last executing test programs: 1m40.43019257s ago: executing program 2 (id=24): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/39) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1m40.013773148s ago: executing program 2 (id=26): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="f3450fbc475aa766ba4200ed66baf80cb8398a888aef66bafc0cb0f0ee000000400f22c042a7a70f49f70f00d86536400f00d335000004000f22c066ba200066ed", 0x41}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m39.613496986s ago: executing program 2 (id=27): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r4 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000000)=""/128) sendto$rxrpc(r0, 0x0, 0x0, 0x844, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) shutdown(r5, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 1m34.392637387s ago: executing program 2 (id=38): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_READV=@pass_iovec={0x1, 0xc, 0x0, @fd=r0, 0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) fadvise64(0xffffffffffffffff, 0xaa17, 0xff39, 0x3) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, &(0x7f0000000100)}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m33.945216575s ago: executing program 2 (id=40): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) readv(r0, &(0x7f0000000e00)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1) 1m33.730195s ago: executing program 32 (id=40): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) readv(r0, &(0x7f0000000e00)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1) 1m32.962989534s ago: executing program 4 (id=48): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xd9c, '\x00', 0x0, 0x0}, 0x50) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x3, 0x40000333}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m31.564998042s ago: executing program 4 (id=53): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000001c0)=0x304008000) 1m30.58593186s ago: executing program 4 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1, 0x3a, '/dev/bus/usb/00#/00\\x', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000600)=""/55, 0x37, 0x2040, 0x0, 0x0) 1m28.749930576s ago: executing program 4 (id=63): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) lseek(0xffffffffffffffff, 0x10000000005, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 1m27.680031017s ago: executing program 4 (id=65): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m27.410272723s ago: executing program 4 (id=67): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x240000, 0x0, 0x7e, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2101015, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x46060480) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x200000, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0xa) 1m12.242154973s ago: executing program 33 (id=67): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x240000, 0x0, 0x7e, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2101015, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x46060480) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x200000, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0xa) 58.415236346s ago: executing program 5 (id=210): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0xc4}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ee2d010203010902"], 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000200)) 55.734104449s ago: executing program 5 (id=230): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@nobh}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r0, 0x0) write$UHID_CREATE(r0, &(0x7f0000000880)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xff, 0x7, 0x7ff, 0x100, 0x7}}, 0x120) 52.898635204s ago: executing program 5 (id=242): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$eJzs3Au4T9XWMPAx5pyLbSf928lls8Yci3/amCRJLgm5JEmSJLklJCRJQmKTWxKSkHuSe0guO3Zyv99yT5Ij7SQJyS3M79Hp/Zz3dN7T936n7/M+Z4/f88zHHNZ/jP9Ye+xnr7X+z7P3952HVmtQvXI9ZoZ/Cf71n1QASACAAQBwAwAEAFAqqVTSlePZNKb+a28i/lyPzrjWHYhrSeafucn8MzeZf+Ym88/cZP6Zm8w/c5P5Z24yfyEys20z894oK/Mu+fw/M5Pr/7+RjGLjvt5Q7OYu/40UmX/mJvP/N5f1nx+W+WduMv/MTeafucn8//1V+ifHZP6Zm8xfiMzsWn/+LOvarmv9/SeEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQInM4568yAPAf+2vdlxBCCCGEEEIIIf48Puu17kAIIYQQQgghhBD/7yEo0GAggCyQFRIgGyTCdZAdrocccAPE4EZIgpsgJ9wMuSA35IG8kAz5ID+EQGCBIYICUBDicAsUglshBQpDESgKDopBcbgNSsDtUBLugFJwJ5SGu6AMlIVyUB7uhgpwD1SESlAZ7oUqUBWqQXW4D2rA/VATHoBa8CDUhoegDjwMdeERqAePQn14DBrA49AQnoBG0BiaQFNo9n+V/zJ0h1egB/SEVOgFveFV6AN9oR/0hwHwGgyE12EQvAGDYQgMhTdhGLwFw+FtGAEjYRS8A6NhDIyFcTAeJsBEeBcmwXswGd6HKTAVpsF0mAEzYRZ8ALNhDsyFD2EefATzYQEshEWQBh/DYlgC6fAJLIVPYRkshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG3wG22EH7IRdsBv2wF74HPbBF7AfvoQD8NV/M//s3+V3QUBAhQoNGsyCWTABEzAREzE7ZsccmANjGMMkTMKcmBNzYS7Mg3kwGZMxP+ZHQkJGxgJYAOMYx0JYCFMwBYtgEXTosDgWxxJ4O5bEklgKS2FpLI1lsCyWxfJYHitgBayIFbEyVsYqWAWrYTW8D+/D+7Em1sRaWAtrY22sg3WwLtbFelgP62N9bIANsCE2xEbYCJtgE2yGzbA5NscW2AJbYStsja2xDbbBdtgO22N77IAdsCN2xE7YCTtjZ+yCXbErvowv4yv4CvbEKqoX9sbe2Af7YD/sj/3xNRyIr+Pr+AYOxiE4FN/EN/EtHI5ncASOxFE4CiuoMTgWxyGrCTgRJ+IknISTcTJOwak4FafjDJyJs3AWzsY5OAc/xHn4EX6EC3ABLsI0TMPFuATTMR2X4llchstxBa7EVbgaV+FaXIdrcQNuxA24GTfjVtyKn+FnuAN34C7chXtwD36On+MX+AUOxgN4AA/iQTyEh/AwHsYMzMAjeASP4lE8hsfwOB7HE3gST+FJPI2n8QyexXN4Di/gBbyILyZ/W39P4fWDQV1hlFFZVBaVoBJUokpU2VV2lUPlUDEVU0kqSeVUOVUulUvlUXlUskpW+VV+RYoUq0gVUAUSAEAVUoVUikpRRVQR5ZRTxVVxVUKVUCVVSVVK3alKq7tUGVVWtXTlVXlVQbVyFVUlVVlVVlVUVVVNVVfVVQ1VQ9VUNVUtVUvVVrVVHfWwqqt6YT98VF2ZTAM1BBuqodhINVZNVFP1Fj6pmqvh2EK1VK3U02okjsA2qrlrp55V7dVY7KCeV+PwBdVJTcDO6iXVRXVV3dTLqrtq4XqonmoK9lK91XTso/qqfqq/mo1V1ZWJVVNvqMFqiBqq3lSL8C01XL2tRqiRapR6R41WY9RYNU6NVxPURPWumqTeU5PV+2qKmqqmqelqhpqpZqkP1Gw1R81VH6p56iM1Xy1QC9UilaY+VovVEpWuPlFL1adqmVquVqiVapVardaotWqdWq82qI1qk9qstqitapv6TG1XO9ROtUvtVnvUXvW52qe+UPvVl+qA+kodVH9Rh9TX6rD6RmWob9UR9Z06qr5Xx9QP6rj6UZ1QJ9Up9ZM6rX5WZ9RZdU6dVxfUL+qiuqQuK69Ao1Zaa6MDnUVn1Qk6m07U1+ns+nqdQ9+gY/pGnaRv0jn1zTqXzq3z6Lw6WefT+XWoSVvNOtIFdEEd17foQvpWnaIL6yK6qHa6mC6ub9Ml9O26pL5Dl9J36tL6Ll1Gl9XldHl9t66g79EVdSVdWd+rq+iqupquru/TNfT9uqZ+QNfSD+ra+iFdRz+s6+pHdD39qK6vH9MN9OO6oX5CN9KNdRPdVDfTT+rm+indQrfUrfTTurV+RrfRbXU7/axur5/THfTzuqN+QXfSL+rO+iXdRXfV3fQlfVl73UP31Km6l+6tX9V9dDr00/31AP2aHqhf14P0G3qwHqKH6jf1MP2WHq7f1iP0SD1Kv6NH6zF6rB6nx+sJeqJ+V0/S7+nJ+n09RU/V0/R0PUPP1P1+qzT37/J7/XbV/dv89/5B/qBf332r3qY/09v1Dr1T79K79R69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WGTpDH9FH9FF9VB/Tx/RxfVyf0Cf1ef2TPq1/1mf0WX1Wn9cX9AV98bevARg0ymhjTGCymKwmwWQzieY6k91cb3KYG0zM3GiSzE0mp7nZ5DK5TR6T1ySbfCa/CQ0Za9hEpoApaOLmFlPI3GpSTGFTxBQ1zhQzxc1t/3L+H/XXzDQzzU1z08K0MK1MK9PatDZtTBvTzrQz7U1708F0MB1NR9PJdDKdTWfTxXQx3Uw30910Nz1MD5NqUk1v86rpY/qafqa/GWBeMwPNQDPIDDKDzWAz1Aw1w8wwM9wMNyPMCDPKjDKjzWgz1ow14814M9FMNJPMJDPZTDZTzBQzzUwzM8wMM8vMMrPNbDPXzDXzzDwz38w3C81Ck2bSzGKz2KSbdLPULDXLzHKz3Kw0K81qs9qsNWvNerPebDQbzWaz2Swz28w2s91sNzvNTrPb7DZ7zV6zz+wz+81+c8AcMAfNQXPIHDKHzWGTYTLMEXPEHDVHzTFzrNdxc9ycMCfMKXPKnDanzRlzxpwz58wFc8FcNBfNZXP5ym1foAIVmMAEWYIsQUKQECQGiUH2IHuQI8gRxIJYkBQkBTmDm4NcQe4gT5A3SA7yBfmDMKDABhxEQYGgYBAPbgkKBbcGKUHhoEhQNHBBsaB4cFtQIrg9KBncEZQK7gxKB3cFZYKyQbmgfHB3UCG4J6gYVAoqB/cGVYKqQbWgenBfUCO4P6gZPBDUCh4MagcPBXWCh4O6wSNBveDRoH7wWNAgeDxoGDwRNAoaB02CpkGzP7W+92dyP+V6hD3D1LBX2Dt8NewT9g37hf3DAeFr4cDw9XBQ+EY4OBwSDg3fDIeFb4XDw7fDEeHIcFT4Tjg6HKMBIBwfTggnhu+Gk8L3wsnh++GUcGo4LZwezghnhrPCD8LZ4ZxwbvhhOC/8KJwfLggXhovCtPDjcHG4JEwPPwmXhp+Gy8Ll4YpwZbgqXH3+RoBwXbg+3BBuDDeFm8Mt4dZwW/hZuD3cEe4Md4W7wz3h3vDzcF/4Rbg//DI8EH4VHgz/Eh4Kvw4Ph9+EGeG34ZHwu/Bo+H14LPwhPB7+GJ4IT4anwp/C0+HP4ZnwbHguPB9eCH8JL4aXwsuhv3Jzf+XyToYMZaEslEAJlEiJlJ2yUw7KQTGKURIlUU7KSbkoF+WhPJRMyZSf8tMVTEwFqADFKU6FqBClUAoVoSLkyFFxKk4lqASVpJJUikpRaSpNZagMlaNydDfdTffQPVSJKtG9dC9VpapUnapTDapBNakm1aJaVJtqUx2qQ3WpLtWjelSf6lMDakANqSE1okbUhJpQM2pGzak5taAW1IpaUWtqTW2oDbWjdtSe2lMH6kAdqSN1ok7UmTpTF+pC3agbdafu1IN6UCqlUm/qTX2oD/WjfjSABtBAGkiDaBANpsE0lIbSMBpGw2k4jaCRNIreodE0hsbSOBpPE2giTaRJNIkm02SaQlNoGk2jGTSDZtEsmk2zaS7NpXk0j+bTfFpICymN0mgxLaZ0SqeltJSW0TJaQStoFa2iNbSG1tE62kAbaBNtoi20hbbRNtpO22kn7aTdtJv20l7aR/toP+2nA3SADtJBOkSH6DAdpgzKoCN0hI7SUTpGx+g4HacTdIJO0Sk6TafpDJ2hc3SOLtAvdJEu0WXylGAVJNrrbHZ7vc1hb7AJNpv92ziPzWuTbT6b34Y2l839n2Ky1qbYwraILWqdLWaL29t+F5exZW05W97ebSvYe2zF38U17P22pn3A1rIP2ur2vt/irL/Gte1Dto593Na1T9h6trGtb5vaBvZx29A+YRvZxraJbWpb22dsG9vWtrPP2vb2ud/Fi+0Su86utxvsRrvPfmHP2fP2qP3eXrC/2B62px1gX7MD7et2kH3DDrZDfhePsu/Y0XaMHWvH2fF2wu/iaXa6nWFn2ln2AzvbzvldnGY/tvNsup1vF9iFdtGv8ZWe0u0ndqn91C6zy+0Ku9KusqvtGrv2f/e60m62W+xWu9d+brfbHXan3WV32z2/xlfOY7/90h6wX9kj9jt7yH5tD9tjNsN++2t85fyO2R/scfujPWFP2lP2J3va/mzP2LO/nv+Vc//JXrKXrbfAyIo1Gw44C2flBM7GiXwdZ+frOQffwDG+kZP4Js7JN3Muzs15OC8ncz7OzyETW2aOuAAX5DjfwoX4Vk7hwlyEi7LjYlycb+MSfDuX5Du4FN/JpfkuLsNluRyX57u5At/DFbkSV+Z7uQpX5Wpcne/jGnw/1+QHuBY/yLX5Ia7DD3NdfoTr8aNcnx/jBvw4N+QnuBE35ibclJvxk9ycn+IW3JJb8dPcmp/hNtyW2/Gz3J6f4w78PHfkF7gTv8id+SXuwl25G7/M3fkV7sE9OZV7cW9+lftwX+7H/XkAv8YD+XUexG/wYB7CQ/lNHsZv8XB+m0fwSB7F7/BoHsNjeRyP5wk8kd/ls2lt81y515vCU3kaT+cZPJNn8Qc8m+fwXP6Q5/FHPJ8X8EJexGn8MS/mJZzOn/BS/pSX8XJewSt5Fa/mNbyW1/F63sAbeRNv5i28lbfxZ7ydd/BO3sW7eQ/v5c95H3/B+/lLPsBf8UH+Cx/ir/kwf8MZ/C0f4e/4KH/Px/gHPs4/8gk+yaf4Jz7NP/MZPsvn+Dxf4F/4Il/iy+wZIoxUpCMTBVGWKGuUEGWLEqProuzR9VGO6IYoFt0YJUU3RTmjm6NcUe4oT5Q3So7yRfmjMKLIRhxFUYGoYBSPbokKRbdGKVHhqEhUNHJRsah4dFtUIro9KhndEZWK7oxKR3dFZaKy0eMPlo/ujipE90QVo0pR5ejeqEpUNaoWVY/ui2pE90c1oweiWtGDUcnooahO9HBUN3okqhc9GtWPHosaRI9HDaMnokZR46hJ1DRqFj0ZNY+eilpELaNW0dNR6+iZqE3UNmoXPRu1j577w+OpUa+od/Rq9Grk/QN6YXxRPC3+cXxxfEk8Pf5JfGn80/iy+PL4ivjK+Kr46via+Nr4uvj6+Ib4xvim+Ob4lvjWuPfVs4JDp5x2xgUui8vqElw2l+iuc9nd9S6Hu8HF3I0uyd3kcrqbXS6X2+VxeV2yy+fyu9CRs45d5Aq4gi7ubnGF3K0uxRV2RVxR51wxV9w1dc1cM9fcPeVauJaulXvaPe2ecc+4tq6te9a1d8+5Du5519G94Dq5F92L7iXXxXV13dzLrrt7xfVwPV2qS3W9XW/Xx/Vx/Vw/N8ANcAPdQDfIDXKD3WA31A11w9wwN9wNdyPcCDfKjXKj3Wg31o114914N9FNdJPcJDfZTXZT3BQ3zU1zM9wMN8vNcrPdbDfXzXXzUua5+W6+W+gWujSX5ha7xS7dpbulbqlb5pa5FW6FW+VWuTVujVvn1rkNboPb5Da5LW6L2+a2ue1uu9vpdrrdbrfb6/a6fW6f2+/2uwPugDvoDrpD7pA77L5xGe5bd8R95466790x94M77n50J9xJd8r95E67n90Zd9adc+fdBfeLu+guucvOu4mxd2OTYu/FJsfej02JTY1Ni02PzYjNjM2KfRCbHZsTmxv7MDYv9lFsfmxBbGFsUSwt9nFscWxJLD32SWxp7NPYstjy2IrYytiq2OqY9/m2R76AL+jj/hZfyN/qU3xhX8QX9c4X88X9bb6Ev92X9Hf4Uv5OX9rf5cv4sr6cf8I38o19E9/UN/NP+ub+Kd/Ct/St/NO+tX/Gt/FtfTv/rG/vn/Md/PO+o3/Bd/Iv+s7+Jd/Fd/Xd/Mu+u3/F9/A9farv5Xv7V30f39f38/39AP+aH+hf94P8G36wH+KH+jf9MP+WH+7f9iP8SD/Kv+NH+zF+rB/nx/sJfqJ/10/y7/nJ/n0/xU/10/x0P8PP9LP8B362n+Pn+g/9PP+Rn+8X+IV+kU/zH/vFfolP95/4pf5Tv8wv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nf+a3+x1+p9/ld/s9fq//3O/zX/j9/kt/wH/lD/q/+EP+a3/Yf+Mz/Lf+iP/OH/Xf+2P+B3/c/+hP+JP+lP/Jn/Y/+zP+rD/nz/sL/hd/0V/yl+V31oQQQggh/o/oPzje6x/8n/ptXdEbAK7fkTfj72tuyvXXfV+V3DoGAM/27Pzof6wqVVJTU3977TINQcEFABC7mp8FrsbLoRU8A+2gJZT4h/31VV0v8B/Uj98JkHi18q8S4e/r3/5f1H/y6VGLS0fnkv5J/QUAKQWv5mSDq/HV+iX/i/q5m/9B/9m+ngjQ4m9yssPV+Gr94vAUPAft/tMrhRBCCCGEEEKIv+qrynX8o+fnK8/nyeZqTla4Gv/R87kQQgghhBBCCCGuvRe6dmv7ZLt2LTvK5l/YVPyf0YZsZPOnba71TyYhhBBCCCHEn+3qTf+17kQIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhMi8/n/8ObFrfY5CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHEtfa/AgAA//9OvTcs") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/82, 0x52) 52.386869555s ago: executing program 5 (id=250): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@utf8no}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@nfs_nostale_ro}, {}, {@utf8no}, {@fat=@nfs}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@discard}, {@shortname_mixed}, {@fat=@quiet}, {@shortname_lower}]}, 0x0, 0x29f, &(0x7f0000000580)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) fcntl$getownex(r0, 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/mcfilter6\x00') accept4$packet(r2, 0x0, &(0x7f00000003c0), 0x80000) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 51.895871024s ago: executing program 5 (id=256): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000090583"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000000)={0x1, 0x5, 0x10001, 0x5, 0x0, 0x7fffffff}) 51.222853808s ago: executing program 5 (id=262): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0xd0bc, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}}}, 0x3a) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000080)=0xffffffff) 51.036984542s ago: executing program 34 (id=262): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0xd0bc, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}}}, 0x3a) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000080)=0xffffffff) 36.395869771s ago: executing program 1 (id=340): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB="fdba1224ef2a829525ded658d91855d08ec1d28da36c968f6d0f2f83ae4e045a6319d24bbf7ada106db0b0938558e4a6691bb4838a24ccb0e61181f3b626bcc5eb70c809668cfea38c07734eff416b20a20406441c4052dfc1aa2a9f7fee484630fe04d88c45a099a5d6eb81984d2f904dc0263828dd215ace537edea0c5b7b132dd7fc4c9a44041fe0ea4fe8656f695785fa5e7f39f3eb05a4df9d9a3e8e28f4b627a646be7add16f256534d4a4a058d306da7b96b293341b4a2743ca62445ea4825726fe01db2632", @ANYRES16=0x0, @ANYRESOCT], 0x4, 0x2d0, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000bc0)={0x2020}, 0x2020) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000200)={@desc={0x1, 0x0, @desc3}}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_io_uring_setup(0x6ade, &(0x7f0000001fc0)={0x0, 0x494c, 0x1000, 0x1, 0x303}, &(0x7f0000002040), &(0x7f0000002080)) 35.95007948s ago: executing program 1 (id=342): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x1600008, &(0x7f0000000840)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303030332c6e6f6465636f6d706f73652c706172743d3078303030303030303030303030303030372c6e6f6465636f6d706f73652c6e6f626172726965722c6e6c733d69736f383835392d312c747970653d25f205c12c00fda5eb202594d6f03492c5dcec5e93ca946d5a3d8bbeec226c4181fafb5335bb19b76d77eb7bc1c165aa4c68f1d1b50606d7b18ed3ee238f9a213a127ba2ee94bf17debc420923f0416b4030338c3765578df725ee58a6bd52d54b6d53b0"], 0x3, 0x659, &(0x7f0000000a80)="$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") 35.393866041s ago: executing program 1 (id=347): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 34.579886016s ago: executing program 1 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0xfaca}}, {@nolazytime}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x478, &(0x7f0000000940)="$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") open(0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) 33.648905535s ago: executing program 1 (id=367): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) syz_read_part_table(0x5ee, &(0x7f0000000600)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") getpid() bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x0, @empty, 0x400000}, 0x1c) listen(r1, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000040)='K', 0x1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x2}, 0x1c) 25.190107482s ago: executing program 1 (id=400): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$unix(r2, 0x0, 0x20004011) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6a) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r3, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 24.81563961s ago: executing program 35 (id=400): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$unix(r2, 0x0, 0x20004011) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6a) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r3, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 6.124445399s ago: executing program 3 (id=470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) syz_read_part_table(0x5ee, &(0x7f0000000600)="$eJzs2zFI3FcYAPDvLjnP6pBFOmRKOmQoWQoZc9Ak9S4JCcglLqFDApEQctMVAhd6NJAMyQ22uUEcXUS4xerk9WZFobOIg0UQ6tJSF8HFK9f7X0/aUrDVQfj9lu/93/u+9/0fvPUFZ1o6fm2326mIaGcjBo9R+XlEjDdG83cujd0oPoxIdTaL736eGOmsppKszq6R7VdtJePZmaHW+73bmcbmg/0rj5dr6d7vRMTriBiea473qwb+9zk5HfO5lQtv3pYLk5Xc841CdefdeuZ+DI4Wm/dq9YW7mVtPk7zVJJ6PiL1216t4EU+iFKWYiPIJ9Z9ubH92eLHQWHp2/SDf+vbPCz32T8XHue7/3r/9TdL/5eUPj+rVm1cXR6auVX5YK+6e6+aVsm4xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBZMJ9bufDmbbkwWcllI2Ln3fqP97//bbTYvFerL9zN3Hqa5K0m8Xw3DH8VlXgVL+JJlKIUE1HubZiOzB8x9fdeg/3hR73BF8nCZCX3fKNQ3ZlubKcOLxYaS8+uH+RbzaFe3kC/94nqnX8g+X55+cOjevXm1cWRqWuRWivunuvOl7Kn0BwAAAAAAAAAAAAAAAAAAAASH+fvXBq7UXwYkYovI+LTX75Od+bbf3nv/kkSt5L52Zmh1vu925nG5oP9K4+Xaz8deZz/OiKG55rjR8rTp34Q/pPfAwAA//9BMI1D") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getpid() bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x0, @empty, 0x400000}, 0x1c) listen(r1, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000040)='K', 0x1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x2}, 0x1c) 4.991693072s ago: executing program 6 (id=473): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4002, &(0x7f0000000100), 0x1, 0x7a8, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x8d) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x800, 0x8, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x82) writev(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000300)={0x3, 0x8, 0x5, 0x3, 0x0, 0x9}) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0xe1ddd799e62eee4e) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000", @ANYRES32, @ANYBLOB="000000000000000000000000000094df00000000", @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0xc, r4, 0x1, 0xa, 0xeffffffffffffffd, 0xffffffffffffffff}) 4.990737732s ago: executing program 3 (id=482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) syz_read_part_table(0x5ee, &(0x7f0000000600)="$eJzs2zFI3FcYAPDvLjnP6pBFOmRKOmQoWQoZc9Ak9S4JCcglLqFDApEQctMVAhd6NJAMyQ22uUEcXUS4xerk9WZFobOIg0UQ6tJSF8HFK9f7X0/aUrDVQfj9lu/93/u+9/0fvPUFZ1o6fm2326mIaGcjBo9R+XlEjDdG83cujd0oPoxIdTaL736eGOmsppKszq6R7VdtJePZmaHW+73bmcbmg/0rj5dr6d7vRMTriBiea473qwb+9zk5HfO5lQtv3pYLk5Xc841CdefdeuZ+DI4Wm/dq9YW7mVtPk7zVJJ6PiL1216t4EU+iFKWYiPIJ9Z9ubH92eLHQWHp2/SDf+vbPCz32T8XHue7/3r/9TdL/5eUPj+rVm1cXR6auVX5YK+6e6+aVsm4xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBZMJ9bufDmbbkwWcllI2Ln3fqP97//bbTYvFerL9zN3Hqa5K0m8Xw3DH8VlXgVL+JJlKIUE1HubZiOzB8x9fdeg/3hR73BF8nCZCX3fKNQ3ZlubKcOLxYaS8+uH+RbzaFe3kC/94nqnX8g+X55+cOjevXm1cWRqWuRWivunuvOl7Kn0BwAAAAAAAAAAAAAAAAAAAASH+fvXBq7UXwYkYovI+LTX75Od+bbf3nv/kkSt5L52Zmh1vu925nG5oP9K4+Xaz8deZz/OiKG55rjR8rTp34Q/pPfAwAA//9BMI1D") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getpid() bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x0, @empty, 0x400000}, 0x1c) listen(r1, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000040)='K', 0x1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x2}, 0x1c) 4.501347581s ago: executing program 8 (id=401): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140), 0x0}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x80000003}) 4.485164131s ago: executing program 3 (id=475): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) close(r3) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x9}, 0x1c) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xcbf, 0x10efe}, 0x14) splice(r1, 0x0, r4, 0x0, 0x5947, 0xc) close(r3) 4.189984818s ago: executing program 3 (id=476): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001400)=0xffff) getdents(r0, &(0x7f0000000100)=""/184, 0x114) 4.017202371s ago: executing program 6 (id=479): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x62802, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8844) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 3.904229273s ago: executing program 8 (id=481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000340)=""/181, &(0x7f0000000280)=0xb5) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x3}, 0x1c) r1 = syz_io_uring_setup(0x3715, &(0x7f0000000000)={0x0, 0x95c8, 0x10, 0x3, 0x2ab}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f00008a2000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) syz_open_dev$vcsu(&(0x7f0000000240), 0x800, 0x40100) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0x20f011f, 0x0, 0x0, 0x0, 0x0, 0x0) 3.639724238s ago: executing program 3 (id=484): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 2.407362152s ago: executing program 6 (id=492): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007912200000000000950000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.303401224s ago: executing program 0 (id=493): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4002, &(0x7f0000000100), 0x1, 0x7a8, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x8d) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x800, 0x8, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 2.246032246s ago: executing program 6 (id=494): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140), 0x0}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x80000003}) 2.0425948s ago: executing program 0 (id=497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r1, &(0x7f00000082c0)={0x2020}, 0x2020) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) read$FUSE(r1, &(0x7f0000012400)={0x2020}, 0x2020) 1.858208574s ago: executing program 0 (id=499): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2000003, &(0x7f0000000540)=ANY=[@ANYBLOB="6e6f6465636f6d706f7365008000000000000042000fc32c6e6f636172726965722c6e6f6465636e6d706f736500a580263e005a80c976898113cb9f4680642ce86dd3b5d3ba4a739e6654e4a1277ef2dd52ea98c5ea630da0c29cd73f8b9f4fd077e97f3ec1acc1ac91b93eec369217142e5897"], 0x1, 0x5f8, &(0x7f0000000680)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.703561066s ago: executing program 7 (id=500): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") unlink(0x0) ptrace$getregset(0x4204, 0x0, 0x4, &(0x7f0000000080)={0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) syz_emit_vhci(0x0, 0x200) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="04060306c9004753241bffa2a3c88c1fbc0340"], 0x6) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.644985437s ago: executing program 6 (id=501): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = io_uring_setup(0x50b4, &(0x7f0000002240)={0x0, 0x9f12, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) 1.01409203s ago: executing program 7 (id=502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 705.252916ms ago: executing program 7 (id=503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 548.053889ms ago: executing program 7 (id=504): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000791220000000000095000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 362.185243ms ago: executing program 8 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @private=0xa010102}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x5, 0x400000, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x200000000005, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x99e, 0x0, 0x2000002, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 361.890963ms ago: executing program 7 (id=506): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000008000000b705000008000000850000005d00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x1002, &(0x7f0000002500)=""/4106, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x4a) 318.121384ms ago: executing program 7 (id=507): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4002, &(0x7f0000000100), 0x1, 0x7a8, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x8d) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x800, 0x8, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 214.885066ms ago: executing program 0 (id=508): r0 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) getdents(r0, &(0x7f0000000100)=""/184, 0x114) 118.171978ms ago: executing program 6 (id=509): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xff}, 0xe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) 92.288878ms ago: executing program 0 (id=510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7eaa00000000000071103c000000000095000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 4.74418ms ago: executing program 0 (id=511): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tcp_probe\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 0s ago: executing program 3 (id=512): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$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") r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f0000000280)="28cf88f46a4785e6c1b4884c52c230608e24663da053170ab6a2c17ee5d45b5dd67b9cd59bb8754680a18f3a1645ec8da19f4a41c6a8094f3852dbcb0348c26df4bf893ec3f5ee1521fb6c8b8efb2e3885cb6addd17de7bc98b995d26d77e2437c391a4e8acf9877ecccbcd3583d530986def1128c41fe2954c683160eb264412da8cc7f3097b509df08015c242be0d2869f351a711ea57d47339b0cdd1a973fad80343930b9a48e3640b5cd50a8a6d989144e1086bc55b318d580de9641754ef77eba0a1399dc7d0f886dcbfbcf7948bfd876b2bb8ba09ee470216a08e355ec6ef6fad8272acce7b06980f02f2e18", 0xef, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') kernel console output (not intermixed with test programs): T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.610174][ T4183] device veth0_macvtap entered promiscuous mode [ 56.639106][ T4183] device veth1_macvtap entered promiscuous mode [ 56.674713][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.693765][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.708724][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.730119][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.740868][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.761136][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.782010][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.803824][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.820301][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.838972][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.857619][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.869421][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.888751][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.901588][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.922253][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.938725][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.949613][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.968334][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.977974][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 56.985520][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 56.992089][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 56.998711][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 57.006569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.017691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.026695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.035492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.044319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.054655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.064765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.074126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.102382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.285402][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.313290][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.351292][ T4191] device veth0_macvtap entered promiscuous mode [ 57.383778][ T3067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.394691][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.426565][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.426888][ T4191] device veth1_macvtap entered promiscuous mode [ 57.441611][ T3067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.446371][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.451210][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.486974][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.500546][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.501598][ T4297] loop2: detected capacity change from 0 to 4096 [ 57.516571][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.524039][ T4297] ntfs3: Unknown parameter 'windows_names' [ 57.528498][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.538696][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.578580][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.591588][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.618870][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.626770][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.638795][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.655123][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.672731][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.689878][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.700863][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.724097][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.743764][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.819961][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.878093][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.896104][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.909010][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.926095][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.940233][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.955240][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.979041][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.991052][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.016379][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.027809][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.038052][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.053172][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.070170][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.090683][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.103776][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.114364][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.128402][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.204545][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.235155][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 58.244309][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 58.274649][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 58.284083][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #310!!! [ 58.293522][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #312!!! [ 58.303937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #312!!! [ 58.319393][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 58.328725][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #210!!! [ 58.338729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 58.348276][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 58.378637][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.010265][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.034520][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.043232][ T2338] Bluetooth: hci3: command 0x0419 tx timeout [ 59.049507][ T2338] Bluetooth: hci0: command 0x0419 tx timeout [ 59.055782][ T2338] Bluetooth: hci4: command 0x0419 tx timeout [ 59.062076][ T2338] Bluetooth: hci2: command 0x0419 tx timeout [ 59.069132][ T2338] Bluetooth: hci1: command 0x0419 tx timeout [ 59.074288][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.122804][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.274371][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.310452][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.331565][ T4315] loop1: detected capacity change from 0 to 256 [ 59.344295][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.375864][ T3067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.386912][ T3067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.419522][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.225521][ T4308] loop2: detected capacity change from 0 to 32768 [ 61.508762][ T4308] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.700222][ T4350] loop1: detected capacity change from 0 to 40427 [ 62.759479][ T4354] mkiss: ax0: crc mode is auto. [ 62.816992][ T4350] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 62.825735][ T4350] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 62.848533][ T4350] F2FS-fs (loop1): invalid crc value [ 63.182428][ T4350] F2FS-fs (loop1): Found nat_bits in checkpoint [ 63.309634][ T4350] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 63.317151][ T4350] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 63.866142][ T4374] attempt to access beyond end of device [ 63.866142][ T4374] loop1: rw=2049, want=77848, limit=40427 [ 63.955027][ T4371] loop0: detected capacity change from 0 to 2048 [ 64.013137][ T4371] ======================================================= [ 64.013137][ T4371] WARNING: The mand mount option has been deprecated and [ 64.013137][ T4371] and is ignored by this kernel. Remove the mand [ 64.013137][ T4371] option from the mount to silence this warning. [ 64.013137][ T4371] ======================================================= [ 64.088403][ T4371] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576 [ 64.141569][ T4371] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.934451][ T4321] attempt to access beyond end of device [ 64.934451][ T4321] loop1: rw=1, want=80040, limit=40427 [ 65.018652][ T4321] attempt to access beyond end of device [ 65.018652][ T4321] loop1: rw=1, want=81920, limit=40427 [ 65.038359][ T4321] attempt to access beyond end of device [ 65.038359][ T4321] loop1: rw=1, want=50304, limit=40427 [ 65.247877][ T4366] loop3: detected capacity change from 0 to 32768 [ 65.309920][ T4366] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.19 (4366) [ 65.431118][ T4366] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 65.441211][ T4366] BTRFS info (device loop3): using free space tree [ 65.460176][ T4366] BTRFS info (device loop3): has skinny extents [ 65.471842][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.721636][ T4366] BTRFS info (device loop3): enabling ssd optimizations [ 65.963628][ T4417] loop2: detected capacity change from 0 to 32768 [ 65.973731][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.000414][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.042611][ T23] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 66.077744][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.096902][ T4366] BTRFS warning (device loop3): failed to trim 1 device(s), last error -512 [ 66.101409][ T23] usb 1-1: config 0 descriptor?? [ 66.200608][ T4417] XFS (loop2): Mounting V5 Filesystem [ 66.317562][ T4417] XFS (loop2): Ending clean mount [ 66.331232][ T4417] XFS (loop2): Quotacheck needed: Please wait. [ 66.431867][ T4417] XFS (loop2): Quotacheck: Done. [ 66.941850][ T23] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 67.304178][ T23] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 67.422324][ T23] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 67.514589][ T4184] XFS (loop2): Unmounting Filesystem [ 67.874957][ T4392] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 67.902077][ T23] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 67.907131][ T4432] loop1: detected capacity change from 0 to 32768 [ 67.953748][ T23] usb 1-1: USB disconnect, device number 2 [ 67.978186][ T4432] [ 67.978186][ T4432] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 67.978186][ T4432] [ 68.217371][ T4432] ERROR: (device loop1): diWrite: ixpxd invalid [ 68.217371][ T4432] [ 68.230046][ T4442] fido_id[4442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 68.251257][ T4432] ERROR: (device loop1): txCommit: [ 68.251257][ T4432] [ 68.409653][ T4183] [ 68.409653][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.409653][ T4183] [ 68.492885][ T4183] [ 68.492885][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 68.492885][ T4183] [ 68.556304][ T4446] loop4: detected capacity change from 0 to 22 [ 68.602637][ T4446] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 68.748774][ T4446] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 68.814968][ T4453] loop1: detected capacity change from 0 to 128 [ 68.887183][ T4455] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 70.311700][ C0] sched: RT throttling activated [ 70.781522][ T4448] ODEBUG: Out of memory. ODEBUG disabled [ 70.934280][ T4448] syz.3.32 (4448): drop_caches: 2 [ 70.964210][ T4453] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 70.999681][ T4453] hpfs: filesystem error: improperly stopped [ 71.016319][ T4453] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 71.024978][ T4453] hpfs: You really don't want any checks? You are crazy... [ 71.034136][ T4453] hpfs: hpfs_map_sector(): read error [ 71.039669][ T4453] hpfs: code page support is disabled [ 71.059206][ T4453] hpfs: hpfs_map_4sectors(): unaligned read [ 71.077291][ T4453] hpfs: hpfs_map_4sectors(): unaligned read [ 71.116242][ T4453] hpfs: filesystem error: unable to find root dir [ 71.130434][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.137252][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.566937][ T4364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.785785][ T4364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.878654][ T4364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.996278][ T4364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.923547][ T4514] loop1: detected capacity change from 0 to 8 [ 74.133145][ T4514] SQUASHFS error: Failed to read block 0xc4: -5 [ 74.147007][ T4514] SQUASHFS error: Failed to read block 0xc4: -5 [ 74.157242][ T26] audit: type=1800 audit(1757302752.251:2): pid=4514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.54" name="file0" dev="overlay" ino=3 res=0 errno=0 [ 74.312161][ T4438] Bluetooth: hci1: command 0x0409 tx timeout [ 74.418921][ T4519] loop3: detected capacity change from 0 to 32768 [ 74.760118][ T4485] chnl_net:caif_netlink_parms(): no params data found [ 74.761567][ T4519] JBD2: Ignoring recovery information on journal [ 75.940761][ T4519] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 76.152376][ T4485] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.219401][ T4485] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.228113][ T4485] device bridge_slave_0 entered promiscuous mode [ 76.240074][ T7] cfg80211: failed to load regulatory.db [ 76.276553][ T4485] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.298295][ T4557] overlayfs: failed to clone upperpath [ 76.300078][ T4485] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.332578][ T4485] device bridge_slave_1 entered promiscuous mode [ 76.529016][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 76.609600][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 77.990964][ T4579] loop3: detected capacity change from 0 to 40427 [ 78.049507][ T4485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.088050][ T4579] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 78.095941][ T4579] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 78.106531][ T4579] F2FS-fs (loop3): invalid crc value [ 78.152203][ T4485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.181171][ T4579] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.229919][ T4579] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 78.237812][ T4579] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 78.284650][ T4579] attempt to access beyond end of device [ 78.284650][ T4579] loop3: rw=2049, want=40968, limit=40427 [ 78.430245][ T4587] device syzkaller0 entered promiscuous mode [ 78.440556][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 78.631911][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 78.656111][ T4485] team0: Port device team_slave_0 added [ 78.709662][ T4485] team0: Port device team_slave_1 added [ 78.884339][ T4485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.919146][ T4485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.996634][ T4485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.115170][ T4364] device hsr_slave_0 left promiscuous mode [ 79.132837][ T4364] device hsr_slave_1 left promiscuous mode [ 79.153841][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.161595][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.202326][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.209919][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.316495][ T4364] device bridge_slave_1 left promiscuous mode [ 79.331491][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.396998][ T4364] device bridge_slave_0 left promiscuous mode [ 79.428466][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.500562][ T4364] device veth1_macvtap left promiscuous mode [ 79.732020][ T4364] device veth0_macvtap left promiscuous mode [ 79.889875][ T4364] device veth1_vlan left promiscuous mode [ 79.896425][ T4364] device veth0_vlan left promiscuous mode [ 80.714751][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 80.871127][ T4364] team0 (unregistering): Port device team_slave_1 removed [ 80.915207][ T4364] team0 (unregistering): Port device team_slave_0 removed [ 80.948568][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.966323][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.167836][ T4364] bond0 (unregistering): Released all slaves [ 81.292515][ T4485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.302198][ T4485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.337252][ T4485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.430914][ T4485] device hsr_slave_0 entered promiscuous mode [ 81.456464][ T4485] device hsr_slave_1 entered promiscuous mode [ 82.615449][ T4485] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 82.746961][ T4485] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.775181][ T4485] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.841300][ T4485] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.107224][ T4693] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 83.154093][ T4693] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 83.380634][ T4485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.398178][ T4485] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.552109][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.576343][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.655514][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.727995][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.799373][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.806633][ T3067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.814988][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.830215][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.848296][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.855928][ T3067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.774037][ T4485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.838159][ T4485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.911826][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.920464][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.002490][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.042353][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.066062][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.103621][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.142668][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.173319][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.214609][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.247115][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.293449][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.343419][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.370327][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.879227][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.892206][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.900143][ T4766] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.011435][ T4485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.090633][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 89.348507][ T4815] loop3: detected capacity change from 0 to 2048 [ 89.409261][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.439741][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.484485][ T4815] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.629625][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.671412][ T4827] Zero length message leads to an empty skb [ 89.872054][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.898046][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.245930][ T4485] device veth0_vlan entered promiscuous mode [ 90.252208][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 90.522201][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.546181][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.621888][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 90.762654][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 91.383179][ T4485] device veth1_vlan entered promiscuous mode [ 91.410311][ T4836] loop1: detected capacity change from 0 to 256 [ 91.440708][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.501238][ T4485] device veth0_macvtap entered promiscuous mode [ 91.544713][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.566255][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.625249][ T4485] device veth1_macvtap entered promiscuous mode [ 91.665757][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.702145][ T7] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 91.734510][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.750334][ T7] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 91.774842][ T7] usb 4-1: Product: syz [ 91.779240][ T7] usb 4-1: Manufacturer: syz [ 91.791743][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.804762][ T7] usb 4-1: SerialNumber: syz [ 91.810403][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.865489][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.899409][ T7] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5 [ 91.914343][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.935559][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.018067][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.052850][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.118886][ T4485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.158601][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.312926][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.323410][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.339484][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.365486][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.406546][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.433095][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.453855][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.479850][ T4485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.485721][ T4233] usb 4-1: USB disconnect, device number 2 [ 92.495220][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.503453][ C0] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 92.525855][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.575106][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.578975][ T4233] appletouch 4-1:1.0: input: appletouch disconnected [ 92.602595][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.623256][ T4485] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.667405][ T4485] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.690203][ T4485] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.728480][ T4485] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.743626][ T4865] loop1: detected capacity change from 0 to 2048 [ 93.063751][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.102668][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.283888][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.317702][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.338353][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.376299][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.714428][ T4883] loop3: detected capacity change from 0 to 8192 [ 93.794025][ T4883] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.961896][ T4233] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.211871][ T4233] usb 2-1: Using ep0 maxpacket: 32 [ 94.332029][ T4233] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 94.354992][ T4233] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 94.381806][ T4233] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.420702][ T4910] loop5: detected capacity change from 0 to 2048 [ 94.461898][ T4438] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.572048][ T4233] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 94.591939][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 94.592758][ T4910] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,journal_dev=0x0000000000000002,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 94.600330][ T4233] usb 2-1: Product: syz [ 94.600352][ T4233] usb 2-1: Manufacturer: syz [ 94.600366][ T4233] usb 2-1: SerialNumber: syz [ 94.665065][ T4233] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 94.705118][ T4438] usb 4-1: Using ep0 maxpacket: 16 [ 94.709118][ T4921] 9pnet: Insufficient options for proto=fd [ 94.832300][ T4438] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 94.880953][ T4910] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.153: bg 0: block 234: padding at end of block bitmap is not set [ 94.885765][ T4438] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.945570][ T4910] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 94.965915][ T4895] chnl_net:caif_netlink_parms(): no params data found [ 94.969882][ T2338] usb 2-1: USB disconnect, device number 2 [ 94.973041][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 94.997222][ T26] audit: type=1326 audit(1757302773.091:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 94.999703][ T4910] EXT4-fs (loop5): This should not happen!! Data will be lost [ 94.999703][ T4910] [ 95.035499][ T4910] EXT4-fs (loop5): Total free blocks count 0 [ 95.043222][ T26] audit: type=1326 audit(1757302773.131:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 95.065734][ T4910] EXT4-fs (loop5): Free/Dirty block details [ 95.072479][ T4910] EXT4-fs (loop5): free_blocks=0 [ 95.074691][ T26] audit: type=1326 audit(1757302773.131:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 95.088762][ T4910] EXT4-fs (loop5): dirty_blocks=16 [ 95.106414][ T26] audit: type=1326 audit(1757302773.131:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 95.118880][ T4910] EXT4-fs (loop5): Block reservation details [ 95.130026][ T26] audit: type=1326 audit(1757302773.131:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 95.137078][ T4910] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 95.167109][ T26] audit: type=1326 audit(1757302773.131:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 95.243243][ T26] audit: type=1326 audit(1757302773.131:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 95.306587][ T26] audit: type=1326 audit(1757302773.131:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 95.389363][ T26] audit: type=1326 audit(1757302773.131:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 95.475597][ T26] audit: type=1326 audit(1757302773.131:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4928 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 95.581241][ T4438] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.617977][ T4438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.626733][ T4438] usb 4-1: Product: syz [ 95.631008][ T4438] usb 4-1: Manufacturer: syz [ 95.635716][ T4438] usb 4-1: SerialNumber: syz [ 95.654083][ T2338] appletouch 2-1:1.0: input: appletouch disconnected [ 95.799564][ T4947] loop5: detected capacity change from 0 to 512 [ 95.864569][ T4947] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 95.890162][ T4947] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.159: casefold flag without casefold feature [ 95.910926][ T4947] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.159: couldn't read orphan inode 15 (err -117) [ 95.924101][ T4947] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 95.938152][ T4895] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.962945][ T4438] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 95.970597][ T4895] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.993582][ T4895] device bridge_slave_0 entered promiscuous mode [ 96.009622][ T4895] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.017059][ T4895] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.025549][ T4895] device bridge_slave_1 entered promiscuous mode [ 96.077069][ T4438] usb 4-1: USB disconnect, device number 3 [ 96.152623][ T4241] Bluetooth: hci5: command 0x0409 tx timeout [ 96.162151][ T4429] udevd[4429]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.249001][ T4895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.297385][ T4895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.442175][ T4895] team0: Port device team_slave_0 added [ 96.475520][ T4895] team0: Port device team_slave_1 added [ 96.560652][ T4971] loop3: detected capacity change from 0 to 256 [ 96.625589][ T4895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.640818][ T4971] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.709617][ T4895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.736857][ T4971] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 96.789177][ T4971] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 96.795662][ T4895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.893542][ T4895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.907357][ T4895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.960841][ T4895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.310669][ T4895] device hsr_slave_0 entered promiscuous mode [ 97.442217][ T4895] device hsr_slave_1 entered promiscuous mode [ 97.477303][ T4895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.492377][ T4895] Cannot create hsr debugfs directory [ 98.025367][ T5009] loop3: detected capacity change from 0 to 512 [ 98.069838][ T4895] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 98.129128][ T4895] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 98.183446][ T4895] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 98.231789][ T2338] Bluetooth: hci5: command 0x041b tx timeout [ 98.262543][ T4895] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 99.108084][ T4895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.425156][ T4895] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.610930][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.633590][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.662425][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.732538][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.750520][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.757670][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.813740][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.849594][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.882429][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.889569][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.929210][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.958638][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.979132][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.002422][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.030188][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.049532][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.079636][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.102703][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.309525][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.318250][ T23] Bluetooth: hci5: command 0x040f tx timeout [ 100.336866][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.732827][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.986373][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.204251][ T5055] loop1: detected capacity change from 0 to 8 [ 101.322792][ T5055] SQUASHFS error: Unable to read inode 0x11f [ 101.653732][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.683409][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.700338][ T4895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.909402][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.138171][ T5086] loop5: detected capacity change from 0 to 8 [ 102.342174][ T13] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 102.351313][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.404011][ T13] usb 2-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.437856][ T4233] Bluetooth: hci5: command 0x0419 tx timeout [ 102.548573][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.571023][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.622817][ T13] usb 2-1: config 1 interface 0 has no altsetting 0 [ 102.706224][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.770624][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.787705][ T5103] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 102.795396][ T5103] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 102.809818][ T5103] Error parsing options; rc = [-22] [ 103.054276][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.200906][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.361056][ T4895] device veth0_vlan entered promiscuous mode [ 103.423716][ T4895] device veth1_vlan entered promiscuous mode [ 103.451985][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.461349][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.481821][ T13] usb 2-1: Product: syz [ 103.486049][ T13] usb 2-1: Manufacturer: syz [ 103.490816][ T13] usb 2-1: SerialNumber: syz [ 103.566709][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.581774][ T4242] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.602716][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.651389][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.681218][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.704725][ T4895] device veth0_macvtap entered promiscuous mode [ 103.738462][ T4895] device veth1_macvtap entered promiscuous mode [ 103.800912][ T4895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.834995][ T4895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.845559][ T4242] usb 4-1: Using ep0 maxpacket: 16 [ 103.854603][ T4895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.870301][ T4895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.885894][ T13] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 103.902461][ T13] usb 2-1: USB disconnect, device number 3 [ 103.924591][ T4895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.935880][ T4895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.938219][ T5121] loop5: detected capacity change from 0 to 2048 [ 103.946302][ T4895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.965537][ T4895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.977176][ T4895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.989151][ T4895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.001235][ T4895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.003231][ T4242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 104.012015][ T4895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.034704][ T5121] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.044949][ T4895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.057262][ T4242] usb 4-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 104.058536][ T4895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.083721][ T4242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.109185][ T4242] usb 4-1: config 0 descriptor?? [ 104.115816][ T4895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.126831][ T4895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.138432][ T4895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.150876][ T4895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.168455][ T4895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.179161][ T4895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.190860][ T4895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.203478][ T4895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.300440][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.319088][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.329545][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.942651][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.974399][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.984429][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.007564][ T4895] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.024330][ T5131] loop3: detected capacity change from 0 to 1024 [ 105.051366][ T4895] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.070892][ T4895] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.103868][ T4895] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.195811][ T4364] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.361504][ T5131] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,dioread_lock,barrier=0x0000000000000000,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,errors=continue,. Quota mode: none. [ 105.419646][ T4364] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.739157][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.960271][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.999223][ T4242] wacom 0003:056A:00B2.0002: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 107.018662][ T4242] wacom 0003:056A:00B2.0002: hidraw0: USB HID v0.06 Device [HID 056a:00b2] on usb-dummy_hcd.3-1/input0 [ 107.034818][ T4364] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.037024][ T4242] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B2.0002/input/input7 [ 107.111989][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.172103][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.216707][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.229773][ T4364] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.272350][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.409391][ T5166] capability: warning: `syz.6.146' uses deprecated v2 capabilities in a way that may be insecure [ 107.464941][ T4233] usb 4-1: USB disconnect, device number 4 [ 107.761988][ T1110] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 107.771526][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 107.771540][ T26] audit: type=1326 audit(1757302785.861:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e08cbe9 code=0x7ffc0000 [ 107.921905][ T26] audit: type=1326 audit(1757302785.921:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf8e08cbe9 code=0x7ffc0000 [ 108.016517][ T26] audit: type=1326 audit(1757302785.921:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e08cbe9 code=0x7ffc0000 [ 108.050612][ T1110] usb 6-1: Using ep0 maxpacket: 8 [ 108.101379][ T26] audit: type=1326 audit(1757302785.921:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e08cbe9 code=0x7ffc0000 [ 108.149331][ T26] audit: type=1326 audit(1757302785.921:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf8e08cbe9 code=0x7ffc0000 [ 108.197658][ T26] audit: type=1326 audit(1757302785.921:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e08cbe9 code=0x7ffc0000 [ 108.214387][ T5191] loop3: detected capacity change from 0 to 1024 [ 108.251752][ T1110] usb 6-1: config 0 has no interfaces? [ 108.285073][ T26] audit: type=1326 audit(1757302785.921:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf8e08cbe9 code=0x7ffc0000 [ 108.330123][ T5195] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.343761][ T26] audit: type=1326 audit(1757302785.921:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e08cbe9 code=0x7ffc0000 [ 108.391555][ T26] audit: type=1326 audit(1757302785.921:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf8e08cbe9 code=0x7ffc0000 [ 108.475118][ T26] audit: type=1326 audit(1757302785.921:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e08cbe9 code=0x7ffc0000 [ 108.522068][ T1110] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 108.584155][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.620471][ T1110] usb 6-1: Product: syz [ 108.630606][ T1110] usb 6-1: Manufacturer: syz [ 108.639920][ T5199] loop6: detected capacity change from 0 to 164 [ 108.661451][ T1110] usb 6-1: SerialNumber: syz [ 108.697405][ T1110] usb 6-1: config 0 descriptor?? [ 108.961389][ T4241] usb 6-1: USB disconnect, device number 2 [ 109.046138][ T5207] loop3: detected capacity change from 0 to 1024 [ 109.304761][ T4364] device hsr_slave_0 left promiscuous mode [ 109.320967][ T4381] hfsplus: b-tree write err: -5, ino 3 [ 109.329376][ T4364] device hsr_slave_1 left promiscuous mode [ 109.374064][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.389687][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.463985][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.471637][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.520864][ T5224] loop3: detected capacity change from 0 to 512 [ 109.569424][ T4364] device bridge_slave_1 left promiscuous mode [ 109.590285][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.648280][ T5230] loop5: detected capacity change from 0 to 512 [ 109.661824][ T5224] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.692224][ T4364] device bridge_slave_0 left promiscuous mode [ 109.696098][ T5230] EXT4-fs (loop5): Ignoring removed nobh option [ 109.732855][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.742163][ T5230] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.751274][ T5224] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 109.826805][ T5230] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 109.839447][ T4364] device veth1_macvtap left promiscuous mode [ 109.854837][ T4364] device veth0_macvtap left promiscuous mode [ 109.876173][ T4364] device veth1_vlan left promiscuous mode [ 109.882555][ T5224] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 109.913329][ T5224] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 109.921617][ T5224] System zones: 0-2 [ 109.942878][ T4364] device veth0_vlan left promiscuous mode [ 109.976981][ T5224] , 18-18, 34-34 [ 110.051562][ T5230] EXT4-fs (loop5): 1 truncate cleaned up [ 110.072115][ T5224] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.227: iget: bad i_size value: 360287970189639680 [ 110.093148][ T5230] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,nobh,errors=remount-ro,max_batch_time=0x0000000000000007,. Quota mode: none. [ 111.367410][ T5224] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.227: couldn't read orphan inode 15 (err -117) [ 111.467248][ T5230] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.230: corrupted in-inode xattr [ 111.511945][ T5224] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.533113][ T5254] mmap: syz.0.236 (5254) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 111.542281][ T5230] EXT4-fs (loop5): Remounting filesystem read-only [ 111.593328][ T5230] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1760: inode #15: comm syz.5.230: unable to update i_inline_off [ 111.671948][ T5230] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 111.762391][ T5228] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.230: corrupted in-inode xattr [ 111.839693][ T5228] EXT4-fs (loop5): Remounting filesystem read-only [ 111.858095][ T5228] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.230: corrupted in-inode xattr [ 111.880831][ T5228] EXT4-fs (loop5): Remounting filesystem read-only [ 111.899533][ T5228] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.230: corrupted in-inode xattr [ 111.992741][ T5228] EXT4-fs (loop5): Remounting filesystem read-only [ 112.004973][ T5228] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.230: corrupted in-inode xattr [ 112.077759][ T5228] EXT4-fs (loop5): Remounting filesystem read-only [ 112.108806][ T5228] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.230: corrupted in-inode xattr [ 112.203599][ T5228] EXT4-fs (loop5): Remounting filesystem read-only [ 112.210673][ T5228] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.230: corrupted in-inode xattr [ 112.224946][ T5228] EXT4-fs (loop5): Remounting filesystem read-only [ 112.231606][ T5228] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.230: corrupted in-inode xattr [ 112.248109][ T5228] EXT4-fs (loop5): Remounting filesystem read-only [ 112.256747][ T5228] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.230: corrupted in-inode xattr [ 112.270873][ T5228] EXT4-fs (loop5): Remounting filesystem read-only [ 112.278043][ T5228] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.230: corrupted in-inode xattr [ 112.305444][ T5228] EXT4-fs (loop5): Remounting filesystem read-only [ 112.421835][ T5170] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 112.547776][ T5274] loop5: detected capacity change from 0 to 256 [ 112.602822][ T4364] team0 (unregistering): Port device team_slave_1 removed [ 112.619843][ T4364] team0 (unregistering): Port device team_slave_0 removed [ 112.637603][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.639656][ T5274] exfat: Deprecated parameter 'utf8' [ 112.654812][ T5274] exfat: Deprecated parameter 'namecase' [ 112.661429][ T5274] exfat: Deprecated parameter 'utf8' [ 112.672086][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.702026][ T5170] usb 7-1: Using ep0 maxpacket: 16 [ 112.723049][ T5274] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 112.738019][ T5281] syz.0.247 uses obsolete (PF_INET,SOCK_PACKET) [ 112.761850][ T1107] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.781599][ T5274] attempt to access beyond end of device [ 112.781599][ T5274] loop5: rw=524288, want=34359738496, limit=256 [ 112.815211][ T5274] attempt to access beyond end of device [ 112.815211][ T5274] loop5: rw=0, want=34359738496, limit=256 [ 112.842210][ T5170] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.864873][ T5170] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 112.875802][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 112.875817][ T26] audit: type=1800 audit(1757302790.971:140): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.242" name="file1" dev="loop5" ino=1048606 res=0 errno=0 [ 112.923199][ T4364] bond0 (unregistering): Released all slaves [ 112.976020][ T26] audit: type=1326 audit(1757302791.071:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5287 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 113.024050][ T26] audit: type=1326 audit(1757302791.091:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5287 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 113.091894][ T5170] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.111868][ T5170] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.119917][ T5170] usb 7-1: Product: syz [ 113.148899][ T5293] loop5: detected capacity change from 0 to 128 [ 113.199903][ T5170] usb 7-1: Manufacturer: syz [ 113.242088][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.247636][ T5170] usb 7-1: SerialNumber: syz [ 113.277356][ T26] audit: type=1326 audit(1757302791.091:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5287 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 113.317174][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.369496][ T1107] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.423407][ T26] audit: type=1326 audit(1757302791.091:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5287 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 113.446879][ T1107] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.460474][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.477767][ T1107] usb 2-1: config 0 descriptor?? [ 113.483806][ T26] audit: type=1326 audit(1757302791.091:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5287 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 113.564477][ T26] audit: type=1326 audit(1757302791.091:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5287 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 113.599474][ T5259] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.674708][ T5316] loop3: detected capacity change from 0 to 2048 [ 113.675217][ T26] audit: type=1326 audit(1757302791.091:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5287 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 113.783154][ T26] audit: type=1326 audit(1757302791.091:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5287 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 113.842058][ T26] audit: type=1326 audit(1757302791.091:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5287 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9202b2be9 code=0x7ffc0000 [ 113.997950][ T1107] plantronics 0003:047F:FFFF.0003: unbalanced collection at end of report description [ 114.012518][ T1107] plantronics 0003:047F:FFFF.0003: parse failed [ 114.016307][ T5316] loop3: detected capacity change from 0 to 128 [ 114.020554][ T1107] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22 [ 114.214428][ T1107] usb 2-1: USB disconnect, device number 4 [ 114.294725][ T5259] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 114.322034][ T5170] cdc_ncm 7-1:1.0: failed to get mac address [ 114.541907][ T5170] cdc_ncm 7-1:1.0: bind() failure [ 114.582809][ T5170] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 114.614404][ T5170] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 114.671894][ T5170] usbtest: probe of 7-1:1.1 failed with error -71 [ 114.707862][ T5170] usb 7-1: USB disconnect, device number 2 [ 114.779892][ T5349] loop3: detected capacity change from 0 to 2048 [ 114.928698][ T5349] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.044822][ T5349] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 115.193052][ T5349] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 115.241926][ T5349] EXT4-fs (loop3): This should not happen!! Data will be lost [ 115.241926][ T5349] [ 115.245259][ T5368] loop1: detected capacity change from 0 to 1024 [ 115.264443][ T5372] loop6: detected capacity change from 0 to 1024 [ 115.274398][ T5349] EXT4-fs (loop3): Total free blocks count 0 [ 115.317273][ T5345] chnl_net:caif_netlink_parms(): no params data found [ 115.386316][ T5349] EXT4-fs (loop3): Free/Dirty block details [ 115.403839][ T5368] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,max_batch_time=0x0000000000008000,,errors=continue. Quota mode: none. [ 115.435629][ T5349] EXT4-fs (loop3): free_blocks=2415919504 [ 115.436931][ T5368] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.441503][ T5349] EXT4-fs (loop3): dirty_blocks=16 [ 115.457527][ T5349] EXT4-fs (loop3): Block reservation details [ 115.463687][ T5349] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 115.492514][ T5369] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 115.558521][ T5368] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 3: comm syz.1.271: lblock 3 mapped to illegal pblock 3 (length 3) [ 115.595609][ T5372] EXT4-fs (loop6): Test dummy encryption mode enabled [ 115.608786][ T5369] EXT4-fs (loop3): This should not happen!! Data will be lost [ 115.608786][ T5369] [ 115.618847][ T5372] EXT4-fs (loop6): Ignoring removed bh option [ 115.625795][ T5368] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 115.638843][ T5372] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 115.646627][ T5372] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.659506][ T5368] EXT4-fs (loop1): This should not happen!! Data will be lost [ 115.659506][ T5368] [ 115.690089][ T5386] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 8: comm syz.1.271: lblock 8 mapped to illegal pblock 8 (length 8) [ 115.730484][ T5372] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,test_dummy_encryption,bh,barrier,dioread_nolock,nodiscard,nomblk_io_submit,nodiscard,,errors=continue. Quota mode: writeback. [ 115.805818][ T5386] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 115.823922][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.840924][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.900813][ T5345] device bridge_slave_0 entered promiscuous mode [ 115.925905][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.982210][ T5386] EXT4-fs (loop1): This should not happen!! Data will be lost [ 115.982210][ T5386] [ 115.993937][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.051619][ T5345] device bridge_slave_1 entered promiscuous mode [ 116.124421][ T5402] loop6: detected capacity change from 0 to 128 [ 116.179907][ T5402] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,discard,,errors=continue. Quota mode: none. [ 116.251891][ T5402] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.284658][ T5345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.383814][ T5345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.451766][ T5150] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.575550][ T5345] team0: Port device team_slave_0 added [ 116.607237][ T5345] team0: Port device team_slave_1 added [ 116.789281][ T4433] Bluetooth: hci1: command 0x0409 tx timeout [ 116.820908][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.828223][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.858159][ T5345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.886215][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.905734][ T5150] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 116.924452][ T5150] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 117.144765][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.277061][ T5150] usb 4-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 117.501080][ T5345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.599690][ T5150] usb 4-1: config 220 has no interface number 2 [ 117.608146][ T5150] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 117.625269][ T5150] usb 4-1: config 220 interface 0 has no altsetting 0 [ 117.632535][ T5150] usb 4-1: config 220 interface 76 has no altsetting 0 [ 117.639716][ T5150] usb 4-1: config 220 interface 1 has no altsetting 0 [ 118.032747][ T5150] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 118.088267][ T5150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.233932][ T5150] usb 4-1: Product: syz [ 118.316177][ T5150] usb 4-1: Manufacturer: syz [ 118.409148][ T5150] usb 4-1: SerialNumber: syz [ 118.834592][ T5445] loop6: detected capacity change from 0 to 512 [ 118.872390][ T1107] Bluetooth: hci1: command 0x041b tx timeout [ 118.895385][ T5345] device hsr_slave_0 entered promiscuous mode [ 118.915266][ T5448] loop1: detected capacity change from 0 to 1024 [ 118.953722][ T5445] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002,. Quota mode: writeback. [ 118.992463][ T5345] device hsr_slave_1 entered promiscuous mode [ 119.009522][ T5345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.020796][ T5345] Cannot create hsr debugfs directory [ 119.061120][ T5445] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.143123][ T5150] usb 4-1: selecting invalid altsetting 0 [ 119.168279][ T5459] loop1: detected capacity change from 0 to 1024 [ 119.178432][ T5150] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 119.206181][ T5150] usb 4-1: No valid video chain found. [ 119.300292][ T5459] EXT4-fs (loop1): Ignoring removed orlov option [ 119.312994][ T5150] usb 4-1: selecting invalid altsetting 0 [ 119.316584][ T5459] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.329102][ T5150] usbtest: probe of 4-1:220.1 failed with error -22 [ 119.374947][ T5150] usb 4-1: USB disconnect, device number 5 [ 119.494150][ T5459] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,orlov,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 119.601322][ T5345] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 119.688045][ T5459] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.712728][ T5345] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 119.780599][ T5345] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 119.782264][ T5459] EXT4-fs (loop1): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 119.838333][ T5345] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 120.276864][ T4233] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.325499][ T4364] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.523366][ T4364] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.626009][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.684895][ T4364] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.757458][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.772420][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.805220][ T5345] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.824736][ T4364] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.830593][ T5516] loop6: detected capacity change from 0 to 1024 [ 120.868491][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.887395][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.011077][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.033359][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.051777][ T4233] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 121.061044][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.073214][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.080323][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.104791][ T5516] hfsplus: xattr searching failed [ 121.122904][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 121.192207][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.220754][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.263685][ T5155] hfsplus: b-tree write err: -5, ino 3 [ 121.302287][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.377878][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.385189][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.545599][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.733252][ T5540] device lo entered promiscuous mode [ 121.785502][ T5540] device lo left promiscuous mode [ 122.306099][ T4233] usb 4-1: config 0 descriptor?? [ 122.317848][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.359113][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.390017][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.463954][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.495950][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.514851][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.538307][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.555290][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.569109][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.583420][ T3067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.629926][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.899893][ T5571] loop6: detected capacity change from 0 to 1024 [ 123.022030][ T4233] usb 4-1: string descriptor 0 read error: -71 [ 123.053761][ T4233] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 123.081853][ T4233] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 123.087578][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.120425][ T4233] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 123.125787][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.137292][ T4233] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 123.165359][ T5345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.185575][ T4233] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 123.243196][ T4233] usb 4-1: USB disconnect, device number 6 [ 123.587202][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 123.587218][ T26] audit: type=1326 audit(1757302801.681:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5597 comm="syz.6.321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ec21abbe9 code=0x0 [ 123.659137][ T5600] loop3: detected capacity change from 0 to 2048 [ 124.311844][ T4433] Bluetooth: hci1: command 0x0419 tx timeout [ 124.681943][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.690851][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.707231][ T5622] loop6: detected capacity change from 0 to 2048 [ 124.789658][ T5629] usb usb8: usbfs: process 5629 (syz.1.329) did not claim interface 6 before use [ 124.804472][ T4364] device hsr_slave_0 left promiscuous mode [ 124.825408][ T4364] device hsr_slave_1 left promiscuous mode [ 124.861027][ T5622] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 124.880886][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.898885][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.913701][ T5638] loop1: detected capacity change from 0 to 512 [ 124.925713][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.933608][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.945205][ T4364] device bridge_slave_1 left promiscuous mode [ 124.956571][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.957691][ T5638] EXT4-fs (loop1): Ignoring removed nobh option [ 124.975314][ T4364] device bridge_slave_0 left promiscuous mode [ 125.007958][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.010240][ T5638] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.044625][ T4364] device veth1_macvtap left promiscuous mode [ 125.061271][ T4364] device veth0_macvtap left promiscuous mode [ 125.071467][ T4364] device veth1_vlan left promiscuous mode [ 125.077554][ T4364] device veth0_vlan left promiscuous mode [ 125.088656][ T5638] EXT4-fs (loop1): 1 truncate cleaned up [ 125.094771][ T5638] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,nobh,errors=remount-ro,max_batch_time=0x0000000000000007,. Quota mode: none. [ 125.136824][ T26] audit: type=1800 audit(1757302803.241:171): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.331" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 125.162328][ T5638] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.331: corrupted in-inode xattr [ 125.260857][ T5638] EXT4-fs (loop1): Remounting filesystem read-only [ 125.288080][ T5638] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1760: inode #15: comm syz.1.331: unable to update i_inline_off [ 125.308682][ T5638] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.331: corrupted in-inode xattr [ 126.547666][ T5638] EXT4-fs (loop1): Remounting filesystem read-only [ 126.877273][ T4364] team0 (unregistering): Port device team_slave_1 removed [ 126.898704][ T4364] team0 (unregistering): Port device team_slave_0 removed [ 126.914271][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.939009][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.024662][ T4364] bond0 (unregistering): Released all slaves [ 127.080615][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.088970][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.166915][ T5345] device veth0_vlan entered promiscuous mode [ 127.237999][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.246465][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.463883][ T5345] device veth1_vlan entered promiscuous mode [ 128.620714][ T5345] device veth0_macvtap entered promiscuous mode [ 128.672843][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.680293][ T5677] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 128.681548][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.719800][ T5677] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 128.724546][ T5345] device veth1_macvtap entered promiscuous mode [ 128.744689][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.754053][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.780490][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.806546][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.837472][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.858723][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.879128][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.900174][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.941044][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.971746][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.984328][ T5689] loop1: detected capacity change from 0 to 128 [ 129.023340][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.031116][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.050727][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.110566][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.144680][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.198425][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.262733][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.301764][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.312577][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.331727][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.352999][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.388394][ T154] attempt to access beyond end of device [ 129.388394][ T154] loop1: rw=1, want=1041, limit=128 [ 129.388731][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.424120][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.443980][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.464975][ T5345] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.485367][ T5345] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.526808][ T5695] binder_alloc: 5694: pid 5694 spamming oneway? 2 buffers allocated for a total size of 5184 [ 129.531548][ T5345] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.562034][ T5345] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.592000][ T5697] loop6: detected capacity change from 0 to 2048 [ 129.708682][ T5700] loop1: detected capacity change from 0 to 1024 [ 129.808741][ T5155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.843994][ T5155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.980764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.016057][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.048440][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.068168][ T5718] loop3: detected capacity change from 0 to 128 [ 130.097236][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.109770][ T5713] loop1: detected capacity change from 0 to 2048 [ 130.204169][ T5713] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.242925][ T5718] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.254358][ T5718] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.551508][ T5733] loop7: detected capacity change from 0 to 512 [ 130.729857][ T5733] EXT4-fs (loop7): Ignoring removed nobh option [ 130.743703][ T5733] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 130.802611][ T5733] EXT4-fs (loop7): 1 truncate cleaned up [ 130.838594][ T5733] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,nobh,errors=remount-ro,max_batch_time=0x0000000000000007,. Quota mode: none. [ 130.978694][ T5748] loop1: detected capacity change from 0 to 512 [ 131.107731][ T5748] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 131.126312][ T5756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.358'. [ 131.141821][ T5748] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 131.257948][ T5748] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 131.312156][ T5748] System zones: 1-12 [ 131.358690][ T5748] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.354: corrupted in-inode xattr [ 131.371311][ T5764] loop6: detected capacity change from 0 to 256 [ 131.379712][ T5748] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.354: couldn't read orphan inode 15 (err -117) [ 131.399505][ T5748] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x000000000000faca,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 131.433325][ T5764] exfat: Deprecated parameter 'utf8' [ 131.443483][ T5764] exfat: Deprecated parameter 'namecase' [ 131.488913][ T5764] exfat: Unknown parameter 'keep_last_dots' [ 131.720095][ T5775] loop3: detected capacity change from 0 to 512 [ 131.867405][ T5775] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,bsdgroups,. Quota mode: writeback. [ 131.989073][ T5775] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.379296][ T5797] loop3: detected capacity change from 0 to 512 [ 132.426627][ T5797] EXT4-fs (loop3): Ignoring removed nobh option [ 132.455639][ T5797] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.523288][ T5797] EXT4-fs (loop3): 1 truncate cleaned up [ 132.538505][ T5797] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,nobh,errors=remount-ro,max_batch_time=0x0000000000000007,. Quota mode: none. [ 132.577052][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.583562][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.357542][ T5826] cgroup: Need name or subsystem set [ 133.387746][ T5826] xt_policy: output policy not valid in PREROUTING and INPUT [ 133.405958][ T1107] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.849839][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 134.992007][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.031958][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.088625][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.179473][ T1107] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.226739][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.283996][ T1107] usb 4-1: config 0 descriptor?? [ 135.376864][ T4183] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /84/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 135.411892][ T4437] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 135.444013][ T4183] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 135.497165][ T4183] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /84/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 135.548088][ T4183] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 135.582749][ T4183] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /84/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 135.628987][ T5843] loop6: detected capacity change from 0 to 1024 [ 135.639070][ T4183] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 135.715110][ T4183] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /84/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 135.764049][ T4183] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 135.799741][ T4183] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path /84/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 135.823796][ T1107] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 135.831520][ T4437] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.843816][ T1107] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 135.851247][ T1107] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 135.859460][ T4437] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.869802][ T4437] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.888943][ T1107] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 135.913777][ T4183] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 135.919956][ T1107] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 135.948905][ T4437] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.963499][ T4437] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.973544][ T1107] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 135.980924][ T1107] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 135.995371][ T1107] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 136.005355][ T1107] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 136.066379][ T1107] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 136.080588][ T1107] HID 045e:07da: Invalid code 65791 type 1 [ 136.090313][ T1107] HID 045e:07da: Invalid code 768 type 1 [ 136.098050][ T1107] HID 045e:07da: Invalid code 769 type 1 [ 136.105725][ T1107] HID 045e:07da: Invalid code 770 type 1 [ 136.113010][ T1107] HID 045e:07da: Invalid code 771 type 1 [ 136.118794][ T1107] HID 045e:07da: Invalid code 772 type 1 [ 136.126699][ T1107] HID 045e:07da: Invalid code 773 type 1 [ 136.133374][ T1107] HID 045e:07da: Invalid code 774 type 1 [ 136.139508][ T1107] HID 045e:07da: Invalid code 775 type 1 [ 136.146854][ T1107] HID 045e:07da: Invalid code 776 type 1 [ 136.188912][ T4437] usb 8-1: config 0 descriptor?? [ 136.408115][ T1107] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input10 [ 136.492716][ T1107] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 136.552021][ T1107] usb 4-1: USB disconnect, device number 7 [ 136.653324][ T5858] fido_id[5858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 136.664189][ T4381] hfsplus: b-tree write err: -5, ino 4 [ 136.725179][ T4437] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 136.789502][ T4437] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 136.971306][ T5828] loop7: detected capacity change from 0 to 256 [ 137.898670][ T4241] usb 8-1: USB disconnect, device number 2 [ 138.303355][ T4197] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 138.314293][ T4197] CPU: 1 PID: 4197 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 138.321873][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.332121][ T4197] Workqueue: hci3 hci_rx_work [ 138.336922][ T4197] Call Trace: [ 138.340304][ T4197] [ 138.343244][ T4197] dump_stack_lvl+0x168/0x230 [ 138.348038][ T4197] ? show_regs_print_info+0x20/0x20 [ 138.353527][ T4197] ? load_image+0x3b0/0x3b0 [ 138.358220][ T4197] sysfs_create_dir_ns+0x252/0x280 [ 138.363364][ T4197] ? __lock_acquire+0x7c60/0x7c60 [ 138.368409][ T4197] ? sysfs_warn_dup+0xa0/0xa0 [ 138.373105][ T4197] ? le_conn_complete_evt+0xcbc/0x1590 [ 138.378597][ T4197] ? hci_event_packet+0xe05/0x12f0 [ 138.383912][ T4197] ? process_one_work+0x863/0x1000 [ 138.389293][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 138.394530][ T4197] kobject_add_internal+0x662/0xd00 [ 138.399853][ T4197] kobject_add+0x152/0x210 [ 138.404480][ T4197] ? kobject_init+0x1d0/0x1d0 [ 138.409193][ T4197] ? klist_children_get+0x50/0x50 [ 138.414413][ T4197] ? get_device_parent+0x121/0x3f0 [ 138.419670][ T4197] device_add+0x483/0xfb0 [ 138.424041][ T4197] hci_conn_add_sysfs+0xd1/0x1e0 [ 138.429201][ T4197] le_conn_complete_evt+0xcbc/0x1590 [ 138.434525][ T4197] ? cs_le_create_conn+0x5e0/0x5e0 [ 138.439662][ T4197] ? __mutex_trylock_common+0x14f/0x250 [ 138.445237][ T4197] hci_le_meta_evt+0x289/0x3b80 [ 138.450230][ T4197] ? hci_event_packet+0x36d/0x12f0 [ 138.455552][ T4197] ? hci_event_packet+0x2e2/0x12f0 [ 138.460686][ T4197] ? __lock_acquire+0x7c60/0x7c60 [ 138.465921][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 138.472105][ T4197] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 138.477886][ T4197] ? mark_lock+0x94/0x320 [ 138.482244][ T4197] ? mutex_unlock+0x10/0x10 [ 138.486782][ T4197] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 138.492800][ T4197] ? lock_chain_count+0x20/0x20 [ 138.497764][ T4197] ? __rwlock_init+0x140/0x140 [ 138.502750][ T4197] hci_event_packet+0xe05/0x12f0 [ 138.507795][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 138.513261][ T4197] ? rcu_lock_release+0x20/0x20 [ 138.518145][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 138.523369][ T4197] hci_rx_work+0x255/0xa10 [ 138.527821][ T4197] process_one_work+0x863/0x1000 [ 138.532809][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 138.538466][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 138.543871][ T4197] ? _raw_spin_lock_irq+0xab/0xe0 [ 138.548935][ T4197] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 138.554434][ T4197] ? wq_worker_running+0x97/0x170 [ 138.559500][ T4197] worker_thread+0xaa8/0x12a0 [ 138.564324][ T4197] kthread+0x436/0x520 [ 138.568509][ T4197] ? rcu_lock_release+0x20/0x20 [ 138.573516][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 138.578222][ T4197] ret_from_fork+0x1f/0x30 [ 138.582780][ T4197] [ 138.598810][ T4197] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 138.722828][ T4197] Bluetooth: hci3: failed to register connection device [ 140.546034][ T5930] loop6: detected capacity change from 0 to 512 [ 140.620084][ T5930] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.646279][ T1107] kernel write not supported for file /ppp (pid: 1107 comm: kworker/1:2) [ 140.703264][ T5930] EXT4-fs (loop6): orphan cleanup on readonly fs [ 140.770424][ T5930] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 140.801764][ T4295] Bluetooth: hci3: command 0x2016 tx timeout [ 140.856752][ T5930] Quota error (device loop6): write_blk: dquota write failed [ 140.902069][ T5930] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 140.952024][ T5930] EXT4-fs error (device loop6): ext4_acquire_dquot:6209: comm syz.6.403: Failed to acquire dquot type 0 [ 141.028110][ T5930] EXT4-fs (loop6): 1 truncate cleaned up [ 141.053557][ T5930] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,noblock_validity,stripe=0x0000000000000005,barrier,nogrpid,sysvgroups,noinit_itable,noinit_itable,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 141.307261][ T5946] loop7: detected capacity change from 0 to 2048 [ 141.421901][ T5949] loop6: detected capacity change from 0 to 2048 [ 141.481257][ T5946] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.500922][ T5949] EXT4-fs (loop6): Ignoring removed bh option [ 141.625447][ T5949] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 141.745868][ T5958] EXT4-fs error (device loop7): ext4_validate_block_bitmap:420: comm syz.7.405: bg 0: bad block bitmap checksum [ 141.803986][ T5949] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.879467][ T5958] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6178: Filesystem failed CRC [ 141.902083][ T5949] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 141.936472][ T5949] EXT4-fs (loop6): This should not happen!! Data will be lost [ 141.936472][ T5949] [ 141.981810][ T5949] EXT4-fs (loop6): Total free blocks count 0 [ 142.038848][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 142.051341][ T5949] EXT4-fs (loop6): Free/Dirty block details [ 142.122229][ T5949] EXT4-fs (loop6): free_blocks=2415919104 [ 142.201877][ T5949] EXT4-fs (loop6): dirty_blocks=16 [ 142.207155][ T5949] EXT4-fs (loop6): Block reservation details [ 142.246257][ T5949] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 142.440718][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.469016][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.500156][ T5943] device bridge_slave_0 entered promiscuous mode [ 142.514106][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.541741][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.550050][ T5943] device bridge_slave_1 entered promiscuous mode [ 142.856088][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.875159][ T5977] loop6: detected capacity change from 0 to 2048 [ 142.899109][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.994111][ T5977] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.234245][ T5943] team0: Port device team_slave_0 added [ 143.271848][ T4233] Bluetooth: hci0: command 0x0409 tx timeout [ 143.275813][ T5977] EXT4-fs error (device loop6): __ext4_get_inode_loc:4321: comm syz.6.411: Invalid inode table block 4 in block_group 0 [ 143.304589][ T5977] EXT4-fs error (device loop6): empty_inline_dir:1837: inode #12: comm syz.6.411: error -117 getting inode 12 block [ 143.313108][ T5943] team0: Port device team_slave_1 added [ 143.395329][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.448230][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.450683][ T5997] loop3: detected capacity change from 0 to 128 [ 143.492209][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.571871][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.579338][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.581811][ T5997] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.691915][ T5997] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.868179][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.971813][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 144.787456][ T5943] device hsr_slave_0 entered promiscuous mode [ 144.807246][ T5943] device hsr_slave_1 entered promiscuous mode [ 144.851497][ T6024] loop3: detected capacity change from 0 to 512 [ 145.482675][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 145.500341][ T6024] EXT4-fs (loop3): Ignoring removed nobh option [ 145.543737][ T6024] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 145.602561][ T4364] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.633797][ T6024] EXT4-fs (loop3): 1 truncate cleaned up [ 145.639581][ T6024] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,nobh,errors=remount-ro,max_batch_time=0x0000000000000007,. Quota mode: none. [ 145.772509][ T4364] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.075693][ T26] audit: type=1326 audit(1757302824.171:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.6.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec21abbe9 code=0x7ffc0000 [ 147.395895][ T4364] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.422102][ T6046] loop3: detected capacity change from 0 to 512 [ 147.436270][ T26] audit: type=1326 audit(1757302824.171:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.6.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec21abbe9 code=0x7ffc0000 [ 147.511828][ T5150] Bluetooth: hci0: command 0x040f tx timeout [ 147.523634][ T26] audit: type=1326 audit(1757302824.191:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.6.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0ec21abbe9 code=0x7ffc0000 [ 147.559183][ T4364] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.572663][ T6046] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.592306][ T26] audit: type=1326 audit(1757302824.191:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.6.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec21abbe9 code=0x7ffc0000 [ 147.671522][ T6046] EXT4-fs (loop3): 1 truncate cleaned up [ 147.679340][ T6046] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.702022][ T26] audit: type=1326 audit(1757302824.191:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.6.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec21abbe9 code=0x7ffc0000 [ 147.724676][ T26] audit: type=1326 audit(1757302824.191:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.6.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0ec21abbe9 code=0x7ffc0000 [ 147.747001][ T26] audit: type=1326 audit(1757302824.191:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.6.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec21abbe9 code=0x7ffc0000 [ 147.769959][ T26] audit: type=1326 audit(1757302824.191:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.6.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec21abbe9 code=0x7ffc0000 [ 147.811753][ T26] audit: type=1326 audit(1757302824.191:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.6.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0ec21abbe9 code=0x7ffc0000 [ 147.852486][ T26] audit: type=1326 audit(1757302824.191:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.6.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec21abbe9 code=0x7ffc0000 [ 148.003194][ T5943] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 148.066423][ T5943] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 148.104464][ T6057] binder: BINDER_SET_CONTEXT_MGR already set [ 148.127817][ T6057] binder: 6056:6057 ioctl 4018620d 200000004a80 returned -16 [ 148.169456][ T6057] binder: 6056:6057 ioctl c018620c 200000000040 returned -1 [ 148.192866][ T5943] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 148.237898][ T5943] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 148.706498][ T6076] loop3: detected capacity change from 0 to 128 [ 148.776229][ T6076] FAT-fs (loop3): Directory bread(block 32) failed [ 148.811788][ T6076] FAT-fs (loop3): Directory bread(block 33) failed [ 148.838499][ T6076] FAT-fs (loop3): Directory bread(block 34) failed [ 148.865769][ T6076] FAT-fs (loop3): Directory bread(block 35) failed [ 148.902573][ T6076] FAT-fs (loop3): Directory bread(block 36) failed [ 148.942049][ T6076] FAT-fs (loop3): Directory bread(block 37) failed [ 148.981933][ T6076] FAT-fs (loop3): Directory bread(block 38) failed [ 148.988524][ T6076] FAT-fs (loop3): Directory bread(block 39) failed [ 149.042122][ T6076] FAT-fs (loop3): Directory bread(block 40) failed [ 149.049079][ T6076] FAT-fs (loop3): Directory bread(block 41) failed [ 149.056292][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.121382][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.166163][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.188236][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.383167][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.393308][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.491367][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.498538][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.530281][ T6092] syz.7.433 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 149.563223][ T6076] attempt to access beyond end of device [ 149.563223][ T6076] loop3: rw=0, want=4112, limit=128 [ 149.568198][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.592219][ T4241] Bluetooth: hci0: command 0x0419 tx timeout [ 149.592723][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.607502][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.614751][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.625737][ T6094] loop7: detected capacity change from 0 to 128 [ 149.634147][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.655491][ T6094] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 149.675640][ T4429] udevd[4429]: incorrect ext4 checksum on /dev/loop7 [ 149.684379][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.695828][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.725505][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.748119][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.775207][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.816093][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.836178][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.891284][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.974812][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.197467][ T6106] loop3: detected capacity change from 0 to 512 [ 150.272861][ T6106] EXT4-fs (loop3): Ignoring removed nobh option [ 150.311461][ T6106] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 150.381368][ T6106] EXT4-fs (loop3): 1 truncate cleaned up [ 150.416627][ T6106] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,nobh,errors=remount-ro,max_batch_time=0x0000000000000007,. Quota mode: none. [ 150.554335][ T5943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.566055][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.592143][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.620408][ T6111] loop7: detected capacity change from 0 to 512 [ 150.632449][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.728878][ T6111] EXT4-fs (loop7): orphan cleanup on readonly fs [ 150.797826][ T6111] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #13: comm syz.7.436: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0) [ 150.816745][ T6111] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.436: couldn't read orphan inode 13 (err -117) [ 150.836212][ T6111] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.852965][ T6119] loop3: detected capacity change from 0 to 8 [ 150.894753][ T4364] device hsr_slave_0 left promiscuous mode [ 150.908768][ T4364] device hsr_slave_1 left promiscuous mode [ 150.932989][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.971105][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.983798][ T6121] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz.7.436: deleted inode referenced: 12 [ 151.064233][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.073173][ T6121] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz.7.436: deleted inode referenced: 12 [ 151.096903][ T6119] SQUASHFS error: Failed to read block 0xc4: -5 [ 151.123798][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.166454][ T6119] SQUASHFS error: Failed to read block 0xc4: -5 [ 151.300350][ T4364] device bridge_slave_1 left promiscuous mode [ 151.331456][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 151.331494][ T26] audit: type=1800 audit(1757302829.421:207): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.437" name="file0" dev="overlay" ino=3 res=0 errno=0 [ 151.454097][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.679470][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.760650][ T4364] device veth1_macvtap left promiscuous mode [ 151.785779][ T4364] device veth0_macvtap left promiscuous mode [ 151.814255][ T4364] device veth1_vlan left promiscuous mode [ 151.820545][ T4364] device veth0_vlan left promiscuous mode [ 151.882108][ T6124] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz.7.436: deleted inode referenced: 12 [ 151.946627][ T6129] loop3: detected capacity change from 0 to 1024 [ 152.036351][ T6129] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 152.061794][ T6129] hfsplus: xattr searching failed [ 152.104508][ T6129] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 152.150944][ T6129] hfsplus: xattr searching failed [ 152.165394][ T6134] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 152.190414][ T6134] hfsplus: xattr search failed [ 152.404715][ T4381] hfsplus: b-tree write err: -5, ino 4 [ 152.902285][ T4364] team0 (unregistering): Port device team_slave_1 removed [ 153.219583][ T4364] team0 (unregistering): Port device team_slave_0 removed [ 153.268135][ T6147] loop6: detected capacity change from 0 to 512 [ 153.403036][ T6147] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 153.442120][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.503330][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.565322][ T6147] EXT4-fs (loop6): 1 truncate cleaned up [ 153.571018][ T6147] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 153.619710][ T6147] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.6.445: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 153.786680][ T6147] EXT4-fs (loop6): Remounting filesystem read-only [ 153.805947][ T6147] EXT4-fs error (device loop6) in ext4_delete_entry:2800: Corrupt filesystem [ 153.843325][ T6147] EXT4-fs (loop6): Remounting filesystem read-only [ 153.850163][ T6147] EXT4-fs warning (device loop6): ext4_rename_delete:3792: inode #2: comm syz.6.445: Deleting old file: nlink 4, error=-117 [ 153.863882][ T6156] loop3: detected capacity change from 0 to 512 [ 153.928109][ T6156] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c11d, mo2=0002] [ 153.951646][ T6156] System zones: [ 153.959259][ T4364] bond0 (unregistering): Released all slaves [ 153.968930][ T6156] 1-12 [ 154.040048][ T6156] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.448: corrupted in-inode xattr [ 154.139997][ T6156] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.448: couldn't read orphan inode 15 (err -117) [ 154.199021][ T6156] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nombcache,noload,debug,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000800,bsdgroups,mb_optimize_scan=0x00000000000000,errors=continue. Quota mode: none. [ 155.427271][ T6156] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 12: comm syz.3.448: lblock 3 mapped to illegal pblock 12 (length 1) [ 155.620615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.677809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.851101][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.646923][ T6189] loop7: detected capacity change from 0 to 256 [ 156.738724][ T6189] exfat: Deprecated parameter 'utf8' [ 156.775859][ T6194] loop3: detected capacity change from 0 to 2048 [ 156.814620][ T6189] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 157.444654][ T6215] loop6: detected capacity change from 0 to 512 [ 157.480000][ T6215] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.521902][ T6215] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 157.532125][ T4241] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 157.543853][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.574623][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.603177][ T6215] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 157.668047][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.693095][ T6215] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 157.701310][ T6215] System zones: 0-2, 18-18, 34-34 [ 157.721135][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.794332][ T6215] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.464: iget: bad i_size value: 360287970189639680 [ 157.813233][ T5943] device veth0_vlan entered promiscuous mode [ 157.822139][ T4241] usb 8-1: Using ep0 maxpacket: 8 [ 157.834144][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.862363][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.902370][ T6215] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.464: couldn't read orphan inode 15 (err -117) [ 157.926624][ T5943] device veth1_vlan entered promiscuous mode [ 157.952239][ T6215] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.972577][ T4241] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 158.011601][ T4241] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.050721][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 158.075547][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 158.094508][ T4241] usb 8-1: config 0 descriptor?? [ 158.118865][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.227545][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.278791][ T5943] device veth0_macvtap entered promiscuous mode [ 158.371860][ T4241] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 158.387743][ T5943] device veth1_macvtap entered promiscuous mode [ 158.394900][ T4241] asix: probe of 8-1:0.0 failed with error -71 [ 158.551966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.683392][ T4241] usb 8-1: USB disconnect, device number 3 [ 158.691128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.780315][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.881701][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.956572][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.988086][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.024962][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.059756][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.080692][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.103485][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.126092][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.170748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.202524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.240564][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.383517][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.518303][ T6248] loop3: detected capacity change from 0 to 2048 [ 159.546815][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.661476][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.781834][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.929402][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.985362][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.031013][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.067842][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.102232][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.141298][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.169967][ T5943] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.200341][ T5943] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.226689][ T5943] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.257420][ T5943] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.301822][ T2338] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 160.511380][ T6267] loop6: detected capacity change from 0 to 2048 [ 160.529342][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.530465][ T6268] loop3: detected capacity change from 0 to 2048 [ 160.547957][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.618062][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.640007][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.681895][ T2338] usb 8-1: config 1 has an invalid interface descriptor of length 8, skipping [ 160.691826][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.702305][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.725161][ T2338] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.753503][ T6267] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.764202][ T2338] usb 8-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 160.764237][ T2338] usb 8-1: config 1 interface 0 has no altsetting 0 [ 160.909092][ T6267] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 160.930119][ T6267] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 160.943062][ T2338] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.952552][ T6267] EXT4-fs (loop6): This should not happen!! Data will be lost [ 160.952552][ T6267] [ 160.963819][ T2338] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.983623][ T6267] EXT4-fs (loop6): Total free blocks count 0 [ 160.991038][ T2338] usb 8-1: Product: syz [ 161.011802][ T2338] usb 8-1: Manufacturer: syz [ 161.017278][ T6267] EXT4-fs (loop6): Free/Dirty block details [ 161.023738][ T2338] usb 8-1: SerialNumber: syz [ 161.032189][ T6267] EXT4-fs (loop6): free_blocks=2415919504 [ 161.049062][ T6267] EXT4-fs (loop6): dirty_blocks=16 [ 161.088252][ T6289] EXT4-fs (loop6): Online defrag not supported with bigalloc [ 161.108120][ T6267] EXT4-fs (loop6): Block reservation details [ 161.138497][ T6267] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 161.168290][ T6285] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 161.202061][ T6295] loop3: detected capacity change from 0 to 164 [ 161.351023][ T6295] Unable to read rock-ridge attributes [ 161.428171][ T6295] Unable to read rock-ridge attributes [ 161.442438][ T2338] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 161.470316][ T2338] usb 8-1: USB disconnect, device number 4 [ 163.721334][ T6364] loop7: detected capacity change from 0 to 1024 [ 163.880523][ T6364] EXT4-fs (loop7): Ignoring removed orlov option [ 163.890224][ T6364] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 164.003813][ T6364] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 165.143883][ T6395] loop7: detected capacity change from 0 to 2048 [ 165.293178][ T4197] [ 165.295564][ T4197] ===================================== [ 165.301201][ T4197] WARNING: bad unlock balance detected! [ 165.306846][ T4197] syzkaller #0 Not tainted [ 165.311271][ T4197] ------------------------------------- [ 165.316906][ T4197] kworker/u5:5/4197 is trying to release lock (&chan->lock) at: [ 165.324568][ T4197] [] l2cap_recv_frame+0xd09/0x7a10 [ 165.331281][ T4197] but there are no more locks to release! [ 165.337209][ T4197] [ 165.337209][ T4197] other info that might help us debug this: [ 165.342695][ T6395] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.345418][ T4197] 2 locks held by kworker/u5:5/4197: [ 165.345434][ T4197] #0: ffff888023cda938 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 165.371883][ T4197] #1: ffffc9000301fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 165.383330][ T4197] [ 165.383330][ T4197] stack backtrace: [ 165.389219][ T4197] CPU: 1 PID: 4197 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 165.396767][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.406847][ T4197] Workqueue: hci5 hci_rx_work [ 165.411616][ T4197] Call Trace: [ 165.414893][ T4197] [ 165.417821][ T4197] dump_stack_lvl+0x168/0x230 [ 165.422501][ T4197] ? show_regs_print_info+0x20/0x20 [ 165.427729][ T4197] ? l2cap_recv_frame+0xd09/0x7a10 [ 165.432866][ T4197] lock_release+0x52f/0x870 [ 165.437674][ T4197] ? l2cap_recv_frame+0xd09/0x7a10 [ 165.442781][ T4197] ? __lock_acquire+0x7c60/0x7c60 [ 165.447799][ T4197] ? lock_chain_count+0x20/0x20 [ 165.452643][ T4197] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 165.458620][ T4197] __mutex_unlock_slowpath+0xb3/0x6a0 [ 165.463996][ T4197] ? __local_bh_enable_ip+0x12a/0x1b0 [ 165.469368][ T4197] ? mutex_unlock+0x10/0x10 [ 165.473874][ T4197] ? l2cap_sock_recv_cb+0x18b/0x1e0 [ 165.479155][ T4197] ? l2cap_sock_recv_cb+0x18b/0x1e0 [ 165.484350][ T4197] l2cap_recv_frame+0xd09/0x7a10 [ 165.489289][ T4197] ? l2cap_recv_frag+0x290/0x290 [ 165.494223][ T4197] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 165.499851][ T4197] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 165.505748][ T4197] ? mutex_unlock+0x10/0x10 [ 165.510245][ T4197] ? l2cap_recv_acldata+0x633/0x17c0 [ 165.515622][ T4197] hci_rx_work+0x4a4/0xa10 [ 165.520167][ T4197] process_one_work+0x863/0x1000 [ 165.525110][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 165.530823][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 165.536106][ T4197] ? _raw_spin_lock_irq+0xab/0xe0 [ 165.541132][ T4197] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 165.546510][ T4197] ? wq_worker_running+0x97/0x170 [ 165.551716][ T4197] worker_thread+0xaa8/0x12a0 [ 165.556393][ T4197] kthread+0x436/0x520 [ 165.560554][ T4197] ? rcu_lock_release+0x20/0x20 [ 165.565404][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 165.570087][ T4197] ret_from_fork+0x1f/0x30 [ 165.574505][ T4197] [ 165.585949][ T6408] loop3: detected capacity change from 0 to 2048 [ 165.607595][ T6395] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 165.623084][ T6395] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 165.635489][ T6395] EXT4-fs (loop7): This should not happen!! Data will be lost [ 165.635489][ T6395] [ 165.645283][ T6395] EXT4-fs (loop7): Total free blocks count 0 [ 165.651348][ T6395] EXT4-fs (loop7): Free/Dirty block details [ 165.658053][ T6395] EXT4-fs (loop7): free_blocks=2415919504 [ 165.665430][ T6395] EXT4-fs (loop7): dirty_blocks=16 [ 165.670687][ T6395] EXT4-fs (loop7): Block reservation details [ 165.671124][ T6408] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 165.677031][ T6395] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 165.695238][ T6413] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 165.722859][ T6408] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.751852][ T6413] EXT4-fs (loop7): This should not happen!! Data will be lost [ 165.751852][ T6413] [ 170.391838][ T2338] Bluetooth: hci1: command 0x0406 tx timeout