last executing test programs: 11m22.034660257s ago: executing program 1 (id=469): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 11m21.918310969s ago: executing program 1 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x101, 0x70bd22, 0xfffffffc, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) 11m21.905181569s ago: executing program 1 (id=472): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000280000000400"], 0x48) 11m21.762142602s ago: executing program 1 (id=474): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 11m21.692082053s ago: executing program 1 (id=477): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) 11m21.465999978s ago: executing program 1 (id=482): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) 11m6.386481222s ago: executing program 32 (id=482): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) 6m42.615809623s ago: executing program 0 (id=1574): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x46080, 0xa0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) 6m42.153306881s ago: executing program 0 (id=1584): gettid() bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0x9, 0x3, 0xb, 0x50, 0xfffffffffffffffc}, @ringbuf_query], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x20003) pause() r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r2, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000548000/0x1000)=nil, &(0x7f0000fee000/0x11000)=nil, 0x1000}) fcntl$setsig(r0, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r1}], 0x2c, 0xffffffffffbffff8) dup2(r0, r1) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6m39.380109694s ago: executing program 0 (id=1586): socket(0x10, 0x803, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x200880, &(0x7f0000000100)={[{@time_offset={'time_offset', 0x3d, 0x6}}, {@allow_utime={'allow_utime', 0x3d, 0x8e29}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@utf8}, {@errors_continue}]}, 0x5, 0x1509, &(0x7f0000000f80)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000e80)=""/4072, 0xfe8) 6m34.722584662s ago: executing program 0 (id=1589): sched_setaffinity(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) userfaultfd(0x80001) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) 6m32.818399647s ago: executing program 0 (id=1600): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2000004c, &(0x7f00000004c0)=ANY=[@ANYBLOB='utf8,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c696f636861727365743d6d616363726f617469616e2c6e616d65636173653d312c616c6c6f775f7574696d653d3030303030303030303030372c756d61736b3d30303030303030303030303030303030303030303232362c0000000000000000d74bdc68"], 0x1, 0x14f7, &(0x7f0000002a80)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 6m30.516224101s ago: executing program 2 (id=1595): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0xffbf) 6m28.99010995s ago: executing program 0 (id=1597): socket(0x10, 0x803, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x200880, &(0x7f0000000100)={[{@time_offset={'time_offset', 0x3d, 0x6}}, {@allow_utime={'allow_utime', 0x3d, 0x8e29}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@utf8}, {@errors_continue}]}, 0x5, 0x1509, &(0x7f0000000f80)="$eJzs3AuYTlXbOPD7XmvtMSQ9SQ7DWuvePMlhmSTJIUkOSZIkSU4JoUleSUgMOSUNSUgOQ3IYQnKYmDTO5/MxSZImSXLKKVn/a4rX21v936/v7Xt91zf377r2Zd3P2vfaa8+9H8/am2e+7TK0RqOaVRsQEfxb8Jc/EgEgFgAGAsB1ABAAQNncZXNn9meXmPjvHYT9tR5JudozYFcT1z9r4/pnbVz/rI3rn7Vx/bM2rn/WxvXP2rj+jGVlm6cXuJ63rLvx8/+sjD///w/JKDX2y7Wlbuz6J1K4/lkb1///rOC/shPXP2vj+mdtXP+sjeufFWT7wx6uf9bG9WcsK7vaz595u7rb1b7+GGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlDWf9FQoALrev9rwYY4wxxhhjjDH21/HZrvYMGGOMMcYYY4wx9j8PQYAEBQHEQDaIheyQAwQAXAu54DqIwPWQG26APHAj5IV8kB8KQBwUhEKgwYAFghAKQxGIwk1QFG6GYlAcSkBJcFAK4uEWKA23Qhm4DcrC7VAO7oDyUAEqQiW4EyrDXVAF7oaqcA9Ug+pQA2rCvVAL7oPacD/UgQegLjwI9eAhqA8PQwN4BBrCo9AIHoPG8Dg0gabQDJpDi/9W/ovQA16CntALEqE39IGXoS/0g/4wAAbCKzAIXoXB8BokwRAYCq/DMHgDhsObMAJGwih4C0bD2zAGxsI4GA/JMAEmwjswCd6FyTAFpsI0SIHpMAPeg5kwC2bD+zAHPoC5MA/mwwJIhQ9hISyCNPgIFsPHkA5LYCksg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK2yD7bADdsIu2A2fwB74FPbCZ7APPv+T+Wf+Kb8rAgIKFKhQYQzGYCzGYg7MgTkxJ+bCXLGXL5I8mAfzYl7Mj/kxDuOwEBZCgwYJCQtjYYxiFItiUSyGxbAElkCHDuMxHkvjrVgGy2BZLIvlsByWxwpYASthJayMlbEKVsGqWBWrYTWsgTXwXrwXe2NtrI11sA7WxbqXH09hA2yADbEhNsJG2BgbYxNsgs2wGbbAFtgSW2IrbIVtsA22xbbYHttjAiZgB+yAHbEjdsJO2Bk7Yxfsgl2xG3bDF7MBvoQvYS+sJnpjH+yDfTEpW38cgAPwFRyEr+Kr+Bom4RAciq/j6/gGDsfTOAJH4igchZXF2zgGxyKJ8ZiMyTgRJ+IknISTcQpOwWmYgtNxBs7AmTgLZ+H7OAc/wA9wHs7DBZiKqbgQF2EapuFiPIPpuASX4jJcjitwOa7C1bgK1+I6XIsbcANuwk24BbfgNtyGO3AH7kIFgJ/gp/gpJuE+3If7cT8ewAN4EA9iBmbgITyEh/EwHsEjeBSP4jE8jifwOJ7CU3gaz+BZPIvn8TxewOfjvm64q/iaJBCZlFAiRsSIWBErcogcIqfIKXKJXCIiIiK3yC3yiDwir8gr8ov8Ik7EiUKikDDCCBJhDACIqIiKoqKoKCaKiRKihHDCiXgRL0qL0qKMKCPKittFOXGHKC8qiNaukqgkKos2roq4W1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88JOqL3tgfHxGZlWkkhmBjMRSbiKZCXro4W4rh2Eq0Fm3EU2IkjsD2oqVLEM+IDmIMdhR/E2PxOdFZjMcu4gXRVXQT3cWLoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxfs4J3sN8ZpIEkPEUPG6WIBviOHiTTFCjBSjxFtitHhbjBFjxTgxXiSLCWKieEdMEu+KyWKKmCqmiRQxXcwQ74mZYpaYLd4Xc8QHYq6YJ+aLBSJVfCgWikUiTXwkFouPRbpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdopdYrf4ROwRn4q94jOxT3wu9osvxAHxpTgovhIZ4mtxSHwjDotvxRHxnTgqvhfHxHFxQpwUp8QP4rQ4I86Kc+K8+FFcED+Ji8ILkCiFlFLJQMbIbDJWZpc55DUypwwu/XSvl7nlDTKPvFHmlflkfllAxsmCspDU0kgrSYaysCwio/ImWVTeLIvJ4rKELCmdLCXj5S2ytLxVlpG3ybLydllO3iHLywqyoqwk75SV5V0SIr8co5qsLmvImvJeWUveJ2vL+2Ud+YCsKx+U9eRDsr58WDaQj8iG8lHZSD4mG8vHZRPZVDaTzWUL+YRsKZ+UrWRr2UY+JdvKdrK9fFomyGdkB+kvXSLPyc7yedlFviC7ym6yu/xJXpRe9pS9JEBv2Ue+LPvKfrK/HCAHylfkIPmqHCxfk0lyiBwqX5fD5BtyuHxTjpAj5Sj5lhwt35Zj5Fg5To6XyXKCnCjfkZPku3KynCKnymkyRU6X/S+NNFvKf5n/zu/kD/756JvkZrlFbpXb5Ha5Q+6Uu+RuuVvukXvkXrlX7pP75H65Xx6QB+RBeVBmyAx5SB6Sh+VheUQekUflUXlMHpfn5El5Sv4gT8sz8ow8J8/L8/LCpZ8BKFRCSaVUoGJUNhWrsqsc6hqVU12rcqnrVERdr3KrG1QedaPKq/Kp/KqAilMFVSGllVFWkQpVYVVERdVNeOmCUSVUSeVUKRWvbvkz+aqoulkVU8V/lX95fol/ML8WqoVqqVqqVqqVaqPaqLaqrWqv2qsElaA6qA6qo+qoOqlOqrPqrLqoLqqr6qq6q+6qh+qheqqeKlElqj7qZdVX9VP91QA1UL2iBqlBarAarJJUkhqqhqphapgaroarEWqEGqVGqdFqtBqjxqhxapxKVslqopqoJqlJarKarKaqqSpFpagZaoaaqWaq2Wq2mqPmqLlqrpqv5qtUlaoWqoUqTaWpxWqxSldL1BK1TC1TK9QKtUqtUmvUGrVOrVMb1AaVrjarzWqr2qq2q+1qp9qpdqvdao/ao/aqvWqf2qf2q/3qgDqgDqqDKkNlqEPqkDqsDqsj6og6qo6qY+qYOqFOqFPqlDqtTquz6qw6r86rC+qCuqguZi77AhGIQAUqiAligtggNsgR5AhyBjmDXEGuIBJEgtxB7iBPcGOQN8gX5A8KBHFBwaBQoAMT2EBcKno0uCkoGtwcFAuKByWCkoELSgXxwS1B6eDWoExwW1A2uD0oF9wRlA8qBBWDSsGdQeXgrqBKcHdQNbgnqBZUD2oENYN7g1rBfUHt4P6gTvBAUDd4MKgXPBTUDx4OGgSPBA2DR4NGwWNB4+DxoEnQNGgWNA9a/KXje38635Oup+6lE3Vv3Ue/rPvqfrq/HqAH6lf0IP2qHqxf00l6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6t39Zj9Fg9To/XyXqCnqjf0ZP0u3qynqKn6mk6RU/XM/R7eqaepWfr9/Uc/YGeq+fp+XqBTtUf6oV6kU7TH+nF+mOdrpfopXqZXq5X6JV6lV6t1+i1ep1erzfojXqT3qy36K16m96ud+idepferT/Re/Sneq/+TO/Tn+v9+gt9QH+pD+qvdIb+Wh/S3+jD+lt9RH+nj+rv9TF9XJ/QJ/Up/YM+rc/os/qcPq9/1Bf0T/qi9pmL+8yPd6OMMjEmxsSaWJPD5DA5TU6Ty+QyERMxuU3udpfKb/Kb/CbOxJlCppDJRIZMYVPYRE3UFDVFTTFTzJQwJYwzzsSbeFPalDZlTBlT1pQ15Uw5U96UNxVNRXOnudPcZe4yd5u7zT3mHlPdVDc1TU1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDHNTDPTwrQwLU1L08q0Mm1MG9PWtDXtTXuTYBJMB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySaRNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNkksxQM9QMM8PMcDPcjDAjzajMhap524wxY804M94km2Qz0Uw0k8wkM9lMNlPNVJNiUswMM8PMNDPNbDPbzDFzzFwz18w3802qSTULzUKTZtLMYrPYpJt0s9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTAZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm3yXPi+9ibXZbQ57jc1pr7W57HX2n+P8toCNswVtIattXpvvV7Gx1hazxW0JW9I6W8rG21t+E5e3FWxFW8neaSvbu2yV38S17H22tr3f1rEP2Jr23l/Fde2Dtp59zNZHBLBNbUPb3Dayj9nG9nHbxDa1zWxz29a2s+3t0zbBPmM72Gd/Ey+0i+xqu8autevsHvupPWvP2cP2W3ve/mh72l52oH3FDrKv2sH2NZtkh/wmHmXfsqPt23aMHWvH2fG/iafaaTbFTrcz7Ht2pp31mzjVfmjn2DQ7186z8+2Cn+PMOaXZj+xi+7FNt0vsUrvMLrcr7Eq76u9zXWY32I12k91tP7Fb7Ta73e6wO+2un+PM89hrP7P77Of2kP3GHrBf2oP2iM2wX/8cZ57fEfudPWq/t8fscXvCnrSn7A/2tD3z8/lnnvtJ+5O9aL0FQgKSpCigGMpGsZSdctA1lJOupVx0HUXoespNN1AeupHyUj7KTwUojgpSIdJkyBJRSIWpCEXpJrq8Ti9BJclRKYqnW6g03Upl6DYqS7dTObqDylMFqkiV6E6qTHdRFbqbqtI9VI2qUw2qSfdSLbqPatP9VIceoLr0INWjh6g+PUwN6BFqSI9SI3qMGtPj1ISaUjNqTi3oCWpJT1Irak1t6ClqS+2oPT1NCfQMdaBnqSP9jTrRc9SZnqcu9AJ1pW7UnV6kHvQS9aRelEi9qQ+9TH2pH/WnATSQXqFB9CoNptcoiYbQUHqdhtEbNJzepBE0kkbRWzSa3qYxNJbG0XhKpgk0kd6hSfQuTaYpNJWmUQpNpxn0Hs2kWTSb3qc59AHNpXk0nxZQKn1IC2kRpdFHtJg+pnRaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbacdtJN20W76hPbQp7SXPqN99Dntpy/oAH1JB+kryqCv6RB9Q4fpWzpC3/le9D0do+N0gk7SKfqBTtMZOkvn6Dz9SBfoJ7pIniDEUIQyVGEQxoTZwtgwe5gjvCbMGV4b5gqvCyPh9WHu8IYwT3hjmDfMF+YPC4RxYcGwUKhDE9qQwjAsHBYJo+FNYdHw5rBYWDwsEZYMXVgqjA9vCUuHt4ZlwtvCsuHtYbnwjrB8WCF87IFK4Z1h5fCusEp4d1g1vCesFlYPa4Q1w3vDWuF9Ye3w/rBO+EBYJnwwrBc+FNYPHw4bhI+EDcNHw0bhY2Hj8PGwSdg0bBY2D1uET4QtwyfDVmHrsE34VNg2bBe2D58OE8Jnwg7hsz/3P7joj/sTw95hn/Dl8OXQ+/vl/OiCaGr0w+jC6KJoWvSj6OLox9H06JLo0uiy6PLoiujK6Kro6uia6Nrouuj66IboxuimqPc1s4FDJ5x0ygUuxmVzsS67y+GucTndtS6Xu85F3PUut7vB5XE3urwun8vvCrg4V9AVctoZZx250BV2RVzU3eSKuptdMVfclXAlnXOlXLxr7lq4Fq6le9K1cq1dG/eUe8q1c+3c0+5p94zr4J51Hd3fXCf3nOvsnnfPuxdcV9fNdXcvuh5uQq5f3pOJro/r4/q6vq6/6+8GuoFukBvkBrvBLskluaFuqBvmhrnhbrgb4Ua4UW6UG+1GuzFujBvnxrlkl+wmuolukpvkJrvJbqqb6lJcipvhZriZbqarPOuXo8x1c918N9+lulS30GWuGdPcYrfYpbt0t9QtdcvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Xa30+10u91ut8df98ugbp/b7/a7A+6AO+i+chnua3fIfeMOu2/dEfedO+q+d8fccXfCnXSn3A/utDvjzrpz7rz70V1wP7mLzrvkyITIxMg7kUmRdyOTI1MiUyPTIimR6ZEZkfciMyOzIrMj70fmRD6IzI3Mi8yPLIikRj6MLIwsiqRFPoosjnwcSY8siSyNLIssj6yIeF9wa+gL+yI+6m/yRf3Nvpgv7kv4kt75Uj7e3+JL+1t9GX+bL+tv9+X8Hb68r+Ar+sd9E9/UN/PNfQv/hG/pn/StfGvfxj/l2/p2vr1/2if4Z3wH/6zv6P/mO/nnfGf/vO/iX/BdfTff3b/oe/iXfE/fyyf63r6Pf9n39f18fz/AD/Sv+EH+VT/Yv+aT/BA/1L/uh/k3/HD/ph/hR/pRMW/50ZdvkWG8T/YT/ET/jp/k3/WT/RQ/1U/zKX66n+Hf8zP9LD/bv+/n+A/8XD/Pz/cLfKr/0C/0i3ya/8gv9h/7dL/k8kNlv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dr/T7/K7/Sd+j//U7/Wf+X3+c7/ff+EP+C/9Qf+Vz/Bf+0P+G3/Yf+uP+O/8Uf+9P+aP+xP+pD/lf/Cn/Rl/1p/z5/2P/oL/yV/k76wxxhhjjP2XTLjSFL/X3/t3XhP/sHMfALh2W4GMf+zPXFGuz/tLu5+IaxsBgGd6dXnk8latWmJi4qV90yUEReYBXP6XoEwxcCVeAm2gHSRAayj9u/PvJ7qdp38xfvR2gBz/kBMLV+Ir43/xB+M/8dSoheXCs7n/P+PPAyhW5EpOdvh7/PdvV7SGMn8wfr6W/2L+2b9MBmj1Dzk54Up8Zf7x8CQ8Cwm/2pMxxhhjjDHGGPtFP1Gx0+X7z8v/4/P37s/j1JWczJvay/G/uj9njDHGGGOMMcbY1fdct+5PP5GQ0LrTn29U+W9lceN/a8N7gMuvKAD4NwcE+I+fxZb/yLGSLr11/rlr+TkfwP+OUv4Vjav8FxNjjDHGGGPsL3dl0f/r19XVmhBjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYF/Sd+ndjVPkfGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsavt/AQAA//+neQxq") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000e80)=""/4072, 0xfe8) 6m28.888380011s ago: executing program 2 (id=1598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x10) 6m28.350365832s ago: executing program 2 (id=1599): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TCSETS(r0, 0x5434, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 6m26.240486562s ago: executing program 2 (id=1603): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 6m24.806673449s ago: executing program 2 (id=1607): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0xffbf) 6m24.72944546s ago: executing program 2 (id=1608): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0xa, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000280), &(0x7f0000000300)=0x4) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) pipe2(0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff2d714058df7ecc33adfba2b7ac0787eb47bcab7f4d9c637703000008000000b704000000000200850000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) connect$netlink(r4, &(0x7f0000000140), 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000410, &(0x7f00000001c0)={[{@grpid}, {@mblk_io_submit}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") unshare(0x22020600) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000002bc0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="10"], 0x20) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) 6m13.358791704s ago: executing program 33 (id=1597): socket(0x10, 0x803, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x200880, &(0x7f0000000100)={[{@time_offset={'time_offset', 0x3d, 0x6}}, {@allow_utime={'allow_utime', 0x3d, 0x8e29}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@utf8}, {@errors_continue}]}, 0x5, 0x1509, &(0x7f0000000f80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000e80)=""/4072, 0xfe8) 6m9.548998146s ago: executing program 34 (id=1608): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0xa, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000280), &(0x7f0000000300)=0x4) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) pipe2(0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff2d714058df7ecc33adfba2b7ac0787eb47bcab7f4d9c637703000008000000b704000000000200850000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) connect$netlink(r4, &(0x7f0000000140), 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000410, &(0x7f00000001c0)={[{@grpid}, {@mblk_io_submit}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") unshare(0x22020600) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000002bc0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="10"], 0x20) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) 11.398155306s ago: executing program 5 (id=2409): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockname$packet(r0, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x70bd2a, 0x0, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x2800810, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x185, &(0x7f00000003c0)="$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") r7 = open(&(0x7f0000000480)='./file2\x00', 0x4000, 0x90) preadv2(r7, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, r9, 0x4, 0x2, 0x1}, 0x50) 9.206387377s ago: executing program 3 (id=2413): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 8.377888423s ago: executing program 4 (id=2414): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800800030081"], 0x64}}, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x147c7c, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x44}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.146653357s ago: executing program 4 (id=2415): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r0, 0x10, 0x800, 0x3) 8.038180009s ago: executing program 3 (id=2416): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) 7.880349312s ago: executing program 5 (id=2417): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x2800810, &(0x7f0000000640)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b9d48047c77540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff90177d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e200f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x3, 0x185, &(0x7f00000003c0)="$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") r0 = open(&(0x7f0000000480)='./file2\x00', 0x4000, 0x90) preadv2(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 7.734116395s ago: executing program 4 (id=2419): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0xfffffff8, 0x7, 0x5, 0x4, 0x9]}, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000580)='syzkaller0\x00'}, 0x30) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x21, 0x6}, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) 7.681927356s ago: executing program 3 (id=2420): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.959800609s ago: executing program 5 (id=2421): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0x3, &(0x7f0000000100)={0xb, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000440)) close_range(r0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x94, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) 6.001515898s ago: executing program 3 (id=2423): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f00000006c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) fsetxattr(r3, 0x0, 0x0, 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0xffffffffffffff85, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x100, 0x800001}, @flat, @fd={0x66642a85, 0x48000000, r3}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.959248608s ago: executing program 6 (id=2424): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"], 0x48) 5.934602968s ago: executing program 4 (id=2425): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockname$packet(r0, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x70bd2a, 0x0, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x2800810, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x185, &(0x7f00000003c0)="$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") r7 = open(&(0x7f0000000480)='./file2\x00', 0x4000, 0x90) preadv2(r7, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, r9, 0x4, 0x2, 0x1}, 0x50) 5.629947734s ago: executing program 6 (id=2426): r0 = io_uring_setup(0x5be0, &(0x7f0000000000)={0x0, 0x400067c1, 0x80, 0x4000000, 0x20c}) r1 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x100080d, &(0x7f0000000340)=ANY=[], 0xff, 0x1f2, &(0x7f0000000900)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000600)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "2b1fc7", 0x8, 0x11, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, {[], {0x4e21, 0x4e21, 0x8}}}}}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000b00)={0x6a6, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000340)="63d9ed6c25dca2a4dfe04bb60000", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) close_range(r0, 0xffffffffffffffff, 0x0) 4.549551455s ago: executing program 3 (id=2427): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x21, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000304000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="c5108dea2bd24dcf1800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mJ\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd7*\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef\x91\xbd\xb7S\xa9L\x04V|\x05i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4!S\"\x887c\xb8\xbc\x18\xee\x87@\x9c\xf3\xf1K\xfe\xa7\xe81D\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xff\x90\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\b\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\xa6\xa5\x02\xf8\xf0\xd7Lp3\x9e\xcf|\xe1\xafG\xc5\xc3\xa2\xa9\x8fZLvx\xddV\xc5L\x9d\x99\x16\xad\x8c\xaa4\x8b\x04;\xea\xe5\xc4v\x9deSF}\'\xb8\xd9a\xa9T\x01\x11W\\\x83\xb1r^\\\x9f~\x94n\x81\xb1\xe1\xcc~\x06\f\x91N\xfcD\xcd\xdarlj,\x87\xd5\xb3\x01Z\x95\xfb\b-j.\xc1NN`\xd3t\x8a\xc2?R.\x9dQ\x82\b`\xf9\x9b\x8d\x84U\x10\x8e}\xaeE\xafk\\.\x8b$\xdf\x13\xa9\x8f\xd7\x0f~\xfa\x92>\x90\x8e\xdf\xe7\xbbU\x9b\n\xc6\xd0\xab\x00<4\xc4\rR\x14\xd1\x97\xd7j\xa2\n\x83\xe1\xb9\xa0\xf0\xd8]\xecj\xfc\xcf\xec\xf9\xd5\xd4\x83\x99\xc1\xb6R&\b\xe7\xeau\xf2%p\x801\"\xb3$\xb8\xfaK\xac\x86\xc7k\x10\xc6\xc7\xd7s\xf0\xfa\x9fi!\x9d\xe8\xe9\xc5\xddq\xd1[\xce\xffRsH\x1f9l\x92\xde\xe6\x94\xf6?tc\xba-2\xc6\xff\xd3r\x92\x8cg\xa4\x7fX\xc8\xa3\xc4\x06E\xc7+FdJ\xdcG\x8a\x8c\xc9\xae\xc5;$\xc5L\xbc\x00\"\r$`V\xd2\x11\xbb$2X\x86\xde\xed\x01hg\xb2}\x9a\x1d\xb45\xe6[\x84\x19\xe7\x94\xe2\x02\xd3\xbdR\xe8\xe0e8*\xfc\fIW\xf0b\xb1\xb2\xc7\x13\xaeCon\xaa\x8e\x02\x06\xf5@\x01\xb27\xfbG/\x8a\x0f\x82\xf8\x0e(\xa9\xc9\x85\x02\xae\xab\xca\bI\xee\x8b\xfcO\x96A:\xcb\xa6\x80_J\x12;\x8e\x1a\xaaO5T2\x98\x8bJ', 0x5) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1000840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c636f6465706167653d3935302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c696f636861727365743d63703836352c757466383d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e6e742c001d46d61beb"], 0x3, 0x387, &(0x7f0000000fc0)="$eJzs3TuIXFUYAOB/9s6+JGGnEIKCcLUTdEmiItq4IWwgOE2UwUchDmajsrMGdnEwKTJZG7EULBUEKy20sEgniKCInYWtEUJULDRdwJArd+6d187MRpTNA7+vmPw55//POXf2wNy9MGdfXon1k7Nx6sqVy7GwUInqytGVuFqJWiTRcz7GzRX/fDShCwC4zV3NsvgzK0R8+U9KKnu/KgBgL3U//1/dP9Ty9je75Wc+/QHgjlf+/r843JbsyFmYVnx6z5YFAOyh0ef/EfHAWMrcIKyO3RsAAHeeZ1948ekj9Yhn0nQhYuOddqPdiCcH/UdOxevRirU4GEtxLaK4UchfKt3XY8frqwfTNO3EL7Vo5BXtRsRGp90o7hSOJN36+TgUS1Er68u7jSzLkmNf1FcPpV0Rcb7TnT82Ku3GbCyW8/90V6zF4Ujj7rH6iOP11cNpOUBjo1c/G7E9eG6Rr385luKHV+J0tOJk5LW925r66rlDaXo0q++rDOo77cZ8N68w9QkIAAAAAAAAAAAAAAAAAAAAAAD8K8tpX61/fk42OL9neXlCf/d8nKK+PB9ouzgfKJvPIsv+eOvhxrtJjJwPtON8nk67UY2ZW3vpAAAAAAAAAAAAAAAAAAAAcNvYOjMXzVZrbXPrzNn14aCzuXVmJiLylje+++zrxRjNWSwHGK0aCaplylBXOqjKkl5ylozklEGST16pFi2fXuiveDhnvn8VE5cxP7GrWqx5//2XPhh03Zf0Rr4+SE5i4nWdTXYsowgWRt7Y6W/LLsHhG+RczLJsWvm5l8arohJRnbDU/xRkefDt5dfueWTrwGPdlq+ywoMPLT138f2Pf1tvtvKZc63W3ObWtWy9Wf5/8mabHiS9/fPJpf5mqwzvhGrz0esn9k0ZeXu0pZn8+Pvz9773fdkys/uPKRtueXOoq1JWJcWkn+8sn1vbjNrZ9XyZ/a6n8iB/j8bnmp2w+ScFj8fuOTe4nAMfrjQvnPv514nlM+ObZGgvO6gDAAAAAAAAAAAAAAAAAABuiqHvipfKL/vO7lb1xIm9XxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3DyDv//fD2Jme0fL9KBaDpO3/NWJ8Zz5fMCYG5qxdouuFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7O/AwAA//8VoVzO") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x9, 0x0}}}}}, 0x108) 4.24761572s ago: executing program 5 (id=2428): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100038ee3710889076001fe8201020301090212000107d1102d0904"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002d00)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00035500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.883488917s ago: executing program 6 (id=2429): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x2800810, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x185, &(0x7f00000003c0)="$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") r0 = open(&(0x7f0000000480)='./file2\x00', 0x4000, 0x90) preadv2(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 3.533559134s ago: executing program 4 (id=2430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) fcntl$setownex(r0, 0xf, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 3.533256754s ago: executing program 6 (id=2431): readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/73, 0x49}], 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x1, 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$FUSE_INIT(r4, 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.511790134s ago: executing program 3 (id=2432): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r3, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x2800810, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x185, &(0x7f00000003c0)="$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") r4 = open(&(0x7f0000000480)='./file2\x00', 0x4000, 0x90) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 2.322121497s ago: executing program 6 (id=2433): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0xfffffff8, 0x7, 0x5, 0x4, 0x9]}, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={r0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000580)='syzkaller0\x00'}, 0x30) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x21, 0x6}, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) 2.014545593s ago: executing program 4 (id=2434): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00') r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 1.230541847s ago: executing program 5 (id=2435): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40)={[{@jqfmt_vfsv0}, {@nojournal_checksum}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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") r1 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r1) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendmsg$nl_route(r0, 0x0, 0x0) 1.168032818s ago: executing program 6 (id=2436): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00001002030500000000000000000007000008080001000300000109000200fffffffc02000000080001000300001d080001000000000a0900020080000000010000000800044000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="000000001c0002"], 0x38}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x100, r3, &(0x7f0000000100)="0000fd6000000000", 0x8, 0x3}]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f0000000a40)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) fsetxattr$system_posix_acl(r7, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x24, 0x0) 0s ago: executing program 5 (id=2437): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@nombcache}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") kernel console output (not intermixed with test programs): ][ T5838] usb 4-1: No valid video chain found. [ 534.432497][ T5838] usb 4-1: USB disconnect, device number 7 [ 534.476384][T11097] overlayfs: failed to resolve './file2': -2 [ 537.337940][T11128] loop5: detected capacity change from 0 to 256 [ 537.371657][T11128] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 537.411935][ T28] audit: type=1800 audit(1758157109.921:76): pid=11128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1828" name="bus" dev="loop5" ino=1048643 res=0 errno=0 [ 538.051614][T11135] overlayfs: failed to resolve './file2': -2 [ 539.327977][T11145] loop4: detected capacity change from 0 to 512 [ 539.336218][T11145] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 539.350378][T11145] EXT4-fs (loop4): 1 truncate cleaned up [ 539.357619][T11145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.993767][T11154] loop3: detected capacity change from 0 to 256 [ 540.010952][T11154] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 540.062021][ T28] audit: type=1800 audit(1758157112.572:77): pid=11154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1835" name="bus" dev="loop3" ino=1048644 res=0 errno=0 [ 540.113951][ T7417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.642682][T11157] wireguard0: entered promiscuous mode [ 540.648765][T11157] wireguard0: entered allmulticast mode [ 541.892750][T11171] loop5: detected capacity change from 0 to 16 [ 541.933215][T11171] erofs: (device loop5): z_erofs_parse_cfgs: unidentified algorithms fff8, please upgrade kernel [ 541.994566][T11175] loop3: detected capacity change from 0 to 512 [ 542.022286][T11175] EXT4-fs (loop3): 1 orphan inode deleted [ 542.029979][T11175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.088215][ T1086] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 542.114231][T11175] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.130933][T11175] tipc: Enabling of bearer rejected, failed to enable media [ 542.139809][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1840'. [ 542.155602][ T1086] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:6: Failed to release dquot type 1 [ 542.378468][T11185] overlayfs: failed to resolve './file2': -2 [ 543.338310][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.620580][T11196] loop5: detected capacity change from 0 to 512 [ 543.643449][T11196] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 543.693746][T11196] EXT4-fs (loop5): 1 truncate cleaned up [ 543.700770][T11196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.794127][T10245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.582625][T11214] loop4: detected capacity change from 0 to 1024 [ 545.706581][T11216] loop4: detected capacity change from 0 to 512 [ 545.719832][T11216] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 545.760043][T11216] EXT4-fs (loop4): 1 truncate cleaned up [ 545.772470][T11216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.304594][T11216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1850'. [ 546.313987][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1850'. [ 546.432400][T11224] overlayfs: failed to resolve './file2': -2 [ 547.668784][T11222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1850'. [ 547.800248][ T7417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.927905][T11226] loop5: detected capacity change from 0 to 4096 [ 547.955508][T11226] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 547.965511][T11226] EXT4-fs (loop5): Test dummy encryption mode enabled [ 547.984943][T11226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.065783][T10245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.144474][T11238] loop3: detected capacity change from 0 to 512 [ 548.155679][T11238] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 548.169227][T11240] xfrm0: entered promiscuous mode [ 548.171391][T11238] EXT4-fs (loop3): 1 truncate cleaned up [ 548.188069][T11238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.189865][T11240] xfrm0: entered allmulticast mode [ 549.407916][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.486701][T11253] loop4: detected capacity change from 0 to 128 [ 550.088502][T11263] overlayfs: failed to resolve './file2': -2 [ 550.871913][T11269] loop4: detected capacity change from 0 to 1024 [ 550.911880][T11269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.904543][ T7417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.996422][T11291] loop6: detected capacity change from 0 to 512 [ 553.008996][T11291] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 553.028877][T11291] EXT4-fs (loop6): 1 truncate cleaned up [ 553.036146][T11291] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.067195][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.671380][T11308] loop3: detected capacity change from 0 to 8192 [ 554.902132][T11312] loop6: detected capacity change from 0 to 128 [ 555.031921][T11314] overlayfs: failed to resolve './file2': -2 [ 555.728645][T11312] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 555.737844][T11312] FAT-fs (loop6): Filesystem has been set read-only [ 555.966142][ T28] audit: type=1800 audit(1758157128.240:78): pid=11312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1875" name="file2" dev="loop6" ino=1048647 res=0 errno=0 [ 559.964170][T11344] loop4: detected capacity change from 0 to 512 [ 559.994968][T11344] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 560.099167][T11344] EXT4-fs (loop4): 1 truncate cleaned up [ 560.112577][T11344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.491748][ T7417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.043003][T11359] loop4: detected capacity change from 0 to 128 [ 562.207428][ T28] audit: type=1800 audit(1758157134.724:79): pid=11359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1889" name="file2" dev="loop4" ino=1048656 res=0 errno=0 [ 562.237384][T11359] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 562.246366][T11359] FAT-fs (loop4): Filesystem has been set read-only [ 563.031068][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.052536][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.299243][T11364] overlayfs: failed to resolve './file2': -2 [ 565.947611][T11353] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1888'. [ 566.301654][ T788] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 566.490939][ T5882] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 566.501455][ T788] usb 7-1: unable to get BOS descriptor or descriptor too short [ 566.511668][ T788] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 566.519902][ T788] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 566.531498][ T788] usb 7-1: config 63 has no interface number 0 [ 566.537791][ T788] usb 7-1: config 63 interface 66 has no altsetting 0 [ 566.548038][ T788] usb 7-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 566.561805][ T788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.569949][ T788] usb 7-1: Product: syz [ 566.578469][ T788] usb 7-1: Manufacturer: syz [ 566.583871][ T788] usb 7-1: SerialNumber: syz [ 566.690712][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 566.698947][ T5882] usb 6-1: config 0 has an invalid interface number: 245 but max is 0 [ 566.707353][ T5882] usb 6-1: config 0 has no interface number 0 [ 566.715614][ T5882] usb 6-1: config 0 interface 245 has no altsetting 0 [ 566.725595][ T5882] usb 6-1: New USB device found, idVendor=1cf1, idProduct=0001, bcdDevice=b1.8d [ 566.734853][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.742973][ T5882] usb 6-1: Product: syz [ 566.747195][ T5882] usb 6-1: Manufacturer: syz [ 566.752072][ T5882] usb 6-1: SerialNumber: syz [ 566.758992][ T5882] usb 6-1: config 0 descriptor?? [ 566.766745][ T5882] ftdi_sio 6-1:0.245: FTDI USB Serial Device converter detected [ 566.775889][ T5882] ftdi_sio ttyUSB0: unknown device type: 0xb18d [ 566.802482][ T788] usb 7-1: Found UVC 0.07 device syz (174f:8a31) [ 566.809051][ T788] usb 7-1: No valid video chain found. [ 566.817776][ T788] usb 7-1: USB disconnect, device number 2 [ 566.972813][ T5882] usb 6-1: USB disconnect, device number 3 [ 566.983756][ T5882] ftdi_sio 6-1:0.245: device disconnected [ 567.059208][T11387] loop4: detected capacity change from 0 to 1024 [ 567.066738][T11387] EXT4-fs: Ignoring removed bh option [ 567.073103][T11387] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 567.096460][T11387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.115507][T11387] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 567.144203][ T7417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.652997][T11406] overlayfs: failed to resolve './file2': -2 [ 569.037502][T11410] loop3: detected capacity change from 0 to 128 [ 569.054983][ T5876] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 569.348097][ T28] audit: type=1800 audit(1758157141.867:80): pid=11410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1900" name="file2" dev="loop3" ino=1048657 res=0 errno=0 [ 569.373710][T11410] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 569.382614][T11410] FAT-fs (loop3): Filesystem has been set read-only [ 569.705041][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 569.746765][ T5876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.259437][ T5876] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 570.286273][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.324428][ T5876] usb 5-1: Product: syz [ 570.364299][ T5876] usb 5-1: Manufacturer: syz [ 570.384057][ T5876] usb 5-1: SerialNumber: syz [ 570.424674][ T5876] usb 5-1: config 0 descriptor?? [ 570.455060][ T5876] usb 5-1: can't set config #0, error -71 [ 570.481402][ T5876] usb 5-1: USB disconnect, device number 15 [ 570.994536][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1903'. [ 571.300535][T11416] loop3: detected capacity change from 0 to 512 [ 571.307974][T11416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 571.327522][T11416] EXT4-fs (loop3): Test dummy encryption mode enabled [ 571.327904][T11418] loop6: detected capacity change from 0 to 1024 [ 571.351335][T11418] EXT4-fs: Ignoring removed nobh option [ 571.357037][T11418] EXT4-fs: Ignoring removed bh option [ 571.366931][T11418] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 571.377761][T11416] EXT4-fs (loop3): 1 truncate cleaned up [ 571.385372][T11416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.417227][T11418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.475792][T11418] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4031: comm syz.6.1905: Allocating blocks 497-513 which overlap fs metadata [ 571.500633][T11418] EXT4-fs (loop6): pa ffff8880600e60e8: logic 256, phys. 385, len 8 [ 571.509060][T11418] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 572.770178][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.931357][T11436] input: syz0 as /devices/virtual/input/input14 [ 574.376804][T11420] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 575.408793][T11434] Bluetooth: hci0: command 0x0406 tx timeout [ 575.414966][T11434] Bluetooth: hci3: command 0x0406 tx timeout [ 576.750644][T11451] overlayfs: failed to resolve './file2': -2 [ 577.583053][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.037101][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1915'. [ 578.046410][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1915'. [ 578.834475][ T5863] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 578.839090][T11472] loop3: detected capacity change from 0 to 256 [ 578.890578][T11472] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 578.921388][ T28] audit: type=1800 audit(1758157407.458:81): pid=11472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1918" name="bus" dev="loop3" ino=1048658 res=0 errno=0 [ 579.027337][T11473] loop5: detected capacity change from 0 to 128 [ 579.041826][ T28] audit: type=1800 audit(1758157407.578:82): pid=11473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1914" name="file2" dev="loop5" ino=1048659 res=0 errno=0 [ 579.065132][T11473] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 579.073857][T11473] FAT-fs (loop5): Filesystem has been set read-only [ 579.082848][ T5863] usb 7-1: Using ep0 maxpacket: 8 [ 579.111162][ T5863] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 579.125991][ T5863] usb 7-1: config 250 has an invalid descriptor of length 34, skipping remainder of the config [ 579.140747][ T5863] usb 7-1: config 250 has no interfaces? [ 579.151129][ T5863] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 579.168692][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 579.181822][ T5863] usb 7-1: Product: syz [ 579.191754][ T5863] usb 7-1: SerialNumber: syz [ 579.453443][ T5863] usb 7-1: USB disconnect, device number 3 [ 580.202626][T11480] loop3: detected capacity change from 0 to 40427 [ 580.274904][T11480] F2FS-fs (loop3): invalid crc value [ 580.323278][T11480] F2FS-fs (loop3): Found nat_bits in checkpoint [ 580.422874][T11485] overlayfs: failed to resolve './file2': -2 [ 581.159350][T11480] F2FS-fs (loop3): Start checkpoint disabled! [ 581.203987][T11480] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 581.733841][ T8539] kworker/u4:12: attempt to access beyond end of device [ 581.733841][ T8539] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 581.954073][ T8539] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 582.168561][ T8539] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 582.182937][ T8539] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 582.692786][ T5838] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 583.080914][ T5838] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.125220][ T5838] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 583.191412][ T5838] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 583.294474][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.419489][ T5838] usb 7-1: Product: syz [ 583.493523][ T5838] usb 7-1: Manufacturer: syz [ 583.539944][ T5838] usb 7-1: SerialNumber: syz [ 583.924221][ T5838] usb 7-1: 0:2 : does not exist [ 583.965026][ T5838] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 584.061674][ T5838] usb 7-1: USB disconnect, device number 4 [ 584.451795][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 584.645699][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 584.653697][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.664316][ T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.696430][ T23] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 584.708747][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.716966][ T23] usb 6-1: Product: syz [ 584.721846][ T23] usb 6-1: Manufacturer: syz [ 584.726489][ T23] usb 6-1: SerialNumber: syz [ 584.954624][ T23] usb 6-1: 0:2 : does not exist [ 584.964258][ T23] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 585.020317][ T23] usb 6-1: USB disconnect, device number 4 [ 585.900474][T11515] overlayfs: failed to resolve './file2': -2 [ 586.560324][T11511] tipc: Enabling of bearer rejected, failed to enable media [ 586.872245][T11526] binder_alloc: 11524: binder_alloc_buf, no vma [ 589.970624][T11522] loop4: detected capacity change from 0 to 512 [ 590.026569][T11522] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1934: bad orphan inode 11862016 [ 590.040191][T11522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 590.053335][T11522] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.267693][T11545] loop5: detected capacity change from 0 to 128 [ 590.588702][ T28] audit: type=1800 audit(1758157419.114:83): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1938" name="file2" dev="loop5" ino=1048660 res=0 errno=0 [ 590.611529][T11545] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 590.620397][T11545] FAT-fs (loop5): Filesystem has been set read-only [ 591.287583][ T7417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 591.741431][T11552] overlayfs: failed to resolve './file2': -2 [ 595.660125][T11569] sch_fq: defrate 4294967295 ignored. [ 597.469529][T11593] loop3: detected capacity change from 0 to 256 [ 597.483418][T11593] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 597.599576][T11593] FAT-fs (loop3): Directory bread(block 64) failed [ 597.606704][T11593] FAT-fs (loop3): Directory bread(block 65) failed [ 597.613942][T11593] FAT-fs (loop3): Directory bread(block 66) failed [ 597.621059][T11593] FAT-fs (loop3): Directory bread(block 67) failed [ 597.633197][T11593] FAT-fs (loop3): Directory bread(block 68) failed [ 597.640050][T11593] FAT-fs (loop3): Directory bread(block 69) failed [ 597.647451][T11593] FAT-fs (loop3): Directory bread(block 70) failed [ 597.654136][T11593] FAT-fs (loop3): Directory bread(block 71) failed [ 597.661401][T11593] FAT-fs (loop3): Directory bread(block 72) failed [ 597.668164][T11593] FAT-fs (loop3): Directory bread(block 73) failed [ 598.189382][T11583] loop6: detected capacity change from 0 to 40427 [ 598.237289][T11583] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 598.277920][T11583] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 598.332122][T11583] F2FS-fs (loop6): Found nat_bits in checkpoint [ 598.500253][T11583] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 598.540051][T11583] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 598.553153][T11588] loop5: detected capacity change from 0 to 40427 [ 598.574411][T11588] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 598.587070][T11588] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 598.830333][T11588] F2FS-fs (loop5): Found nat_bits in checkpoint [ 598.955185][T11588] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 598.980384][T11588] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 599.450897][T11604] overlayfs: failed to resolve './file0': -2 [ 600.507261][T11609] loop6: detected capacity change from 0 to 2048 [ 600.562044][T11609] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.715683][T11616] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 600.751367][T11616] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1632 with error 28 [ 600.773008][T11616] EXT4-fs (loop6): This should not happen!! Data will be lost [ 600.773008][T11616] [ 600.784052][T11616] EXT4-fs (loop6): Total free blocks count 0 [ 600.792404][T11616] EXT4-fs (loop6): Free/Dirty block details [ 600.813094][T11616] EXT4-fs (loop6): free_blocks=2415919504 [ 600.819758][T11616] EXT4-fs (loop6): dirty_blocks=1648 [ 600.825159][T11616] EXT4-fs (loop6): Block reservation details [ 600.831275][T11616] EXT4-fs (loop6): i_reserved_data_blocks=103 [ 600.982829][T11618] loop5: detected capacity change from 0 to 128 [ 601.047336][ T28] audit: type=1800 audit(1758157429.589:84): pid=11618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1955" name="file2" dev="loop5" ino=1048661 res=0 errno=0 [ 601.070139][T11618] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 601.079069][T11618] FAT-fs (loop5): Filesystem has been set read-only [ 601.909032][ T1137] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 602.999044][T11627] overlayfs: failed to resolve './file2': -2 [ 605.336272][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1965'. [ 605.584056][T11636] loop6: detected capacity change from 0 to 40427 [ 605.607986][T11636] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 605.621600][T11636] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 605.652196][T11636] F2FS-fs (loop6): invalid crc value [ 605.675910][T11636] F2FS-fs (loop6): Found nat_bits in checkpoint [ 605.972518][T11636] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 605.989880][T11636] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 606.203409][T11661] overlayfs: failed to resolve './file2': -2 [ 607.308142][T11668] overlayfs: failed to resolve './file2': -2 [ 608.298592][T11677] loop3: detected capacity change from 0 to 256 [ 608.359859][ T5858] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 608.556919][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.578698][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.603282][ T5858] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 608.616991][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.625489][ T5858] usb 7-1: Product: syz [ 608.634293][ T5858] usb 7-1: Manufacturer: syz [ 608.638930][ T5858] usb 7-1: SerialNumber: syz [ 608.654842][ T5858] usb 7-1: config 0 descriptor?? [ 608.672798][ T5858] usb 7-1: Found UVC 0.00 device syz (18ec:3288) [ 608.689379][ T5858] usb 7-1: No valid video chain found. [ 608.893747][ T5882] usb 7-1: USB disconnect, device number 5 [ 609.783305][T11695] overlayfs: failed to resolve './file2': -2 [ 611.268418][ T788] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 611.343853][T11699] loop3: detected capacity change from 0 to 40427 [ 611.351841][T11699] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 611.362165][T11699] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 611.372920][T11699] F2FS-fs (loop3): invalid crc value [ 611.381528][T11699] F2FS-fs (loop3): Found nat_bits in checkpoint [ 611.416775][T11699] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 611.423989][T11699] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 611.478256][ T788] usb 7-1: Using ep0 maxpacket: 8 [ 611.488020][ T788] usb 7-1: unable to get BOS descriptor or descriptor too short [ 611.497995][ T788] usb 7-1: config 0 has an invalid interface number: 125 but max is 2 [ 611.506657][ T788] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.517257][ T788] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 611.526951][ T788] usb 7-1: config 0 has no interface number 0 [ 611.533469][ T788] usb 7-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 611.549848][ T788] usb 7-1: config 0 interface 125 has no altsetting 0 [ 611.561448][ T788] usb 7-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 611.570687][ T788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.578958][ T788] usb 7-1: Product: syz [ 611.583196][ T788] usb 7-1: Manufacturer: syz [ 611.587809][ T788] usb 7-1: SerialNumber: syz [ 611.595169][ T788] usb 7-1: config 0 descriptor?? [ 611.812532][ T788] hub 7-1:0.125: bad descriptor, ignoring hub [ 611.821016][ T788] hub: probe of 7-1:0.125 failed with error -5 [ 611.829557][ T788] usb 7-1: Found UVC 15.ff device syz (17dc:0202) [ 611.836048][ T788] usb 7-1: No valid video chain found. [ 611.879034][ T788] usb 7-1: USB disconnect, device number 6 [ 612.005128][T11710] loop4: detected capacity change from 0 to 512 [ 612.073081][T11710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 612.106447][T11710] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.147107][ T28] audit: type=1800 audit(1758157440.695:85): pid=11710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1985" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 612.430061][ T7417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 613.661868][T11729] loop6: detected capacity change from 0 to 512 [ 613.684903][T11729] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 613.712813][T11729] EXT4-fs (loop6): 1 truncate cleaned up [ 613.733609][T11729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.181685][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.340585][T11734] loop4: detected capacity change from 0 to 256 [ 614.462574][T11734] FAT-fs (loop4): Directory bread(block 64) failed [ 614.469487][T11734] FAT-fs (loop4): Directory bread(block 65) failed [ 614.476147][T11734] FAT-fs (loop4): Directory bread(block 66) failed [ 614.482736][T11734] FAT-fs (loop4): Directory bread(block 67) failed [ 614.489574][T11734] FAT-fs (loop4): Directory bread(block 68) failed [ 614.496129][T11734] FAT-fs (loop4): Directory bread(block 69) failed [ 614.502782][T11734] FAT-fs (loop4): Directory bread(block 70) failed [ 614.510966][T11734] FAT-fs (loop4): Directory bread(block 71) failed [ 614.517621][T11734] FAT-fs (loop4): Directory bread(block 72) failed [ 614.524158][T11734] FAT-fs (loop4): Directory bread(block 73) failed [ 617.658844][T11745] loop4: detected capacity change from 0 to 40427 [ 617.669955][T11745] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 617.682394][T11745] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 617.697896][T11745] F2FS-fs (loop4): invalid crc value [ 617.759385][T11745] F2FS-fs (loop4): Found nat_bits in checkpoint [ 617.886222][T11745] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 617.893463][T11745] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 619.909046][T11765] loop6: detected capacity change from 0 to 128 [ 620.627025][T11766] loop5: detected capacity change from 0 to 512 [ 620.675803][T11766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.688805][T11766] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 621.203342][ T5839] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 621.393222][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 621.401497][ T5839] usb 4-1: config 3 has an invalid interface number: 155 but max is 0 [ 621.414980][ T5839] usb 4-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 621.443246][ T5839] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 621.467879][ T5839] usb 4-1: config 3 has no interface number 0 [ 621.489901][ T5839] usb 4-1: config 3 interface 155 has no altsetting 0 [ 621.511923][ T5839] usb 4-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 621.542725][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.566931][ T5839] usb 4-1: Product: syz [ 621.593504][ T5839] usb 4-1: Manufacturer: syz [ 621.598229][ T5839] usb 4-1: SerialNumber: syz [ 621.891494][ T5839] usb 4-1: Found UVC 0.00 device syz (05a9:264a) [ 621.911321][ T5839] usb 4-1: No valid video chain found. [ 621.953085][ T5839] usb 4-1: USB disconnect, device number 8 [ 622.391731][T11777] loop6: detected capacity change from 0 to 512 [ 622.413951][T11777] EXT4-fs: Ignoring removed mblk_io_submit option [ 622.506929][T11777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.548740][T11777] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.598091][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.440318][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.446961][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.664701][T10245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.773742][T11780] loop4: detected capacity change from 0 to 131072 [ 624.787857][T11780] F2FS-fs (loop4): Found nat_bits in checkpoint [ 624.838219][T11780] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 626.494334][T11794] tipc: Started in network mode [ 626.499328][T11794] tipc: Node identity f2aeb5347c3e, cluster identity 4711 [ 626.506956][T11794] tipc: Enabled bearer , priority 0 [ 626.514220][T11795] syzkaller0: entered promiscuous mode [ 626.519717][T11795] syzkaller0: entered allmulticast mode [ 626.547126][T11799] tipc: Resetting bearer [ 626.557847][T11791] tipc: Resetting bearer [ 626.587811][T11791] tipc: Disabling bearer [ 629.607412][T11820] loop3: detected capacity change from 0 to 256 [ 629.635187][T11820] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 629.844642][ T28] audit: type=1800 audit(1758157458.404:86): pid=11820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2011" name="bus" dev="loop3" ino=1048662 res=0 errno=0 [ 630.045490][T11832] loop6: detected capacity change from 0 to 128 [ 631.244567][T11824] loop5: detected capacity change from 0 to 40427 [ 631.267675][T11824] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 631.278890][T11833] netlink: 'syz.4.2013': attribute type 11 has an invalid length. [ 631.293925][T11824] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 631.320468][T11824] F2FS-fs (loop5): invalid crc value [ 631.336120][T11824] F2FS-fs (loop5): Found nat_bits in checkpoint [ 631.446499][T11824] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 631.453816][T11824] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 633.848831][T11861] loop5: detected capacity change from 0 to 512 [ 633.984630][T11861] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.2021: bad orphan inode 11862016 [ 634.003958][T11861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 634.017447][T11861] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.464819][T10245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 635.978256][T11866] loop5: detected capacity change from 0 to 40427 [ 635.990979][T11866] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff [ 636.001978][T11866] F2FS-fs (loop5): invalid crc value [ 636.015294][T11866] F2FS-fs (loop5): Found nat_bits in checkpoint [ 636.079594][T11866] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 636.702596][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2022'. [ 636.729611][T11866] vlan2: entered allmulticast mode [ 636.858847][T11855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 636.866371][T11855] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 636.867115][T11871] loop3: detected capacity change from 0 to 512 [ 636.888884][T11855] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 636.895654][T11855] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 636.909938][T11855] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 636.920604][T11855] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 636.948176][T11871] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2024: casefold flag without casefold feature [ 636.961118][T11855] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 636.974778][T11855] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 636.985023][T11871] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2024: couldn't read orphan inode 15 (err -117) [ 637.018042][T11871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.013657][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.026210][T11887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2028'. [ 638.264544][T11892] loop6: detected capacity change from 0 to 512 [ 638.279385][T11892] EXT4-fs (loop6): Test dummy encryption mode enabled [ 638.286473][T11892] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 638.364833][T11892] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.2026: bad orphan inode 131083 [ 638.381675][T11892] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.520265][T11898] loop3: detected capacity change from 0 to 128 [ 638.954572][ T5798] Bluetooth: hci4: command 0x0406 tx timeout [ 638.960983][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 639.069751][ T5802] Bluetooth: hci3: command 0x0406 tx timeout [ 639.075904][T11442] Bluetooth: hci0: command 0x0406 tx timeout [ 641.133538][ T5802] Bluetooth: hci3: command 0x0406 tx timeout [ 641.139901][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 641.177545][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 641.190105][T11442] Bluetooth: hci4: command 0x0406 tx timeout [ 641.956985][T11917] loop3: detected capacity change from 0 to 1024 [ 641.982551][T11917] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 642.041793][T11917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.096661][T11917] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.219093][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.711281][T11928] loop6: detected capacity change from 0 to 256 [ 643.035172][T11928] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 643.120282][ T8543] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 643.151982][ T8543] EXT4-fs (loop3): Remounting filesystem read-only [ 643.166017][T11930] loop4: detected capacity change from 0 to 1024 [ 643.173666][T11930] EXT4-fs: Ignoring removed nobh option [ 643.188713][T11930] EXT4-fs: Ignoring removed bh option [ 643.238286][T11930] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 643.299452][T11930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.304663][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.316913][T11933] loop6: detected capacity change from 0 to 1024 [ 643.384229][T11933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.407326][T11933] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.449506][T11930] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4031: comm syz.4.2039: Allocating blocks 497-513 which overlap fs metadata [ 643.507890][T11930] EXT4-fs (loop4): pa ffff88805cd7a488: logic 256, phys. 385, len 8 [ 643.516425][T11930] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 644.251499][ T8543] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm kworker/u4:15: bg 0: block 393: padding at end of block bitmap is not set [ 644.299623][ T8543] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 644.339811][ T8543] EXT4-fs (loop6): This should not happen!! Data will be lost [ 644.339811][ T8543] [ 645.163893][ T133] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 645.218154][ T133] EXT4-fs (loop6): This should not happen!! Data will be lost [ 645.218154][ T133] [ 645.245001][ T133] EXT4-fs (loop6): Total free blocks count 0 [ 645.274506][ T133] EXT4-fs (loop6): Free/Dirty block details [ 645.280472][ T133] EXT4-fs (loop6): free_blocks=0 [ 645.331374][ T133] EXT4-fs (loop6): dirty_blocks=2464 [ 645.336780][ T133] EXT4-fs (loop6): Block reservation details [ 645.562663][ T7417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.220363][T11962] loop3: detected capacity change from 0 to 512 [ 648.227749][T11962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 648.235712][T11962] EXT4-fs (loop3): Test dummy encryption mode enabled [ 648.253242][T11962] EXT4-fs (loop3): 1 truncate cleaned up [ 648.261751][T11962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.515827][T11970] loop6: detected capacity change from 0 to 256 [ 648.545590][T11970] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 648.644380][ T28] audit: type=1800 audit(1758157477.193:87): pid=11970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2049" name="bus" dev="loop6" ino=1048664 res=0 errno=0 [ 649.553901][T11981] loop6: detected capacity change from 0 to 2048 [ 650.276103][T11981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.804401][T11995] loop4: detected capacity change from 0 to 512 [ 650.842957][T11995] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 650.883973][T11995] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.2055: corrupted in-inode xattr: overlapping e_value [ 650.910874][T11993] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.2052: bg 0: block 234: padding at end of block bitmap is not set [ 650.943612][T11995] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2055: couldn't read orphan inode 15 (err -117) [ 650.976501][T11993] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 868 with error 117 [ 650.996201][T11995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.017241][T11993] EXT4-fs (loop6): This should not happen!! Data will be lost [ 651.017241][T11993] [ 651.035179][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.157009][ T7417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.237997][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.150730][T12010] loop3: detected capacity change from 0 to 256 [ 652.179761][T12010] FAT-fs (loop3): Directory bread(block 64) failed [ 652.186425][T12010] FAT-fs (loop3): Directory bread(block 65) failed [ 652.193653][T12010] FAT-fs (loop3): Directory bread(block 66) failed [ 652.389008][T12010] FAT-fs (loop3): Directory bread(block 67) failed [ 652.441770][T12010] FAT-fs (loop3): Directory bread(block 68) failed [ 652.555660][T12010] FAT-fs (loop3): Directory bread(block 69) failed [ 652.662442][T12010] FAT-fs (loop3): Directory bread(block 70) failed [ 652.824915][T12010] FAT-fs (loop3): Directory bread(block 71) failed [ 652.832549][T12010] FAT-fs (loop3): Directory bread(block 72) failed [ 652.839525][T12010] FAT-fs (loop3): Directory bread(block 73) failed [ 653.193963][ T5839] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 653.397846][ T5839] usb 4-1: config index 0 descriptor too short (expected 64575, got 68) [ 653.406264][ T5839] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.443601][ T5839] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 653.467473][ T5839] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 653.498161][ T5839] usb 4-1: config index 1 descriptor too short (expected 64575, got 68) [ 653.517195][ T5839] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.528888][ T5839] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 653.540327][ T5839] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 655.525679][ T5839] usb 4-1: string descriptor 0 read error: -71 [ 655.541987][ T5839] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 655.568592][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.593375][ T5839] usb 4-1: can't set config #1, error -71 [ 655.605826][ T5839] usb 4-1: USB disconnect, device number 9 [ 657.245496][T12035] loop3: detected capacity change from 0 to 512 [ 657.309162][T12035] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 657.446104][T12035] EXT4-fs (loop3): 1 truncate cleaned up [ 657.459873][T12035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.230267][T12041] loop5: detected capacity change from 0 to 512 [ 659.367342][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.598086][T12041] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 2: comm syz.5.2068: invalid block [ 659.662259][T12041] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2068: invalid indirect mapped block 10 (level 1) [ 659.682303][T12041] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2068: invalid indirect mapped block 8 (level 1) [ 660.382217][T12041] EXT4-fs (loop5): 1 truncate cleaned up [ 660.399108][T12041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.767614][T12061] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2068: unexpected EA_INODE flag [ 661.818431][T12061] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.2068: unexpected EA_INODE flag [ 662.307169][T10245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.521682][ T5876] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 662.602780][ T23] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 662.822768][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 662.884777][ T5876] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 662.947063][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.023857][T12057] loop6: detected capacity change from 0 to 256 [ 663.043961][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.072187][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.181103][ T5876] usb 4-1: config 0 descriptor?? [ 663.197527][ T23] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 663.337370][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.348361][ T23] usb 5-1: config 0 descriptor?? [ 663.540626][ T5876] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 663.797815][ T23] playstation 0003:054C:05C4.000D: unbalanced delimiter at end of report description [ 663.822761][ T23] playstation 0003:054C:05C4.000D: Parse failed [ 663.829165][ T23] playstation: probe of 0003:054C:05C4.000D failed with error -22 [ 664.559400][ T5882] usb 5-1: USB disconnect, device number 16 [ 665.196280][ T5876] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 665.221426][ T5876] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 665.440758][ T5876] asix: probe of 4-1:0.0 failed with error -71 [ 665.454540][ T5876] usb 4-1: USB disconnect, device number 10 [ 667.833388][T12096] loop4: detected capacity change from 0 to 128 [ 667.949161][T12088] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 667.969999][ T28] audit: type=1800 audit(1758157496.523:88): pid=12088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2080" name="file2" dev="loop4" ino=1048666 res=0 errno=0 [ 668.199804][T12088] FAT-fs (loop4): Filesystem has been set read-only [ 668.217371][T12098] loop3: detected capacity change from 0 to 512 [ 668.268868][T12098] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.2083: invalid block [ 668.365204][T12098] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2083: invalid indirect mapped block 10 (level 1) [ 668.394696][T12098] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2083: invalid indirect mapped block 8 (level 1) [ 668.453348][T12098] EXT4-fs (loop3): 1 truncate cleaned up [ 668.486174][T12098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.503766][T12104] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.2083: unexpected EA_INODE flag [ 669.739351][T12106] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.2083: unexpected EA_INODE flag [ 670.285863][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.425758][T12120] loop3: detected capacity change from 0 to 512 [ 671.572084][T12120] EXT4-fs (loop3): 1 orphan inode deleted [ 671.579455][T12120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.592227][ T8543] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 671.629365][ T8543] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:15: Failed to release dquot type 1 [ 671.740785][T12120] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 672.312065][T12135] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2089'. [ 673.628695][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.851497][T12147] loop6: detected capacity change from 0 to 128 [ 673.969950][ T28] audit: type=1800 audit(1758157758.563:89): pid=12147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2094" name="file2" dev="loop6" ino=1048667 res=0 errno=0 [ 674.004991][T12147] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 674.014034][T12147] FAT-fs (loop6): Filesystem has been set read-only [ 674.548767][T12150] loop4: detected capacity change from 0 to 512 [ 675.594676][T12150] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.2096: invalid block [ 676.654864][T12150] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2096: invalid indirect mapped block 10 (level 1) [ 676.701404][T12150] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2096: invalid indirect mapped block 8 (level 1) [ 676.765091][T12150] EXT4-fs (loop4): 1 truncate cleaned up [ 676.789760][T12164] loop5: detected capacity change from 0 to 1024 [ 676.801487][T12150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.851343][T12164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.954086][T12164] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4031: comm syz.5.2099: Allocating blocks 385-513 which overlap fs metadata [ 677.161092][T12164] EXT4-fs (loop5): pa ffff8880600e62b8: logic 16, phys. 129, len 24 [ 677.169670][T12164] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 677.564500][T12173] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.2096: unexpected EA_INODE flag [ 677.635613][T12173] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.2096: unexpected EA_INODE flag [ 678.144366][T10245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.288704][ T7417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.439346][T12179] loop4: detected capacity change from 0 to 2048 [ 678.473972][T12181] loop6: detected capacity change from 0 to 512 [ 678.510068][T12181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.521301][T12179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.553811][T12179] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.693555][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.785213][T12188] loop4: detected capacity change from 0 to 1024 [ 678.793504][T12188] EXT4-fs: Ignoring removed i_version option [ 678.803515][T12188] EXT4-fs: inline encryption not supported [ 678.823996][T12188] EXT4-fs (loop4): Test dummy encryption mode enabled [ 678.841750][T12188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.040532][ T7417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.050415][T12202] loop4: detected capacity change from 0 to 128 [ 681.154254][T12202] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 681.163045][T12202] FAT-fs (loop4): Filesystem has been set read-only [ 681.189838][ T28] audit: type=1800 audit(1758157765.726:90): pid=12202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2110" name="file2" dev="loop4" ino=1048668 res=0 errno=0 [ 682.422168][T12210] loop6: detected capacity change from 0 to 512 [ 682.457321][T12210] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 2: comm syz.6.2113: invalid block [ 682.496648][T12210] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2113: invalid indirect mapped block 10 (level 1) [ 682.521612][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 682.539946][T12210] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2113: invalid indirect mapped block 8 (level 1) [ 682.583246][T12210] EXT4-fs (loop6): 1 truncate cleaned up [ 682.598147][T12210] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.712670][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 682.723086][ T23] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 683.157163][ T23] usb 6-1: config 0 has no interface number 0 [ 684.201794][ T23] usb 6-1: config 0 interface 184 has no altsetting 0 [ 684.225154][ T23] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 684.234724][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.433553][T12227] EXT4-fs error (device loop6): ext4_lookup:1858: inode #12: comm syz.6.2113: unexpected EA_INODE flag [ 684.473740][ T23] usb 6-1: Product: syz [ 684.595998][T12227] EXT4-fs error (device loop6): ext4_lookup:1858: inode #12: comm syz.6.2113: unexpected EA_INODE flag [ 684.688304][ T23] usb 6-1: Manufacturer: syz [ 685.034892][ T23] usb 6-1: SerialNumber: syz [ 685.142508][ T23] usb 6-1: config 0 descriptor?? [ 685.152894][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.152925][ T23] smsc75xx v1.0.0 [ 686.030321][ T23] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 686.251646][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.273157][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.299803][ T23] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 686.462517][ T23] usb 6-1: USB disconnect, device number 5 [ 688.240637][T12251] loop3: detected capacity change from 0 to 128 [ 688.301797][ T28] audit: type=1800 audit(1758157772.890:91): pid=12251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2125" name="file2" dev="loop3" ino=1048669 res=0 errno=0 [ 688.328229][T12251] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 688.337293][T12251] FAT-fs (loop3): Filesystem has been set read-only [ 690.246148][T12257] loop3: detected capacity change from 0 to 512 [ 690.413456][T12257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.894161][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.133867][T12264] loop3: detected capacity change from 0 to 1024 [ 691.160148][T12264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.173731][T12264] ext4 filesystem being mounted at /570/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.633216][T12270] loop4: detected capacity change from 0 to 512 [ 691.664129][T12270] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.2130: invalid block [ 691.700734][T12273] loop6: detected capacity change from 0 to 512 [ 691.726474][T12273] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2131: casefold flag without casefold feature [ 691.727274][T12270] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2130: invalid indirect mapped block 10 (level 1) [ 691.762009][T12273] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2131: couldn't read orphan inode 15 (err -117) [ 691.778395][T12273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.794259][T12270] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2130: invalid indirect mapped block 8 (level 1) [ 691.842679][T12270] EXT4-fs (loop4): 1 truncate cleaned up [ 691.861229][T12270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.033309][ T1116] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm kworker/u4:8: bg 0: block 393: padding at end of block bitmap is not set [ 692.055556][ T1116] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 692.074206][ T1116] EXT4-fs (loop3): This should not happen!! Data will be lost [ 692.074206][ T1116] [ 692.138535][ T1116] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 692.207984][ T1116] EXT4-fs (loop3): This should not happen!! Data will be lost [ 692.207984][ T1116] [ 692.287461][ T1116] EXT4-fs (loop3): Total free blocks count 0 [ 692.302850][ T1116] EXT4-fs (loop3): Free/Dirty block details [ 692.309506][ T1116] EXT4-fs (loop3): free_blocks=0 [ 692.314503][ T1116] EXT4-fs (loop3): dirty_blocks=7088 [ 692.323149][ T1116] EXT4-fs (loop3): Block reservation details [ 692.505406][T12284] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.2130: unexpected EA_INODE flag [ 693.979914][T12288] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.2130: unexpected EA_INODE flag [ 694.146379][ T7417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.928927][T12303] loop4: detected capacity change from 0 to 128 [ 694.958666][T12304] loop5: detected capacity change from 0 to 128 [ 694.970080][T12304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 694.976852][T12304] EXT4-fs: Ignoring removed nomblk_io_submit option [ 695.398532][T12304] EXT4-fs (loop5): Test dummy encryption mode enabled [ 695.474026][ T28] audit: type=1800 audit(1758157780.063:92): pid=12302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2135" name="file2" dev="loop4" ino=1048670 res=0 errno=0 [ 695.507814][T12302] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 695.516712][T12302] FAT-fs (loop4): Filesystem has been set read-only [ 695.564286][T12304] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 695.619994][T12304] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 696.192157][ T5794] EXT4-fs: 1 callbacks suppressed [ 696.192188][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.636340][T10245] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 696.651364][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.004004][T12321] loop3: detected capacity change from 0 to 512 [ 697.045587][T12321] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 697.099721][T12321] EXT4-fs (loop3): 1 truncate cleaned up [ 697.348232][T12321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.761976][T12330] loop4: detected capacity change from 0 to 1024 [ 697.892148][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 697.920520][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 697.943138][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 697.960902][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 698.165021][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 698.173141][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 698.180914][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 698.188812][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 698.196612][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 698.205877][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 698.214167][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 698.221675][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 698.229963][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 698.237575][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 698.245223][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 698.252646][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 698.260246][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 698.268067][ T27] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 698.292335][ T27] hid-generic 0003:0004:0000.000E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 700.418973][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.968759][T12364] loop3: detected capacity change from 0 to 128 [ 702.802166][T12364] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 702.811018][T12364] FAT-fs (loop3): Filesystem has been set read-only [ 702.824437][ T28] audit: type=1800 audit(1758157787.397:93): pid=12364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2148" name="file2" dev="loop3" ino=1048671 res=0 errno=0 [ 705.501459][T12385] binder: 12383:12385 ioctl c018620c 200000000000 returned -22 [ 706.583283][T12409] loop3: detected capacity change from 0 to 512 [ 706.590340][T12409] journal_path: Lookup failure for './file0' [ 706.596476][T12409] EXT4-fs: error: could not find journal device path [ 709.159452][ T27] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 709.479302][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 709.501302][ T27] usb 6-1: device descriptor read/all, error -71 [ 710.619798][T12422] loop6: detected capacity change from 0 to 512 [ 710.641296][T12422] EXT4-fs: Ignoring removed bh option [ 710.667399][T12422] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 710.715729][T12422] EXT4-fs (loop6): 1 truncate cleaned up [ 710.724670][T12422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 711.981073][T12437] loop5: detected capacity change from 0 to 128 [ 711.992514][T12437] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 712.013372][T12437] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 712.094390][T12437] fscrypt (loop5, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop5' because it doesn't have stable inode numbers [ 712.112195][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.750453][T12455] loop3: detected capacity change from 0 to 128 [ 713.811387][ T28] audit: type=1800 audit(1758158054.410:94): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2175" name="file2" dev="loop3" ino=1048672 res=0 errno=0 [ 713.836968][T12455] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 713.845779][T12455] FAT-fs (loop3): Filesystem has been set read-only [ 715.872574][T10245] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 716.030219][T12467] loop6: detected capacity change from 0 to 256 [ 716.080415][T12467] FAT-fs (loop6): Directory bread(block 64) failed [ 716.087097][T12467] FAT-fs (loop6): Directory bread(block 65) failed [ 716.093934][T12467] FAT-fs (loop6): Directory bread(block 66) failed [ 716.101077][T12467] FAT-fs (loop6): Directory bread(block 67) failed [ 716.108045][T12467] FAT-fs (loop6): Directory bread(block 68) failed [ 716.114595][T12467] FAT-fs (loop6): Directory bread(block 69) failed [ 716.121765][T12467] FAT-fs (loop6): Directory bread(block 70) failed [ 716.128583][T12467] FAT-fs (loop6): Directory bread(block 71) failed [ 716.135367][T12467] FAT-fs (loop6): Directory bread(block 72) failed [ 716.157231][T12467] FAT-fs (loop6): Directory bread(block 73) failed [ 717.497663][T12484] loop5: detected capacity change from 0 to 512 [ 717.504799][T12484] EXT4-fs: Ignoring removed orlov option [ 717.517693][T12484] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 717.554511][T12484] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #17: comm syz.5.2185: corrupted in-inode xattr: overlapping e_value [ 717.603653][T12484] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2185: couldn't read orphan inode 17 (err -117) [ 717.643069][T12484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.707921][ T28] audit: type=1800 audit(1758158058.322:95): pid=12484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2185" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 718.384241][T10245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.398275][T12518] loop5: detected capacity change from 0 to 512 [ 720.438291][T12518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 720.469309][T12518] EXT4-fs (loop5): Test dummy encryption mode enabled [ 720.509655][T12518] EXT4-fs (loop5): 1 truncate cleaned up [ 720.521244][T12518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 720.590445][T12510] loop3: detected capacity change from 0 to 128 [ 720.618554][T12510] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 720.637658][ T28] audit: type=1800 audit(1758158061.223:96): pid=12510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2191" name="file2" dev="loop3" ino=1048673 res=0 errno=0 [ 720.660244][T12510] FAT-fs (loop3): Filesystem has been set read-only [ 721.570478][T12528] loop3: detected capacity change from 0 to 512 [ 721.585810][T10245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.592831][T12528] EXT4-fs: Ignoring removed bh option [ 721.604366][T12528] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 721.644786][T12528] EXT4-fs (loop3): 1 truncate cleaned up [ 721.651778][T12528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.507893][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.897279][ T5863] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 724.741585][ T5863] usb 7-1: Using ep0 maxpacket: 16 [ 724.755130][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.776513][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.796840][ T5863] usb 7-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 724.821649][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.838064][ T5863] usb 7-1: config 0 descriptor?? [ 725.099500][T12562] loop3: detected capacity change from 0 to 128 [ 725.111781][ T28] audit: type=1800 audit(1758158065.726:97): pid=12562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2205" name="file2" dev="loop3" ino=1048674 res=0 errno=0 [ 725.138825][T12562] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 725.148289][T12562] FAT-fs (loop3): Filesystem has been set read-only [ 725.264588][ T5863] playstation 0003:054C:05C4.000F: bogus close delimiter [ 725.284510][ T5863] playstation 0003:054C:05C4.000F: item 0 0 2 10 parsing failed [ 725.309704][ T5863] playstation 0003:054C:05C4.000F: Parse failed [ 725.320860][ T5863] playstation: probe of 0003:054C:05C4.000F failed with error -22 [ 726.387164][T12576] loop5: detected capacity change from 0 to 512 [ 726.394599][T12576] EXT4-fs: Ignoring removed bh option [ 726.402247][T12576] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 726.415726][T12576] EXT4-fs (loop5): 1 truncate cleaned up [ 726.424503][T12576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.648625][ T27] usb 7-1: USB disconnect, device number 7 [ 728.051425][T10245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.874884][T12596] loop5: detected capacity change from 0 to 512 [ 728.935854][T12598] loop6: detected capacity change from 0 to 512 [ 728.964844][T12598] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.028179][T12594] loop3: detected capacity change from 0 to 128 [ 729.036504][T12596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.058158][T12594] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 729.066983][T12594] FAT-fs (loop3): Filesystem has been set read-only [ 729.079300][ T28] audit: type=1800 audit(1758158069.668:98): pid=12594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2216" name="file2" dev="loop3" ino=1048675 res=0 errno=0 [ 729.104712][T12596] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.176635][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.257633][T10245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.577027][T12613] loop3: detected capacity change from 0 to 512 [ 729.584412][T12613] journal_path: Lookup failure for './file0' [ 729.590522][T12613] EXT4-fs: error: could not find journal device path [ 730.318694][ T788] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 730.513529][ T788] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.546924][ T788] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 730.577373][ T788] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 730.598570][ T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.626899][ T788] usb 6-1: Product: syz [ 730.635654][ T788] usb 6-1: Manufacturer: syz [ 730.643364][ T788] usb 6-1: SerialNumber: syz [ 730.863830][ T788] usb 6-1: 0:2 : does not exist [ 730.881498][ T788] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 731.748573][ T788] usb 6-1: USB disconnect, device number 8 [ 732.271148][T12633] loop5: detected capacity change from 0 to 512 [ 732.278971][T12633] EXT4-fs: Ignoring removed bh option [ 732.286293][T12633] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 732.317009][T12633] EXT4-fs (loop5): 1 truncate cleaned up [ 732.340351][T12633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.676487][T10245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.775129][T12652] loop5: detected capacity change from 0 to 128 [ 734.802396][T12648] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 734.802442][ T28] audit: type=1800 audit(1758158075.420:99): pid=12648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2227" name="file2" dev="loop5" ino=1048676 res=0 errno=0 [ 734.811159][T12648] FAT-fs (loop5): Filesystem has been set read-only [ 735.096281][ T788] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 735.240752][T12659] loop3: detected capacity change from 0 to 1024 [ 735.251902][T12659] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 735.263080][T12659] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 736.007727][ T788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.038372][ T788] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 736.055845][ T788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.063872][ T788] usb 7-1: Product: syz [ 736.072397][ T788] usb 7-1: Manufacturer: syz [ 736.077178][ T788] usb 7-1: SerialNumber: syz [ 736.085110][ T788] usb 7-1: config 0 descriptor?? [ 736.094014][ T788] usb 7-1: Found UVC 0.00 device syz (18ec:3288) [ 736.102127][ T788] usb 7-1: No valid video chain found. [ 736.304637][ T788] usb 7-1: USB disconnect, device number 8 [ 737.008934][T12683] loop6: detected capacity change from 0 to 128 [ 737.023407][ T28] audit: type=1800 audit(1758158077.642:100): pid=12683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2240" name="file2" dev="loop6" ino=1048677 res=0 errno=0 [ 737.050696][T12683] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 737.059626][T12683] FAT-fs (loop6): Filesystem has been set read-only [ 739.005712][T12696] syz.4.2243[12696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 739.005928][T12696] syz.4.2243[12696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 739.424902][T12705] overlayfs: failed to clone upperpath [ 742.505461][T12723] loop3: detected capacity change from 0 to 128 [ 742.538193][T12725] overlayfs: failed to clone upperpath [ 742.546346][ T28] audit: type=1800 audit(1758158083.174:101): pid=12723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2252" name="file2" dev="loop3" ino=1048678 res=0 errno=0 [ 742.548601][T12723] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 742.576287][T12723] FAT-fs (loop3): Filesystem has been set read-only [ 744.408385][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 744.422031][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 744.430045][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 744.438824][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 744.446952][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 744.461806][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 744.511845][ T5839] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 744.698379][ T1116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.733612][ T5839] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 744.758972][ T5839] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 744.768217][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 744.776378][ T5839] usb 6-1: SerialNumber: syz [ 744.869528][ T1116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.965842][ T1116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.005428][T12743] chnl_net:caif_netlink_parms(): no params data found [ 745.108134][ T1116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.210801][T12743] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.224293][T12743] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.232317][T12743] bridge_slave_0: entered allmulticast mode [ 745.239696][T12743] bridge_slave_0: entered promiscuous mode [ 745.254740][T12743] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.271340][T12743] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.279918][T12743] bridge_slave_1: entered allmulticast mode [ 745.293974][T12743] bridge_slave_1: entered promiscuous mode [ 745.362454][T12743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.375343][T12743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.437206][T12743] team0: Port device team_slave_0 added [ 745.452754][T12743] team0: Port device team_slave_1 added [ 745.502695][T12743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.509751][T12743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.542945][T12743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.556450][T12743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.563753][T12743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.589917][T12743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.694143][T12743] hsr_slave_0: entered promiscuous mode [ 745.700850][T12743] hsr_slave_1: entered promiscuous mode [ 745.708053][T12743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 745.716827][T12743] Cannot create hsr debugfs directory [ 746.273309][ T5839] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 746.312275][ T5839] usb 6-1: USB disconnect, device number 9 [ 746.523694][T11442] Bluetooth: hci1: command tx timeout [ 746.599014][T12762] loop6: detected capacity change from 0 to 128 [ 746.620695][ T28] audit: type=1800 audit(1758158087.236:102): pid=12762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2266" name="file2" dev="loop6" ino=1048679 res=0 errno=0 [ 746.650055][T12762] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 746.658903][T12762] FAT-fs (loop6): Filesystem has been set read-only [ 747.475329][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.490136][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.697290][ T1116] hsr_slave_0: left promiscuous mode [ 747.716306][ T1116] hsr_slave_1: left promiscuous mode [ 747.790805][ T1116] veth1_macvtap: left promiscuous mode [ 747.796387][ T1116] veth0_macvtap: left promiscuous mode [ 747.832742][ T1116] veth1_vlan: left promiscuous mode [ 747.839536][ T1116] veth0_vlan: left promiscuous mode [ 748.248215][T12778] fuse: Bad value for 'fd' [ 748.606317][T11442] Bluetooth: hci1: command tx timeout [ 748.982414][T12786] loop6: detected capacity change from 0 to 128 [ 749.000012][ T28] audit: type=1800 audit(1758158089.628:103): pid=12786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2274" name="file2" dev="loop6" ino=1048680 res=0 errno=0 [ 749.023307][T12786] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 749.032245][T12786] FAT-fs (loop6): Filesystem has been set read-only [ 749.552598][ T1116] bond0 (unregistering): Released all slaves [ 749.588779][T12780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2271'. [ 749.754068][T12794] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 749.774796][ T28] audit: type=1326 audit(1758158090.398:104): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.4.2277" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f020218eba9 code=0x0 [ 749.848627][T12743] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 749.866412][T12743] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 749.901622][T12743] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 749.920276][T12743] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 750.108353][T12804] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 750.125686][T12743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.161257][T12807] loop6: detected capacity change from 0 to 256 [ 750.178164][T12807] exFAT-fs (loop6): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 750.198047][T12743] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.266036][T12743] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 750.277615][T12743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 750.303976][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.311304][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.330102][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.337282][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.644921][T12743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.678978][T11442] Bluetooth: hci1: command tx timeout [ 750.695497][T12817] loop5: detected capacity change from 0 to 128 [ 750.748298][T12743] veth0_vlan: entered promiscuous mode [ 750.764172][T12743] veth1_vlan: entered promiscuous mode [ 750.846774][T12817] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 750.870152][T12743] veth0_macvtap: entered promiscuous mode [ 750.882808][ T28] audit: type=1800 audit(1758158091.468:105): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2282" name="file2" dev="loop5" ino=1048681 res=0 errno=0 [ 750.914585][T12817] FAT-fs (loop5): Filesystem has been set read-only [ 750.948774][T12743] veth1_macvtap: entered promiscuous mode [ 751.623188][T12743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.663150][T12743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.687940][T12743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.712841][T12743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.737896][T12743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.777982][T12743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.827891][T12743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.838695][T12743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.849597][T12743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.859911][T12743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.870533][T12743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.880675][T12743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.897639][T12743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.939454][T12743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.010360][T12743] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.241579][T12743] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.250767][T12743] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.259956][T12743] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.482567][T12833] loop5: detected capacity change from 0 to 512 [ 752.520135][T12833] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 752.566784][T12833] EXT4-fs (loop5): 1 truncate cleaned up [ 752.599849][T12833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.625674][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.656444][T12833] EXT4-fs error (device loop5): ext4_get_verity_descriptor_location:298: inode #15: comm syz.5.2286: verity file has no extents [ 752.675652][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.705987][T12833] EXT4-fs (loop5): Remounting filesystem read-only [ 752.725515][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.734534][T12833] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size [ 752.744649][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.757727][T11442] Bluetooth: hci1: command tx timeout [ 752.864248][T12838] loop3: detected capacity change from 0 to 256 [ 752.909442][T12838] FAT-fs (loop3): Directory bread(block 64) failed [ 752.931028][T12838] FAT-fs (loop3): Directory bread(block 65) failed [ 752.944143][T12838] FAT-fs (loop3): Directory bread(block 66) failed [ 752.951112][T12838] FAT-fs (loop3): Directory bread(block 67) failed [ 752.958339][T12838] FAT-fs (loop3): Directory bread(block 68) failed [ 752.964906][T12838] FAT-fs (loop3): Directory bread(block 69) failed [ 752.972054][T12838] FAT-fs (loop3): Directory bread(block 70) failed [ 752.980375][T12838] FAT-fs (loop3): Directory bread(block 71) failed [ 752.988054][T12838] FAT-fs (loop3): Directory bread(block 72) failed [ 752.994604][T12838] FAT-fs (loop3): Directory bread(block 73) failed [ 753.217561][T10245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.322495][T12846] syz.4.2287[12846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 753.323217][T12846] syz.4.2287[12846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 753.537356][T12417] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 753.737193][ T5839] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 753.832109][T12417] usb 4-1: config index 0 descriptor too short (expected 64575, got 68) [ 753.966027][T12417] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 753.981229][T12417] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 753.992739][T12417] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 754.014017][T12417] usb 4-1: config index 1 descriptor too short (expected 64575, got 68) [ 754.023646][T12417] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 754.042339][T12417] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 754.056167][T12417] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 754.077679][ T5839] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.093576][ T5839] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.370443][ T5839] usb 6-1: config 0 interface 0 has no altsetting 0 [ 754.383928][ T5839] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 754.394784][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.154912][ T5776] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 755.356297][ T5776] usb 7-1: Using ep0 maxpacket: 16 [ 755.364186][ T5776] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 210, changing to 11 [ 755.378842][ T5776] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 755.393014][ T5776] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 755.419029][ T5776] usb 7-1: language id specifier not provided by device, defaulting to English [ 755.434779][ T5776] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 755.446665][ T5776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.454753][ T5776] usb 7-1: Product: syz [ 755.463945][ T5776] usb 7-1: Manufacturer: syz [ 755.468893][ T5776] usb 7-1: SerialNumber: syz [ 755.694356][ T5776] cdc_ncm 7-1:1.0: bind() failure [ 755.710006][ T5776] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 755.721756][ T5776] cdc_ncm 7-1:1.1: bind() failure [ 755.753023][ T5776] usb 7-1: USB disconnect, device number 9 [ 756.118451][ T5839] usb 6-1: config 0 descriptor?? [ 756.513230][ T5839] usbhid 6-1:0.0: can't add hid device: -71 [ 756.525674][ T5839] usbhid: probe of 6-1:0.0 failed with error -71 [ 756.545866][ T5839] usb 6-1: USB disconnect, device number 10 [ 756.743573][T12864] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 757.232832][T12417] usb 4-1: string descriptor 0 read error: -71 [ 757.251408][T12417] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 757.364947][T12417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.673145][T12417] usb 4-1: can't set config #1, error -71 [ 757.852068][T12417] usb 4-1: USB disconnect, device number 11 [ 759.907563][T12879] loop3: detected capacity change from 0 to 512 [ 763.086145][T12894] loop5: detected capacity change from 0 to 128 [ 763.103770][ T28] audit: type=1800 audit(1758158103.735:106): pid=12894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2300" name="file2" dev="loop5" ino=1048685 res=0 errno=0 [ 763.147794][T12894] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 763.454652][T12894] FAT-fs (loop5): Filesystem has been set read-only [ 763.813089][ T27] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 764.147978][ T27] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 764.166881][ T27] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 764.178785][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 764.188683][ T27] usb 7-1: SerialNumber: syz [ 765.021837][T12905] loop3: detected capacity change from 0 to 512 [ 765.934236][T12905] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 766.005862][T12905] EXT4-fs (loop3): 1 truncate cleaned up [ 766.019240][T12905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.478824][ T27] cdc_ether: probe of 7-1:1.0 failed with error -71 [ 767.547628][ T27] usb 7-1: USB disconnect, device number 10 [ 767.942302][T12743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.692100][ T5838] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 768.965412][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.121257][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.276571][ T5838] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 769.304399][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.314450][T12930] loop6: detected capacity change from 0 to 256 [ 769.333518][ T5838] usb 4-1: config 0 descriptor?? [ 769.364207][T12930] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 769.394693][ T28] audit: type=1800 audit(1758158110.028:107): pid=12930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2309" name="bus" dev="loop6" ino=1048686 res=0 errno=0 [ 769.698544][T12939] loop6: detected capacity change from 0 to 1024 [ 769.718277][T12939] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.730683][T12939] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 769.779023][ T788] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 769.779444][ T5838] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 769.798703][ T5838] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 769.806385][ T5838] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 769.832628][ T5838] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 769.846965][ T5838] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 769.857468][ T5838] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 769.867070][ T5838] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 769.884344][ T5838] arvo 0003:1E7D:30D4.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 769.958859][ T788] usb 6-1: Using ep0 maxpacket: 8 [ 769.975117][ T788] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 769.983543][ T788] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 769.992278][ T788] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 770.001531][ T788] usb 6-1: config 250 has no interface number 0 [ 770.007899][ T788] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 770.019989][ T788] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 770.030504][ T788] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 770.041053][ T788] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 770.051698][ T788] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 770.065759][ T788] usb 6-1: config 250 interface 228 has no altsetting 0 [ 770.078143][ T788] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 770.090741][ T788] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 770.101597][ T788] usb 6-1: Product: syz [ 770.105916][ T788] usb 6-1: SerialNumber: syz [ 770.115519][ T788] hub 6-1:250.228: bad descriptor, ignoring hub [ 770.122265][ T788] hub: probe of 6-1:250.228 failed with error -5 [ 770.204728][ T5838] usb 4-1: USB disconnect, device number 12 [ 770.321331][ T788] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 770.600879][ T8552] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm kworker/u4:23: bg 0: block 393: padding at end of block bitmap is not set [ 770.621314][ T8552] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 770.637612][ T8552] EXT4-fs (loop6): This should not happen!! Data will be lost [ 770.637612][ T8552] [ 770.660189][ T5863] usb 6-1: USB disconnect, device number 11 [ 770.682268][ T5863] usblp0: removed [ 770.707399][ T11] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 770.720463][ T11] EXT4-fs (loop6): This should not happen!! Data will be lost [ 770.720463][ T11] [ 770.730364][ T11] EXT4-fs (loop6): Total free blocks count 0 [ 770.736986][ T11] EXT4-fs (loop6): Free/Dirty block details [ 770.748624][ T11] EXT4-fs (loop6): free_blocks=0 [ 770.753796][ T11] EXT4-fs (loop6): dirty_blocks=10000 [ 770.759639][ T11] EXT4-fs (loop6): Block reservation details [ 772.215755][T12959] loop6: detected capacity change from 0 to 1024 [ 772.234784][T12959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 772.262643][T12959] EXT4-fs (loop6): can't mount with both data=journal and delalloc [ 772.400373][T12962] loop5: detected capacity change from 0 to 128 [ 772.419050][ T28] audit: type=1800 audit(1758158113.049:108): pid=12962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2319" name="file2" dev="loop5" ino=1048687 res=0 errno=0 [ 772.446863][T12962] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 772.461257][T12962] FAT-fs (loop5): Filesystem has been set read-only [ 772.518001][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.525830][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.537323][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.544814][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.552354][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.559860][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.567283][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.574963][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.582628][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.595407][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.617584][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.625007][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.657529][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.677556][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.685023][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.717746][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.725198][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.761747][ T5882] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 772.795910][ T5882] hid-generic 0003:0004:0000.0011: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 773.214235][T12975] loop5: detected capacity change from 0 to 512 [ 773.299892][T12975] EXT4-fs (loop5): Test dummy encryption mode enabled [ 773.306879][T12975] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 773.373705][T12975] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.2322: bad orphan inode 131083 [ 773.405432][T12975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 773.894039][T10245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.107876][T12969] loop3: detected capacity change from 0 to 40427 [ 774.120111][T12969] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 774.130531][T12969] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 774.143454][T12969] F2FS-fs (loop3): invalid crc value [ 774.180937][T12980] loop5: detected capacity change from 0 to 8192 [ 774.253237][T12969] F2FS-fs (loop3): Found nat_bits in checkpoint [ 774.331431][T12969] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 774.352558][T12969] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 774.635316][ T28] audit: type=1326 audit(1758158115.210:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12979 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba998eba9 code=0x7ffc0000 [ 774.838284][ T28] audit: type=1326 audit(1758158115.210:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12979 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba998eba9 code=0x7ffc0000 [ 774.939353][ T28] audit: type=1326 audit(1758158115.220:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12979 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ba998eba9 code=0x7ffc0000 [ 775.029525][ T28] audit: type=1326 audit(1758158115.220:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12979 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba998eba9 code=0x7ffc0000 [ 775.052139][ T28] audit: type=1326 audit(1758158115.220:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12979 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ba998eba9 code=0x7ffc0000 [ 775.074971][ T28] audit: type=1326 audit(1758158115.250:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12979 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba998eba9 code=0x7ffc0000 [ 775.098238][ T28] audit: type=1326 audit(1758158115.270:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12979 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba998eba9 code=0x7ffc0000 [ 775.120679][ T28] audit: type=1326 audit(1758158115.310:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12979 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ba998eba9 code=0x7ffc0000 [ 775.143258][ T28] audit: type=1326 audit(1758158115.310:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12979 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba998eba9 code=0x7ffc0000 [ 775.173346][ T28] audit: type=1326 audit(1758158115.320:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12979 comm="syz.5.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba998eba9 code=0x7ffc0000 [ 775.329830][T13005] loop6: detected capacity change from 0 to 128 [ 775.350332][T13005] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 775.371072][T13005] FAT-fs (loop6): Filesystem has been set read-only [ 775.622480][T13011] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2333'. [ 775.637394][T13011] binder: 13007:13011 ioctl 89f2 200000000300 returned -22 [ 775.756911][ T1116] kworker/u4:8: attempt to access beyond end of device [ 775.756911][ T1116] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 776.475771][T12866] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 776.809877][T12866] usb 6-1: Using ep0 maxpacket: 32 [ 777.035938][T12866] usb 6-1: unable to get BOS descriptor or descriptor too short [ 777.085340][T12866] usb 6-1: config 5 has an invalid interface number: 38 but max is 1 [ 777.093573][T12866] usb 6-1: config 5 has an invalid interface number: 35 but max is 1 [ 777.115564][T12866] usb 6-1: config 5 has no interface number 0 [ 777.121704][T12866] usb 6-1: config 5 has no interface number 1 [ 777.896224][T12866] usb 6-1: config 5 interface 38 has no altsetting 0 [ 777.903076][T12866] usb 6-1: config 5 interface 35 has no altsetting 0 [ 777.932941][T12866] usb 6-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=17.89 [ 777.980192][T13038] loop3: detected capacity change from 0 to 256 [ 777.989650][T12866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.018394][T12866] usb 6-1: Product: syz [ 778.022611][T12866] usb 6-1: Manufacturer: syz [ 778.081813][T13038] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 778.105122][T12866] usb 6-1: SerialNumber: syz [ 778.186825][T13040] input: syz0 as /devices/virtual/input/input15 [ 778.337390][T12866] usb 6-1: unknown interface protocol 0x37, assuming v1 [ 778.353164][T12866] usb 6-1: cannot find UAC_HEADER [ 778.393501][T12866] snd-usb-audio: probe of 6-1:5.38 failed with error -22 [ 778.428475][T12866] usb 6-1: USB disconnect, device number 12 [ 778.625998][T13045] loop3: detected capacity change from 0 to 128 [ 778.680017][T13045] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 778.699041][T13045] FAT-fs (loop3): Filesystem has been set read-only [ 780.955861][T13050] loop5: detected capacity change from 0 to 40427 [ 781.067992][T13050] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 781.168426][T13050] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 781.350167][T13050] F2FS-fs (loop5): Found nat_bits in checkpoint [ 781.521984][T13050] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 781.550268][T13050] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 783.141704][T13079] loop3: detected capacity change from 0 to 512 [ 783.391191][T13079] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 783.429998][T13079] EXT4-fs (loop3): 1 truncate cleaned up [ 783.441426][T13079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.497052][T10245] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 783.629266][T10245] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 783.746630][T10245] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 783.892462][T10245] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 783.900082][T10245] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 783.938363][T10245] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 783.975879][T10245] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 785.304052][T12743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.693500][T13093] loop6: detected capacity change from 0 to 512 [ 785.875812][T13093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.234610][T13098] loop5: detected capacity change from 0 to 128 [ 786.383031][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.506203][T13106] loop6: detected capacity change from 0 to 512 [ 786.716488][T13106] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 786.725056][T13106] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.2358: bad orphan inode 15 [ 786.735642][T13106] ext4_test_bit(bit=14, block=4) = 1 [ 786.741671][T13106] is_bad_inode(inode)=0 [ 786.745953][T13106] NEXT_ORPHAN(inode)=0 [ 786.750047][T13106] max_ino=32 [ 786.753337][T13106] i_nlink=1 [ 786.758881][T13106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.974542][T10265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.247704][T13104] loop3: detected capacity change from 0 to 40427 [ 787.290241][T13104] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 787.310714][T13104] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 787.381545][T13104] F2FS-fs (loop3): Found nat_bits in checkpoint [ 787.520911][T13104] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 787.527994][T13104] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 787.605683][T13120] loop6: detected capacity change from 0 to 256 [ 787.651031][T13120] exfat: Unknown parameter 'lo' [ 788.764750][T12743] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 788.791700][T12743] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 788.821705][T12743] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 788.853857][T12743] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 788.868053][T12743] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 788.876751][T12743] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 788.888847][T12743] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 789.387433][T13132] syz.4.2363[13132] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 789.387565][T13132] syz.4.2363[13132] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 789.801504][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2362'. [ 789.921256][T13140] loop3: detected capacity change from 0 to 512 [ 790.030002][T13140] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2362: iget: bad extended attribute block 1 [ 790.052292][T13140] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2362: couldn't read orphan inode 15 (err -117) [ 790.087025][T13145] xfrm0: entered promiscuous mode [ 790.092256][T13145] xfrm0: entered allmulticast mode [ 790.104163][T13140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.104333][T12417] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 790.508680][T12417] usb 6-1: Using ep0 maxpacket: 16 [ 790.561362][T12417] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 210, changing to 11 [ 790.681449][T12417] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 790.784187][T12417] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 790.902163][T12417] usb 6-1: language id specifier not provided by device, defaulting to English [ 791.070928][T12417] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 791.103407][T12417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.123424][T12743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.142473][T12417] usb 6-1: Product: syz [ 791.156996][T12417] usb 6-1: SerialNumber: syz [ 791.285330][T13151] loop3: detected capacity change from 0 to 128 [ 791.424001][T12417] cdc_ncm 6-1:1.0: bind() failure [ 791.441942][T12417] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 791.458536][T12417] cdc_ncm 6-1:1.1: bind() failure [ 791.480709][T12417] usb 6-1: USB disconnect, device number 13 [ 791.925355][T13154] input: syz1 as /devices/virtual/input/input17 [ 792.457596][T12417] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 792.688676][T12417] usb 6-1: Using ep0 maxpacket: 16 [ 792.721295][T12417] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 210, changing to 11 [ 792.753704][T12417] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 792.796794][T12417] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 792.837669][T12417] usb 6-1: language id specifier not provided by device, defaulting to English [ 792.889126][T12417] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 792.907332][T12417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.947415][T12417] usb 6-1: Product: syz [ 792.956118][T12417] usb 6-1: Manufacturer: syz [ 792.978697][T12417] usb 6-1: SerialNumber: syz [ 793.220023][T13158] loop6: detected capacity change from 0 to 40427 [ 793.231075][T13158] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 793.241416][T13158] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 793.264594][T13158] F2FS-fs (loop6): Found nat_bits in checkpoint [ 793.285637][T12417] cdc_ncm 6-1:1.0: bind() failure [ 793.302293][T12417] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 793.311263][T12417] cdc_ncm 6-1:1.1: bind() failure [ 793.321026][T12417] usb 6-1: USB disconnect, device number 14 [ 793.342994][T13158] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 793.350508][T13158] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 795.341466][T10265] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 795.378388][T10265] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 795.392179][T10265] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 795.400101][T10265] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 795.420620][T10265] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 795.428374][T10265] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 795.435951][T10265] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 795.824834][T13195] loop5: detected capacity change from 0 to 512 [ 796.054488][T13195] EXT4-fs (loop5): 1 orphan inode deleted [ 796.068022][T13195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.097291][T13195] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 798.046071][ T42] __quota_error: 3 callbacks suppressed [ 798.046115][ T42] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 798.276097][ T42] EXT4-fs error (device loop5): ext4_release_dquot:6976: comm kworker/u4:2: Failed to release dquot type 1 [ 798.319527][T10245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.692345][T13206] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2383'. [ 798.720609][T13206] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2383'. [ 798.750641][T13206] netlink: 'syz.5.2383': attribute type 1 has an invalid length. [ 798.808680][ T28] audit: type=1326 audit(1758158139.452:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb325b8eba9 code=0x7ffc0000 [ 798.850692][T13208] bridge0: entered promiscuous mode [ 798.882132][T13208] bridge0: port 3(macsec1) entered blocking state [ 798.893603][ T28] audit: type=1326 audit(1758158139.492:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb325b8eba9 code=0x7ffc0000 [ 798.930110][T13208] bridge0: port 3(macsec1) entered disabled state [ 798.975467][ T28] audit: type=1326 audit(1758158139.492:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb325b8eba9 code=0x7ffc0000 [ 799.006232][T13208] macsec1: entered allmulticast mode [ 799.023570][T13208] bridge0: entered allmulticast mode [ 799.034121][ T28] audit: type=1326 audit(1758158139.492:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb325b8eba9 code=0x7ffc0000 [ 799.065374][T13208] macsec1: left allmulticast mode [ 799.097986][T13208] bridge0: left allmulticast mode [ 799.112781][T13208] bridge0: left promiscuous mode [ 799.119530][ T28] audit: type=1326 audit(1758158139.492:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb325b8eba9 code=0x7ffc0000 [ 799.224422][ T28] audit: type=1326 audit(1758158139.492:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb325b8eba9 code=0x7ffc0000 [ 799.346138][ T28] audit: type=1326 audit(1758158139.492:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb325b8eba9 code=0x7ffc0000 [ 799.456160][ T28] audit: type=1326 audit(1758158139.492:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb325b8eba9 code=0x7ffc0000 [ 799.546872][ T28] audit: type=1326 audit(1758158139.492:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13207 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb325b8eba9 code=0x7ffc0000 [ 799.778887][T13219] loop6: detected capacity change from 0 to 256 [ 799.822515][T13219] FAT-fs (loop6): Directory bread(block 64) failed [ 799.839875][T13219] FAT-fs (loop6): Directory bread(block 65) failed [ 799.859795][T13219] FAT-fs (loop6): Directory bread(block 66) failed [ 799.888618][T13219] FAT-fs (loop6): Directory bread(block 67) failed [ 799.895363][T13219] FAT-fs (loop6): Directory bread(block 68) failed [ 799.901923][T13219] FAT-fs (loop6): Directory bread(block 69) failed [ 799.908877][T13219] FAT-fs (loop6): Directory bread(block 70) failed [ 799.915486][T13219] FAT-fs (loop6): Directory bread(block 71) failed [ 799.922114][T13219] FAT-fs (loop6): Directory bread(block 72) failed [ 799.928703][T13219] FAT-fs (loop6): Directory bread(block 73) failed [ 800.564647][T13231] loop3: detected capacity change from 0 to 512 [ 800.811988][T13231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.825388][T13231] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 801.618637][T13235] loop6: detected capacity change from 0 to 128 [ 802.361883][T13241] loop6: detected capacity change from 0 to 1024 [ 802.393048][T13241] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 802.395954][T12743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.418327][T13241] EXT4-fs (loop6): can't mount with both data=journal and delalloc [ 802.492304][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.520912][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.547238][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.564103][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.580560][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.607774][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.634504][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.656845][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.686865][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.703772][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.721536][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.748965][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.756754][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.775890][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.783931][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.798616][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.806618][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.819075][ T788] hid-generic 0003:0004:0000.0012: unknown main item tag 0x0 [ 802.865764][ T788] hid-generic 0003:0004:0000.0012: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 804.145197][T13261] team0: Port device team_slave_0 removed [ 804.356417][T13266] overlayfs: failed to clone upperpath [ 806.077186][T13273] tipc: Enabled bearer , priority 0 [ 806.117124][T13273] syzkaller0: entered promiscuous mode [ 806.122899][T13273] syzkaller0: entered allmulticast mode [ 806.171481][T13273] tipc: Resetting bearer [ 806.190830][T13272] tipc: Resetting bearer [ 806.260535][T13272] tipc: Disabling bearer [ 808.695250][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.702106][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.823982][T13296] loop3: detected capacity change from 0 to 256 [ 808.864371][T13296] FAT-fs (loop3): Directory bread(block 64) failed [ 808.876452][T13296] FAT-fs (loop3): Directory bread(block 65) failed [ 808.885141][T13296] FAT-fs (loop3): Directory bread(block 66) failed [ 808.902115][T13296] FAT-fs (loop3): Directory bread(block 67) failed [ 808.908852][T13296] FAT-fs (loop3): Directory bread(block 68) failed [ 808.917068][T13296] FAT-fs (loop3): Directory bread(block 69) failed [ 808.927427][T13296] FAT-fs (loop3): Directory bread(block 70) failed [ 808.936638][T13296] FAT-fs (loop3): Directory bread(block 71) failed [ 808.948335][T13296] FAT-fs (loop3): Directory bread(block 72) failed [ 808.977641][T13296] FAT-fs (loop3): Directory bread(block 73) failed [ 809.785329][T13302] loop5: detected capacity change from 0 to 128 [ 809.815185][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 809.815200][ T28] audit: type=1800 audit(1758158150.468:133): pid=13302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2407" name="file2" dev="loop5" ino=1048701 res=0 errno=0 [ 809.878851][ T788] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 810.160438][ T788] usb 4-1: config index 0 descriptor too short (expected 64575, got 68) [ 810.188915][ T788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 810.215860][ T788] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 811.137490][T13313] loop5: detected capacity change from 0 to 128 [ 811.215157][T13313] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 811.225117][T13313] FAT-fs (loop5): Filesystem has been set read-only [ 811.388254][ T28] audit: type=1800 audit(1758158151.869:134): pid=13313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2409" name="file2" dev="loop5" ino=1048702 res=0 errno=0 [ 812.122555][ T788] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 812.138331][ T788] usb 4-1: unable to read config index 1 descriptor/start: -71 [ 812.927499][ T788] usb 4-1: can't read configurations, error -71 [ 813.431454][T13327] loop3: detected capacity change from 0 to 256 [ 813.501401][T13327] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 813.521208][T13327] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 813.537916][T13330] loop5: detected capacity change from 0 to 128 [ 813.575017][ T28] audit: type=1800 audit(1758158154.230:135): pid=13330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2417" name="file2" dev="loop5" ino=1048703 res=0 errno=0 [ 815.724246][T13357] loop6: detected capacity change from 0 to 16 [ 815.735068][T13357] erofs: (device loop6): z_erofs_parse_cfgs: unidentified algorithms fff8, please upgrade kernel [ 816.906055][T13363] loop3: detected capacity change from 0 to 256 [ 816.949828][T13363] FAT-fs (loop3): Directory bread(block 64) failed [ 816.976902][T13363] FAT-fs (loop3): Directory bread(block 65) failed [ 816.985958][T13363] FAT-fs (loop3): Directory bread(block 66) failed [ 816.992517][T13363] FAT-fs (loop3): Directory bread(block 67) failed [ 817.023719][T13363] FAT-fs (loop3): Directory bread(block 68) failed [ 817.040734][T13363] FAT-fs (loop3): Directory bread(block 69) failed [ 817.061570][T13363] FAT-fs (loop3): Directory bread(block 70) failed [ 817.080762][T13363] FAT-fs (loop3): Directory bread(block 71) failed [ 817.095486][T13363] FAT-fs (loop3): Directory bread(block 72) failed [ 817.112383][T13363] FAT-fs (loop3): Directory bread(block 73) failed [ 817.450967][T13368] loop6: detected capacity change from 0 to 128 [ 817.477574][ T28] audit: type=1800 audit(1758158158.142:136): pid=13368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2429" name="file2" dev="loop6" ino=1048704 res=0 errno=0 [ 817.505212][ T5882] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 817.705092][ T5882] usb 6-1: Using ep0 maxpacket: 8 [ 817.830011][ T5882] usb 6-1: unable to get BOS descriptor or descriptor too short [ 817.869842][ T5882] usb 6-1: string descriptor 0 read error: -22 [ 817.887331][ T5882] usb 6-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 817.903777][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.702084][ T5882] asix 6-1:7.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 818.945534][ T5882] asix 6-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 818.994477][ T5882] asix 6-1:7.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 819.034473][ T5882] asix: probe of 6-1:7.0 failed with error -71 [ 819.071289][ T5882] usb 6-1: USB disconnect, device number 15 [ 819.120964][T13380] loop3: detected capacity change from 0 to 128 [ 819.140234][T13380] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 819.149138][T13380] FAT-fs (loop3): Filesystem has been set read-only [ 819.207133][ T28] audit: type=1800 audit(1758158159.803:137): pid=13380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2432" name="file2" dev="loop3" ino=1048705 res=0 errno=0 [ 820.203367][T13390] loop5: detected capacity change from 0 to 512 [ 820.216216][T13390] EXT4-fs: Ignoring removed nomblk_io_submit option [ 820.223438][T13390] EXT4-fs (loop5): Test dummy encryption mode enabled [ 820.259038][T13390] EXT4-fs (loop5): 1 truncate cleaned up [ 820.266339][T13390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.210218][T13395] loop6: detected capacity change from 0 to 512 [ 821.331647][T10245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.357577][T13395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.397835][T13395] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 821.468370][T13395] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #2: comm syz.6.2436: corrupted inode contents [ 821.509934][T13395] EXT4-fs error (device loop6): ext4_dirty_inode:6106: inode #2: comm syz.6.2436: mark_inode_dirty error [ 821.535594][T13395] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #2: comm syz.6.2436: corrupted inode contents [ 821.572199][T13404] loop5: detected capacity change from 0 to 512 [ 821.641034][T13404] ------------[ cut here ]------------ [ 821.647182][T13404] EA inode 11 i_nlink=2 [ 821.650437][T13404] WARNING: CPU: 0 PID: 13404 at fs/ext4/xattr.c:1070 ext4_xattr_inode_update_ref+0x521/0x580 [ 821.666015][T13404] Modules linked in: [ 821.669963][T13404] CPU: 0 PID: 13404 Comm: syz.5.2437 Not tainted syzkaller #0 [ 821.677658][T13404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 821.687815][T13404] RIP: 0010:ext4_xattr_inode_update_ref+0x521/0x580 [ 821.694625][T13404] Code: 24 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 31 43 9a ff 49 8b 37 48 c7 c7 00 d1 be 8a 44 89 f2 e8 cf 73 0d ff <0f> 0b 4c 8b 64 24 18 48 8b 5c 24 10 4c 8d 7c 24 60 e9 1f fe ff ff [ 821.714333][T13404] RSP: 0018:ffffc9000c2f7220 EFLAGS: 00010246 [ 821.720438][T13404] RAX: 9c9021fccbce5c00 RBX: 0000000000000001 RCX: 0000000000080000 [ 821.728588][T13404] RDX: ffffc90014552000 RSI: 000000000003d0a6 RDI: 000000000003d0a7 [ 821.736845][T13404] RBP: ffffc9000c2f7318 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 821.745219][T13404] R10: dffffc0000000000 R11: ffffed10171c5183 R12: ffff88805ce9d2b0 [ 821.753284][T13404] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88805ce9d300 [ 821.762253][T13404] FS: 00007f7baa8106c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 821.771597][T13404] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 821.778297][T13404] CR2: 00007f7ba9971fe0 CR3: 000000006602f000 CR4: 00000000003506f0 [ 821.786343][T13404] Call Trace: [ 821.789653][T13404] [ 821.792627][T13404] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 821.798365][T13404] ? ext4_xattr_inode_iget+0x3df/0x600 [ 821.803925][T13404] ext4_xattr_set_entry+0xcda/0x1e90 [ 821.809278][T13404] ext4_xattr_ibody_set+0x254/0x6a0 [ 821.814584][T13404] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 821.820560][T13404] __ext4_expand_extra_isize+0x306/0x400 [ 821.826302][T13404] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 821.831830][T13404] ext4_evict_inode+0x7ed/0xea0 [ 821.836863][T13404] ? _raw_spin_unlock+0x28/0x40 [ 821.841769][T13404] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 821.847955][T13404] ? do_raw_spin_unlock+0x121/0x230 [ 821.853265][T13404] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 821.859198][T13404] evict+0x486/0x870 [ 821.863917][T13404] ? __lock_acquire+0x7c80/0x7c80 [ 821.868998][T13404] ? proc_nr_inodes+0x230/0x230 [ 821.874126][T13404] ? do_raw_spin_unlock+0x121/0x230 [ 821.879374][T13404] ? _raw_spin_unlock+0x28/0x40 [ 821.884327][T13404] ? iput+0x70a/0x920 [ 821.888354][T13404] ext4_orphan_cleanup+0xbd4/0x1400 [ 821.893671][T13404] ? ext4_orphan_del+0xba0/0xba0 [ 821.898671][T13404] ? ext4_register_li_request+0x183/0x940 [ 821.904516][T13404] ? errseq_check_and_advance+0x66/0x120 [ 821.910193][T13404] ext4_fill_super+0x5de7/0x66c0 [ 821.915236][T13404] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 821.921517][T13404] ? vscnprintf+0x80/0x80 [ 821.925958][T13404] ? down_read_killable+0x340/0x340 [ 821.931212][T13404] ? setup_bdev_super+0x56b/0x660 [ 821.936331][T13404] get_tree_bdev+0x3e4/0x510 [ 821.940968][T13404] ? vfs_parse_fs_string+0x160/0x160 [ 821.946340][T13404] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 821.952618][T13404] ? setup_bdev_super+0x660/0x660 [ 821.957729][T13404] ? apparmor_capable+0x137/0x1a0 [ 821.962954][T13404] ? bpf_lsm_capable+0x9/0x10 [ 821.968476][T13404] ? security_capable+0x89/0xb0 [ 821.973552][T13404] vfs_get_tree+0x8c/0x280 [ 821.978019][T13404] do_new_mount+0x24b/0xa40 [ 821.982652][T13404] __se_sys_mount+0x2da/0x3c0 [ 821.987448][T13404] ? __x64_sys_mount+0xc0/0xc0 [ 821.992252][T13404] ? __x64_sys_mount+0x20/0xc0 [ 821.997109][T13404] do_syscall_64+0x55/0xb0 [ 822.001564][T13404] ? clear_bhb_loop+0x40/0x90 [ 822.006369][T13404] ? clear_bhb_loop+0x40/0x90 [ 822.011087][T13404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 822.017100][T13404] RIP: 0033:0x7f7ba999034a [ 822.021561][T13404] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.041285][T13404] RSP: 002b:00007f7baa80fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 822.049793][T13404] RAX: ffffffffffffffda RBX: 00007f7baa80fef0 RCX: 00007f7ba999034a [ 822.057901][T13404] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f7baa80feb0 [ 822.065985][T13404] RBP: 0000200000000180 R08: 00007f7baa80fef0 R09: 0000000000800700 [ 822.074845][T13404] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 822.083030][T13404] R13: 00007f7baa80feb0 R14: 000000000000046f R15: 0000200000000680 [ 822.091049][T13404] [ 822.094216][T13404] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 822.101525][T13404] CPU: 0 PID: 13404 Comm: syz.5.2437 Not tainted syzkaller #0 [ 822.109001][T13404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 822.119092][T13404] Call Trace: [ 822.122384][T13404] [ 822.125331][T13404] dump_stack_lvl+0x16c/0x230 [ 822.130036][T13404] ? show_regs_print_info+0x20/0x20 [ 822.135256][T13404] ? load_image+0x3b0/0x3b0 [ 822.139791][T13404] panic+0x2c0/0x710 [ 822.143706][T13404] ? bpf_jit_dump+0xd0/0xd0 [ 822.148235][T13404] __warn+0x2e0/0x470 [ 822.152318][T13404] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 822.158318][T13404] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 822.164308][T13404] report_bug+0x2be/0x4f0 [ 822.168649][T13404] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 822.174649][T13404] ? ext4_xattr_inode_update_ref+0x521/0x580 [ 822.180658][T13404] ? ext4_xattr_inode_update_ref+0x523/0x580 [ 822.186649][T13404] handle_bug+0xcf/0x120 [ 822.190905][T13404] exc_invalid_op+0x1a/0x50 [ 822.195434][T13404] asm_exc_invalid_op+0x1a/0x20 [ 822.200295][T13404] RIP: 0010:ext4_xattr_inode_update_ref+0x521/0x580 [ 822.207024][T13404] Code: 24 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 31 43 9a ff 49 8b 37 48 c7 c7 00 d1 be 8a 44 89 f2 e8 cf 73 0d ff <0f> 0b 4c 8b 64 24 18 48 8b 5c 24 10 4c 8d 7c 24 60 e9 1f fe ff ff [ 822.226634][T13404] RSP: 0018:ffffc9000c2f7220 EFLAGS: 00010246 [ 822.232704][T13404] RAX: 9c9021fccbce5c00 RBX: 0000000000000001 RCX: 0000000000080000 [ 822.240680][T13404] RDX: ffffc90014552000 RSI: 000000000003d0a6 RDI: 000000000003d0a7 [ 822.248650][T13404] RBP: ffffc9000c2f7318 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 822.256625][T13404] R10: dffffc0000000000 R11: ffffed10171c5183 R12: ffff88805ce9d2b0 [ 822.264606][T13404] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88805ce9d300 [ 822.272609][T13404] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 822.278283][T13404] ? ext4_xattr_inode_iget+0x3df/0x600 [ 822.283766][T13404] ext4_xattr_set_entry+0xcda/0x1e90 [ 822.289087][T13404] ext4_xattr_ibody_set+0x254/0x6a0 [ 822.294304][T13404] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 822.300230][T13404] __ext4_expand_extra_isize+0x306/0x400 [ 822.305879][T13404] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 822.311371][T13404] ext4_evict_inode+0x7ed/0xea0 [ 822.316235][T13404] ? _raw_spin_unlock+0x28/0x40 [ 822.321102][T13404] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 822.327043][T13404] ? do_raw_spin_unlock+0x121/0x230 [ 822.332260][T13404] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 822.338160][T13404] evict+0x486/0x870 [ 822.342064][T13404] ? __lock_acquire+0x7c80/0x7c80 [ 822.347103][T13404] ? proc_nr_inodes+0x230/0x230 [ 822.351958][T13404] ? do_raw_spin_unlock+0x121/0x230 [ 822.357171][T13404] ? _raw_spin_unlock+0x28/0x40 [ 822.362039][T13404] ? iput+0x70a/0x920 [ 822.366026][T13404] ext4_orphan_cleanup+0xbd4/0x1400 [ 822.371248][T13404] ? ext4_orphan_del+0xba0/0xba0 [ 822.376202][T13404] ? ext4_register_li_request+0x183/0x940 [ 822.381940][T13404] ? errseq_check_and_advance+0x66/0x120 [ 822.387584][T13404] ext4_fill_super+0x5de7/0x66c0 [ 822.392550][T13404] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 822.398804][T13404] ? vscnprintf+0x80/0x80 [ 822.403152][T13404] ? down_read_killable+0x340/0x340 [ 822.408366][T13404] ? setup_bdev_super+0x56b/0x660 [ 822.413396][T13404] get_tree_bdev+0x3e4/0x510 [ 822.417992][T13404] ? vfs_parse_fs_string+0x160/0x160 [ 822.423285][T13404] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 822.429537][T13404] ? setup_bdev_super+0x660/0x660 [ 822.434567][T13404] ? apparmor_capable+0x137/0x1a0 [ 822.439593][T13404] ? bpf_lsm_capable+0x9/0x10 [ 822.444276][T13404] ? security_capable+0x89/0xb0 [ 822.449131][T13404] vfs_get_tree+0x8c/0x280 [ 822.453557][T13404] do_new_mount+0x24b/0xa40 [ 822.458074][T13404] __se_sys_mount+0x2da/0x3c0 [ 822.462777][T13404] ? __x64_sys_mount+0xc0/0xc0 [ 822.467579][T13404] ? __x64_sys_mount+0x20/0xc0 [ 822.472345][T13404] do_syscall_64+0x55/0xb0 [ 822.476782][T13404] ? clear_bhb_loop+0x40/0x90 [ 822.481466][T13404] ? clear_bhb_loop+0x40/0x90 [ 822.486146][T13404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 822.492062][T13404] RIP: 0033:0x7f7ba999034a [ 822.496488][T13404] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.516097][T13404] RSP: 002b:00007f7baa80fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 822.524516][T13404] RAX: ffffffffffffffda RBX: 00007f7baa80fef0 RCX: 00007f7ba999034a [ 822.532488][T13404] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f7baa80feb0 [ 822.540459][T13404] RBP: 0000200000000180 R08: 00007f7baa80fef0 R09: 0000000000800700 [ 822.548427][T13404] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 822.556402][T13404] R13: 00007f7baa80feb0 R14: 000000000000046f R15: 0000200000000680 [ 822.564385][T13404] [ 822.567729][T13404] Kernel Offset: disabled [ 822.572307][T13404] Rebooting in 86400 seconds..