last executing test programs: 4m13.498988884s ago: executing program 3 (id=24): syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000001900)='./file1\x00', 0x14090, &(0x7f0000001800)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES32], 0xfd, 0x1508, &(0x7f0000001b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r1, &(0x7f0000002240)=""/131, 0x83, 0x5b) 4m8.823653656s ago: executing program 3 (id=37): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xb) fadvise64(r0, 0x7f, 0x0, 0x4) 4m7.747774929s ago: executing program 3 (id=41): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="656e633d6f61657020686173683d626c616b6532732d323a342d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ca"], 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) 4m6.724237568s ago: executing program 3 (id=43): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") creat(&(0x7f0000000580)='./bus\x00', 0x100) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write(r1, &(0x7f00000001c0)="f1", 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) fremovexattr(0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 4m5.32661898s ago: executing program 3 (id=49): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff7ff3}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4m3.615537749s ago: executing program 3 (id=53): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec970004e0"], 0xffe) 4m2.527628583s ago: executing program 32 (id=53): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec970004e0"], 0xffe) 24.045450711s ago: executing program 1 (id=637): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6], 0x6f4}}, 0x0) 22.960889104s ago: executing program 1 (id=641): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0xfffffffffffffffd, &(0x7f0000003080)=0x7a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100001002cbd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="38280400270c0400240012800b00010062726964676500001400028008001a000100000005001940810000"], 0x44}, 0x1, 0x0, 0x0, 0x8090}, 0x4048004) 18.702162912s ago: executing program 2 (id=649): syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) userfaultfd(0x80000) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0xc0844123, &(0x7f00000000c0)=0x812) syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.045862438s ago: executing program 1 (id=655): sendmsg$key(0xffffffffffffffff, 0x0, 0x8001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x6000000000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)={0xac, r6, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffe0000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0xac}, 0x1, 0x0, 0x0, 0x4010}, 0x4) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bdde0af8a6543aa1e0c74dd04c1ff7bde45d01090224000100000005090400000103000300092100040201220800090581030004000000"], 0x0) 15.261022132s ago: executing program 2 (id=662): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 13.40902926s ago: executing program 5 (id=664): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB], 0x6f4}}, 0x0) 13.263420058s ago: executing program 2 (id=665): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0xfffffffffffffffd, &(0x7f0000003080)=0x7a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100001002cbd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="38280400270c0400240012800b00010062726964676500001400028008001a000100000005001940810000"], 0x44}, 0x1, 0x0, 0x0, 0x8090}, 0x4048004) 13.147324785s ago: executing program 5 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_getaffinity(r0, 0x8, &(0x7f0000000180)) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f00000001c0)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x3b8, 0x268, 0x98, 0xfeffffff, 0x268, 0x268, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @remote, @icmp_id}}}}, {{@ip={@rand_addr=0x64010100, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv6=@mcast2, @port=0x4e23, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) lremovexattr(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)=@known='user.syz\x00') 12.750366708s ago: executing program 0 (id=668): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 12.301341934s ago: executing program 1 (id=670): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$security_ima(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000000)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 12.233018468s ago: executing program 4 (id=671): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r3, &(0x7f0000001180)=""/4096, 0x1000) 12.093452846s ago: executing program 0 (id=672): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 11.802639053s ago: executing program 2 (id=673): syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) userfaultfd(0x80000) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0xc0844123, &(0x7f00000000c0)=0x812) read$FUSE(0xffffffffffffffff, &(0x7f0000003780)={0x2020}, 0x2020) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11.672299441s ago: executing program 0 (id=674): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0x8}}, {@block_validity}, {@bsdgroups}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr(r3, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 11.210520838s ago: executing program 4 (id=675): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001f80)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001940)="b4db047ef9c79ce4314f8cd00bf5fdaf40f59896f70e90c700d79d13045437cf936730a28d9182c59706d1a1c70c36b3e019372a8a6eb950ffd35edcbc2b1e9c308667b18635746372004ed216ae744f6d45e3a9fa8265c4108707f988095c599673e5cca8a6226474a9fd480720e4a06641d7abeb4e7b78e7acde14267dcb0930f5885261207477490934245d1a173c7d424477cdc1cd820418216d8d95803b9c880363bea9a10d9a18", 0xaa}, {&(0x7f0000003d00)="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", 0xadf}], 0x2, &(0x7f0000002040)=ANY=[], 0x110}}], 0x2, 0x64008004) 10.575396255s ago: executing program 4 (id=676): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="37eaf80317957877df13ef2afc30f2cc651a795f6f65342f052d51bdc3983693812d50ca1a0aaf9069dddb52705c3466daa0e2011abb28100dab5edaa772b272bf93233e60565211e0872a0b56d6fae1587941209a89806823040ea934df8c29a1c71f884217e3b26f2f1206e58a65d6703bb54b0b555ee8909c179707cfb8ff73b716b0ff93908c06df06b30a8d4aa72c9404dc70307022891371e45b45c8f1109f6a144f23eb5c250af48422b6d9eb1799e0fd7c95", 0xb6}, {&(0x7f0000000580)="68552ac05ec9787737b3ee4f1fa04e8528e04c1982fde88ad1634c2ba8391a6ee4d68dbf92f53457ea2e3ba75bfcceb2737e4f881fe0580ae2711f99ccec30cb287893fdff63180ef99bec4d5faade53c179260041b556525287bfb3efe8dce3bf7e3e1205128e88c65583a113de5d4a7aa98fb1fb6591d4858840a7ab101eb280dd8f8a957bb2f67622b6deabcb6e3c85d6cb52f247126b267552a5a6bc2e1c5c833567f23f34788780892aa1c416b07e4bc514fc2e3afe6d556ddeba0c60165e88315762939565f3e3059034adc88f949ad37d39c5d5335ef3dc72797654dda3ba7bde96d4eb62d79c925a5d082544de553e4032523f8c8a3a47d8648fff54167ff5b25dd0c8b59215c28dd3ab3386756fca0e7bd9b10e04040ad6e1be351825df18361286157d0348435f1bd3364b60b03ba738f264998c1a3469f819bf66e806ff7cd8e9fb62b973dafd741f5c8c008f5333df007ed33709a998ab3a5151063338ba238015ada5636846ddfb3fb2dda1d6b85326ad17082e7987b0bd123cd7a44a56d084a8a8b738f870bab1f6a917574dca3fe18707555eb352f542d23df4844a8268a247a6fbb37b32ab59c6bc6703afc96cceaf64e8a9099c9c85205b78705c647f107e5eeaca7b78d33f2f16f049a0cb375f102a28faee5d06bea5187e0eb4c8b4c04e5459f274a95f6e957a4500724bb47476c441b693a01f82a8d980e02ee229565af68a22661d51c798d8638fe1033a56a3b8f28d848dbc41ba62de852f0ac39cf5f92991508eab68852d7ab4f91739392127620033717f907a6d76eaa9045866cad94efa44068975bc56dfce331c976ee2057c4a35decd8244c4e22a50b1fd5878b5872659c938f9bf7a31534dbbb70b0be711f18f1080f86923886b6069ad877d974644d6d4847f6f86bb262c6a37288e8b19d6d2c45cea7d1f21ab544c2e58f080a341ab13fcd49694b71b848b38bff5992dbb666b1a873c863aa515b5dcfa5775ba6b4b1d7af9d09b04082157ca10e504e72a712688f1f1aff37fd43647ea56864cdfd8992974fa2aee4960a60fc62c74c9ab971a668e8bf1fd7b67658ae9edfe44cae135643632272546f52a116455c74cf800212ab2def66195e74496cfbb969bf81eb83a85d04ffcb10368d098cf54ec0604ca05ff4629e8f5928feb259bf9c3f55a917aa5d458c3b42bdc5698f3551495d3a99688cad2d5d58190ec6023741a3fd808890108b934ac39cb8baf667cb991fc3b876d12e55a4a8a6041cd890e305451aae3b644cad4c412985b112109b17badceee43e6578dbba30453328b47fef4d347e3b8777dae75de334dac2b278a4cd9574d4e259cc8f0d5a80c4e6c9afd950144665a391a27115d69db89125fa434f3fcda8d36a73f4f5ef2db72b89c3ddf9b2bd87f9a090741491317cef1ace4ff32cedcfcb2efaf39ccc849576c282844dd42732d4af2f4ad45d4333a4ed5a74e667dba8491aa9781ab753b8fc23f91c771d36159c8ce4002601ea4a6fae49089552476e09d4f5db17ab7291eed294661af63399a7a8b295a41470462e9ddaf57967a13227f5539f2975432b08f7d777bb325702e612d61b7d8bbe68f1816029ecc94494463e73e63b7fd6881a88f0e0a20a7a30d9b8c995361c49a63f4ec0e64c6d13a5e24bbb57dc86bff26eb6f04f6823644aa9ac525c0d73a733537079233d2a1c9277d59a8ff26db8bc562b24de41511510dc957f015ab8db317357d8c8ca6823dd07dc285877a0af1592159a37a08787b4914f1cd6bb9961b6afed2720fa4f715559ebcb45b8e786b084f95ed90132fa27290690a33c404873ef09ae38fb0f8cab0b385970a6321ce8ab0", 0x527}], 0x2}}], 0x1, 0x0) 10.551599126s ago: executing program 4 (id=677): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) prlimit64(r0, 0x2, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x1e1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x12, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 10.366073247s ago: executing program 0 (id=678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x101}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40440d0) 9.509467407s ago: executing program 4 (id=679): syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) userfaultfd(0x80000) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0xc0844123, &(0x7f00000000c0)=0x812) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') read$FUSE(r7, &(0x7f0000003780)={0x2020}, 0x2020) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r8, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.45147164s ago: executing program 5 (id=680): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9}]) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x16) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) unshare(0x400) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffc04, 0x0, 0x1, r2, 0x5}) 9.414914182s ago: executing program 0 (id=681): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@usebackuproot}, {@nodatasum}, {@ssd_spread}, {@user_subvol_rm}, {@flushoncommit}, {@compress_force}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) 8.583436151s ago: executing program 2 (id=682): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f0000000300)={[{@errors_continue}, {}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@max_batch_time={'max_batch_time', 0x3d, 0x18}}]}, 0x2, 0x574, &(0x7f0000000600)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x91) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0x1, 0x6a0, &(0x7f00000005c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 8.327313156s ago: executing program 5 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f00000001c0)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x3b8, 0x268, 0x98, 0xfeffffff, 0x268, 0x268, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @remote, @icmp_id}}}}, {{@ip={@rand_addr=0x64010100, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv6=@mcast2, @port=0x4e23, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) lremovexattr(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)=@known='user.syz\x00') 7.267988247s ago: executing program 1 (id=684): syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) userfaultfd(0x80000) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0xc0844123, &(0x7f00000000c0)=0x812) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') read$FUSE(r6, &(0x7f0000003780)={0x2020}, 0x2020) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"}) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.266016977s ago: executing program 2 (id=685): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004f00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) 7.264621957s ago: executing program 5 (id=686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000003540)={0x2020}, 0x2020) 6.339596301s ago: executing program 4 (id=687): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 5.445934013s ago: executing program 5 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) r3 = getpgid(r0) r4 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec) write$binfmt_elf32(r7, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100002001, 0x2, 0x6, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x1, 0x20, 0x3, 0x4, 0x9}, [{0x5, 0x25bf6ba8, 0x3, 0xffffffff, 0x9, 0x4, 0xae, 0x1}, {0x6474e551, 0x3, 0xd7be, 0x40, 0x7fff, 0x48, 0x81, 0x6}, {0x3, 0x1, 0x6f52, 0x7, 0xa9, 0xf, 0x1, 0x400}]}, 0x98) close(r7) 5.191366287s ago: executing program 0 (id=689): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000005880)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@max_inline={'max_inline', 0x3d, [0x30, 0x30, 0x32, 0x74, 0x74, 0x0]}}, {@noautodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x6d]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r0 = creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="7f", 0x1, 0xf00) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 1 (id=690): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) write$binfmt_misc(r3, &(0x7f00000000c0), 0xfdef) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000100)=0x5, 0x4) syz_emit_ethernet(0x101a, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x40000) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x33, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="24dc6170e1e0318539"}}}}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004480)="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", 0x2000, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f0000006480)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000005000000000000008510000002000000850000000800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) kernel console output (not intermixed with test programs): ] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.975912][ T4633] loop4: detected capacity change from 0 to 256 [ 87.987296][ T4276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.996408][ T4276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.002432][ T4636] loop2: detected capacity change from 0 to 128 [ 88.011858][ T4276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.019647][ T4276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.096836][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 88.152270][ T4636] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.205535][ T4636] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.339752][ T4633] loop4: detected capacity change from 256 to 0 [ 88.409475][ T4476] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.027721][ T4636] fscrypt: Error allocating hmac(sha512): -2 [ 89.241911][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 89.329357][ T4476] usb 2-1: Using ep0 maxpacket: 32 [ 89.342807][ T4476] usb 2-1: config 0 interface 0 has no altsetting 0 [ 89.390530][ T4476] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 89.418072][ T4476] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.447038][ T4664] loop2: detected capacity change from 0 to 16 [ 89.465067][ T4662] loop4: detected capacity change from 0 to 512 [ 89.483010][ T4664] erofs: (device loop2): mounted with root inode @ nid 36. [ 89.513954][ T4476] usb 2-1: config 0 descriptor?? [ 89.527089][ T4662] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.65: inode has both inline data and extents flags [ 89.596735][ T4662] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.65: couldn't read orphan inode 15 (err -117) [ 89.638009][ T4662] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 89.931512][ T4672] 9pnet_virtio: no channels available for device ./file0 [ 90.357820][ T4476] hid-led 0003:1D34:0004.0001: unknown main item tag 0x0 [ 90.419443][ T4476] hid-led 0003:1D34:0004.0001: unknown main item tag 0x0 [ 90.471852][ T4476] hid-led 0003:1D34:0004.0001: unknown main item tag 0x0 [ 90.478954][ T4476] hid-led 0003:1D34:0004.0001: unknown main item tag 0x0 [ 90.481951][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 90.503973][ T4676] loop0: detected capacity change from 0 to 16 [ 90.522249][ T4676] erofs: (device loop0): mounted with root inode @ nid 36. [ 90.542346][ T4476] hid-led 0003:1D34:0004.0001: unknown main item tag 0x0 [ 90.562894][ T4476] hid-led 0003:1D34:0004.0001: unknown main item tag 0x0 [ 90.721190][ T4476] hid-led 0003:1D34:0004.0001: unknown main item tag 0x0 [ 90.732389][ T4476] hid-led: probe of 0003:1D34:0004.0001 failed with error -71 [ 90.755619][ T4476] usb 2-1: USB disconnect, device number 3 [ 90.850633][ T4680] 9pnet_virtio: no channels available for device ./file0 [ 91.442659][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 92.579348][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 92.882051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.975659][ T4314] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.143114][ T4631] chnl_net:caif_netlink_parms(): no params data found [ 93.159241][ T4314] usb 3-1: Using ep0 maxpacket: 8 [ 93.166373][ T4314] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 93.245337][ T4314] usb 3-1: config 179 has no interface number 0 [ 93.259863][ T4314] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 93.273535][ T4314] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 93.295984][ T4314] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 93.314981][ T4706] loop4: detected capacity change from 0 to 512 [ 93.323873][ T4314] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 93.335644][ T4314] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 93.369232][ T4314] usb 3-1: config 179 interface 65 has no altsetting 0 [ 93.389258][ T4314] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 93.401138][ T4706] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.432524][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.462574][ T4706] EXT4-fs (loop4): 1 truncate cleaned up [ 93.565508][ T4706] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 93.593961][ T4314] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 94.405764][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 94.427649][ T4314] usb 3-1: USB disconnect, device number 2 [ 94.433680][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 94.567211][ T4314] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 94.619503][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 94.652269][ T4718] loop0: detected capacity change from 0 to 4096 [ 94.746307][ T4721] loop4: detected capacity change from 0 to 1024 [ 94.759332][ T4631] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.767555][ T4631] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.805910][ T4631] device bridge_slave_0 entered promiscuous mode [ 94.851554][ T4631] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.858798][ T4631] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.966470][ T4631] device bridge_slave_1 entered promiscuous mode [ 95.181024][ T4728] loop2: detected capacity change from 0 to 2048 [ 95.187777][ T4629] hfsplus: b-tree write err: -5, ino 4 [ 95.247811][ T4728] EXT4-fs: Ignoring removed i_version option [ 95.345499][ T4718] EXT4-fs (loop0): Test dummy encryption mode enabled [ 95.530218][ T4728] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.538926][ T4728] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.597119][ T4741] process 'syz.4.77' launched './file0' with NULL argv: empty string added [ 95.646747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.669188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.677564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.685895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 95.694185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 95.702478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 95.710835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 95.719152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 95.727594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 96.189774][ T4631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.212557][ T4631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.231446][ T4718] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 96.464101][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 96.476871][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 96.618725][ T4746] loop2: detected capacity change from 0 to 512 [ 96.699314][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 96.730791][ T4631] team0: Port device team_slave_0 added [ 96.787579][ T4746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.849599][ T4755] hub 8-0:1.0: USB hub found [ 96.856645][ T4755] hub 8-0:1.0: 1 port detected [ 97.181275][ T4746] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.399690][ T4524] device hsr_slave_0 left promiscuous mode [ 97.469889][ T4524] device hsr_slave_1 left promiscuous mode [ 97.542558][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.569276][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.627265][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.668877][ T4746] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 97.676051][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.687396][ T4524] device bridge_slave_1 left promiscuous mode [ 97.695427][ T4759] loop4: detected capacity change from 0 to 1024 [ 97.703557][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.727435][ T4759] EXT4-fs: Ignoring removed orlov option [ 97.774725][ T4524] device bridge_slave_0 left promiscuous mode [ 97.782184][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 97.787882][ T4759] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 97.803648][ T4524] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.873147][ T4524] device veth1_macvtap left promiscuous mode [ 97.880244][ T4524] device veth0_macvtap left promiscuous mode [ 97.890611][ T4524] device veth1_vlan left promiscuous mode [ 97.896423][ T27] audit: type=1800 audit(1770987398.945:5): pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.82" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 97.971780][ T4759] Trying to write to read-only block-device loop4 [ 97.985685][ T4524] device veth0_vlan left promiscuous mode [ 98.029613][ T4759] Trying to write to read-only block-device loop4 [ 98.069613][ T4766] EXT4-fs error (device loop4): mb_free_blocks:1826: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 98.169444][ T4759] Trying to write to read-only block-device loop4 [ 98.225522][ T4759] Trying to write to read-only block-device loop4 [ 98.327204][ T4751] loop0: detected capacity change from 0 to 32768 [ 98.356983][ T4751] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.80 (4751) [ 98.407778][ T4751] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.422873][ T4280] Trying to write to read-only block-device loop4 [ 98.430588][ T4751] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 98.442700][ T4280] Trying to write to read-only block-device loop4 [ 98.448265][ T4751] BTRFS info (device loop0): using free space tree [ 98.452050][ T4280] Trying to write to read-only block-device loop4 [ 98.496201][ T4280] Trying to write to read-only block-device loop4 [ 98.503957][ T4280] Trying to write to read-only block-device loop4 [ 98.510731][ T4280] Trying to write to read-only block-device loop4 [ 98.534686][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 98.695578][ T4751] BTRFS info (device loop0): enabling ssd optimizations [ 98.701009][ T4795] loop4: detected capacity change from 0 to 512 [ 98.713833][ T4795] /dev/loop4: Can't open blockdev [ 98.946580][ T4800] loop2: detected capacity change from 0 to 2048 [ 98.980372][ T4800] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.020437][ T4267] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.062138][ T4802] xt_TCPMSS: Only works on TCP SYN packets [ 99.108080][ T4802] loop4: detected capacity change from 0 to 1024 [ 100.133220][ T4819] loop2: detected capacity change from 0 to 1024 [ 100.188010][ T4823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.92'. [ 100.263547][ T4277] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 100.273388][ T4277] CPU: 0 PID: 4277 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 100.280951][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 100.291031][ T4277] Workqueue: hci0 hci_rx_work [ 100.295744][ T4277] Call Trace: [ 100.299043][ T4277] [ 100.301989][ T4277] dump_stack_lvl+0x188/0x24e [ 100.306703][ T4277] ? show_regs_print_info+0x12/0x12 [ 100.311937][ T4277] ? load_image+0x400/0x400 [ 100.316483][ T4277] sysfs_create_dir_ns+0x26a/0x290 [ 100.321634][ T4277] ? sysfs_warn_dup+0xa0/0xa0 [ 100.326352][ T4277] ? do_raw_spin_unlock+0x11d/0x230 [ 100.331592][ T4277] kobject_add_internal+0x61c/0xcc0 [ 100.336910][ T4277] kobject_add+0x160/0x230 [ 100.341368][ T4277] ? kobject_init+0x1d0/0x1d0 [ 100.346142][ T4277] ? klist_children_get+0x50/0x50 [ 100.351222][ T4277] ? get_device_parent+0x121/0x3f0 [ 100.356403][ T4277] device_add+0x483/0xfb0 [ 100.360862][ T4277] ? kmem_cache_free+0xf7/0x290 [ 100.365761][ T4277] hci_conn_add_sysfs+0xd1/0x1e0 [ 100.370737][ T4277] le_conn_complete_evt+0x105f/0x1670 [ 100.376156][ T4277] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 100.382438][ T4277] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 100.388143][ T4277] ? skb_pull_data+0xf7/0x200 [ 100.392868][ T4277] hci_le_conn_complete_evt+0x183/0x440 [ 100.398461][ T4277] ? hci_remote_host_features_evt+0x270/0x270 [ 100.404568][ T4277] hci_event_packet+0x7b6/0x1280 [ 100.409561][ T4277] ? bis_list+0x280/0x280 [ 100.413926][ T4277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 100.419854][ T4277] ? kcov_remote_start+0x4c7/0x7e0 [ 100.424999][ T4277] ? bt_warn+0x30/0x180 [ 100.429200][ T4277] ? hci_send_to_monitor+0x9c/0x4a0 [ 100.434440][ T4277] hci_rx_work+0x3eb/0xd40 [ 100.438886][ T4277] ? _raw_spin_unlock+0x40/0x40 [ 100.443773][ T4277] ? process_one_work+0x7b0/0x1160 [ 100.448914][ T4277] process_one_work+0x8a2/0x1160 [ 100.453901][ T4277] ? worker_detach_from_pool+0x240/0x240 [ 100.459583][ T4277] ? _raw_spin_lock_irq+0xb7/0xf0 [ 100.464641][ T4277] ? _raw_spin_lock_irqsave+0x100/0x100 [ 100.470216][ T4277] ? kthread_data+0x4b/0xc0 [ 100.474778][ T4277] worker_thread+0xaa2/0x1270 [ 100.479515][ T4277] ? __kthread_parkme+0x162/0x1c0 [ 100.484593][ T4277] kthread+0x29d/0x330 [ 100.488775][ T4277] ? worker_clr_flags+0x1a0/0x1a0 [ 100.493919][ T4277] ? kthread_blkcg+0xd0/0xd0 [ 100.498545][ T4277] ret_from_fork+0x1f/0x30 [ 100.503015][ T4277] [ 100.507985][ T4277] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 100.521294][ T4277] Bluetooth: hci0: failed to register connection device [ 100.883216][ T4524] team0 (unregistering): Port device team_slave_1 removed [ 100.937921][ T4524] team0 (unregistering): Port device team_slave_0 removed [ 100.996338][ T4524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.114104][ T4524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.918755][ T4839] loop0: detected capacity change from 0 to 32768 [ 101.930255][ T4839] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.96 (4839) [ 101.949504][ T4839] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.960052][ T4839] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 101.980411][ T4839] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 101.991447][ T4839] BTRFS info (device loop0): trying to use backup root at mount time [ 102.000908][ T4839] BTRFS info (device loop0): setting nodatasum [ 102.007203][ T4839] BTRFS info (device loop0): enabling ssd optimizations [ 102.014652][ T4839] BTRFS info (device loop0): using spread ssd allocation scheme [ 102.022750][ T4839] BTRFS info (device loop0): turning on flush-on-commit [ 102.037508][ T4839] BTRFS info (device loop0): force zlib compression, level 3 [ 102.054438][ T4839] BTRFS info (device loop0): using free space tree [ 102.126087][ T4524] bond0 (unregistering): Released all slaves [ 102.254714][ T4631] team0: Port device team_slave_1 added [ 102.325483][ T27] audit: type=1804 audit(1770987403.375:6): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.96" name="/newroot/18/file1/bus" dev="loop0" ino=263 res=1 errno=0 [ 102.472686][ T4631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.525922][ T4866] loop2: detected capacity change from 0 to 512 [ 102.574126][ T4631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.611148][ T4866] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 102.629627][ T4866] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.694364][ T4631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.707077][ T4631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.714679][ T4631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.754346][ T4873] loop1: detected capacity change from 0 to 1024 [ 102.762475][ T4631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.864984][ T4873] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.911608][ T4873] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.980568][ T4873] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.98: inode has both inline data and extents flags [ 102.998469][ T4631] device hsr_slave_0 entered promiscuous mode [ 103.028083][ T4631] device hsr_slave_1 entered promiscuous mode [ 103.037751][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 103.050061][ T4631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.079312][ T4631] Cannot create hsr debugfs directory [ 103.090427][ T4873] EXT4-fs (loop1): Remounting filesystem read-only [ 103.235721][ T4267] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.263478][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 103.381993][ T4886] xt_TCPMSS: Only works on TCP SYN packets [ 104.301746][ T4631] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.346487][ T4631] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.391204][ T4631] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.416407][ T4631] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.808878][ T4879] loop4: detected capacity change from 0 to 32768 [ 106.112830][ T4631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.155181][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.169863][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.203090][ T4631] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.233504][ T4373] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4373) [ 106.250945][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.284651][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.336857][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.344053][ T4524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.409824][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.462071][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.490198][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.509821][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.516964][ T4524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.595191][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.625189][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.627525][ T4895] loop1: detected capacity change from 0 to 32768 [ 106.698894][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.745692][ T4895] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.105 (4895) [ 106.751186][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.836461][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.875524][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.894696][ T4895] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 106.908046][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.931234][ T4895] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 106.965817][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.001791][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.009225][ T4895] BTRFS info (device loop1): enabling auto defrag [ 107.016436][ T4895] BTRFS info (device loop1): use no compression [ 107.027793][ T4631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.039300][ T4895] BTRFS info (device loop1): max_inline at 4096 [ 107.045597][ T4895] BTRFS info (device loop1): using free space tree [ 107.106836][ T4936] xt_TCPMSS: Only works on TCP SYN packets [ 107.123244][ T4936] loop4: detected capacity change from 0 to 1024 [ 107.562693][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.707866][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.726470][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.819317][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 107.871923][ T4895] BTRFS error (device loop1): open_ctree failed: -12 [ 107.909070][ T4525] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4525) [ 109.509529][ T4931] loop2: detected capacity change from 0 to 32768 [ 109.509679][ T4961] loop4: detected capacity change from 0 to 16 [ 109.520024][ T4931] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.112 (4931) [ 109.608016][ T4931] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.670591][ T4961] /dev/loop4: Can't open blockdev [ 109.694864][ T4931] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 109.739817][ T4931] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 109.740463][ T4961] loop4: detected capacity change from 0 to 512 [ 109.800135][ T4961] /dev/loop4: Can't open blockdev [ 109.807070][ T4931] BTRFS info (device loop2): trying to use backup root at mount time [ 109.825752][ T4931] BTRFS info (device loop2): setting nodatasum [ 110.002831][ T4931] BTRFS info (device loop2): enabling ssd optimizations [ 111.303001][ T4931] BTRFS info (device loop2): using spread ssd allocation scheme [ 111.378376][ T4931] BTRFS info (device loop2): turning on flush-on-commit [ 111.476637][ T4931] BTRFS info (device loop2): force zlib compression, level 3 [ 111.489277][ T4931] BTRFS info (device loop2): using free space tree [ 111.638751][ T4972] loop4: detected capacity change from 0 to 4096 [ 111.728558][ T4931] BTRFS error (device loop2): open_ctree failed: -12 [ 111.802484][ T4972] /dev/loop4: Can't open blockdev [ 111.902983][ T4972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.117'. [ 111.918871][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.999390][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.056168][ T5010] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 112.071281][ T4959] loop1: detected capacity change from 0 to 32768 [ 112.082740][ T5010] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.090641][ T5010] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.109073][ T4959] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.115 (4959) [ 112.146738][ T4959] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.169853][ T4959] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 112.190959][ T4959] BTRFS info (device loop1): using free space tree [ 112.207257][ T4631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.299605][ T5020] Bluetooth: MGMT ver 1.22 [ 112.470208][ T4959] BTRFS error (device loop1): open_ctree failed: -12 [ 112.999225][ T26] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.090518][ T4525] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4525) [ 113.329804][ T5052] xt_TCPMSS: Only works on TCP SYN packets [ 113.382928][ T5052] loop4: detected capacity change from 0 to 1024 [ 113.761876][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 113.777766][ T26] usb 3-1: config 0 interface 0 has no altsetting 0 [ 113.863650][ T26] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 113.990495][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.036364][ T26] usb 3-1: config 0 descriptor?? [ 114.368775][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.390306][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.419420][ T5041] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.476868][ T26] hid-led 0003:1D34:0004.0002: unknown main item tag 0x0 [ 114.491297][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.499231][ T26] hid-led 0003:1D34:0004.0002: unknown main item tag 0x0 [ 114.512596][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.520526][ T26] hid-led 0003:1D34:0004.0002: unknown main item tag 0x0 [ 114.523122][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.536838][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.552982][ T4631] device veth0_vlan entered promiscuous mode [ 114.575393][ T26] hid-led 0003:1D34:0004.0002: unknown main item tag 0x0 [ 114.593607][ T4631] device veth1_vlan entered promiscuous mode [ 114.609631][ T26] hid-led 0003:1D34:0004.0002: unknown main item tag 0x0 [ 114.619485][ T26] hid-led 0003:1D34:0004.0002: unknown main item tag 0x0 [ 114.626566][ T26] hid-led 0003:1D34:0004.0002: unknown main item tag 0x0 [ 114.632873][ T5041] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 114.662250][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.675048][ T26] hid-led: probe of 0003:1D34:0004.0002 failed with error -71 [ 114.697416][ T5041] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 114.724387][ T26] usb 3-1: USB disconnect, device number 3 [ 114.726362][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.768261][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.769316][ T5041] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 114.798358][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.826415][ T5041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.828891][ T4631] device veth0_macvtap entered promiscuous mode [ 114.849424][ T5041] usb 5-1: Product: syz [ 114.859258][ T5041] usb 5-1: Manufacturer: syz [ 114.872460][ T4631] device veth1_macvtap entered promiscuous mode [ 114.874288][ T5041] usb 5-1: SerialNumber: syz [ 114.910845][ T5041] usb 5-1: config 0 descriptor?? [ 114.927001][ T5061] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 114.938164][ T4631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.946677][ T5061] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 114.969208][ T4631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.979060][ T4631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.019757][ T4631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.049249][ T4631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.064256][ T5064] loop1: detected capacity change from 0 to 32768 [ 115.070782][ T4631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.103029][ T4631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.124114][ T5064] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.130096][ T5066] loop0: detected capacity change from 0 to 32768 [ 115.154871][ T4631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.193332][ T5064] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 115.197325][ T5061] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 115.211271][ T5066] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.242208][ T5066] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 115.243849][ T4631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.259439][ T5061] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 115.276707][ T5064] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 115.298018][ T5066] BTRFS info (device loop0): using free space tree [ 115.354169][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.359395][ T5064] BTRFS info (device loop1): trying to use backup root at mount time [ 115.392493][ T5064] BTRFS info (device loop1): setting nodatasum [ 115.398863][ T5064] BTRFS info (device loop1): enabling ssd optimizations [ 115.420891][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.456925][ T5076] loop2: detected capacity change from 0 to 2048 [ 115.468308][ T5064] BTRFS info (device loop1): using spread ssd allocation scheme [ 115.506939][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.509317][ T5064] BTRFS info (device loop1): turning on flush-on-commit [ 115.522932][ T5064] BTRFS info (device loop1): force zlib compression, level 3 [ 115.530805][ T5064] BTRFS info (device loop1): using free space tree [ 115.550563][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.572816][ T4631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.596705][ T5076] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 115.611866][ T5076] UDF-fs: Scanning with blocksize 512 failed [ 115.614717][ T4631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.640324][ T5076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.683504][ T5066] BTRFS info (device loop0): enabling ssd optimizations [ 115.697224][ T5041] Error reading MAC address [ 115.766102][ T5041] usb 5-1: USB disconnect, device number 2 [ 115.772922][ T4631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.786850][ T4631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.834706][ T4631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.846073][ T4631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.856015][ T4631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.866619][ T4631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.908152][ T4631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.999928][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.014077][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.030731][ T27] audit: type=1804 audit(1770987417.085:7): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.128" name="/newroot/23/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 116.058418][ T4631] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.087957][ T4631] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.111156][ T4631] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.139675][ T4631] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.173186][ T4267] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.458701][ T4627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.477713][ T4627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.526884][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.566098][ T4524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.583492][ T4373] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4373) [ 116.621433][ T4524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.654511][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.730311][ T4278] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.200613][ T5128] ptrace attach of ""[5134] was attempted by "./syz-executor exec"[5128] [ 119.517823][ T5121] loop4: detected capacity change from 0 to 1024 [ 119.911014][ T5002] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.110416][ T5002] usb 1-1: Using ep0 maxpacket: 8 [ 120.117267][ T5002] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 120.154391][ T5002] usb 1-1: config 179 has no interface number 0 [ 120.169769][ T5002] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 120.197647][ T5002] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 120.245004][ T5002] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 120.297009][ T5002] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 120.321107][ T5002] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 120.359015][ T5002] usb 1-1: config 179 interface 65 has no altsetting 0 [ 120.385668][ T5002] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 120.418588][ T5002] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.532021][ T5002] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8 [ 120.574117][ T5166] loop5: detected capacity change from 0 to 32768 [ 120.701831][ T5166] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 120.907071][ T4336] usb 1-1: USB disconnect, device number 2 [ 120.907129][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 120.935955][ T4336] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 121.015329][ T4525] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 122.416688][ T5196] loop0: detected capacity change from 0 to 1024 [ 122.480457][ T5196] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.558173][ T5196] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 122.665593][ T5180] loop1: detected capacity change from 0 to 32768 [ 123.759503][ T5180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.144 (5180) [ 123.978431][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 133.089843][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.107529][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.440245][ T5255] hub 8-0:1.0: USB hub found [ 133.489332][ T5255] hub 8-0:1.0: 1 port detected [ 133.971695][ T5251] loop5: detected capacity change from 0 to 2048 [ 134.762753][ T5251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.024757][ T5265] loop0: detected capacity change from 0 to 512 [ 135.060666][ T5265] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.322503][ T5265] EXT4-fs (loop0): 1 truncate cleaned up [ 135.389259][ T5265] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 136.234278][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 136.344893][ T5290] loop4: detected capacity change from 0 to 1024 [ 136.995401][ T4442] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.249111][ C1] sched: RT throttling activated [ 139.771645][ T5295] loop0: detected capacity change from 0 to 32768 [ 139.871186][ T5295] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.909966][ T5295] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 139.950369][ T5295] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 139.998764][ T5295] BTRFS info (device loop0): trying to use backup root at mount time [ 140.034433][ T5295] BTRFS info (device loop0): setting nodatasum [ 140.073555][ T5295] BTRFS info (device loop0): enabling ssd optimizations [ 140.150430][ T5295] BTRFS info (device loop0): using spread ssd allocation scheme [ 140.158252][ T5295] BTRFS info (device loop0): turning on flush-on-commit [ 140.253514][ T5295] BTRFS info (device loop0): force zlib compression, level 3 [ 140.271556][ T5332] loop4: detected capacity change from 0 to 128 [ 140.306428][ T5295] BTRFS info (device loop0): using free space tree [ 140.588478][ T5295] BTRFS error (device loop0): open_ctree failed: -12 [ 140.621337][ T5354] loop5: detected capacity change from 0 to 1024 [ 140.714604][ T5358] loop2: detected capacity change from 0 to 512 [ 140.804381][ T5358] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.885124][ T4695] hfsplus: b-tree write err: -5, ino 4 [ 141.030670][ T5358] EXT4-fs (loop2): 1 truncate cleaned up [ 141.094058][ T5358] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 141.188265][ T5366] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.187'. [ 141.387991][ T5370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'. [ 142.065974][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 142.742897][ T5383] hub 8-0:1.0: USB hub found [ 142.748662][ T5383] hub 8-0:1.0: 1 port detected [ 143.116158][ T4307] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 144.307972][ T5385] loop0: detected capacity change from 0 to 128 [ 144.344058][ T5385] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 144.439222][ T4307] usb 6-1: Using ep0 maxpacket: 16 [ 144.448685][ T4307] usb 6-1: too many configurations: 199, using maximum allowed: 8 [ 144.479929][ T4307] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 144.732216][ T4307] usb 6-1: can't read configurations, error -61 [ 145.092414][ T4307] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 145.671995][ T5396] loop5: detected capacity change from 0 to 16 [ 145.705610][ T5396] erofs: (device loop5): mounted with root inode @ nid 36. [ 145.876572][ T4695] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 146.077827][ T5405] 9pnet_virtio: no channels available for device ./file0 [ 147.286409][ T5419] Bluetooth: hci0: unsupported parameter 9128 [ 147.313495][ T5419] Bluetooth: hci0: invalid len left 4, exp >= 87 [ 147.576135][ T5408] loop0: detected capacity change from 0 to 32768 [ 147.666354][ T5426] xt_TCPMSS: Only works on TCP SYN packets [ 148.111983][ T5412] loop5: detected capacity change from 0 to 32768 [ 148.325538][ T5412] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.196 (5412) [ 148.343800][ T5408] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.364876][ T5408] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 148.406538][ T5412] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.417867][ T5412] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 148.443838][ T5408] BTRFS info (device loop0): using free space tree [ 148.464997][ T5412] BTRFS info (device loop5): enabling auto defrag [ 148.568052][ T5412] BTRFS info (device loop5): use no compression [ 148.624018][ T5412] BTRFS info (device loop5): max_inline at 4096 [ 148.653717][ T5412] BTRFS info (device loop5): using free space tree [ 149.203480][ T5439] loop4: detected capacity change from 0 to 1024 [ 149.458218][ T5408] BTRFS info (device loop0): enabling ssd optimizations [ 149.679667][ T4442] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.696866][ T5412] BTRFS info (device loop5): enabling ssd optimizations [ 151.083262][ T4267] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.203160][ T5489] loop2: detected capacity change from 0 to 16 [ 151.264615][ T4336] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 151.319380][ T5489] erofs: (device loop2): mounted with root inode @ nid 36. [ 151.629030][ T4336] usb 2-1: Using ep0 maxpacket: 16 [ 151.691760][ T5496] 9pnet_virtio: no channels available for device ./file0 [ 152.088173][ T4336] usb 2-1: too many configurations: 199, using maximum allowed: 8 [ 152.103544][ T4336] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 152.164386][ T4336] usb 2-1: can't read configurations, error -61 [ 152.361255][ T4631] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.389275][ T4336] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.659986][ T5509] loop2: detected capacity change from 0 to 16 [ 152.680686][ T4336] usb 2-1: Using ep0 maxpacket: 16 [ 152.702745][ T5509] erofs: (device loop2): mounted with root inode @ nid 36. [ 152.727124][ T5509] syz.2.210: attempt to access beyond end of device [ 152.727124][ T5509] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 152.743920][ T5509] syz.2.210: attempt to access beyond end of device [ 152.743920][ T5509] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 152.765000][ T5509] syz.2.210: attempt to access beyond end of device [ 152.765000][ T5509] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 152.783676][ T5507] syz.2.210: attempt to access beyond end of device [ 152.783676][ T5507] loop2: rw=524288, sector=1342180448, nr_sectors = 16 limit=16 [ 152.799982][ T5507] syz.2.210: attempt to access beyond end of device [ 152.799982][ T5507] loop2: rw=0, sector=1342180456, nr_sectors = 8 limit=16 [ 152.805800][ T5509] syz.2.210: attempt to access beyond end of device [ 152.805800][ T5509] loop2: rw=524288, sector=1342177304, nr_sectors = 2528 limit=16 [ 152.814340][ T5507] syz.2.210: attempt to access beyond end of device [ 152.814340][ T5507] loop2: rw=0, sector=1342180456, nr_sectors = 8 limit=16 [ 152.842768][ T5507] syz.2.210: attempt to access beyond end of device [ 152.842768][ T5507] loop2: rw=0, sector=1342180456, nr_sectors = 8 limit=16 [ 152.848950][ T27] audit: type=1800 audit(1770987453.805:8): pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.210" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 152.856838][ T5507] syz.2.210: attempt to access beyond end of device [ 152.856838][ T5507] loop2: rw=0, sector=1342180456, nr_sectors = 8 limit=16 [ 152.949278][ T4336] usb 2-1: device descriptor read/all, error -71 [ 152.973467][ T5506] loop0: detected capacity change from 0 to 512 [ 152.985578][ T4336] usb usb2-port1: attempt power cycle [ 153.001459][ T5506] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.097030][ T27] audit: type=1800 audit(1770987453.835:9): pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.210" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 153.121958][ T5506] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 153.138337][ T5506] EXT4-fs (loop0): 1 truncate cleaned up [ 153.144426][ T5506] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 153.339676][ T5519] xt_TCPMSS: Only works on TCP SYN packets [ 154.234990][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 155.709142][ T5537] loop1: detected capacity change from 0 to 1024 [ 156.263832][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.209'. [ 156.329594][ T5529] loop0: detected capacity change from 0 to 8192 [ 156.360825][ T5529] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 156.412471][ T5529] UDF-fs: Scanning with blocksize 512 failed [ 156.462021][ T5529] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 156.480191][ T5529] UDF-fs: Scanning with blocksize 1024 failed [ 156.526152][ T5529] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 156.533284][ T5544] loop1: detected capacity change from 0 to 1024 [ 156.554541][ T5547] loop2: detected capacity change from 0 to 16 [ 156.566572][ T5529] UDF-fs: Scanning with blocksize 2048 failed [ 156.606305][ T5547] erofs: (device loop2): mounted with root inode @ nid 36. [ 156.610751][ T5544] hfsplus: unable to find HFS+ superblock [ 156.638277][ T5529] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.658888][ T5550] loop4: detected capacity change from 0 to 512 [ 156.841233][ T5553] loop5: detected capacity change from 0 to 512 [ 156.917967][ T5553] EXT4-fs: Ignoring removed nobh option [ 157.024513][ T5555] 9pnet_virtio: no channels available for device ./file0 [ 157.050323][ T5553] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.480651][ T5553] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.222: iget: bad i_size value: 38620345925642 [ 157.609673][ T5553] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.222: couldn't read orphan inode 15 (err -117) [ 157.662804][ T5553] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 158.979433][ T5568] loop0: detected capacity change from 0 to 1024 [ 159.640602][ T50] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm kworker/u4:3: bg 0: block 5: invalid block bitmap [ 159.701033][ T5577] loop1: detected capacity change from 0 to 1024 [ 159.722857][ T5577] EXT4-fs: Ignoring removed orlov option [ 159.733464][ T50] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 96 with error 28 [ 159.753937][ T5577] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 159.994219][ T50] EXT4-fs (loop5): This should not happen!! Data will be lost [ 159.994219][ T50] [ 160.104583][ T50] EXT4-fs (loop5): Total free blocks count 0 [ 160.155676][ T50] EXT4-fs (loop5): Free/Dirty block details [ 160.272745][ T5591] syz.4.233 uses obsolete (PF_INET,SOCK_PACKET) [ 160.340181][ T50] EXT4-fs (loop5): free_blocks=0 [ 160.428588][ T50] EXT4-fs (loop5): dirty_blocks=100 [ 160.555226][ T50] EXT4-fs (loop5): Block reservation details [ 160.604045][ T50] EXT4-fs (loop5): i_reserved_data_blocks=100 [ 160.672600][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 160.675740][ T5596] loop0: detected capacity change from 0 to 512 [ 160.685085][ T4631] EXT4-fs (loop5): unmounting filesystem. [ 160.786464][ T5596] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 161.520355][ T5596] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.593870][ T5605] loop1: detected capacity change from 0 to 16 [ 161.645692][ T5605] erofs: (device loop1): mounted with root inode @ nid 36. [ 161.720527][ T5612] loop4: detected capacity change from 0 to 16 [ 161.765862][ T5612] /dev/loop4: Can't open blockdev [ 161.868661][ T5612] loop4: detected capacity change from 0 to 512 [ 161.989801][ T5612] /dev/loop4: Can't open blockdev [ 162.687504][ T5620] 9pnet_virtio: no channels available for device ./file0 [ 162.926527][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 163.034197][ T5625] loop2: detected capacity change from 0 to 1024 [ 163.151000][ T4373] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.439682][ T5633] 9pnet_virtio: no channels available for device ./file0 [ 163.753081][ T5635] loop1: detected capacity change from 0 to 256 [ 163.983364][ T5638] loop0: detected capacity change from 0 to 1024 [ 164.009224][ T5635] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 164.060243][ T5638] EXT4-fs: inline encryption not supported [ 164.105329][ T5638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.249058][ T5646] hub 8-0:1.0: USB hub found [ 164.255019][ T5646] hub 8-0:1.0: 1 port detected [ 164.503143][ T5638] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #3: block 1: comm syz.0.243: lblock 1 mapped to illegal pblock 1 (length 1) [ 164.873309][ T5638] EXT4-fs (loop0): Remounting filesystem read-only [ 164.880007][ T5638] Quota error (device loop0): write_blk: dquota write failed [ 164.887564][ T5638] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 164.949324][ T5638] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.243: Failed to acquire dquot type 0 [ 164.986062][ T5638] EXT4-fs (loop0): Remounting filesystem read-only [ 165.036438][ T5638] EXT4-fs error (device loop0): ext4_free_blocks:6221: comm syz.0.243: Freeing blocks not in datazone - block = 0, count = 4096 [ 165.074277][ T5638] EXT4-fs (loop0): Remounting filesystem read-only [ 165.097405][ T5638] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.243: Invalid inode bitmap blk 0 in block_group 0 [ 165.112206][ T4695] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 165.140249][ T4695] EXT4-fs (loop0): Remounting filesystem read-only [ 165.146895][ T4695] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 165.164260][ T5638] EXT4-fs (loop0): Remounting filesystem read-only [ 165.173347][ T5638] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 165.187004][ T4695] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:16: Failed to release dquot type 0 [ 165.207925][ T5638] EXT4-fs (loop0): Remounting filesystem read-only [ 165.214986][ T5638] EXT4-fs (loop0): 1 orphan inode deleted [ 165.228100][ T4695] EXT4-fs (loop0): Remounting filesystem read-only [ 165.236568][ T5638] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 165.356814][ T5624] loop5: detected capacity change from 0 to 32768 [ 165.396221][ T5624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.240 (5624) [ 165.408209][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 165.458771][ T5624] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.529389][ T5624] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 165.579831][ T5624] BTRFS info (device loop5): using free space tree [ 167.198440][ T5624] BTRFS error (device loop5): open_ctree failed: -22 [ 167.397394][ T5695] loop0: detected capacity change from 0 to 128 [ 167.449822][ T5695] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 167.520312][ T5695] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.591103][ T5701] Zero length message leads to an empty skb [ 167.726763][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 167.750900][ T5705] input: syz0 as /devices/virtual/input/input9 [ 167.785995][ T4277] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 167.797620][ T4277] CPU: 0 PID: 4277 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 167.805209][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 167.815289][ T4277] Workqueue: hci3 hci_rx_work [ 167.820062][ T4277] Call Trace: [ 167.823372][ T4277] [ 167.826354][ T4277] dump_stack_lvl+0x188/0x24e [ 167.831070][ T4277] ? show_regs_print_info+0x12/0x12 [ 167.836354][ T4277] ? load_image+0x400/0x400 [ 167.840907][ T4277] sysfs_create_dir_ns+0x26a/0x290 [ 167.846061][ T4277] ? sysfs_warn_dup+0xa0/0xa0 [ 167.850784][ T4277] ? do_raw_spin_unlock+0x11d/0x230 [ 167.856011][ T4277] kobject_add_internal+0x61c/0xcc0 [ 167.861753][ T4277] kobject_add+0x160/0x230 [ 167.866184][ T4277] ? kobject_init+0x1d0/0x1d0 [ 167.870879][ T4277] ? klist_children_get+0x50/0x50 [ 167.875904][ T4277] ? get_device_parent+0x121/0x3f0 [ 167.881116][ T4277] device_add+0x483/0xfb0 [ 167.885541][ T4277] ? kmem_cache_free+0xf7/0x290 [ 167.890397][ T4277] hci_conn_add_sysfs+0xd1/0x1e0 [ 167.895337][ T4277] le_conn_complete_evt+0x105f/0x1670 [ 167.900719][ T4277] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 167.907038][ T4277] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 167.912680][ T4277] ? skb_pull_data+0xf7/0x200 [ 167.917378][ T4277] hci_le_conn_complete_evt+0x183/0x440 [ 167.922929][ T4277] ? hci_remote_host_features_evt+0x270/0x270 [ 167.929187][ T4277] hci_event_packet+0x7b6/0x1280 [ 167.934162][ T4277] ? bis_list+0x280/0x280 [ 167.938499][ T4277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 167.944577][ T4277] ? kcov_remote_start+0x4c7/0x7e0 [ 167.949692][ T4277] ? bt_warn+0x30/0x180 [ 167.953858][ T4277] ? hci_send_to_monitor+0x9c/0x4a0 [ 167.959073][ T4277] hci_rx_work+0x3eb/0xd40 [ 167.963503][ T4277] ? _raw_spin_unlock+0x40/0x40 [ 167.968364][ T4277] ? process_one_work+0x7b0/0x1160 [ 167.973495][ T4277] process_one_work+0x8a2/0x1160 [ 167.978452][ T4277] ? worker_detach_from_pool+0x240/0x240 [ 167.984606][ T4277] ? _raw_spin_lock_irq+0xb7/0xf0 [ 167.989635][ T4277] ? _raw_spin_lock_irqsave+0x100/0x100 [ 167.995174][ T4277] ? kthread_data+0x4b/0xc0 [ 167.999689][ T4277] worker_thread+0xaa2/0x1270 [ 168.004376][ T4277] ? __kthread_parkme+0x162/0x1c0 [ 168.009411][ T4277] kthread+0x29d/0x330 [ 168.013471][ T4277] ? worker_clr_flags+0x1a0/0x1a0 [ 168.018488][ T4277] ? kthread_blkcg+0xd0/0xd0 [ 168.023074][ T4277] ret_from_fork+0x1f/0x30 [ 168.027502][ T4277] [ 168.031922][ T4277] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 168.046072][ T4277] Bluetooth: hci3: failed to register connection device [ 168.061175][ T5710] loop2: detected capacity change from 0 to 512 [ 168.155690][ T5710] EXT4-fs (loop2): orphan cleanup on readonly fs [ 168.198890][ T5710] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.257: dx entry: limit 0 != root limit 125 [ 168.270781][ T5710] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.257: Corrupt directory, running e2fsck is recommended [ 168.306996][ T5710] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 168.336878][ T5710] EXT4-fs error (device loop2): ext4_iget_extra_inode:4756: inode #15: comm syz.2.257: corrupted in-inode xattr [ 168.370235][ T5710] EXT4-fs (loop2): Remounting filesystem read-only [ 168.372398][ T5719] loop5: detected capacity change from 0 to 1024 [ 168.378207][ T5710] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.257: couldn't read orphan inode 15 (err -117) [ 168.403293][ T5710] EXT4-fs (loop2): Remounting filesystem read-only [ 168.431224][ T5710] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 168.549626][ T4376] hfsplus: b-tree write err: -5, ino 4 [ 168.597997][ T5722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'. [ 168.607255][ T5004] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 168.633116][ T5722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'. [ 168.781858][ T5730] loop5: detected capacity change from 0 to 1024 [ 169.534854][ T5722] syz.2.257 (5722) used greatest stack depth: 18864 bytes left [ 169.545001][ T5004] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 169.556359][ T5004] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.567763][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 169.655769][ T5004] usb 1-1: config 0 has no interface number 0 [ 169.682520][ T5004] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 169.726991][ T5004] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 169.761965][ T5741] loop1: detected capacity change from 0 to 256 [ 169.768468][ T5004] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.787052][ T5004] usb 1-1: config 0 interface 52 has no altsetting 0 [ 169.805086][ T5741] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.824785][ T5004] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 169.840143][ T5741] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 169.864981][ T5004] usb 1-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 169.879295][ T5004] usb 1-1: Product: syz [ 169.889435][ T5004] usb 1-1: SerialNumber: syz [ 169.896380][ T5741] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 169.920008][ T5004] usb 1-1: config 0 descriptor?? [ 170.108839][ T4256] kernel write not supported for file [eventfd] (pid: 4256 comm: kworker/1:3) [ 170.133493][ T5004] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 170.167289][ T5004] synaptics_usb: probe of 1-1:0.52 failed with error -5 [ 170.355823][ T5004] usb 1-1: USB disconnect, device number 3 [ 172.063850][ T5766] loop0: detected capacity change from 0 to 2048 [ 172.073382][ T5766] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 172.114913][ T5766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.764396][ T5780] loop5: detected capacity change from 0 to 256 [ 172.786833][ T5780] FAT-fs (loop5): Directory bread(block 1285) failed [ 172.818130][ T5780] FAT-fs (loop5): Directory bread(block 1286) failed [ 172.838124][ T5780] FAT-fs (loop5): Directory bread(block 1287) failed [ 172.880904][ T5780] FAT-fs (loop5): Directory bread(block 1288) failed [ 172.921811][ T5780] FAT-fs (loop5): Directory bread(block 1285) failed [ 172.945501][ T5780] FAT-fs (loop5): Directory bread(block 1286) failed [ 172.975811][ T5780] FAT-fs (loop5): Directory bread(block 1287) failed [ 172.997914][ T5780] FAT-fs (loop5): Directory bread(block 1288) failed [ 173.092542][ T5788] loop0: detected capacity change from 0 to 1024 [ 173.205238][ T5780] FAT-fs (loop5): Directory bread(block 1285) failed [ 173.261566][ T5780] FAT-fs (loop5): Directory bread(block 1286) failed [ 174.009291][ T5795] loop5: detected capacity change from 0 to 16 [ 174.010465][ T5794] loop2: detected capacity change from 0 to 128 [ 174.023398][ T5795] erofs: (device loop5): mounted with root inode @ nid 36. [ 174.113300][ T5794] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 174.235264][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 175.159319][ T5803] 9pnet_virtio: no channels available for device ./file0 [ 176.191128][ T5812] loop1: detected capacity change from 0 to 512 [ 177.858408][ T5815] loop5: detected capacity change from 0 to 128 [ 177.906095][ T5815] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 54) [ 177.914384][ T5815] FAT-fs (loop5): Filesystem has been set read-only [ 177.977041][ T5812] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 178.126666][ T4631] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 54) [ 178.191663][ T5826] loop0: detected capacity change from 0 to 1024 [ 178.309189][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 178.456047][ T5835] loop5: detected capacity change from 0 to 1024 [ 179.622522][ T5850] loop0: detected capacity change from 0 to 128 [ 180.312983][ T5869] loop5: detected capacity change from 0 to 128 [ 180.388496][ T5869] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 180.426538][ T5869] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 180.432646][ T5824] loop2: detected capacity change from 0 to 32768 [ 180.488731][ T5824] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.286 (5824) [ 180.524931][ T5869] ext2 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.547660][ T5824] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 180.639379][ T5824] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 180.710204][ T5824] BTRFS info (device loop2): using free space tree [ 180.736711][ T4631] EXT4-fs (loop5): unmounting filesystem. [ 180.960778][ T5824] BTRFS info (device loop2): enabling ssd optimizations [ 182.103008][ T5901] hub 8-0:1.0: USB hub found [ 182.107839][ T5901] hub 8-0:1.0: 1 port detected [ 182.446543][ T4268] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 183.671039][ T5924] loop1: detected capacity change from 0 to 1024 [ 184.652464][ T5911] loop5: detected capacity change from 0 to 32768 [ 184.708267][ T5911] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.301 (5911) [ 184.805575][ T5911] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 185.784140][ T5911] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 185.847683][ T5911] BTRFS info (device loop5): enabling auto defrag [ 186.200435][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 186.206580][ T4276] Bluetooth: hci3: command 0x0406 tx timeout [ 186.241330][ T5911] BTRFS info (device loop5): use no compression [ 186.248197][ T5911] BTRFS info (device loop5): max_inline at 4096 [ 186.464555][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 187.231928][ T5911] BTRFS info (device loop5): using free space tree [ 187.423818][ T5911] BTRFS error (device loop5): open_ctree failed: -12 [ 187.506153][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.306'. [ 187.632735][ T4442] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (4442) [ 187.993143][ T5968] 9pnet_virtio: no channels available for device ./file0 [ 188.670919][ T5970] loop0: detected capacity change from 0 to 16 [ 188.717322][ T5970] erofs: (device loop0): mounted with root inode @ nid 36. [ 189.164396][ T5983] 9pnet_virtio: no channels available for device ./file0 [ 189.668469][ T5992] loop0: detected capacity change from 0 to 2048 [ 189.957768][ T5992] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 190.184506][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 190.318817][ T5972] loop4: detected capacity change from 0 to 32768 [ 190.350937][ T4277] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 190.744190][ T4373] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4373) [ 194.307024][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.314490][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.031504][ T6032] loop5: detected capacity change from 0 to 16 [ 196.108635][ T6032] erofs: (device loop5): mounted with root inode @ nid 36. [ 196.380222][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 196.528403][ T6039] 9pnet_virtio: no channels available for device ./file0 [ 197.476194][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'. [ 197.584412][ T6050] loop1: detected capacity change from 0 to 128 [ 197.685202][ T6050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 197.710485][ T6050] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.395053][ T6070] hub 8-0:1.0: USB hub found [ 199.400061][ T6070] hub 8-0:1.0: 1 port detected [ 200.400475][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 200.421359][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 202.621110][ T6097] loop5: detected capacity change from 0 to 16 [ 202.679347][ T6097] erofs: (device loop5): mounted with root inode @ nid 36. [ 202.821154][ T4390] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 203.016668][ T4390] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 203.033350][ T6101] 9pnet_virtio: no channels available for device ./file0 [ 203.062643][ T4390] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 203.098930][ T4390] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 203.185645][ T4390] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.248612][ T4390] usb 2-1: Product: syz [ 203.282947][ T4390] usb 2-1: Manufacturer: syz [ 203.308075][ T4390] usb 2-1: SerialNumber: syz [ 203.319423][ T6089] loop0: detected capacity change from 0 to 32768 [ 203.363616][ T6089] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.382905][ T4390] usb 2-1: config 0 descriptor?? [ 203.408006][ T6105] loop2: detected capacity change from 0 to 16 [ 203.416783][ T6089] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 203.427284][ T6089] BTRFS info (device loop0): using free space tree [ 203.439884][ T6095] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 203.456595][ T6095] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 203.553062][ T6105] erofs: (device loop2): mounted with root inode @ nid 36. [ 203.855723][ T6095] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 203.919496][ T6095] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 203.929093][ T6122] 9pnet_virtio: no channels available for device ./file0 [ 204.471616][ T6089] BTRFS info (device loop0): enabling ssd optimizations [ 205.353069][ T4390] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 205.371255][ T6133] loop2: detected capacity change from 0 to 1024 [ 205.412453][ T4390] usb 2-1: USB disconnect, device number 7 [ 205.434277][ T6133] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 205.505588][ T4267] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 205.589299][ T6146] hub 8-0:1.0: USB hub found [ 205.597755][ T6146] hub 8-0:1.0: 1 port detected [ 207.529471][ T4322] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 207.759279][ T4322] usb 3-1: Using ep0 maxpacket: 16 [ 207.766258][ T4322] usb 3-1: config 0 interface 0 has no altsetting 0 [ 207.789272][ T4322] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 207.838969][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.866942][ T4322] usb 3-1: config 0 descriptor?? [ 208.103429][ T6160] loop1: detected capacity change from 0 to 32768 [ 208.163412][ T6160] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.347 (6160) [ 208.233709][ T6160] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.289179][ T6160] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 208.315637][ T4322] hid (null): invalid report_size 43095 [ 208.319258][ T6160] BTRFS info (device loop1): using free space tree [ 208.328180][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 208.475916][ T6160] BTRFS info (device loop1): enabling ssd optimizations [ 208.528039][ T4390] usb 3-1: USB disconnect, device number 4 [ 208.708578][ T6160] BTRFS info (device loop1): balance: start -s [ 208.756091][ T6160] BTRFS info (device loop1): relocating block group 1048576 flags system [ 208.771061][ T6160] BTRFS info (device loop1): balance: canceled [ 208.865272][ T4278] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 209.442370][ T6213] 9pnet_virtio: no channels available for device ./file0 [ 210.646248][ T6218] loop1: detected capacity change from 0 to 32768 [ 210.664864][ T6218] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.354 (6218) [ 210.696836][ T6218] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.710661][ T6218] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 210.719609][ T6218] BTRFS info (device loop1): using free space tree [ 210.756474][ T6218] BTRFS info (device loop1): enabling ssd optimizations [ 210.844132][ T6218] BTRFS info (device loop1): balance: start -s [ 210.867122][ T6218] BTRFS info (device loop1): relocating block group 1048576 flags system [ 210.987794][ T27] audit: type=1804 audit(1770987512.035:10): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.354" name="/newroot/70/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 211.114960][ T6218] BTRFS info (device loop1): balance: ended with status: 0 [ 211.352278][ T4278] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.742606][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 212.545990][ T6250] loop0: detected capacity change from 0 to 128 [ 212.589545][ T6250] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 212.604485][ T6250] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 212.829952][ T6255] device syzkaller0 entered promiscuous mode [ 213.522704][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 213.665593][ T6264] hub 8-0:1.0: USB hub found [ 213.670932][ T6264] hub 8-0:1.0: 1 port detected [ 214.123446][ T6262] loop2: detected capacity change from 0 to 128 [ 214.310122][ T6262] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 214.498027][ T6271] loop1: detected capacity change from 0 to 512 [ 214.520383][ T6271] EXT4-fs: Ignoring removed orlov option [ 214.557575][ T6271] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 214.586449][ T4629] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 214.625452][ T6271] EXT4-fs error (device loop1): ext4_iget_extra_inode:4756: inode #15: comm syz.1.363: corrupted in-inode xattr [ 214.743460][ T6258] loop5: detected capacity change from 0 to 32768 [ 214.807086][ T6271] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.363: couldn't read orphan inode 15 (err -117) [ 214.856772][ T6258] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 214.899303][ T4322] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 215.030775][ T6258] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 215.570407][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 215.608597][ T6258] BTRFS info (device loop5): enabling auto defrag [ 215.617249][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.681378][ T6258] BTRFS info (device loop5): use no compression [ 215.790507][ T6258] BTRFS info (device loop5): max_inline at 4096 [ 215.802961][ T4322] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 215.956391][ T6258] BTRFS info (device loop5): using free space tree [ 216.020588][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.186687][ T6271] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 216.240063][ T4322] usb 5-1: config 0 descriptor?? [ 216.310247][ T6258] BTRFS error (device loop5): open_ctree failed: -12 [ 216.321327][ T4322] hub 5-1:0.0: USB hub found [ 216.517169][ T4322] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 216.558123][ T4525] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (4525) [ 216.643770][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 216.751928][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.370'. [ 216.934005][ T4322] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1 [ 216.961954][ T4322] hid-generic: probe of 0003:046D:C31C.0004 failed with error -22 [ 217.740274][ T14] usb 5-1: USB disconnect, device number 3 [ 217.756547][ T6317] loop5: detected capacity change from 0 to 512 [ 217.783158][ T6317] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 217.927933][ T6317] EXT4-fs (loop5): 1 truncate cleaned up [ 217.934573][ T6317] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 218.006187][ T4631] EXT4-fs (loop5): unmounting filesystem. [ 218.324147][ T6331] hub 8-0:1.0: USB hub found [ 218.324943][ T6331] hub 8-0:1.0: 1 port detected [ 219.045133][ T6333] loop4: detected capacity change from 0 to 16 [ 219.047684][ T6333] /dev/loop4: Can't open blockdev [ 219.172918][ T6335] loop0: detected capacity change from 0 to 1024 [ 219.410034][ T6341] 9pnet_virtio: no channels available for device ./file0 [ 219.540206][ T4511] hfsplus: b-tree write err: -5, ino 4 [ 220.272099][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 221.137578][ T6339] loop2: detected capacity change from 0 to 32768 [ 221.232812][ T6339] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 221.253517][ T6339] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 221.268521][ T6339] BTRFS info (device loop2): enabling auto defrag [ 221.292498][ T6339] BTRFS info (device loop2): use no compression [ 221.298823][ T6339] BTRFS info (device loop2): max_inline at 4096 [ 221.305301][ T6339] BTRFS info (device loop2): using free space tree [ 221.789672][ T6339] BTRFS info (device loop2): enabling ssd optimizations [ 222.304246][ T6389] hub 8-0:1.0: USB hub found [ 222.309985][ T6389] hub 8-0:1.0: 1 port detected [ 222.822481][ T4268] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 222.932058][ T6395] loop5: detected capacity change from 0 to 128 [ 222.999903][ T6395] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 223.126604][ T6399] loop0: detected capacity change from 0 to 16 [ 223.229365][ T6399] erofs: (device loop0): mounted with root inode @ nid 36. [ 223.267160][ T4627] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 223.990536][ T6409] 9pnet_virtio: no channels available for device ./file0 [ 224.902778][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 225.197636][ T6418] loop0: detected capacity change from 0 to 1024 [ 225.347311][ T6418] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.857866][ T6421] loop5: detected capacity change from 0 to 1024 [ 225.870995][ T6421] EXT4-fs: Ignoring removed orlov option [ 225.916330][ T6418] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 226.155818][ T6421] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 227.368364][ T6436] loop1: detected capacity change from 0 to 128 [ 227.380051][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 227.452687][ T4631] EXT4-fs (loop5): unmounting filesystem. [ 227.481276][ T6436] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 227.577098][ T6436] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 227.703870][ T6443] loop0: detected capacity change from 0 to 1024 [ 228.275543][ T6449] loop5: detected capacity change from 0 to 256 [ 228.288551][ T6443] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 228.326473][ T6443] EXT4-fs (loop0): orphan cleanup on readonly fs [ 228.364856][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 228.369944][ T6443] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 228.397196][ T6449] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 228.416327][ T6452] loop2: detected capacity change from 0 to 2048 [ 228.423111][ T6443] EXT4-fs warning (device loop0): ext4_enable_quotas:7087: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 228.440970][ T6443] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 228.455287][ T6443] EXT4-fs (loop0): 1 truncate cleaned up [ 228.490914][ T6443] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 228.507688][ T6452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 228.540561][ T6443] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 228.587425][ T6452] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.608752][ T6456] loop1: detected capacity change from 0 to 16 [ 228.686042][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 228.689274][ T6456] erofs: (device loop1): mounted with root inode @ nid 36. [ 228.726249][ T6458] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.410: bg 0: block 345: padding at end of block bitmap is not set [ 228.782455][ T6458] EXT4-fs (loop2): Remounting filesystem read-only [ 229.501378][ T6465] 9pnet_virtio: no channels available for device ./file0 [ 230.401782][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 231.448838][ T6482] loop1: detected capacity change from 0 to 128 [ 231.898069][ T6482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 232.048967][ T6482] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 232.334211][ T6489] loop0: detected capacity change from 0 to 512 [ 232.394270][ T6489] EXT4-fs: Ignoring removed i_version option [ 232.426110][ T6489] EXT4-fs: Ignoring removed bh option [ 232.591517][ T6489] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 232.615763][ T6489] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.780604][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 232.784236][ T6496] loop5: detected capacity change from 0 to 128 [ 232.818780][ T6489] EXT4-fs (loop0): unmounting filesystem. [ 232.833658][ T6496] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 232.842597][ T5518] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 232.862707][ T6496] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 232.915759][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 232.960009][ T6496] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 232.973079][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.980576][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.045765][ T4631] EXT4-fs (loop5): unmounting filesystem. [ 233.049116][ T5518] usb 3-1: Using ep0 maxpacket: 8 [ 233.075256][ T5518] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 233.083681][ T5518] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.094288][ T5518] usb 3-1: config 0 has no interface number 0 [ 233.101093][ T5518] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 233.112397][ T5518] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.125569][ T5518] usb 3-1: config 0 interface 52 has no altsetting 0 [ 233.251566][ T5518] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 233.271292][ T5518] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 233.288179][ T5518] usb 3-1: Manufacturer: syz [ 233.294724][ T5518] usb 3-1: config 0 descriptor?? [ 233.346059][ T5518] hub 3-1:0.52: bad descriptor, ignoring hub [ 233.484858][ T5518] hub: probe of 3-1:0.52 failed with error -5 [ 233.957089][ T6501] loop0: detected capacity change from 0 to 256 [ 233.979757][ T6510] loop5: detected capacity change from 0 to 1024 [ 233.985801][ T5518] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input11 [ 234.008456][ T5518] usb 3-1: Failed to suspend device, error -71 [ 234.015831][ T5518] usb 3-1: USB disconnect, device number 5 [ 234.121383][ T6514] loop1: detected capacity change from 0 to 16 [ 234.346221][ T6514] erofs: (device loop1): mounted with root inode @ nid 36. [ 235.549624][ T6525] hub 8-0:1.0: USB hub found [ 235.554697][ T6525] hub 8-0:1.0: 1 port detected [ 235.825715][ T6526] 9pnet_virtio: no channels available for device ./file0 [ 236.562401][ T6531] loop4: detected capacity change from 0 to 128 [ 236.593213][ T6531] /dev/loop4: Can't open blockdev [ 237.479593][ T6538] loop2: detected capacity change from 0 to 1024 [ 237.549532][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 237.810146][ T6530] loop1: detected capacity change from 0 to 32768 [ 237.819521][ T6530] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.430 (6530) [ 237.919235][ T4322] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 238.082294][ T6530] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 238.157478][ T4322] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 238.253653][ T6547] loop2: detected capacity change from 0 to 128 [ 238.342493][ T4322] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 238.385367][ T6530] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 238.409213][ T6530] BTRFS info (device loop1): using free space tree [ 238.416104][ T4322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.426259][ T4322] usb 6-1: config 0 descriptor?? [ 238.433713][ T6542] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 238.469424][ T6547] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 238.575595][ T6556] loop4: detected capacity change from 0 to 1024 [ 238.637193][ T6567] loop0: detected capacity change from 0 to 16 [ 238.640109][ T6556] EXT4-fs: Ignoring removed orlov option [ 238.681376][ T4511] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 238.697050][ T6567] erofs: (device loop0): mounted with root inode @ nid 36. [ 238.714635][ T6556] /dev/loop4: Can't open blockdev [ 238.749218][ T6530] BTRFS info (device loop1): enabling ssd optimizations [ 239.057551][ T27] audit: type=1804 audit(1770987540.105:11): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.430" name="/newroot/89/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 239.092654][ T6576] 9pnet_virtio: no channels available for device ./file0 [ 239.093662][ T4322] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 239.107127][ T4322] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 239.114709][ T4322] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 239.123369][ T4322] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 239.130288][ T4322] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 239.167882][ T4322] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 239.281165][ T6583] hub 8-0:1.0: USB hub found [ 239.286609][ T6583] hub 8-0:1.0: 1 port detected [ 240.094794][ T4471] usb 6-1: USB disconnect, device number 4 [ 240.216239][ T4278] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.323664][ T6595] loop2: detected capacity change from 0 to 128 [ 240.428890][ T6585] fido_id[6585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 240.579765][ T6595] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 240.769506][ T6595] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.131208][ T6600] loop1: detected capacity change from 0 to 512 [ 241.276996][ T6600] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.396871][ T6600] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 241.423052][ T6593] loop4: detected capacity change from 0 to 8192 [ 241.433447][ T6600] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 241.444343][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.449'. [ 241.894821][ T6611] 9pnet_virtio: no channels available for device ./file0 [ 241.938176][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 242.383367][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 242.603309][ T6620] loop1: detected capacity change from 0 to 1024 [ 242.650055][ T6620] EXT4-fs: Ignoring removed orlov option [ 242.714099][ T6620] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 242.764810][ T6630] loop2: detected capacity change from 0 to 16 [ 242.848040][ T6633] loop5: detected capacity change from 0 to 128 [ 242.907864][ T6630] erofs: (device loop2): mounted with root inode @ nid 36. [ 243.036781][ T6633] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 243.101725][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 243.200404][ T6638] 9pnet_virtio: no channels available for device ./file0 [ 243.387023][ T6643] hub 8-0:1.0: USB hub found [ 243.392100][ T6643] hub 8-0:1.0: 1 port detected [ 244.274154][ T6649] loop2: detected capacity change from 0 to 128 [ 244.290991][ T4376] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 244.600472][ T6656] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 244.600472][ T6656] The task syz.1.461 (6656) triggered the difference, watch for misbehavior. [ 245.016349][ T6649] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 245.083056][ T6649] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 245.099996][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 245.292099][ T6637] loop4: detected capacity change from 0 to 32768 [ 245.349003][ T6665] loop1: detected capacity change from 0 to 16 [ 245.360926][ T6665] erofs: (device loop1): mounted with root inode @ nid 36. [ 245.931872][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 246.061913][ T6671] 9pnet_virtio: no channels available for device ./file0 [ 246.284710][ T6674] loop5: detected capacity change from 0 to 8 [ 246.711879][ T6674] SQUASHFS error: lzo decompression failed, data probably corrupt [ 246.733300][ T4525] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4525) [ 246.897196][ T6674] SQUASHFS error: Failed to read block 0x91: -5 [ 246.942893][ T6683] 9pnet_virtio: no channels available for device ./file0 [ 246.961135][ T6674] SQUASHFS error: Unable to read metadata cache entry [8f] [ 247.099870][ T6674] SQUASHFS error: Unable to read inode 0x11f [ 247.531007][ T6692] hub 8-0:1.0: USB hub found [ 247.538123][ T6692] hub 8-0:1.0: 1 port detected [ 247.651354][ T6693] loop1: detected capacity change from 0 to 16 [ 248.755470][ T6693] erofs: (device loop1): mounted with root inode @ nid 36. [ 248.798000][ T6691] syz.1.471: attempt to access beyond end of device [ 248.798000][ T6691] loop1: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 248.812277][ T6691] syz.1.471: attempt to access beyond end of device [ 248.812277][ T6691] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 248.828802][ T6691] syz.1.471: attempt to access beyond end of device [ 248.828802][ T6691] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 248.872074][ T6691] syz.1.471: attempt to access beyond end of device [ 248.872074][ T6691] loop1: rw=524288, sector=1342177304, nr_sectors = 2528 limit=16 [ 248.894858][ T27] audit: type=1800 audit(1770987549.885:12): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.471" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 248.995142][ T27] audit: type=1800 audit(1770987549.905:13): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.471" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 250.445596][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 250.449011][ T6710] loop2: detected capacity change from 0 to 128 [ 250.550980][ T6710] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 250.595794][ T6710] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 250.666115][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 250.676799][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.685170][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.696094][ T6712] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 250.802024][ C0] Illegal XDP return value 16128 on prog (id 8) dev veth0_to_bridge, expect packet loss! [ 251.290426][ T4275] Bluetooth: hci2: command 0x0401 tx timeout [ 251.440127][ T6722] loop0: detected capacity change from 0 to 16 [ 251.489524][ T6722] erofs: (device loop0): mounted with root inode @ nid 36. [ 251.511127][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 251.910101][ T6730] 9pnet_virtio: no channels available for device ./file0 [ 253.242861][ T6736] loop0: detected capacity change from 0 to 128 [ 253.378619][ T6736] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 253.454303][ T6736] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 254.516237][ T6736] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 254.603171][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 255.518726][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 255.605370][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 255.725157][ T6742] loop4: detected capacity change from 0 to 32768 [ 255.742456][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.749189][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.920580][ T4373] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 256.096714][ T6765] loop1: detected capacity change from 0 to 16 [ 256.133425][ T6765] erofs: (device loop1): mounted with root inode @ nid 36. [ 256.443270][ T6769] 9pnet_virtio: no channels available for device ./file0 [ 256.469354][ T4390] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 257.229129][ T4390] usb 3-1: Using ep0 maxpacket: 32 [ 257.236874][ T4390] usb 3-1: unable to get BOS descriptor or descriptor too short [ 257.242081][ T6777] loop0: detected capacity change from 0 to 128 [ 257.257716][ T4390] usb 3-1: config 56 has an invalid interface number: 216 but max is 0 [ 257.303081][ T4390] usb 3-1: config 56 has no interface number 0 [ 257.316388][ T6777] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 257.332705][ T6777] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 257.342829][ T4390] usb 3-1: config 56 interface 216 has no altsetting 0 [ 257.482252][ T6783] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 257.525403][ T4390] usb 3-1: language id specifier not provided by device, defaulting to English [ 257.596316][ T4390] usb 3-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b [ 257.606379][ T6782] loop1: detected capacity change from 0 to 4096 [ 257.661815][ T4390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.713877][ T6782] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 257.732157][ T4390] usb 3-1: Product: syz [ 257.739206][ T4390] usb 3-1: Manufacturer: syz [ 257.746967][ T4390] usb 3-1: SerialNumber: syz [ 258.605325][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 258.618218][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 258.661523][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 258.735793][ T4390] hub 3-1:56.216: bad descriptor, ignoring hub [ 258.769156][ T4390] hub: probe of 3-1:56.216 failed with error -5 [ 258.787207][ T4390] option 3-1:56.216: GSM modem (1-port) converter detected [ 258.846718][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 258.880883][ T4390] usb 3-1: USB disconnect, device number 6 [ 258.894671][ T4390] option 3-1:56.216: device disconnected [ 259.031968][ T6800] loop4: detected capacity change from 0 to 16 [ 259.071165][ T6800] /dev/loop4: Can't open blockdev [ 259.097088][ T6774] loop5: detected capacity change from 0 to 32768 [ 259.135518][ T6774] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 259.154464][ T6800] loop4: detected capacity change from 0 to 512 [ 259.164916][ T6804] loop0: detected capacity change from 0 to 1024 [ 259.177368][ T6774] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 259.181846][ T6800] /dev/loop4: Can't open blockdev [ 259.201633][ T6774] BTRFS info (device loop5): using free space tree [ 259.220998][ T6804] EXT4-fs: Ignoring removed orlov option [ 259.269392][ T6804] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 259.444791][ T6774] BTRFS info (device loop5): enabling ssd optimizations [ 259.532166][ T6826] 9pnet_virtio: no channels available for device ./file0 [ 259.988650][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 260.127314][ T27] audit: type=1804 audit(1770987561.175:14): pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.499" name="/newroot/70/file1/bus" dev="loop5" ino=263 res=1 errno=0 [ 260.184194][ T6835] loop4: detected capacity change from 0 to 512 [ 260.227545][ T6835] EXT4-fs: Ignoring removed nobh option [ 260.259236][ T6835] /dev/loop4: Can't open blockdev [ 260.352565][ T4631] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.194306][ T6802] loop1: detected capacity change from 0 to 32768 [ 261.291573][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 261.473141][ T6802] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.510 (6802) [ 261.521854][ T6853] loop4: detected capacity change from 0 to 128 [ 261.528967][ T6853] /dev/loop4: Can't open blockdev [ 261.604367][ T6802] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 261.729575][ T6802] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 261.779603][ T6802] BTRFS info (device loop1): enabling auto defrag [ 261.862665][ T6802] BTRFS info (device loop1): use no compression [ 261.897634][ T6858] loop4: detected capacity change from 0 to 1024 [ 261.937693][ T6802] BTRFS info (device loop1): max_inline at 4096 [ 262.064238][ T6802] BTRFS info (device loop1): using free space tree [ 262.165749][ T4373] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.240439][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 262.389333][ T6802] BTRFS error (device loop1): open_ctree failed: -12 [ 262.525236][ T6853] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 262.568231][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.575801][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.434942][ T6889] loop4: detected capacity change from 0 to 128 [ 263.450097][ T6889] /dev/loop4: Can't open blockdev [ 263.461470][ T6891] loop2: detected capacity change from 0 to 1024 [ 263.468583][ T6891] EXT4-fs: Ignoring removed orlov option [ 263.663384][ T6891] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 264.394164][ T6904] loop5: detected capacity change from 0 to 512 [ 264.440048][ T6904] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 264.456701][ T6904] EXT4-fs (loop5): 1 truncate cleaned up [ 264.473137][ T4525] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4525) [ 264.537425][ T6904] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 264.625771][ T6913] loop4: detected capacity change from 0 to 1024 [ 265.925697][ T4631] EXT4-fs (loop5): unmounting filesystem. [ 266.282234][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'. [ 266.459361][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.534'. [ 266.535482][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 266.716281][ T6943] loop2: detected capacity change from 0 to 128 [ 266.760380][ T6943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 266.771988][ T6947] loop5: detected capacity change from 0 to 128 [ 266.791227][ T6943] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 266.818887][ T6950] loop1: detected capacity change from 0 to 128 [ 266.829184][ T4390] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 266.960276][ T6947] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 266.969966][ T6947] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 267.008671][ T6950] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 267.099243][ T6943] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 267.108459][ T6950] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 267.180704][ T4390] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 267.197101][ T6927] loop0: detected capacity change from 0 to 32768 [ 267.199600][ T4390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.577158][ T6927] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 267.664686][ T6927] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 267.835845][ T6927] BTRFS info (device loop0): enabling auto defrag [ 267.840760][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 267.850822][ T4390] usb 5-1: config 0 descriptor?? [ 267.856932][ T4631] EXT4-fs (loop5): unmounting filesystem. [ 267.910217][ T4390] cp210x 5-1:0.0: cp210x converter detected [ 267.925415][ T6927] BTRFS info (device loop0): use no compression [ 268.167555][ T6927] BTRFS info (device loop0): max_inline at 4096 [ 268.204687][ T6960] loop2: detected capacity change from 0 to 16 [ 268.219206][ T6927] BTRFS info (device loop0): using free space tree [ 268.295952][ T6960] erofs: (device loop2): mounted with root inode @ nid 36. [ 268.330746][ T4390] usb 5-1: cp210x converter now attached to ttyUSB0 [ 268.530939][ T4390] usb 5-1: USB disconnect, device number 4 [ 268.540194][ T4390] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 268.553435][ T4390] cp210x 5-1:0.0: device disconnected [ 268.923633][ T6972] 9pnet_virtio: no channels available for device ./file0 [ 269.026008][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 269.371952][ T6927] BTRFS error (device loop0): open_ctree failed: -12 [ 270.627732][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 270.641383][ T4373] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4373) [ 270.836537][ T7013] ptrace attach of "./syz-executor exec"[4278] was attempted by ""[7013] [ 270.867758][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 270.933695][ T7020] xt_TCPMSS: Only works on TCP SYN packets [ 270.948976][ T7020] loop4: detected capacity change from 0 to 1024 [ 270.993288][ T4525] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 271.160598][ T7024] loop4: detected capacity change from 0 to 128 [ 271.163765][ T4525] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 271.205879][ T7027] loop1: detected capacity change from 0 to 16 [ 271.216810][ T4525] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.254113][ T7027] erofs: (device loop1): mounted with root inode @ nid 36. [ 271.263983][ T7024] /dev/loop4: Can't open blockdev [ 271.269599][ T4525] Buffer I/O error on dev loop4, logical block 0, async page read [ 271.815868][ T7024] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 272.003992][ T7036] 9pnet_virtio: no channels available for device ./file0 [ 272.239112][ T14] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 272.431004][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.447665][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.533561][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.578317][ T14] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.588741][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.606336][ T7031] loop5: detected capacity change from 0 to 32768 [ 272.615385][ T14] usb 3-1: config 0 descriptor?? [ 272.678222][ T7031] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 272.716452][ T7031] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 272.748895][ T7031] BTRFS info (device loop5): enabling auto defrag [ 272.765932][ T7031] BTRFS info (device loop5): use no compression [ 272.777412][ T7031] BTRFS info (device loop5): max_inline at 4096 [ 272.813147][ T7031] BTRFS info (device loop5): using free space tree [ 273.501729][ T14] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 273.527318][ T7031] BTRFS info (device loop5): enabling ssd optimizations [ 273.607742][ T14] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 273.722338][ T14] usb 3-1: USB disconnect, device number 7 [ 273.744286][ T7075] xt_TCPMSS: Only works on TCP SYN packets [ 273.766073][ T7075] loop1: detected capacity change from 0 to 1024 [ 274.057983][ T7076] fido_id[7076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 274.100849][ T7084] hub 8-0:1.0: USB hub found [ 274.106354][ T7084] hub 8-0:1.0: 1 port detected [ 274.358312][ T7083] loop4: detected capacity change from 0 to 512 [ 274.523736][ T7083] /dev/loop4: Can't open blockdev [ 275.069278][ T4396] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 276.430138][ T4631] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 276.597704][ T7097] loop1: detected capacity change from 0 to 1024 [ 276.896589][ T4525] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop5 scanned by udevd (4525) [ 277.169638][ T7098] loop4: detected capacity change from 0 to 1024 [ 277.187309][ T4396] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 277.242080][ T4396] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.244372][ T7098] /dev/loop4: Can't open blockdev [ 277.293242][ T4396] Buffer I/O error on dev loop4, logical block 0, async page read [ 278.049406][ T4813] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 278.259143][ T4813] usb 6-1: Using ep0 maxpacket: 16 [ 278.266374][ T4813] usb 6-1: too many configurations: 199, using maximum allowed: 8 [ 278.384586][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 278.399835][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 278.435240][ T4813] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 278.462575][ T4813] usb 6-1: can't read configurations, error -61 [ 278.476040][ T7127] loop0: detected capacity change from 0 to 128 [ 278.562191][ T7127] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 278.571353][ T7127] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.649312][ T4813] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 278.899159][ T4813] usb 6-1: Using ep0 maxpacket: 16 [ 278.916322][ T4813] usb 6-1: too many configurations: 199, using maximum allowed: 8 [ 279.095838][ T4813] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 279.113096][ T7127] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 279.140539][ T4813] usb 6-1: can't read configurations, error -61 [ 279.206048][ T4813] usb usb6-port1: attempt power cycle [ 279.321999][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 279.344612][ T7144] hub 8-0:1.0: USB hub found [ 279.349708][ T7144] hub 8-0:1.0: 1 port detected [ 284.500585][ T4813] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 284.740975][ T4813] usb 6-1: device not accepting address 7, error -71 [ 284.775539][ T7158] loop2: detected capacity change from 0 to 128 [ 285.364142][ T7158] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 285.618504][ T4627] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 285.715131][ T7176] loop2: detected capacity change from 0 to 128 [ 285.815871][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'. [ 285.912255][ T7176] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 285.991968][ T7176] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 286.878672][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 286.898651][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 287.003462][ T7196] loop0: detected capacity change from 0 to 2048 [ 287.053925][ T7201] loop2: detected capacity change from 0 to 128 [ 287.063178][ T7196] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 287.104737][ T7201] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 287.125086][ T7196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.134820][ T7201] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 287.692768][ T7201] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 287.775983][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 287.855657][ T7210] loop0: detected capacity change from 0 to 16 [ 287.922176][ T7210] erofs: (device loop0): mounted with root inode @ nid 36. [ 290.071058][ T5000] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 290.081114][ T7231] hub 8-0:1.0: USB hub found [ 290.086066][ T7231] hub 8-0:1.0: 1 port detected [ 290.909139][ T5000] usb 3-1: Using ep0 maxpacket: 16 [ 290.949168][ T5000] usb 3-1: too many configurations: 199, using maximum allowed: 8 [ 290.964070][ T7237] loop0: detected capacity change from 0 to 128 [ 291.090947][ T7237] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 291.772045][ T5000] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 291.784197][ T5000] usb 3-1: can't read configurations, error -61 [ 291.873689][ T7250] loop1: detected capacity change from 0 to 128 [ 291.893852][ T7246] loop5: detected capacity change from 0 to 128 [ 291.898935][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'. [ 291.947440][ T7250] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 292.015955][ T7246] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 292.055979][ T7246] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 292.088267][ T7250] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 292.119471][ T4362] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 293.184592][ T4631] EXT4-fs (loop5): unmounting filesystem. [ 293.223029][ T7250] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 293.877024][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.884621][ T7250] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.041318][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 294.084223][ T7272] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.609'. [ 294.109853][ T7274] loop0: detected capacity change from 0 to 128 [ 294.170889][ T7274] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 294.192878][ T7274] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 294.498716][ T7286] loop2: detected capacity change from 0 to 512 [ 294.541934][ T7286] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 294.565090][ T7287] hub 8-0:1.0: USB hub found [ 294.570781][ T7287] hub 8-0:1.0: 1 port detected [ 294.593727][ T7286] EXT4-fs (loop2): 1 truncate cleaned up [ 294.602924][ T7286] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 296.186377][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 296.196701][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 296.289151][ T4813] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 298.328193][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'. [ 298.356843][ T7311] loop2: detected capacity change from 0 to 128 [ 298.389262][ T4813] usb 2-1: Using ep0 maxpacket: 16 [ 298.395018][ T4813] usb 2-1: too many configurations: 199, using maximum allowed: 8 [ 298.411012][ T4813] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 298.434535][ T4813] usb 2-1: can't read configurations, error -61 [ 298.566019][ T7311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 298.742704][ T7311] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 298.782455][ T4813] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 299.902308][ T4813] usb 2-1: device not accepting address 9, error -71 [ 299.979795][ T4813] usb usb2-port1: attempt power cycle [ 300.117016][ T7326] loop4: detected capacity change from 0 to 128 [ 300.129825][ T7326] /dev/loop4: Can't open blockdev [ 300.158008][ T7328] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.625'. [ 300.204805][ T7156] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 300.466973][ T7331] loop4: detected capacity change from 0 to 1024 [ 300.467603][ T7156] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 300.532959][ T7331] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 300.692702][ T7336] loop0: detected capacity change from 0 to 512 [ 300.711030][ T7334] loop1: detected capacity change from 0 to 128 [ 300.814799][ T7336] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 300.828241][ T7334] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 300.898755][ T7334] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 301.274114][ T7342] xt_TCPMSS: Only works on TCP SYN packets [ 301.289413][ T7342] loop4: detected capacity change from 0 to 1024 [ 301.300317][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 301.357436][ T7336] EXT4-fs (loop0): 1 truncate cleaned up [ 301.368671][ T7336] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 301.408629][ T7156] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 302.006875][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 302.232980][ T7353] hub 8-0:1.0: USB hub found [ 302.238388][ T7353] hub 8-0:1.0: 1 port detected [ 302.833648][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 302.993349][ T7350] loop4: detected capacity change from 0 to 128 [ 304.469123][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 304.719224][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 304.800391][ T22] usb 1-1: too many configurations: 199, using maximum allowed: 8 [ 304.841807][ T22] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 304.870241][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 304.882313][ T7378] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.637'. [ 304.885682][ T22] usb 1-1: can't read configurations, error -61 [ 304.977648][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.638'. [ 305.086155][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 305.257270][ T7394] xt_TCPMSS: Only works on TCP SYN packets [ 305.273595][ T7394] loop4: detected capacity change from 0 to 1024 [ 305.283546][ T7395] loop2: detected capacity change from 0 to 128 [ 305.300857][ T7397] loop1: detected capacity change from 0 to 128 [ 305.319087][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 305.325095][ T22] usb 1-1: too many configurations: 199, using maximum allowed: 8 [ 305.362709][ T7397] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 305.372314][ T7397] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.373845][ T7156] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 305.433091][ T22] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 305.473608][ T7395] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 305.489815][ T22] usb 1-1: can't read configurations, error -61 [ 305.496361][ T7395] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 305.524778][ T22] usb usb1-port1: attempt power cycle [ 306.655047][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 306.700362][ T7403] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 306.705515][ T7412] loop0: detected capacity change from 0 to 1024 [ 306.776842][ T7412] EXT4-fs: Ignoring removed orlov option [ 306.811422][ T7416] loop4: detected capacity change from 0 to 512 [ 306.832328][ T7416] /dev/loop4: Can't open blockdev [ 306.852878][ T7412] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 309.452923][ T7432] loop4: detected capacity change from 0 to 16 [ 309.461089][ T7432] /dev/loop4: Can't open blockdev [ 309.529883][ T7432] loop4: detected capacity change from 0 to 512 [ 309.571813][ T7432] /dev/loop4: Can't open blockdev [ 310.110046][ T7440] 9pnet_virtio: no channels available for device ./file0 [ 310.861304][ T7446] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.652'. [ 310.929987][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.653'. [ 311.053360][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 311.059348][ T7452] xt_TCPMSS: Only works on TCP SYN packets [ 311.074389][ T7452] loop5: detected capacity change from 0 to 1024 [ 311.779970][ T22] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 311.999433][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 312.016806][ T22] usb 2-1: too many configurations: 199, using maximum allowed: 8 [ 312.160990][ T22] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 312.174160][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.658'. [ 312.185461][ T22] usb 2-1: can't read configurations, error -61 [ 312.251387][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 312.404492][ T7469] loop0: detected capacity change from 0 to 512 [ 312.453518][ T7469] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 312.456272][ T22] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 312.884518][ T7469] EXT4-fs (loop0): 1 truncate cleaned up [ 313.018872][ T7469] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 313.194455][ T7475] loop5: detected capacity change from 0 to 16 [ 313.215106][ T7477] loop2: detected capacity change from 0 to 128 [ 313.232405][ T7475] erofs: (device loop5): mounted with root inode @ nid 36. [ 313.285652][ T7477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 313.310674][ T7477] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 313.343790][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 313.349921][ T22] usb 2-1: too many configurations: 199, using maximum allowed: 8 [ 313.380236][ T22] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 313.542917][ T22] usb 2-1: can't read configurations, error -61 [ 313.549762][ T22] usb usb2-port1: attempt power cycle [ 314.434997][ T7482] 9pnet_virtio: no channels available for device ./file0 [ 314.707649][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 314.831205][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 314.864526][ T7485] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.664'. [ 314.968792][ T7490] loop2: detected capacity change from 0 to 128 [ 314.991547][ T7490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 315.005431][ T7490] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 315.079092][ T22] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 315.112237][ T7494] xt_TCPMSS: Only works on TCP SYN packets [ 315.119703][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 315.125457][ T22] usb 2-1: too many configurations: 199, using maximum allowed: 8 [ 315.135763][ T7495] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 315.145708][ T22] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 315.153460][ T22] usb 2-1: can't read configurations, error -61 [ 315.341588][ T22] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 315.389832][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 315.395973][ T22] usb 2-1: too many configurations: 199, using maximum allowed: 8 [ 315.411404][ T7498] loop5: detected capacity change from 0 to 1024 [ 315.472201][ T22] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 315.512233][ T22] usb 2-1: can't read configurations, error -61 [ 315.532672][ T22] usb usb2-port1: unable to enumerate USB device [ 315.582791][ T7501] loop4: detected capacity change from 0 to 128 [ 315.607530][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 315.908256][ T7506] loop1: detected capacity change from 0 to 1024 [ 315.943016][ T7506] EXT4-fs: Ignoring removed orlov option [ 316.038663][ T7506] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 316.186121][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 316.295333][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 316.622792][ T7522] loop0: detected capacity change from 0 to 512 [ 316.640066][ T7522] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 317.043742][ T7522] EXT4-fs (loop0): 1 truncate cleaned up [ 317.207531][ T7522] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 317.217735][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.224855][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.765793][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 317.882062][ T7533] loop4: detected capacity change from 0 to 16 [ 317.891536][ T7533] /dev/loop4: Can't open blockdev [ 318.889048][ T7542] loop5: detected capacity change from 0 to 4096 [ 319.170764][ T7542] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 319.628377][ T7547] loop2: detected capacity change from 0 to 1024 [ 319.708820][ T7547] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 319.724372][ T4631] EXT4-fs (loop5): unmounting filesystem. [ 320.012513][ T7554] xt_TCPMSS: Only works on TCP SYN packets [ 320.028570][ T7554] loop5: detected capacity change from 0 to 1024 [ 320.816995][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 320.825718][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 320.849306][ T7539] loop0: detected capacity change from 0 to 32768 [ 320.877218][ T7539] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.681 (7539) [ 320.963884][ T7539] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 321.129802][ T7539] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 321.270745][ T7539] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 321.612859][ T7539] BTRFS info (device loop0): trying to use backup root at mount time [ 321.907649][ T7539] BTRFS info (device loop0): setting nodatasum [ 322.003862][ T7539] BTRFS info (device loop0): enabling ssd optimizations [ 322.416355][ T7539] BTRFS info (device loop0): using spread ssd allocation scheme [ 322.445903][ T7539] BTRFS info (device loop0): turning on flush-on-commit [ 322.489098][ T7539] BTRFS info (device loop0): force zlib compression, level 3 [ 322.557500][ T7539] BTRFS info (device loop0): using free space tree [ 322.791561][ T7539] BTRFS error (device loop0): open_ctree failed: -12 [ 427.898951][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 427.905933][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4471/1:b..l [ 427.914203][ C0] (detected by 0, t=10502 jiffies, g=27361, q=293 ncpus=2) [ 427.921464][ C0] task:kworker/1:8 state:R running task stack:25456 pid:4471 ppid:2 flags:0x00004000 [ 427.933040][ C0] Workqueue: events_power_efficient gc_worker [ 427.939113][ C0] Call Trace: [ 427.942371][ C0] [ 427.945290][ C0] __schedule+0x11d1/0x40e0 [ 427.949786][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 427.955750][ C0] ? __sched_text_start+0x8/0x8 [ 427.960583][ C0] ? lock_chain_count+0x20/0x20 [ 427.965411][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 427.970674][ C0] preempt_schedule_irq+0xbb/0x160 [ 427.975761][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 427.981462][ C0] ? rcu_is_watching+0x11/0xa0 [ 427.986213][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 427.992001][ C0] irqentry_exit+0x63/0x70 [ 427.996392][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 428.002351][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x9/0x30 [ 428.008494][ C0] Code: c0 10 8c 8a 48 c7 c6 a0 34 8c 8a e8 71 48 21 f7 0f 0b eb d1 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 31 c0 83 3d e7 31 f3 03 00 <74> 1d 83 3d 72 65 f3 03 00 74 14 65 48 8b 0d c4 d3 d5 75 31 c0 83 [ 428.028088][ C0] RSP: 0018:ffffc90004e7fad8 EFLAGS: 00000202 [ 428.034132][ C0] RAX: 0000000000000000 RBX: 0000000000013544 RCX: ffff88802b573b80 [ 428.042089][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 428.050038][ C0] RBP: ffffc90004e7fc30 R08: ffffffff90af52d7 R09: 1ffffffff215ea5a [ 428.058006][ C0] R10: dffffc0000000000 R11: fffffbfff215ea5b R12: dffffc0000000000 [ 428.065955][ C0] R13: ffff88801db383c0 R14: 0000000000026a89 R15: 1ffffffff1901e40 [ 428.073916][ C0] gc_worker+0xbdb/0x13c0 [ 428.078258][ C0] ? gc_worker+0x25e/0x13c0 [ 428.082748][ C0] ? init_conntrack+0x11a0/0x11a0 [ 428.087755][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 428.092938][ C0] ? process_one_work+0x7b0/0x1160 [ 428.098030][ C0] process_one_work+0x8a2/0x1160 [ 428.102951][ C0] ? worker_detach_from_pool+0x240/0x240 [ 428.108562][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 428.113566][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 428.119095][ C0] ? kthread_data+0x4b/0xc0 [ 428.123592][ C0] worker_thread+0xaa2/0x1270 [ 428.128260][ C0] ? __kthread_parkme+0x162/0x1c0 [ 428.133265][ C0] kthread+0x29d/0x330 [ 428.137307][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 428.142327][ C0] ? kthread_blkcg+0xd0/0xd0 [ 428.146902][ C0] ret_from_fork+0x1f/0x30 [ 428.151306][ C0] [ 428.154305][ C0] rcu: rcu_preempt kthread starved for 9793 jiffies! g27361 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 428.165389][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 428.175330][ C0] rcu: RCU grace-period kthread stack dump: [ 428.181191][ C0] task:rcu_preempt state:R running task stack:27256 pid:16 ppid:2 flags:0x00004000 [ 428.191939][ C0] Call Trace: [ 428.195196][ C0] [ 428.198108][ C0] __schedule+0x11d1/0x40e0 [ 428.202602][ C0] ? __sched_text_start+0x8/0x8 [ 428.207430][ C0] ? __mod_timer+0x91e/0xd00 [ 428.212018][ C0] schedule+0xb9/0x180 [ 428.216093][ C0] schedule_timeout+0x184/0x2d0 [ 428.220940][ C0] ? console_conditional_schedule+0x40/0x40 [ 428.226832][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 428.232721][ C0] ? update_process_times+0x1b0/0x1b0 [ 428.238085][ C0] ? prepare_to_swait_event+0x335/0x350 [ 428.243631][ C0] rcu_gp_fqs_loop+0x303/0x1340 [ 428.248467][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 428.253305][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 428.259448][ C0] ? rcu_gp_init+0x14e0/0x14e0 [ 428.264196][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 428.269032][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 428.274214][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 428.279393][ C0] rcu_gp_kthread+0x99/0x3b0 [ 428.283966][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 428.289056][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 428.294929][ C0] ? __kthread_parkme+0x162/0x1c0 [ 428.299938][ C0] kthread+0x29d/0x330 [ 428.303986][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 428.309074][ C0] ? kthread_blkcg+0xd0/0xd0 [ 428.313640][ C0] ret_from_fork+0x1f/0x30 [ 428.318045][ C0] [ 428.321044][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 428.327359][ C0] Sending NMI from CPU 0 to CPUs 1: [ 428.332551][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10