacity change from 0 to 1024 [ 883.500568][T10382] netlink: 'syz.1.1498': attribute type 4 has an invalid length. [ 883.601601][T10383] netlink: 'syz.1.1498': attribute type 4 has an invalid length. [ 887.792977][T10419] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20003 [ 888.469707][T10425] loop8: detected capacity change from 0 to 1024 [ 892.203006][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 892.209416][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 893.553746][T10458] [U] : [ 893.556939][T10458] [U] [ 893.559666][T10458] [U] [ 893.562379][T10458] [U] [ 893.565093][T10458] [U] [ 893.567815][T10458] [U] [ 893.570569][T10458] [U] [ 893.573284][T10458] [U] [ 893.675092][T10458] [U] [ 893.677892][T10458] [U] [ 893.680620][T10458] [U] [ 893.683349][T10458] [U] [ 893.686126][T10458] [U] [ 893.688850][T10458] [U] [ 893.691574][T10458] [U] [ 893.694310][T10458] [U] [ 893.698155][T10460] netlink: 'syz.5.1513': attribute type 4 has an invalid length. [ 893.787323][T10458] [U] [ 893.790096][T10458] [U] [ 893.792833][T10458] [U] [ 893.795565][T10458] [U] [ 893.798273][T10458] [U] [ 893.800994][T10458] [U] [ 893.803710][T10458] [U] [ 893.806432][T10458] [U] [ 893.824634][T10461] netlink: 'syz.5.1513': attribute type 4 has an invalid length. [ 893.901668][T10458] [U] [ 893.904525][T10458] [U] [ 893.907249][T10458] [U] [ 893.909969][T10458] [U] [ 893.912680][T10458] [U] [ 893.915417][T10458] [U] [ 893.918139][T10458] [U] [ 893.920857][T10458] [U] [ 894.010800][T10458] [U] [ 894.013560][T10458] [U] [ 894.016283][T10458] [U] [ 894.019006][T10458] [U] [ 894.021746][T10458] [U] [ 894.024468][T10458] [U] [ 894.027195][T10458] [U] [ 894.029916][T10458] [U] [ 894.136945][T10458] [U] [ 894.139713][T10458] [U] [ 894.142430][T10458] [U] [ 894.145165][T10458] [U] [ 894.147902][T10458] [U] [ 894.150633][T10458] [U] [ 894.153350][T10458] [U] [ 894.156080][T10458] [U] [ 894.203654][T10458] [U] [ 894.206479][T10458] [U] [ 894.209209][T10458] [U] [ 894.211930][T10458] [U] [ 894.214658][T10458] [U] [ 894.217387][T10458] [U] [ 894.220108][T10458] [U] [ 894.222833][T10458] [U] [ 894.282251][T10458] [U] [ 894.285020][T10458] [U] [ 894.287752][T10458] [U] [ 894.290483][T10458] [U] [ 894.293212][T10458] [U] [ 894.295933][T10458] [U] [ 894.298644][T10458] [U] [ 894.301362][T10458] [U] [ 895.133703][T10466] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20003 [ 895.271857][ T5158] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 895.303730][T10458] [U] [ 895.306491][T10458] [U] [ 895.309202][T10458] [U] [ 895.311918][T10458] [U] [ 895.314635][T10458] [U] [ 895.317357][T10458] [U] [ 895.320074][T10458] [U] [ 895.322791][T10458] [U] [ 895.426745][T10458] [U] [ 895.539225][ T5158] usb 6-1: Using ep0 maxpacket: 16 [ 895.817313][ T5158] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 895.849094][ T5158] usb 6-1: config 0 has no interface number 0 [ 895.855843][ T5158] usb 6-1: config 0 interface 251 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 16 [ 895.890650][ T5158] usb 6-1: config 0 interface 251 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 64 [ 895.936040][ T5158] usb 6-1: config 0 interface 251 has no altsetting 0 [ 896.127239][ T5158] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 896.144268][ T5158] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.166019][ T5158] usb 6-1: Product: syz [ 896.172055][ T5158] usb 6-1: Manufacturer: syz [ 896.176927][ T5158] usb 6-1: SerialNumber: syz [ 896.188563][ T5158] usb 6-1: config 0 descriptor?? [ 896.212880][T10464] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 896.220402][T10464] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 896.455965][T10464] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 896.556860][ T4301] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 896.564880][T10216] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 896.573082][T10464] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 897.613243][ T4301] usb 9-1: Using ep0 maxpacket: 16 [ 897.656029][ T5158] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 897.677313][ T5158] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 897.711310][ T5158] asix: probe of 6-1:0.251 failed with error -71 [ 897.741059][ T5158] usb 6-1: USB disconnect, device number 6 [ 897.762998][T10216] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.773826][ T4301] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 897.796949][T10216] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 897.992757][ T4301] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 898.012850][ T4301] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.023702][T10216] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 898.040665][ T4301] usb 9-1: Product: syz [ 898.045014][T10216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.062087][ T4301] usb 9-1: Manufacturer: syz [ 898.072868][ T4301] usb 9-1: SerialNumber: syz [ 898.077725][T10216] usb 5-1: Product: syz [ 898.097071][T10216] usb 5-1: Manufacturer: syz [ 898.119569][ T4301] usb 9-1: config 0 descriptor?? [ 898.125211][T10216] usb 5-1: SerialNumber: syz [ 898.161302][T10216] usb 5-1: config 0 descriptor?? [ 898.468640][T10216] usb 5-1: USB disconnect, device number 6 [ 899.139886][T10520] [U] : [ 899.142764][T10520] [U] [ 899.145492][T10520] [U] [ 899.148223][T10520] [U] [ 899.150949][T10520] [U] [ 899.153683][T10520] [U] [ 899.156411][T10520] [U] [ 899.159137][T10520] [U] [ 899.220413][T10520] [U] [ 899.223183][T10520] [U] [ 899.225900][T10520] [U] [ 899.228623][T10520] [U] [ 899.231346][T10520] [U] [ 899.234105][T10520] [U] [ 899.236847][T10520] [U] [ 899.239566][T10520] [U] [ 899.281452][T10520] [U] [ 899.284203][T10520] [U] [ 899.286938][T10520] [U] [ 899.289662][T10520] [U] [ 899.292373][T10520] [U] [ 899.295083][T10520] [U] [ 899.297824][T10520] [U] [ 899.300565][T10520] [U] [ 899.356130][T10520] [U] [ 899.358893][T10520] [U] [ 899.361615][T10520] [U] [ 899.364339][T10520] [U] [ 899.367060][T10520] [U] [ 899.369803][T10520] [U] [ 899.372548][T10520] [U] [ 899.375259][T10520] [U] [ 899.388064][T10520] [U] [ 899.390807][T10520] [U] [ 899.393520][T10520] [U] [ 899.396244][T10520] [U] [ 899.398951][T10520] [U] [ 899.401671][T10520] [U] [ 899.404394][T10520] [U] [ 899.407115][T10520] [U] [ 899.411477][T10216] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 899.432231][T10520] [U] [ 899.434981][T10520] [U] [ 899.437701][T10520] [U] [ 899.440426][T10520] [U] [ 899.443152][T10520] [U] [ 899.445874][T10520] [U] [ 899.448591][T10520] [U] [ 899.451308][T10520] [U] [ 899.475757][T10520] [U] [ 899.478507][T10520] [U] [ 899.481230][T10520] [U] [ 899.483947][T10520] [U] [ 899.486666][T10520] [U] [ 899.489399][T10520] [U] [ 899.492112][T10520] [U] [ 899.494829][T10520] [U] [ 899.517767][ T4301] usb 9-1: USB disconnect, device number 3 [ 899.541962][T10520] [U] [ 899.544709][T10520] [U] [ 899.547433][T10520] [U] [ 899.550156][T10520] [U] [ 899.552877][T10520] [U] [ 899.555611][T10520] [U] [ 899.558325][T10520] [U] [ 899.561043][T10520] [U] [ 899.565701][T10520] [U] [ 899.568446][T10520] [U] [ 899.571171][T10520] [U] [ 899.573909][T10520] [U] [ 899.576648][T10520] [U] [ 899.579384][T10520] [U] [ 899.582102][T10520] [U] [ 899.584821][T10520] [U] [ 899.588978][T10520] [U] [ 899.591711][T10520] [U] [ 899.594410][T10520] [U] [ 899.597094][T10520] [U] [ 899.599777][T10520] [U] [ 899.602457][T10520] [U] [ 899.605139][T10520] [U] [ 899.607842][T10520] [U] [ 899.633383][T10520] [U] [ 899.636127][T10520] [U] [ 899.638840][T10520] [U] [ 899.641553][T10520] [U] [ 899.644267][T10520] [U] [ 899.646978][T10520] [U] [ 899.649710][T10520] [U] [ 899.652432][T10520] [U] [ 899.665871][T10520] [U] [ 899.668616][T10520] [U] [ 899.671331][T10520] [U] [ 899.674051][T10520] [U] [ 899.676803][T10520] [U] [ 899.679535][T10520] [U] [ 899.682249][T10520] [U] [ 899.684956][T10520] [U] [ 899.697714][T10216] usb 6-1: Using ep0 maxpacket: 32 [ 899.704942][T10520] [U] [ 899.707688][T10520] [U] [ 899.710426][T10520] [U] [ 899.713149][T10520] [U] [ 899.715865][T10520] [U] [ 899.718585][T10520] [U] [ 899.721300][T10520] [U] [ 899.723991][T10520] [U] [ 899.734708][T10520] [U] [ 899.737518][T10520] [U] [ 899.740215][T10520] [U] [ 899.742923][T10520] [U] [ 899.745683][T10520] [U] [ 899.748404][T10520] [U] [ 899.751126][T10520] [U] [ 899.753820][T10520] [U] [ 899.760315][T10520] [U] [ 899.763040][T10520] [U] [ 899.765728][T10520] [U] [ 899.768415][T10520] [U] [ 899.771285][T10520] [U] [ 899.773975][T10520] [U] [ 899.776675][T10520] [U] [ 899.779363][T10520] [U] [ 899.784345][T10520] [U] [ 899.787093][T10520] [U] [ 899.789808][T10520] [U] [ 899.792524][T10520] [U] [ 899.795242][T10520] [U] [ 899.797962][T10520] [U] [ 899.800701][T10520] [U] [ 899.837090][T10216] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 899.857427][T10216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.870240][T10519] [U] [ 899.880755][T10216] usb 6-1: config 0 descriptor?? [ 899.946041][T10216] gspca_main: sunplus-2.14.0 probing 041e:400b [ 900.024994][T10533] loop8: detected capacity change from 0 to 1024 [ 900.148093][T10536] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1547'. [ 901.120671][T10216] gspca_sunplus: reg_w_riv err -110 [ 901.127245][T10216] sunplus: probe of 6-1:0.0 failed with error -110 [ 902.752124][T10216] usb 6-1: USB disconnect, device number 7 [ 903.011849][ T4792] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 904.423115][ T4792] usb 8-1: Using ep0 maxpacket: 8 [ 904.471828][T10573] loop8: detected capacity change from 0 to 1024 [ 904.555654][ T4792] usb 8-1: config 7 has an invalid interface number: 180 but max is 0 [ 904.572856][ T4792] usb 8-1: config 7 has no interface number 0 [ 904.594275][ T4792] usb 8-1: config 7 interface 180 has no altsetting 0 [ 904.786737][ T4792] usb 8-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 904.953618][ T4792] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.978725][ T4792] usb 8-1: Product: syz [ 905.622294][ T4792] usb 8-1: Manufacturer: syz [ 905.626967][ T4792] usb 8-1: SerialNumber: syz [ 906.040012][ T4792] go7007: probe of 8-1:7.180 failed with error -12 [ 906.109704][ T4792] usb 8-1: USB disconnect, device number 5 [ 906.293886][T10216] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 906.561120][T10216] usb 9-1: Using ep0 maxpacket: 16 [ 906.689525][T10216] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 906.732176][T10216] usb 9-1: config 0 has no interface number 0 [ 906.935547][T10216] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 906.985831][T10216] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.030102][T10216] usb 9-1: Product: syz [ 907.058601][T10216] usb 9-1: Manufacturer: syz [ 907.102101][T10216] usb 9-1: SerialNumber: syz [ 907.145625][T10216] usb 9-1: config 0 descriptor?? [ 907.226346][T10216] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 907.440021][T10591] udc-core: couldn't find an available UDC or it's busy [ 907.447068][T10591] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 907.822665][ T4792] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 909.106005][T10216] gspca_spca1528: reg_w err -110 [ 909.137689][T10216] spca1528: probe of 9-1:0.1 failed with error -110 [ 909.186732][T10216] usb 9-1: USB disconnect, device number 4 [ 909.198975][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1573'. [ 909.208420][ T4792] usb 5-1: Using ep0 maxpacket: 8 [ 909.273425][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1573'. [ 909.394474][ T4792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 909.430976][ T4792] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 909.455165][ T4792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.487472][T10615] loop7: detected capacity change from 0 to 1024 [ 909.517761][ T4792] usb 5-1: config 0 descriptor?? [ 910.555900][ T4792] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 911.399021][ T4792] usb 5-1: USB disconnect, device number 7 [ 912.740299][ T4259] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 913.018262][ T4259] usb 8-1: Using ep0 maxpacket: 16 [ 913.178953][ T4259] usb 8-1: config 0 has an invalid interface number: 9 but max is 1 [ 913.199375][ T4259] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.239042][ T4259] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 913.276127][ T4259] usb 8-1: config 0 has no interface number 0 [ 913.302041][ T4259] usb 8-1: config 0 interface 9 has no altsetting 0 [ 913.532008][ T4259] usb 8-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice= 9.a0 [ 913.554564][ T4259] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.562887][ T4259] usb 8-1: Product: syz [ 913.573720][ T4259] usb 8-1: Manufacturer: syz [ 913.588326][ T4259] usb 8-1: SerialNumber: syz [ 913.597047][ T4259] usb 8-1: config 0 descriptor?? [ 913.918579][ T4259] sierra 8-1:0.9: Sierra USB modem converter detected [ 913.973707][ T4259] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 914.038128][ T4259] usb 8-1: USB disconnect, device number 6 [ 914.048477][ T4259] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 914.089998][ T4259] sierra 8-1:0.9: device disconnected [ 914.567183][T10670] loop4: detected capacity change from 0 to 1024 [ 917.715445][T10724] loop7: detected capacity change from 0 to 1024 [ 918.526591][ T4259] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 918.844738][ T4259] usb 8-1: Using ep0 maxpacket: 32 [ 919.411651][ T4259] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 920.184556][ T4259] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.288801][T10747] tmpfs: Unknown parameter 'grpquota' [ 920.909291][ T4259] usb 8-1: config 0 descriptor?? [ 921.355454][ T4259] gspca_main: sunplus-2.14.0 probing 041e:400b [ 922.479500][ T4259] gspca_sunplus: reg_w_riv err -110 [ 922.484836][ T4259] sunplus: probe of 8-1:0.0 failed with error -110 [ 923.444186][ T4259] usb 8-1: USB disconnect, device number 7 [ 930.055154][T10794] chnl_net:caif_netlink_parms(): no params data found [ 930.270495][T10794] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.313993][T10794] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.346280][T10794] device bridge_slave_0 entered promiscuous mode [ 930.371471][T10794] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.418793][T10794] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.445771][T10794] device bridge_slave_1 entered promiscuous mode [ 930.497082][T10794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.580552][T10794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.687997][T10794] team0: Port device team_slave_0 added [ 930.742543][T10794] team0: Port device team_slave_1 added [ 930.866454][T10794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.892221][T10808] loop7: detected capacity change from 0 to 1024 [ 930.913281][T10794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.042464][T10794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.091359][T10794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.128092][T10794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.224440][T10794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.510346][T10794] device hsr_slave_0 entered promiscuous mode [ 931.535742][T10794] device hsr_slave_1 entered promiscuous mode [ 931.570624][T10794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 931.587899][T10794] Cannot create hsr debugfs directory [ 931.610952][ T5623] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.724089][ T5623] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.861112][ T5623] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.930305][ T4260] Bluetooth: hci4: command 0x0409 tx timeout [ 932.089050][ T5623] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.473264][ T26] audit: type=1326 audit(1769321510.491:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29ca4b00d9 code=0x7ffc0000 [ 932.518130][ T26] audit: type=1326 audit(1769321510.491:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29ca4b00d9 code=0x7ffc0000 [ 932.588355][ T26] audit: type=1326 audit(1769321510.491:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29ca4b00d9 code=0x7ffc0000 [ 932.656852][ T26] audit: type=1326 audit(1769321510.491:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29ca4b00d9 code=0x7ffc0000 [ 932.769072][ T26] audit: type=1326 audit(1769321510.491:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29ca4b00d9 code=0x7ffc0000 [ 932.843073][T10794] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 932.902823][ T26] audit: type=1326 audit(1769321510.501:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29ca4b00d9 code=0x7ffc0000 [ 932.966893][ T26] audit: type=1326 audit(1769321510.501:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29ca4b00d9 code=0x7ffc0000 [ 933.048613][ T26] audit: type=1326 audit(1769321510.501:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29ca4b00d9 code=0x7ffc0000 [ 933.085327][T10794] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 933.102556][T10794] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 933.167558][T10794] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 933.186454][ T26] audit: type=1326 audit(1769321510.501:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29ca4b00d9 code=0x7ffc0000 [ 933.329055][ T26] audit: type=1326 audit(1769321510.501:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29ca4b00d9 code=0x7ffc0000 [ 933.579356][T10794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.397687][ T1110] Bluetooth: hci4: command 0x041b tx timeout [ 934.412433][T10794] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.607061][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 934.651044][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 934.774694][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 934.861602][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 934.907296][ T4871] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.914437][ T4871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.004855][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1641'. [ 935.116070][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 935.124215][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 935.158187][T10861] loop7: detected capacity change from 0 to 1024 [ 935.185833][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 935.213065][ T4871] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.220233][ T4871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.291145][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 935.405643][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 935.425100][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 935.483832][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 935.526637][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 935.552201][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 935.815226][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 935.839838][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 935.920716][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 936.008907][T10794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 936.097417][T10794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 936.152756][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 936.187001][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 936.645287][ T4252] Bluetooth: hci4: command 0x040f tx timeout [ 936.881735][ T8277] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 936.892275][ T8277] CPU: 0 PID: 8277 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 936.899872][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 936.910057][ T8277] Workqueue: hci2 hci_rx_work [ 936.914974][ T8277] Call Trace: [ 936.918284][ T8277] [ 936.921236][ T8277] dump_stack_lvl+0x188/0x250 [ 936.925966][ T8277] ? asm_sysvec_call_function_single+0x16/0x20 [ 936.932260][ T8277] ? show_regs_print_info+0x20/0x20 [ 936.937503][ T8277] ? asm_sysvec_call_function_single+0x16/0x20 [ 936.943711][ T8277] sysfs_create_dir_ns+0x26a/0x290 [ 936.948924][ T8277] ? sysfs_warn_dup+0xa0/0xa0 [ 936.953712][ T8277] ? process_one_work+0x85f/0x1010 [ 936.958919][ T8277] ? do_raw_spin_unlock+0x11d/0x230 [ 936.964184][ T8277] kobject_add_internal+0x6e0/0xd90 [ 936.969486][ T8277] kobject_add+0x160/0x230 [ 936.973945][ T8277] ? kobject_init+0x1d0/0x1d0 [ 936.978657][ T8277] ? klist_children_get+0x50/0x50 [ 936.983809][ T8277] ? get_device_parent+0x121/0x3f0 [ 936.988963][ T8277] device_add+0x483/0xfb0 [ 936.993340][ T8277] hci_conn_add_sysfs+0xd1/0x1e0 [ 936.998374][ T8277] le_conn_complete_evt+0xc48/0x15c0 [ 937.003709][ T8277] ? cs_le_create_conn+0x5e0/0x5e0 [ 937.008865][ T8277] ? __mutex_trylock_common+0x155/0x260 [ 937.014523][ T8277] hci_le_meta_evt+0x285/0x3c90 [ 937.019450][ T8277] ? hci_event_packet+0x37b/0x1370 [ 937.024719][ T8277] ? __lock_acquire+0x7d10/0x7d10 [ 937.029788][ T8277] ? hci_remote_host_features_evt+0x280/0x280 [ 937.035888][ T8277] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 937.041553][ T8277] ? mark_lock+0x94/0x320 [ 937.045906][ T8277] ? mutex_unlock+0x10/0x10 [ 937.050430][ T8277] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 937.056495][ T8277] ? lock_chain_count+0x20/0x20 [ 937.061371][ T8277] ? __rwlock_init+0x140/0x140 [ 937.066158][ T8277] hci_event_packet+0xe48/0x1370 [ 937.071130][ T8277] ? lockdep_hardirqs_on+0x94/0x140 [ 937.076442][ T8277] ? rcu_lock_release+0x20/0x20 [ 937.081337][ T8277] ? hci_send_to_monitor+0x9c/0x4a0 [ 937.086573][ T8277] hci_rx_work+0x255/0xa10 [ 937.091041][ T8277] process_one_work+0x85f/0x1010 [ 937.096111][ T8277] ? worker_detach_from_pool+0x240/0x240 [ 937.101775][ T8277] ? lockdep_hardirqs_off+0x70/0x100 [ 937.107107][ T8277] ? _raw_spin_lock_irq+0xb7/0xf0 [ 937.112167][ T8277] ? _raw_spin_lock_irqsave+0x100/0x100 [ 937.117733][ T8277] ? wq_worker_running+0x97/0x170 [ 937.122780][ T8277] worker_thread+0xaa6/0x1290 [ 937.127491][ T8277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 937.133409][ T8277] kthread+0x436/0x520 [ 937.137551][ T8277] ? rcu_lock_release+0x20/0x20 [ 937.142420][ T8277] ? kthread_blkcg+0xd0/0xd0 [ 937.147052][ T8277] ret_from_fork+0x1f/0x30 [ 937.151509][ T8277] [ 937.165624][ T8277] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 937.179453][ T8277] Bluetooth: hci2: failed to register connection device [ 937.209800][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 937.218069][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 937.235802][T10794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 938.414325][ T5623] device hsr_slave_0 left promiscuous mode [ 938.452231][ T5623] device hsr_slave_1 left promiscuous mode [ 938.472858][ T5623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.480357][ T5623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.558916][ T5623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.566422][ T5623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.645332][ T5623] device bridge_slave_1 left promiscuous mode [ 938.651704][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.705263][ T5623] device bridge_slave_0 left promiscuous mode [ 938.729262][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.774554][ T5623] device veth1_macvtap left promiscuous mode [ 938.780656][ T5623] device veth0_macvtap left promiscuous mode [ 938.805410][ T5623] device veth1_vlan left promiscuous mode [ 938.811346][ T5623] device veth0_vlan left promiscuous mode [ 938.858094][T10704] Bluetooth: hci4: command 0x0419 tx timeout [ 940.347443][ T5623] team0 (unregistering): Port device team_slave_1 removed [ 940.389323][T10929] misc userio: No port type given on /dev/userio [ 940.408172][ T5623] team0 (unregistering): Port device team_slave_0 removed [ 940.485729][ T5623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.511445][ T5623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.297681][ T5623] bond0 (unregistering): Released all slaves [ 941.465394][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 941.485673][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 941.538128][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 941.581478][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 941.598556][T10794] device veth0_vlan entered promiscuous mode [ 941.621362][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 941.636401][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 941.677346][T10794] device veth1_vlan entered promiscuous mode [ 941.806098][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 941.828247][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 941.849404][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 941.883079][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 941.906412][T10794] device veth0_macvtap entered promiscuous mode [ 941.942603][T10794] device veth1_macvtap entered promiscuous mode [ 941.968211][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.991974][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.024923][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.051073][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.095179][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.117187][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.150113][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.175776][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.205722][T10794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.227381][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.989401][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.000303][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.011184][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.032192][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.205254][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.638892][T10794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.664534][T10794] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.679446][T10794] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.688257][T10794] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.704188][T10794] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.723617][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 943.747117][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 943.770002][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 943.796122][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 943.825702][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 943.867593][ T9934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 944.363238][ T9934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.396284][ T9934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.519740][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 944.568932][ T4359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.611429][ T4359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.679348][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 946.062984][ T5158] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 946.373125][ T5158] usb 5-1: Using ep0 maxpacket: 16 [ 946.501432][ T5158] usb 5-1: config 0 has no interfaces? [ 946.672472][ T5158] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 946.681683][ T5158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.743989][ T5158] usb 5-1: Product: syz [ 946.758961][ T5158] usb 5-1: Manufacturer: syz [ 946.768761][ T5158] usb 5-1: SerialNumber: syz [ 946.779401][ T9539] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 946.809346][ T5158] usb 5-1: config 0 descriptor?? [ 947.122448][ T5158] usb 5-1: USB disconnect, device number 8 [ 947.987338][ T9539] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.018970][ T9539] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 948.072727][ T9539] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.115117][ T9539] usb 8-1: config 0 descriptor?? [ 948.660695][T11033] misc userio: No port type given on /dev/userio [ 948.709977][ T9539] lenovo 0003:17EF:6047.0003: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.7-1/input0 [ 949.858274][ T9539] lenovo 0003:17EF:6047.0003: Failed to switch middle button: -71 [ 949.892695][ T9539] lenovo 0003:17EF:6047.0003: Fn-lock setting failed: -71 [ 949.965096][ T9539] lenovo 0003:17EF:6047.0003: Sensitivity setting failed: -71 [ 950.041558][ T9539] usb 8-1: USB disconnect, device number 8 [ 950.482593][T11058] fido_id[11058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 952.192195][T11077] syz.7.1690 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 956.188273][T11113] tipc: Started in network mode [ 956.193617][T11113] tipc: Node identity f60c9f0976fd, cluster identity 4711 [ 956.306367][T11113] tipc: Enabled bearer , priority 0 [ 956.531220][T11114] device syzkaller0 entered promiscuous mode [ 956.904141][T11126] tipc: Resetting bearer [ 957.225782][T11126] tipc: Disabling bearer [ 957.518417][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 957.525462][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 960.132112][ T4301] tipc: Node number set to 2163318537 [ 960.645149][ T4301] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 961.222340][ T4301] usb 8-1: Using ep0 maxpacket: 32 [ 961.746457][ T4301] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 961.755001][ T4301] usb 8-1: config 0 has no interface number 0 [ 961.809023][ T4301] usb 8-1: config 0 interface 12 has no altsetting 0 [ 962.045470][ T4301] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 962.067546][ T4301] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.103704][ T4301] usb 8-1: Product: syz [ 962.128010][ T4301] usb 8-1: Manufacturer: syz [ 962.154607][ T4301] usb 8-1: SerialNumber: syz [ 962.191603][ T4301] usb 8-1: config 0 descriptor?? [ 963.381913][ T4301] f81534 8-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 963.401201][ T4301] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 963.423207][ T4301] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 963.626040][ T4301] f81534: probe of 8-1:0.12 failed with error -71 [ 964.695686][ T4301] usb 8-1: USB disconnect, device number 9 [ 966.742364][T11218] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1721'. [ 970.459056][T11257] ------------[ cut here ]------------ [ 970.464941][T11257] WARNING: CPU: 1 PID: 11257 at include/linux/fs.h:532 hugetlb_split+0x237/0x2a0 [ 970.474229][T11257] Modules linked in: [ 970.478146][T11257] CPU: 1 PID: 11257 Comm: syz.5.1730 Not tainted syzkaller #0 [ 970.485676][T11257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 970.495803][T11257] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 970.501196][T11257] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 e5 b3 bf ff 0f 0b e9 62 fe ff ff e8 d9 b3 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 44 0c 8a 8d 80 e1 07 80 c1 03 38 c1 [ 970.520883][T11257] RSP: 0018:ffffc9000358f840 EFLAGS: 00010287 [ 970.527027][T11257] RAX: ffffffff81b96bc7 RBX: 0000200000c00000 RCX: 0000000000080000 [ 970.535086][T11257] RDX: ffffc9001444b000 RSI: 00000000000000ab RDI: 00000000000000ac [ 970.543241][T11257] RBP: 0000000000000000 R08: ffff88807eba70bf R09: 1ffff1100fd74e17 [ 970.551344][T11257] R10: dffffc0000000000 R11: ffffed100fd74e18 R12: ffff88802ae28d00 [ 970.559389][T11257] R13: dffffc0000000000 R14: ffff88802ae28c60 R15: ffff8880768f1840 [ 970.567440][T11257] FS: 00007f53f2c5b6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 970.747513][T11257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 970.754161][T11257] CR2: 0000200000020000 CR3: 000000004dc2c000 CR4: 00000000003506e0 [ 970.762209][T11257] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 970.770211][T11257] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 970.778184][T11257] Call Trace: [ 970.781497][T11257] [ 970.784436][T11257] __vma_adjust+0x2b6/0x1c10 [ 970.789109][T11257] ? rcu_lock_acquire+0x30/0x30 [ 970.794065][T11257] ? memset+0x1e/0x40 [ 970.798103][T11257] __split_vma+0x34b/0x410 [ 970.802601][T11257] do_madvise+0x1ee4/0x2c90 [ 970.807139][T11257] ? get_nr_vmemmap_pages_cb+0x40/0x40 [ 970.812639][T11257] ? verify_lock_unused+0x140/0x140 [ 970.817868][T11257] ? do_futex+0xdb2/0x12b0 [ 970.822387][T11257] ? check_vma_flags+0x480/0x480 [ 970.827372][T11257] ? up_write+0x1bb/0x420 [ 970.831982][T11257] ? __context_tracking_exit+0x4c/0x80 [ 970.837519][T11257] ? __lock_acquire+0x7d10/0x7d10 [ 970.842571][T11257] ? lock_chain_count+0x20/0x20 [ 970.847476][T11257] ? vtime_user_exit+0x2c8/0x3e0 [ 970.852570][T11257] __x64_sys_madvise+0xa2/0xb0 [ 970.972012][T11257] do_syscall_64+0x4c/0xa0 [ 970.976497][T11257] ? clear_bhb_loop+0x30/0x80 [ 970.981178][T11257] ? clear_bhb_loop+0x30/0x80 [ 970.985900][T11257] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 970.991799][T11257] RIP: 0033:0x7f53f4a41cb9 [ 970.996241][T11257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.015892][T11257] RSP: 002b:00007f53f2c5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 971.024314][T11257] RAX: ffffffffffffffda RBX: 00007f53f4cbd180 RCX: 00007f53f4a41cb9 [ 971.032327][T11257] RDX: 000000000000000e RSI: 0000000000400000 RDI: 0000200000c00000 [ 971.040328][T11257] RBP: 00007f53f4aafbf7 R08: 0000000000000000 R09: 0000000000000000 [ 971.048332][T11257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.056307][T11257] R13: 00007f53f4cbd218 R14: 00007f53f4cbd180 R15: 00007fff2bf52018 [ 971.064315][T11257] [ 971.067346][T11257] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 971.074617][T11257] CPU: 1 PID: 11257 Comm: syz.5.1730 Not tainted syzkaller #0 [ 971.082069][T11257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 971.092121][T11257] Call Trace: [ 971.095395][T11257] [ 971.098321][T11257] dump_stack_lvl+0x188/0x250 [ 971.103002][T11257] ? show_regs_print_info+0x20/0x20 [ 971.108198][T11257] ? load_image+0x400/0x400 [ 971.112732][T11257] panic+0x2e5/0x810 [ 971.116639][T11257] ? bpf_jit_dump+0xd0/0xd0 [ 971.121204][T11257] ? hugetlb_split+0x237/0x2a0 [ 971.126063][T11257] __warn+0x248/0x2b0 [ 971.130051][T11257] ? hugetlb_split+0x237/0x2a0 [ 971.134840][T11257] report_bug+0x1b7/0x2e0 [ 971.139186][T11257] handle_bug+0x3a/0x70 [ 971.143340][T11257] exc_invalid_op+0x16/0x40 [ 971.147855][T11257] asm_exc_invalid_op+0x16/0x20 [ 971.152724][T11257] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 971.158095][T11257] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 e5 b3 bf ff 0f 0b e9 62 fe ff ff e8 d9 b3 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 44 0c 8a 8d 80 e1 07 80 c1 03 38 c1 [ 971.177700][T11257] RSP: 0018:ffffc9000358f840 EFLAGS: 00010287 [ 971.183765][T11257] RAX: ffffffff81b96bc7 RBX: 0000200000c00000 RCX: 0000000000080000 [ 971.191729][T11257] RDX: ffffc9001444b000 RSI: 00000000000000ab RDI: 00000000000000ac [ 971.199698][T11257] RBP: 0000000000000000 R08: ffff88807eba70bf R09: 1ffff1100fd74e17 [ 971.207667][T11257] R10: dffffc0000000000 R11: ffffed100fd74e18 R12: ffff88802ae28d00 [ 971.215643][T11257] R13: dffffc0000000000 R14: ffff88802ae28c60 R15: ffff8880768f1840 [ 971.223653][T11257] ? hugetlb_split+0x237/0x2a0 [ 971.228449][T11257] __vma_adjust+0x2b6/0x1c10 [ 971.233058][T11257] ? rcu_lock_acquire+0x30/0x30 [ 971.237931][T11257] ? memset+0x1e/0x40 [ 971.241928][T11257] __split_vma+0x34b/0x410 [ 971.246372][T11257] do_madvise+0x1ee4/0x2c90 [ 971.250886][T11257] ? get_nr_vmemmap_pages_cb+0x40/0x40 [ 971.256357][T11257] ? verify_lock_unused+0x140/0x140 [ 971.261564][T11257] ? do_futex+0xdb2/0x12b0 [ 971.265981][T11257] ? check_vma_flags+0x480/0x480 [ 971.270919][T11257] ? up_write+0x1bb/0x420 [ 971.275258][T11257] ? __context_tracking_exit+0x4c/0x80 [ 971.280722][T11257] ? __lock_acquire+0x7d10/0x7d10 [ 971.285765][T11257] ? lock_chain_count+0x20/0x20 [ 971.290620][T11257] ? vtime_user_exit+0x2c8/0x3e0 [ 971.295560][T11257] __x64_sys_madvise+0xa2/0xb0 [ 971.300327][T11257] do_syscall_64+0x4c/0xa0 [ 971.304742][T11257] ? clear_bhb_loop+0x30/0x80 [ 971.309442][T11257] ? clear_bhb_loop+0x30/0x80 [ 971.314117][T11257] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 971.320008][T11257] RIP: 0033:0x7f53f4a41cb9 [ 971.324422][T11257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.344025][T11257] RSP: 002b:00007f53f2c5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 971.352459][T11257] RAX: ffffffffffffffda RBX: 00007f53f4cbd180 RCX: 00007f53f4a41cb9 [ 971.360433][T11257] RDX: 000000000000000e RSI: 0000000000400000 RDI: 0000200000c00000 [ 971.368401][T11257] RBP: 00007f53f4aafbf7 R08: 0000000000000000 R09: 0000000000000000 [ 971.376524][T11257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.384504][T11257] R13: 00007f53f4cbd218 R14: 00007f53f4cbd180 R15: 00007fff2bf52018 [ 971.392497][T11257] [ 971.395854][T11257] Kernel Offset: disabled [ 971.400479][T11257] Rebooting in 86400 seconds..