last executing test programs: 10m50.967219222s ago: executing program 32 (id=258): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x42800, 0x0) syz_open_procfs(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) fdatasync(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) 10m36.605459423s ago: executing program 33 (id=294): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0xa100, 0x29) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0/file0\x00', 0xa8c410, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(0x0, &(0x7f0000000200)='./file0\x00') shutdown(0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000a00)={0xa, 0x4e20, 0x169, @loopback, 0x5}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) pread64(r0, &(0x7f0000000040)=""/41, 0x29, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1c0}}, 0x0) 9m43.51253041s ago: executing program 34 (id=476): msgget(0x3, 0x710) msgget(0x2, 0x624) msgget(0x1, 0x240) msgctl$IPC_RMID(0x0, 0x0) msgget(0x3, 0x693) msgget(0x0, 0x200) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 8m30.939721319s ago: executing program 35 (id=695): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0xf, {[@global=@item_012={0x2, 0x1, 0xe31d2cc890952081, '\x00\x00'}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_4={0x3, 0x0, 0x8, "fbd881fa"}, @global=@item_012={0x1, 0x1, 0x7, "84"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x1, 0x3, 0x0, 0x4, 0x107, 0x82, 0x4, 0x5, 0x1000001, 0x0, 0x7, 0xfffffffe, 0x1, 0x54}) 7m29.565388444s ago: executing program 36 (id=864): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socket$packet(0x11, 0x3, 0x300) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)={0x1a}) unshare(0x64000600) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000340)={0x0, @broadcast, @loopback}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5m27.395936828s ago: executing program 6 (id=1261): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2800496, &(0x7f0000000280), 0xc1, 0x7da, &(0x7f0000000fc0)="$eJzs3c1rG80dAODfyh+ynbR2odAmJ0OhNYTIdeomLfSQ0kMpNBBoz02MrJjUshUsOcTGEOdQ6KXQlh4K7SXnfqSHQq/9uLb/ROmhJITWMW/e04tediX5U5LtxJId/Dyw2pnd2Z0Z7ezsSLtIAVxYk+lLLuJKRPw8iRhvLk8iYigLDUbcbqR7u7VRTKck6vUf/C/J0vz50u6+kub8UjPyxYj4+08iruUO5jranJdLK83QdG3p0XR1bf36w6W5hdJCafnmzOzsjVtfv3Xz8Fbv6qN/rV9+9YvvfuWPtwfjCy9+9o8kbsfl5rrtrY3ie+7+kMmYbL4nQ+lbuM93TjuzM5acdQF4J+mpOdA4y+NKjMdAFurgfU9AAOBceBoRdQDggklc/wHggml9D7C9tVFsTWf7jUR/vf52RIw06t+6v9lYM9i8ZzeS3Qcd20723RlJImLiFPKfjIjf/uVHv0+n6NF9SIB2Np9FxP2Jye2t/IH+P0n7v+Gj95DvuOar3TarN7abPLBY/wf989d0/PONw+O/qzsP9IxkrwfGPyP5Nufuuzj6/M+97LDpMfqmo6Xjv2/tebZtd/y389DaxEAz9plszDeUPHhYLqV922cjYiqG8ml8Jkva/imoqTefvOmU/97x3/9/+ePfpfmn890UuZeD+aiP79lmfq42dwpVz7x+FnF1sF39k53xb9Jh/Hu34173H5rvffOnv+mUMq1/Wt/WdLj+vVV/HvHltsd/91gmXZ9PnM6aw3SrUbTxp//8eqxT/rvHP5/N0/xbnwX6IT3+Y93rP5GGqmvri3PlcmmlevI8/vl8/G+d1u1t/+3rn7X/fdL2P5z8MAu3WtqTuVptZSZiOPn+4eU3drdtxVvp0/pPfan9+d+p/eeaz8be34l1N/hq+A/NXbWtf2azU/17K63//ImOf5dAvbnNgVUv3i4OdMr/eMd/NgtNNZccp/87oqTv0ZoBAAAAAAAAAAAAAAAAAAAAAAAA4ORyEXE5klxhJ5zLFQqN//D+fIzlypVq7dqDyuryfGT/lT0RQ7nWT12O7/k91Jnm7+G34jcOxL8WEZ+LiF/lR7N4oVgpz5915QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dL+//9/ms4Khca6/+bPunQAQM+MnHUBAIC+c/0HgIvnZNf/0Z6VAwDonxN//q8nvSkIANA3x77+3+9tOQCA/nH/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB67e+dOOtU/3toopvH5x2uri5XH1+dL1cXC0mqxUKysPCosVCoL5VKhWFnquKPNxqxcqTyajeXVJ9O1UrU2XV1bv7dUWV2u3Xu4NLdQulca6lvNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD4qmvri3PlcmlFoEtgtDR6HopxjgKDcS6KcSiw+e+hrF13TRwTH0zjH+6SJjnNvEYPLtnbS4yeSd8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CH4NAAA//9RvRhH") r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x2000500) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8) io_setup(0x2e, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xf00f, 0x4000000, 0x0, 0x0, r1}]) 5m26.111780494s ago: executing program 6 (id=1270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x7b85, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x8080, &(0x7f0000000800)=ANY=[@ANYRES8=r1, @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a1c6261571866a21a54d762495480"], 0xf, 0x2a7, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vcsu(&(0x7f0000000240), 0x1ff, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/164, 0xa4}], 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000040)=0x3, 0x4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x4}, 0xc) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000480)='nfs\x00', 0x800, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc770xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getpid() fcntl$setownex(r4, 0xf, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000003c0)={0x0, 0x14, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2000c051}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 5m21.668169846s ago: executing program 6 (id=1285): clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m21.373201959s ago: executing program 37 (id=1285): clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m16.972267919s ago: executing program 8 (id=1301): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916200000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 5m13.332006496s ago: executing program 8 (id=1310): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000900)={[{@cruft}, {@check_relaxed, 0x0}, {}, {}, {@map_acorn}, {@mode, 0x41}, {@session={'session', 0x3d, 0x2b}}, {}, {@unhide}, {@unhide}, {}, {@check_strict}, {@check_relaxed}]}, 0x2, 0x699, &(0x7f0000000140)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb810041000800450000db0067e000"], 0xed) 5m10.612284134s ago: executing program 8 (id=1319): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) tkill(0x0, 0xb) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 5m8.86016062s ago: executing program 8 (id=1322): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m8.6318682s ago: executing program 8 (id=1323): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x800) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 5m8.116308902s ago: executing program 8 (id=1324): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000280)=ANY=[], 0x2c, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m52.966618148s ago: executing program 38 (id=1324): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000280)=ANY=[], 0x2c, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m13.895957947s ago: executing program 3 (id=1466): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) geteuid() geteuid() r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000480)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x50}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 4m12.300027967s ago: executing program 3 (id=1470): r0 = socket$inet(0xa, 0x801, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x1f0, 0x288, 0x158, 0x0, 0x98, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'ip6tnl0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x5}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) setreuid(0xee01, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3, 0x30}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) setreuid(0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="3f00000000000000200012800b0001006272696467650000100002800c002e000300000003000000ee5adda99c66fa9aa808e40dbe5fc21ba14cb98b70b740e7a1434c7070fc32ed3c005b5d5112d52b979f5fbc812ead3fcfc2"], 0x40}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r5, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 4m10.479803995s ago: executing program 3 (id=1478): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x6, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m10.227976366s ago: executing program 3 (id=1483): syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x4c0, &(0x7f0000000440)=ANY=[@ANYBLOB='map=normal,map=normal,showassoc,sbsector=0x0000000000000003,sbsector=0xffffffffffffffff,utf8,unhide,overriderockperm,check=relaxed,iocharset=macturkish,nojoliet,mode=0x0000000000000000,map=off,hide,nojoliet,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66737472616e716d7574653d233a275e812d2c2c7063723d30303030303030303030303030303030303030392c00"], 0x1, 0x940, &(0x7f0000001c40)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 4m8.889882374s ago: executing program 3 (id=1490): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 4m8.268678041s ago: executing program 3 (id=1496): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x3, 0x6, 0x6, 0x5, "4234ffff000000060000000200"}) r3 = syz_open_pts(r2, 0x40000) dup3(r3, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1c42, 0x0) socket(0x400000000010, 0x3, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x0) 4m8.011902282s ago: executing program 39 (id=1496): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x3, 0x6, 0x6, 0x5, "4234ffff000000060000000200"}) r3 = syz_open_pts(r2, 0x40000) dup3(r3, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1c42, 0x0) socket(0x400000000010, 0x3, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x0) 4m3.18820624s ago: executing program 4 (id=1517): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3ce, &(0x7f00000004c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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") open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 4m2.750060149s ago: executing program 4 (id=1518): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1_to_team\x00', &(0x7f0000000080)=@ethtool_gfeatures}) 4m2.440924603s ago: executing program 4 (id=1521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}]}, 0x3c}}, 0x20000010) 4m2.300283569s ago: executing program 4 (id=1523): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x8000c2, &(0x7f0000000740), 0x0, 0x5d1, &(0x7f0000000140)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) write$FUSE_INIT(r0, &(0x7f0000003040)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x400040, 0xd, 0x6, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4}}, 0x50) 4m2.300018939s ago: executing program 2 (id=1524): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000000102010300000000000000000200000920dd57e94b6ca976379990f54520d0965dcc2e1fef50187d596ddb70a523150183325cf69bd3303758bb879d6a6f27b6b5e43695dceb5c7f23226a7b0c4dc904dec91c54aea8bc04c49be27f933378b9d914938c19a3631d3f126136c0e2ff461fad9a428e54766a9d6784424decee448867d1b9a4eb0642680ab85e592b815f8e7abf39ac2db367925e97c5d1b0dec04b6dddd677a8a8f38915c79d256b844c076a2b1bc61f7b8df529fa19dc368e41f89506417c67bf54662ec1468b9ad8a45134366db2ec"], 0x14}, 0x1, 0x0, 0x0, 0x4001000}, 0x4080) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfff, 0x0, 0x400, 0x0}) 4m0.465959958s ago: executing program 4 (id=1529): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x23e69000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 4m0.464157779s ago: executing program 2 (id=1530): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xff3, &(0x7f00000014c0)=""/4083, 0x0, 0x1}, 0x94) 4m0.42061829s ago: executing program 2 (id=1531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) setrlimit(0xb, &(0x7f0000000000)={0x3ce1, 0x1ff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) truncate(&(0x7f0000000040)='./file0\x00', 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) r2 = io_uring_setup(0x510d, &(0x7f0000000100)={0x0, 0x8591, 0x10, 0x3, 0x1f5}) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x2000000, 0x0) 4m0.268113697s ago: executing program 2 (id=1534): r0 = socket$inet(0xa, 0x801, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x1f0, 0x288, 0x158, 0x0, 0x98, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'ip6tnl0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x5}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) setreuid(0xee01, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3, 0x30}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4m0.031839968s ago: executing program 2 (id=1537): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xe}}, {@noblock_validity}, {@nodelalloc}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0xe8}}, {@nodiscard}]}, 0xfd, 0x461, &(0x7f0000001840)="$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") truncate(0x0, 0x5) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 3m59.973432509s ago: executing program 2 (id=1538): r0 = syz_clone(0x45081500, 0x0, 0xd, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r2 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x28048c2, &(0x7f0000000100)=ANY=[], 0x1, 0x6e9, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x100) openat(r2, &(0x7f0000000180)='./file1\x00', 0x28c140, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(r1) r5 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r5, &(0x7f00000000c0)=""/11, 0xb, 0x6) 3m59.894133463s ago: executing program 4 (id=1539): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = dup(r5) write$FUSE_BMAP(r6, 0x0, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002100)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x20000c0, 0x0) 3m59.776145278s ago: executing program 40 (id=1539): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = dup(r5) write$FUSE_BMAP(r6, 0x0, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002100)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x20000c0, 0x0) 3m44.684849161s ago: executing program 41 (id=1538): r0 = syz_clone(0x45081500, 0x0, 0xd, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r2 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x28048c2, &(0x7f0000000100)=ANY=[], 0x1, 0x6e9, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x100) openat(r2, &(0x7f0000000180)='./file1\x00', 0x28c140, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(r1) r5 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r5, &(0x7f00000000c0)=""/11, 0xb, 0x6) 12.539776877s ago: executing program 0 (id=2314): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@grpid}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x19a) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x4, 0x0, 0x0) 12.344231136s ago: executing program 7 (id=2316): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x64d, &(0x7f0000000d40)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) io_setup(0x81, 0x0) syz_io_uring_setup(0x372a, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x0, 0x0, 0x0) 11.937720384s ago: executing program 5 (id=2318): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x87, 0x77, 0xfe, 0xff, @tick, {}, {0x8, 0x4}, @queue={0x10, {0x5, 0x5}}}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@empty, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 10.128333582s ago: executing program 5 (id=2321): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) prlimit64(r0, 0xe, 0x0, 0x0) 10.061197145s ago: executing program 0 (id=2323): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000a40)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="38a344214b6073c3df2e56cb5b38bf06afd6ba506c46b1e6d26b73c15e40395cb728f0161cb7f7d7f05931a7f776cba4714784827d7959fe9b55a6b3c373774143c73bd83bd162b3b3f48e12a9ab0022c7334c8223ed670545c74ce9d00ca251516228fcaadb385ae067e1edf21790d581b0c798974645267c5fec88446eb0bb08a0c98b161cb97c0de0c441d70785c94b6b4f10fb3918ff29dd2713884968a3309b2e535a3885"], 0x3e, 0x715, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_usb_disconnect(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x1, 0x7fff7ffd}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9.792266506s ago: executing program 7 (id=2325): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3, 0x30}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 7.869266509s ago: executing program 7 (id=2328): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) 6.040400698s ago: executing program 7 (id=2330): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getpid() fcntl$setownex(r3, 0xf, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2000c051}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.08026884s ago: executing program 1 (id=2333): r0 = open(0x0, 0x4000, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2820410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r1 = syz_mount_image$fuse(0x0, 0x0, 0x1002482, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_evm(r1, 0x0, 0x0, 0x93, 0x2) preadv2(r0, 0x0, 0x0, 0x800, 0x0, 0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x6, 0x3b, 0x42}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0xb, &(0x7f0000001100)=ANY=[@ANYBLOB="182000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000a7030000ff0f000085000000060000009500000000000000fac868b01329fa2f5b97b26300308b58091fb6fbf62be1531e57d2ff5c8c60ada067c302d8355b20ae32101d17dd4f95f06cec981bb2887d09a82326605b0436bb12dea535e695875ab58a0cfc474cd31be20f22c0132773e7a2d9f48ecee0f507bc72529ff64e20be8bf391ffb6bc4f912dc755f20000000000000e0bcefc0559d2728b86d9449783b239f0f7df433eed3c092440b80711829a93880fe327bded52006c7e6c612d1ddb5149ebd4b61700cd63a3d5f868b8a64054432f19a4c7bf5399b74fae21ba8ba6070f2f6c3c1e195e35adddb68f41086dcd83"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x45, 0xffffffffffffffff, 0x41000, 0x0, '\x00', 0x0, 0x38}, 0x94) 4.937284286s ago: executing program 0 (id=2335): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001800)='./file1\x00', 0x8010, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xffa1, 0x4}) 4.872179619s ago: executing program 5 (id=2336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 3.850646764s ago: executing program 1 (id=2337): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r3, r3, 0x0, 0x8000002) listen(r1, 0x0) socket(0x28, 0x5, 0x0) 3.850068444s ago: executing program 9 (id=2338): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) accept$alg(r4, 0x0, 0x0) r5 = open(0x0, 0x1298c2, 0x14a) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x1fe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt(0xffffffffffffffff, 0xff, 0x5, 0x0, 0x0) ftruncate(r5, 0x200004) sendfile(r6, 0xffffffffffffffff, 0x0, 0x80001d00c0cd) setsockopt(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000040), 0x0) accept4(r0, 0x0, 0x0, 0x800) 3.839682004s ago: executing program 5 (id=2339): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3, 0x30}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3.440330361s ago: executing program 1 (id=2340): io_uring_setup(0x7109, &(0x7f0000000080)={0x0, 0xfaa2, 0x10, 0x3, 0x10a}) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) close(0x3) vmsplice(r0, &(0x7f0000000580)=[{&(0x7f0000000480)='i', 0x1}], 0x1, 0x0) 2.7658372s ago: executing program 5 (id=2341): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@dioread_lock}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000000)={[{@hide}, {@sbsector={'sbsector', 0x3d, 0x1}, 0x0}, {}, {@hide}, {@map_normal}, {@map_acorn, 0x41}, {@session={'session', 0x3d, 0xc}}, {@unhide}, {@unhide}, {@gid}, {}, {@cruft}, {@map_normal}, {@check_strict}]}, 0x2, 0x6a0, &(0x7f0000000a40)="$eJzs3V1rG+n5x/HfyLIte/+E5d8SQnCSO0kXHJoqI3njYFLoqqORPa2kETNysaGwpBt7CZGzbZJC45OtT/oA2zfQs570oC+i0ON9Fz0pLSztWaE9mDIPeoqeol0l2d18P2ZXo3uumfuauRVdjK25JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIMup2nbJUt1r7h+YyZxq4Dey5f9Go+vTvS3rRrpwY2a/khX/p0JBF9KmC9/srz4f/++aNtJnGyrEDwWdvnX+7bvfyOe6209J+PPQvDt88uz04b1O5+jxC8Quae7dv07KdZfWsjEZE7TrNr3Q9xqVXdd4oW92trftW3u10NS8uhsehm23YZzAzbX9wGw6N0xpZ2fLuMVDf7+5W63U3W7jne+UbXvb/GA1HWhJxdDZ8+p1r7mbxMSr45g75pMfpwFupWHM8YPO0dasI4mDSi8SVJ4VVLbL5VKpXC5t3965fce28yMNdsyyezQSsfAXLb5iFvPGDSxALq7/f7Wkugpqal8HMmN/HFUVyFdjwvpMt/6/c8ud2u9g/e9W+QvS97LVF5XU/8vps8uT6v+EXIxMssG4NdaE9vl+lpOMjJ7omU71UPfUUUdHeryAfRuZKwvZyyv42ZWrpjyF8uWpoUrSYrIWox1ta1u23teeagplVJOnulyFOlSottzkFeUokKuK2vIVyGhTjm7IqKQd7WhLRq6KOpSvfTW1q6oq+ncURcd6kJz3rSk5qhtUmhCwOhhUnrKnSfX/Jx+nr9Os/tvU/zdV+jpYTR8+nRYDfAlE2fX/oNzsza68vIwAAAAAAMCiWclv363kb/eXJEWqeXXXft1pAQAAAACABbIUrWpDVnz9L+mSLK7/AQAAAAD4urGSe+wsSevJh/qt/p1QL/JLgKVXkCIAAAAAAPiCkjv/L69IUTJpxRVZc13/AwAAAACAr4DfDMyxn+/OsRt1/6yfkxS2Vq0//3NVwbJ11jr4lnVSiddUTrKYkU8AtGsXrXPZRL3Jw4qk5Jnjblgb6eSY2SSYvXkHPzueNde/FTyXwMrS4A4mJGDFPW/ns2f6RFfTTa5m88zfP80pWZP2sl7z6m7R8et3S6pUzuXa7kH7548e/EIKesd5/KBzVPzgo879JJezuOnsJN7px0Pp5MafjH4uT5P5FpJ7LsYd8Zpq3S5/22ysW0m/dvf4l1Q5yQ12NG0A+n3+StfSMbu2nsaun/Zm3I+PvxAff6mYDNnQ0QfLVj+L0vNHPm4gJmRRSLK4nsZc37yu8t/S5d4o5KzCt5ekcnF0DIayKA9mMftcWP8aORcDWSQP3TUD52IrzuIv8Y4mZLE1XxYjIwIAr8uxLil5F7qkZBLzXhUqZHW3Wx66b2qfq+7Mru7vDVf3p7+PomSDJSmf/W1iai8Fxe/om1ZSh1bSQ8pfHPOObmd1paAJ7+j2F6hucV9/6n8HUpb2SBb/iaLobinp93fPVdU/DHU30m9YLy/Fp/DW05OfJhPgxz48+vDoUbm8tW2/a9u3y1pODiN7WBK1BwAwYvZ37MyMsN7V1TTi6v1/vJMuDVW8/+99pKCoD/SROrqvm92vELgyfq/rAx9DuJletWrgqtWcf/tu8r10w7El3Zx4VZfU0oHYci92Wd1Nhit1P3brJY8CAACv1rUZdXh8/S8M1f+b2kwjNi+Ove4eruXZ1XHvkn5SbGl28u8t+mwAAPBmcIPPrPX2r60g8Frvl3Z2SpX2nmsC3/mhCbzqrmu8ZtsNnL1Kc9c1rcBv+45fN61Aq17VDU2432r5QdvU/MC0/NA7SL753WRf/R66jUqz7Tlhq+5WQtc4frNdcdqm6oWOae1/v+6Fe26QbBy2XMereU6l7flNE/r7geMWjQlddyDQq7rNtlfz4sWmaQVeoxIcmh/59f2Ga6pu6AReq+2nO+z25TVrftBIdlvMR+M+LwAAwBvnybPTh/c6naPHzy+sxZfmacuZJsSMLqzoybP4qjxuyWermCMIAIAvmX4Bn2OjwktMCAAAAAAAAAAAAAAAAAAAAAAAjJh9S9+cC8vjbhaUei0/O5e16Jfq32I4sh9Li05snoXcvFt1b4k4ffjplOC1Xkv39A/GnL2yA/z7/0lvJS1KW/KL72ttyuC+jIXvHqdndGJMvHLsqtXeWOQX/88hXnj0xwmroiiKpm++OnwOV4YOMDet07ykxytzD8HKyEsUwNfV/wIAAP//qMc0fQ==") 2.747653391s ago: executing program 9 (id=2342): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_setup(0x1d31, &(0x7f0000000040)={0x0, 0xc8a3, 0xc001, 0x8, 0xc1}) 2.560353449s ago: executing program 0 (id=2343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000080)="ff96a01e68875c5e492a6801bbc2bbc035c6ab7b", 0x14) 2.54937309s ago: executing program 9 (id=2344): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x9d2, 0x0, 0x1, 'queue0\x00'}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x4) 2.409207306s ago: executing program 0 (id=2345): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e1f, 0x2, @mcast2, 0x7fc}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) 2.300261791s ago: executing program 9 (id=2346): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0}, 0x94) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x180}, 0x18, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x20024090) landlock_restrict_self(r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/uevent_helper', 0x42, 0x15d) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) 1.502438535s ago: executing program 1 (id=2347): r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000840000/0x3000)=nil, &(0x7f00001e8000/0x3000)=nil, &(0x7f00006e4000/0x4000)=nil, &(0x7f0000300000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000300)=""/63) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x5eb0, 0xc000, 0x0, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="e1ffffff00"}) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r9 = syz_open_pts(r7, 0x40601) ioctl$TIOCCONS(r9, 0x541d) dup3(r9, r7, 0x80000) 1.420765759s ago: executing program 9 (id=2348): socket$packet(0x11, 0x2, 0x300) r0 = syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0x46b6, 0x8, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r6 = epoll_create(0x4) io_setup(0x239f, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000080)={0x80000002}) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0xdf68, 0x2, 0x3, 0x10f}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) 1.38809406s ago: executing program 0 (id=2349): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b25, &(0x7f0000000040)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 345.356365ms ago: executing program 7 (id=2350): socket$unix(0x1, 0x2, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x574, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 198.056222ms ago: executing program 9 (id=2351): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x1011840, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2ed, &(0x7f0000000880)="$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") socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, 0x0, 0x0) landlock_restrict_self(r4, 0x0) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) 197.641212ms ago: executing program 1 (id=2352): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3, 0x30}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 102.587946ms ago: executing program 5 (id=2353): socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x141bc2, 0xa3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101400, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/158, 0x9e}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x44}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x400000, 0x0, 0x2000000, 0x0, 0x1d, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x302000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 247.77µs ago: executing program 7 (id=2354): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x14e) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000000)=0x10) 0s ago: executing program 1 (id=2355): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = eventfd(0x8) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r3) socket(0x10, 0x803, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000240)=""/208, 0xd0}], 0x1, 0x10001, 0x2) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000800)=""/90}) kernel console output (not intermixed with test programs): 1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 582.049570][T10993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.142807][T10993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.150557][ T26] audit: type=1326 audit(1764142585.288:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 582.179555][T10993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.259743][ T26] audit: type=1326 audit(1764142585.288:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 582.322813][T10993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.379543][ T26] audit: type=1326 audit(1764142585.288:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 582.499489][ T1111] Bluetooth: hci0: command 0x0419 tx timeout [ 582.622046][ T26] audit: type=1326 audit(1764142585.288:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 583.442882][T10993] device hsr_slave_0 entered promiscuous mode [ 583.479807][ T26] audit: type=1326 audit(1764142585.288:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 583.505519][T10993] device hsr_slave_1 entered promiscuous mode [ 583.545008][T10993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.555060][ T26] audit: type=1326 audit(1764142585.288:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 583.609456][T10993] Cannot create hsr debugfs directory [ 583.623136][T10828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.799636][ T26] audit: type=1326 audit(1764142585.288:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 583.842988][ T26] audit: type=1326 audit(1764142585.288:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 584.964450][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 584.985297][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 585.934032][T11120] Invalid option length (0) for dns_resolver key [ 585.973358][T10828] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.027582][T11123] loop9: detected capacity change from 0 to 512 [ 586.074863][T11123] EXT4-fs (loop9): Ignoring removed bh option [ 586.091353][T11123] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 586.144161][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 587.025089][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 587.035078][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.042246][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.070130][T11123] EXT4-fs (loop9): 1 truncate cleaned up [ 587.076210][T11123] EXT4-fs (loop9): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 587.390057][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 587.436276][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 587.453045][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 587.501342][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.508449][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.545476][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 587.572737][T11138] loop9: detected capacity change from 0 to 256 [ 587.587921][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 587.719665][T11138] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9d80cab, utbl_chksum : 0xe619d30d) [ 587.787584][T11138] exFAT-fs (loop9): error, invalid access to FAT free cluster (entry 0x00000008) [ 587.828991][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 587.854927][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 587.864301][T11138] exFAT-fs (loop9): Filesystem has been set read-only [ 587.910444][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 587.938080][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 588.013456][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 588.057958][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 588.108848][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 588.183525][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 588.220157][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 588.281032][T10828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 588.612316][ T4593] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 589.020983][ T4593] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.047298][T10993] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 589.060796][ T4593] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.208678][T10993] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 589.216421][ T4593] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 589.239458][ T4593] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 589.266606][ T4593] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.168097][ T4593] usb 10-1: config 0 descriptor?? [ 590.200860][T10993] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 590.362192][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 590.373354][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 590.406242][T10828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.423815][T10993] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 590.493983][ T4407] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.659464][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 590.672025][T11152] loop9: detected capacity change from 0 to 8 [ 590.745608][T11152] SQUASHFS error: Unable to read inode 0x11f [ 590.862677][ T4407] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.902767][ T4593] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 590.958028][ T4593] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 591.001857][ T4407] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.080759][T11156] chnl_net:caif_netlink_parms(): no params data found [ 591.118098][ T4407] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.264263][ T1111] usb 10-1: USB disconnect, device number 10 [ 591.300193][T10993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.423302][T10828] device veth0_vlan entered promiscuous mode [ 591.484444][T10828] device veth1_vlan entered promiscuous mode [ 591.564589][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 591.587709][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 591.658551][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 591.724451][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 591.852671][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 591.972693][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 592.118347][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 592.243141][T10993] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.321488][T11156] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.329277][T11156] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.354689][T11156] device bridge_slave_0 entered promiscuous mode [ 592.371580][T11156] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.378685][T11156] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.395589][T11156] device bridge_slave_1 entered promiscuous mode [ 592.405092][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 592.418516][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 592.488370][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 592.500384][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 592.511994][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.519115][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.940029][ T4224] Bluetooth: hci4: command 0x041b tx timeout [ 593.948200][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 593.969325][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 593.978358][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.985658][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.995628][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 594.025934][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 594.088373][T11156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.114533][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 594.130759][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 594.150066][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 594.170347][T11156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.202470][T10828] device veth0_macvtap entered promiscuous mode [ 594.314247][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 594.346524][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 594.375883][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 594.407379][T10828] device veth1_macvtap entered promiscuous mode [ 594.448293][T10993] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 594.488454][T10993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 594.557396][T11247] xt_TPROXY: Can be used only with -p tcp or -p udp [ 594.558081][T11156] team0: Port device team_slave_0 added [ 594.590528][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 594.608777][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 594.625092][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 594.658425][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 594.678602][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 594.698859][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 594.722208][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 594.749059][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 594.793471][T11156] team0: Port device team_slave_1 added [ 594.830790][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 594.898937][T10828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.929415][T10828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.966794][T10828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.988712][T10828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.014895][T10828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.026044][T10828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.045089][T10828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.067885][T10828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.098794][T10828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.152358][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 595.172512][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 595.217499][T10828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.232544][T11268] loop9: detected capacity change from 0 to 256 [ 595.267261][T10828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.436149][T10828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.470759][T10828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.481574][T10828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.509444][T10828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.539869][T10828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.650339][T10828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.866436][T10828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.003049][T11156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.080680][T11156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.199811][T11156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.226046][ T4594] Bluetooth: hci4: command 0x040f tx timeout [ 596.243055][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 596.254228][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 596.303459][T11156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.311223][T11156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.338302][T11156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.359752][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 596.367581][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 596.387675][T10828] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.398204][T10828] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.407421][T10828] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.416590][T10828] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.471533][T10993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.565896][T11156] device hsr_slave_0 entered promiscuous mode [ 596.577005][T11156] device hsr_slave_1 entered promiscuous mode [ 596.583738][ T4289] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 596.593697][T11156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.603837][T11156] Cannot create hsr debugfs directory [ 596.695170][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 596.722134][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 596.796750][T10993] device veth0_vlan entered promiscuous mode [ 596.811588][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 596.823133][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 596.829551][ T4289] usb 10-1: Using ep0 maxpacket: 8 [ 596.878098][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 596.886712][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.897409][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.915028][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 596.927590][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 596.949787][ T4289] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 596.965125][ T4289] usb 10-1: config 179 has no interface number 0 [ 596.972060][ T4289] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 596.983650][ T4289] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 596.995093][ T4289] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 597.006651][ T4289] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 597.017090][ T4289] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 597.030729][ T4289] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 597.040273][ T4289] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.068636][T10993] device veth1_vlan entered promiscuous mode [ 597.075086][T11278] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 597.083338][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.091896][ T4289] xpad: probe of 10-1:179.65 failed with error -5 [ 597.097650][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.174683][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 597.190845][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 597.199631][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 597.217597][T10993] device veth0_macvtap entered promiscuous mode [ 597.242706][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 597.261857][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 597.272083][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 597.486035][T10993] device veth1_macvtap entered promiscuous mode [ 597.488657][T11309] loop5: detected capacity change from 0 to 8 [ 597.539169][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.540002][ T4593] usb 10-1: USB disconnect, device number 11 [ 597.556533][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.566592][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.587371][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.597470][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.612509][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.622828][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.633815][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.643987][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.654848][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.666613][T10993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.699537][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 597.708696][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 597.724420][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.755570][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.766434][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.784796][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.811226][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.830423][T11309] SQUASHFS error: Failed to read block 0x2d7: -5 [ 597.838274][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.847196][T11309] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 597.858879][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.878899][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.888810][T10993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.907663][T10993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.933493][T10993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.267000][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 598.301940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 599.511937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 599.597165][T10993] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.629540][T10993] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.659426][T10993] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.668172][T10993] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.831124][ T4407] device hsr_slave_0 left promiscuous mode [ 599.885696][ T4407] device hsr_slave_1 left promiscuous mode [ 599.905946][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.921286][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.936516][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.947200][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.980037][ T4407] device bridge_slave_1 left promiscuous mode [ 599.986288][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.016139][ T4407] device bridge_slave_0 left promiscuous mode [ 600.045369][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.504473][ T4407] device veth1_macvtap left promiscuous mode [ 600.566523][ T4407] device veth0_macvtap left promiscuous mode [ 600.703439][ T4407] device veth1_vlan left promiscuous mode [ 600.709296][ T4407] device veth0_vlan left promiscuous mode [ 601.310442][T10213] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 602.174867][T11370] loop5: detected capacity change from 0 to 512 [ 602.250612][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 602.277802][T11370] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1601: invalid indirect mapped block 10 (level 1) [ 602.294293][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 602.326085][T11370] EXT4-fs (loop5): Remounting filesystem read-only [ 602.336088][T11370] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1601: invalid indirect mapped block 8 (level 1) [ 602.354827][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.369759][T11370] EXT4-fs (loop5): Remounting filesystem read-only [ 602.380219][T11370] EXT4-fs (loop5): 1 truncate cleaned up [ 602.407576][T11370] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000001,errors=remount-ro,. Quota mode: none. [ 602.457828][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.559698][T10213] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.579525][T10213] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.606423][T10213] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 602.620958][T10213] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 602.630635][T10213] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.647535][T10213] usb 10-1: config 0 descriptor?? [ 602.677118][ T4407] bond0 (unregistering): Released all slaves [ 603.815886][T10213] plantronics 0003:047F:FFFF.0012: unbalanced collection at end of report description [ 603.850232][T10213] plantronics 0003:047F:FFFF.0012: parse failed [ 603.856563][T10213] plantronics: probe of 0003:047F:FFFF.0012 failed with error -22 [ 604.061074][ T4593] usb 10-1: USB disconnect, device number 12 [ 604.179860][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.205425][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.311591][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 604.324027][T11156] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 604.331686][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.361793][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.381554][T11156] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 604.446134][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 604.466621][T11156] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 604.526769][T11156] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 604.712662][T11402] loop0: detected capacity change from 0 to 512 [ 604.767122][T11406] loop5: detected capacity change from 0 to 512 [ 604.818942][T11156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.877005][T11156] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.892032][T11402] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 604.921017][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 604.932910][T11406] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 604.949295][T11402] EXT4-fs (loop0): 1 orphan inode deleted [ 604.979596][T11402] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 605.009113][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 605.070110][T11406] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.113758][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 605.141037][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 605.157030][T11415] loop9: detected capacity change from 0 to 512 [ 605.172952][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.180377][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.208768][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 605.229754][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 605.259606][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.266757][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.320355][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 605.930070][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 605.981472][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 606.042975][T11427] loop5: detected capacity change from 0 to 256 [ 606.054110][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 606.139208][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 606.169330][T11430] loop0: detected capacity change from 0 to 128 [ 606.331919][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 606.372218][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 606.404091][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 606.419772][T11430] FAT-fs (loop0): bogus sectors per cluster 0 [ 606.426048][T11430] FAT-fs (loop0): Can't find a valid FAT filesystem [ 606.689722][ T5768] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 606.748368][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 607.014579][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 607.040792][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 607.075957][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 607.126199][T11156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 607.159592][ T5768] usb 10-1: config 0 has an invalid interface number: 20 but max is 0 [ 607.175665][ T5768] usb 10-1: config 0 has no interface number 0 [ 607.392148][ T5768] usb 10-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 608.929780][ T5768] usb 10-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 608.938983][ T5768] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.980219][ T5768] usb 10-1: Product: syz [ 608.984523][ T5768] usb 10-1: Manufacturer: syz [ 608.989222][ T5768] usb 10-1: SerialNumber: syz [ 609.043486][ T5768] usb 10-1: config 0 descriptor?? [ 609.059953][T11439] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 609.080993][ T5768] usb-storage 10-1:0.20: USB Mass Storage device detected [ 609.100375][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 609.108290][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 609.144399][T11466] loop5: detected capacity change from 0 to 256 [ 609.151750][ T5768] usb-storage 10-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 609.175969][T11156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.198666][T11466] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 609.229203][T11471] loop0: detected capacity change from 0 to 512 [ 609.235358][T11466] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 609.308894][ T5768] scsi host1: usb-storage 10-1:0.20 [ 609.339672][T11471] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 609.390621][T11466] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d) [ 609.494840][T11471] EXT4-fs (loop0): 1 orphan inode deleted [ 609.522416][ T4245] usb 10-1: USB disconnect, device number 13 [ 609.526654][T11471] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 610.440649][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 610.457928][ T5606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 610.574084][T11156] device veth0_vlan entered promiscuous mode [ 610.613512][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 610.630199][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 610.687329][T11156] device veth1_vlan entered promiscuous mode [ 610.733973][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 610.749065][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 610.787971][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 610.889814][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 610.898838][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 610.960211][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 610.980436][T11156] device veth0_macvtap entered promiscuous mode [ 611.005755][ T4245] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 611.015584][T11506] loop9: detected capacity change from 0 to 256 [ 611.033303][T11156] device veth1_macvtap entered promiscuous mode [ 611.091488][T11156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.128181][T11156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.168799][T11156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.197082][T11156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.217393][T11156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.248660][T11156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.259630][ T4245] usb 1-1: Using ep0 maxpacket: 16 [ 611.285327][T11156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.325119][T11156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.356578][T11156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.427323][T11156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.429811][ T4245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.452396][T11156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.473095][T11156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.491777][ T4245] usb 1-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 611.512187][ T4245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.553505][ T4245] usb 1-1: config 0 descriptor?? [ 611.664404][T11156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.700515][T11156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.711242][T11156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.916391][T11156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.988549][T11156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.009647][ T4245] usbhid 1-1:0.0: can't add hid device: -71 [ 612.015825][ T4245] usbhid: probe of 1-1:0.0 failed with error -71 [ 612.071047][T11156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.091982][ T4245] usb 1-1: USB disconnect, device number 11 [ 612.160267][T11156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.229028][T11156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.329472][T11156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.360787][T11156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.439538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 612.471133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 612.676975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 613.003272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 613.074001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 613.135039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 613.169645][ T5768] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 613.197746][T11156] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.238469][T11156] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.255408][T11543] loop5: detected capacity change from 0 to 512 [ 613.289631][T11156] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.316981][T11156] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.338571][T11543] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 613.469687][T11543] EXT4-fs (loop5): 1 orphan inode deleted [ 613.475466][T11543] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 613.549740][ T5768] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.579585][ T5768] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.593384][ T5768] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 613.679824][ T4406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.768568][ T4406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.778925][ T5768] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 613.788235][ T5768] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.803267][ T5768] usb 10-1: config 0 descriptor?? [ 613.913156][ T4406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.011917][ T4406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.138538][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 614.154483][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 614.794513][T11576] loop9: detected capacity change from 0 to 8 [ 615.343690][T11577] loop7: detected capacity change from 0 to 128 [ 615.369791][T11576] SQUASHFS error: Unable to read inode 0x11f [ 615.428534][T11584] loop0: detected capacity change from 0 to 512 [ 615.433393][T11581] loop5: detected capacity change from 0 to 256 [ 615.462640][T11577] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 615.479177][T11577] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.512308][T11584] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 615.541992][ T5768] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 615.571895][ T4509] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.587171][ T5768] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 615.593120][ T4509] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 46514 - 0 [ 615.774961][T11584] EXT4-fs (loop0): 1 truncate cleaned up [ 615.782985][T11584] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 615.830818][ T1111] usb 10-1: USB disconnect, device number 14 [ 616.246451][T11591] fido_id[11591]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 616.296842][ T4509] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.514501][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 616.616846][T11597] loop5: detected capacity change from 0 to 256 [ 616.640054][ T4509] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 46514 - 0 [ 616.664836][T11597] exfat: Deprecated parameter 'namecase' [ 616.690045][T11597] exfat: Deprecated parameter 'namecase' [ 616.770018][T11597] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 616.845168][ T4509] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.892125][ T4509] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 46514 - 0 [ 618.030676][ T4509] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.030728][ T4509] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 46514 - 0 [ 619.096032][T11636] loop9: detected capacity change from 0 to 256 [ 619.117078][ T4509] tipc: Left network mode [ 619.445548][T11644] loop5: detected capacity change from 0 to 2048 [ 619.797286][T11644] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 620.006887][T11644] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 620.030312][T11652] netlink: 'syz.7.1661': attribute type 1 has an invalid length. [ 620.139802][T11652] netlink: 'syz.7.1661': attribute type 2 has an invalid length. [ 620.334383][T11659] loop7: detected capacity change from 0 to 128 [ 620.549640][T11436] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 620.580821][T11659] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 620.591856][T11659] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 620.869893][T11436] usb 10-1: Using ep0 maxpacket: 32 [ 621.100236][T11436] usb 10-1: unable to get BOS descriptor or descriptor too short [ 621.210223][T11436] usb 10-1: config 1 has an invalid interface number: 171 but max is 0 [ 621.244177][T11436] usb 10-1: config 1 has no interface number 0 [ 621.260793][T11436] usb 10-1: config 1 interface 171 has no altsetting 0 [ 621.619896][T11436] usb 10-1: New USB device found, idVendor=0a21, idProduct=8001, bcdDevice=a4.c2 [ 621.629071][T11436] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.659472][T11436] usb 10-1: Product: syz [ 621.663783][T11436] usb 10-1: Manufacturer: 뀜蛀痽微䵯玒驰鴸屻밵ìƒå­Ÿê¢·ã¸µé†¤è“€ä¹á¨ƒê˜¬çŠŠæ©˜ï‘²ê‹¹ì®‡ãŒ€îªï¶˜ï¢—ԑ轙çŠã¯„ዢ┛䢒ᢇℇࣷஹ৘뙀섬緆Ȥ߃쳰åˆìŸë®¼ä¤¢ë•£ç„¥Ú«ãŸŽê•œæŸ§à¼Šêš¤á‘›í‡·ã¼›å¥– [ 621.906305][T11436] usb 10-1: SerialNumber: syz [ 622.801330][T11436] usb_serial_simple 10-1:1.171: carelink converter detected [ 622.809326][T11709] loop7: detected capacity change from 0 to 512 [ 622.830916][T11436] usb 10-1: carelink converter now attached to ttyUSB0 [ 622.839709][T11436] usb 10-1: USB disconnect, device number 15 [ 622.856723][T11436] carelink ttyUSB0: carelink converter now disconnected from ttyUSB0 [ 622.873011][T11436] usb_serial_simple 10-1:1.171: device disconnected [ 622.921192][T11709] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 623.007301][T11709] EXT4-fs (loop7): 1 orphan inode deleted [ 623.025246][T11709] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 623.132396][ T4509] device hsr_slave_0 left promiscuous mode [ 623.295747][ T4509] device hsr_slave_1 left promiscuous mode [ 623.310236][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.223506][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.277265][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.283698][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.425301][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.449639][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.795920][T11743] loop7: detected capacity change from 0 to 256 [ 625.068609][ T4509] device bridge_slave_1 left promiscuous mode [ 625.074999][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.087987][ T4509] device bridge_slave_0 left promiscuous mode [ 625.104115][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.741393][ T4196] Bluetooth: hci2: Received unexpected HCI Event 00000000 [ 625.776495][ T4509] device veth1_macvtap left promiscuous mode [ 625.785829][ T4509] device veth0_macvtap left promiscuous mode [ 625.799632][ T4509] device veth1_vlan left promiscuous mode [ 625.814829][ T4509] device veth0_vlan left promiscuous mode [ 625.977811][T11766] loop7: detected capacity change from 0 to 512 [ 626.118735][T11766] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 626.220042][T11766] EXT4-fs (loop7): 1 orphan inode deleted [ 626.226038][T11766] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 626.325312][T11775] loop5: detected capacity change from 0 to 128 [ 626.649174][T11775] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 626.661286][T11775] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.585896][T11786] loop7: detected capacity change from 0 to 2048 [ 628.699768][T11786] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 628.728142][T11794] loop5: detected capacity change from 0 to 16 [ 628.777939][T11794] erofs: (device loop5): mounted with root inode @ nid 36. [ 628.833625][T11794] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 628.860879][T11794] handle_bad_sector: 47 callbacks suppressed [ 628.860908][T11794] attempt to access beyond end of device [ 628.860908][T11794] loop5: rw=524288, want=524304, limit=16 [ 629.009147][ T4196] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4100] [ 629.067740][T11794] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 629.100595][ T5771] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 629.129907][ T26] audit: type=1800 audit(1764142632.368:105): pid=11794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1696" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 629.399505][ T5771] usb 1-1: Using ep0 maxpacket: 32 [ 629.555817][ T4509] team0 (unregistering): Port device team_slave_1 removed [ 629.587279][ T4509] team0 (unregistering): Port device team_slave_0 removed [ 629.620923][T11808] loop5: detected capacity change from 0 to 256 [ 629.654006][ T4509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.916182][ T5771] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.939532][ T5771] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 630.117546][ T4509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.683495][T11813] loop5: detected capacity change from 0 to 1024 [ 630.724930][T11813] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 630.769949][ T5771] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 630.787256][ T5771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.804830][ T4509] bond0 (unregistering): Released all slaves [ 630.806779][ T5771] usb 1-1: Product: syz [ 630.820261][T11813] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,resgid=0x0000000000000000,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,jqfmt=vfsv0,. Quota mode: none. [ 630.848977][ T5771] usb 1-1: Manufacturer: syz [ 630.864092][ T5771] usb 1-1: SerialNumber: syz [ 630.898226][T11813] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: none. [ 631.699862][ T5771] usb 1-1: 0:2 : does not exist [ 631.791292][ T5771] usb 1-1: USB disconnect, device number 12 [ 631.871835][T11839] loop9: detected capacity change from 0 to 128 [ 631.945051][T11133] udevd[11133]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.231992][T11839] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 632.243208][T11839] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.649611][T11844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1708'. [ 632.729236][T11848] loop9: detected capacity change from 0 to 512 [ 632.761526][T11850] netlink: 'syz.1.1709': attribute type 8 has an invalid length. [ 632.883677][T11848] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 632.949098][T11848] EXT4-fs (loop9): 1 orphan inode deleted [ 632.989553][T11848] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 633.010129][T11856] loop7: detected capacity change from 0 to 512 [ 634.287061][T11856] Quota error (device loop7): find_block_dqentry: Quota for id 0 referenced but not present [ 634.300034][T11856] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 634.352540][T11856] EXT4-fs error (device loop7): ext4_acquire_dquot:6209: comm syz.7.1710: Failed to acquire dquot type 1 [ 634.469324][T11856] EXT4-fs (loop7): 1 truncate cleaned up [ 634.507774][T11856] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 634.695633][T11856] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.063395][ T4257] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 635.127073][ T4257] Bluetooth: hci4: Injecting HCI hardware error event [ 635.373380][ T4196] Bluetooth: hci4: hardware error 0x00 [ 635.733320][T11910] "syz.9.1722" (11910) uses obsolete ecb(arc4) skcipher [ 635.781389][T11910] syz.9.1722 sent an empty control message without MSG_MORE. [ 635.866278][T11915] loop5: detected capacity change from 0 to 512 [ 636.019675][T11915] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 636.085586][T11915] EXT4-fs (loop5): 1 orphan inode deleted [ 636.127579][T11915] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 636.939621][ T1336] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 637.189572][ T1336] usb 10-1: Using ep0 maxpacket: 32 [ 637.453829][ T1336] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 637.524617][T11942] loop5: detected capacity change from 0 to 128 [ 638.296237][ T1336] usb 10-1: config 0 has no interface number 0 [ 639.539538][ T26] audit: type=1326 audit(1764142642.028:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.7.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a5bcf749 code=0x7ffc0000 [ 639.612598][T11942] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 639.626930][T11942] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.733277][ T26] audit: type=1326 audit(1764142642.038:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.7.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a5bcf749 code=0x7ffc0000 [ 639.977661][ T1336] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 639.992927][ T26] audit: type=1326 audit(1764142642.768:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.7.1724" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23a5bcf749 code=0x0 [ 640.009010][ T1336] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.087272][ T1336] usb 10-1: config 0 descriptor?? [ 640.143595][ T1336] usb 10-1: can't set config #0, error -71 [ 640.196898][ T1336] usb 10-1: USB disconnect, device number 16 [ 640.383946][T11971] loop9: detected capacity change from 0 to 512 [ 640.459785][T11971] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 640.542026][T11971] EXT4-fs (loop9): 1 orphan inode deleted [ 640.549890][T11971] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 640.719575][ T4257] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 640.959682][ T4257] usb 6-1: Using ep0 maxpacket: 8 [ 641.120938][ T4257] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 641.188731][ T4257] usb 6-1: config 179 has no interface number 0 [ 641.249952][ T4257] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 641.372927][ T4257] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 641.424793][T11992] loop0: detected capacity change from 0 to 512 [ 641.453887][ T4257] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 641.608898][T11992] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 641.651592][ T4257] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 641.662543][ T4257] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 641.676800][ T4257] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 641.691753][T11992] EXT4-fs (loop0): 1 truncate cleaned up [ 641.715115][T11992] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 642.486472][ T4257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.549832][T11977] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 642.591446][ T4257] xpad: probe of 6-1:179.65 failed with error -5 [ 642.878858][T12005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1746'. [ 642.912525][ T4257] usb 6-1: USB disconnect, device number 2 [ 642.999827][T12008] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 643.662460][T12035] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1752'. [ 643.808932][T12040] loop5: detected capacity change from 0 to 512 [ 643.943112][T12040] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 644.228932][T12049] loop9: detected capacity change from 0 to 2048 [ 644.299872][T12040] EXT4-fs (loop5): 1 orphan inode deleted [ 644.421327][T12049] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 644.451443][T12049] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 644.746537][T12040] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 645.407016][T12062] loop0: detected capacity change from 0 to 512 [ 645.432612][T12063] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1760'. [ 645.455010][T12062] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 645.529216][T12062] EXT4-fs (loop0): 1 truncate cleaned up [ 645.560005][T12062] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 646.712920][T12092] loop7: detected capacity change from 0 to 256 [ 646.882248][T12092] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 646.899466][T12092] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 646.914819][T12101] loop5: detected capacity change from 0 to 512 [ 646.952841][T12092] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 646.979506][T12101] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 647.054091][T12101] EXT4-fs (loop5): 1 orphan inode deleted [ 647.089645][T12101] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 647.768000][T12123] loop0: detected capacity change from 0 to 128 [ 647.802311][T12121] loop7: detected capacity change from 0 to 2048 [ 647.863170][T12121] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 647.913962][T12121] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 647.932783][T12123] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 647.969324][T12121] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 647.980767][T12123] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 648.045712][T12121] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 648.259817][ T4257] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 648.433597][ T5771] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 648.454671][ T5771] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 648.519621][ T4257] usb 6-1: Using ep0 maxpacket: 8 [ 648.558769][T12154] loop0: detected capacity change from 0 to 512 [ 648.639869][ T4257] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 648.657968][ T4257] usb 6-1: config 179 has no interface number 0 [ 648.686894][ T4257] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 648.698556][T12154] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 648.728457][T12160] loop9: detected capacity change from 0 to 512 [ 648.740671][ T4257] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 648.753007][ T4257] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 648.765079][ T4257] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 648.776111][ T4257] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 648.785966][T12154] EXT4-fs (loop0): 1 orphan inode deleted [ 648.789752][ T4257] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 648.805402][ T4257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.805886][T12166] futex_wake_op: syz.7.1784 tries to shift op by 36; fix this program [ 648.826167][T12156] fido_id[12156]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 648.839918][T12127] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 648.840354][T12154] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 648.861458][ T4257] xpad: probe of 6-1:179.65 failed with error -5 [ 649.194864][ T5771] usb 6-1: USB disconnect, device number 3 [ 649.222317][T12160] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 649.279659][T12160] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 649.425533][ T26] audit: type=1800 audit(1764142652.658:109): pid=12160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1785" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 649.728513][T12181] loop9: detected capacity change from 0 to 2048 [ 649.844508][T12181] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 649.936568][ T26] audit: type=1800 audit(1764142653.168:110): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1788" name="file1" dev="loop9" ino=1415 res=0 errno=0 [ 650.038177][ T26] audit: type=1800 audit(1764142653.188:111): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1788" name="file1" dev="loop9" ino=1415 res=0 errno=0 [ 650.341813][T12198] loop5: detected capacity change from 0 to 1024 [ 650.630591][T12198] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 650.649655][T12198] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.683293][T12198] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #15: block 3: comm syz.5.1794: lblock 3 mapped to illegal pblock 3 (length 3) [ 650.727117][T12214] loop0: detected capacity change from 0 to 512 [ 650.818306][T12198] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 650.837213][T12214] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 650.873470][T12198] EXT4-fs (loop5): This should not happen!! Data will be lost [ 650.873470][T12198] [ 651.718152][T12214] EXT4-fs (loop0): 1 orphan inode deleted [ 651.732316][T12214] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 651.790107][T12217] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #15: block 8: comm syz.5.1794: lblock 8 mapped to illegal pblock 8 (length 8) [ 651.906264][T12217] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 651.967999][T12217] EXT4-fs (loop5): This should not happen!! Data will be lost [ 651.967999][T12217] [ 652.183816][ T4323] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:9: bg 0: block 112: padding at end of block bitmap is not set [ 652.323121][ T4323] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 117 [ 652.346796][ T4323] EXT4-fs (loop5): This should not happen!! Data will be lost [ 652.346796][ T4323] [ 652.524924][T12241] loop5: detected capacity change from 0 to 1024 [ 652.639533][ T2303] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 652.660597][T12241] EXT4-fs (loop5): Ignoring removed orlov option [ 652.707637][T12241] EXT4-fs (loop5): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 652.763920][ T26] audit: type=1800 audit(1764142655.998:112): pid=12241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1801" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 652.899485][ T2303] usb 1-1: Using ep0 maxpacket: 8 [ 653.037371][T12255] loop5: detected capacity change from 0 to 8 [ 653.049694][ T2303] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 653.068351][ T2303] usb 1-1: config 179 has no interface number 0 [ 653.079652][ T2303] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 653.172538][T12255] SQUASHFS error: lzo decompression failed, data probably corrupt [ 653.209414][ T2303] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 653.209568][T12255] SQUASHFS error: Failed to read block 0x144: -5 [ 653.245171][ T2303] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 653.256667][T12255] SQUASHFS error: Unable to read metadata cache entry [142] [ 653.274667][T12255] SQUASHFS error: Unable to read directory block [142:26] [ 653.282231][ T2303] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 653.309514][ T2303] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 653.353332][ T2303] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 653.372970][ T2303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.470170][T12237] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 653.491473][ T2303] xpad: probe of 1-1:179.65 failed with error -5 [ 653.704510][ T23] usb 1-1: USB disconnect, device number 13 [ 653.754455][T12277] loop7: detected capacity change from 0 to 512 [ 653.841017][T12277] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 653.952024][T12277] EXT4-fs (loop7): 1 orphan inode deleted [ 653.970906][T12277] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 654.176875][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 654.240356][T12291] loop9: detected capacity change from 0 to 1024 [ 654.285897][T12292] loop7: detected capacity change from 0 to 2048 [ 654.315546][T12291] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 654.396850][T12291] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_lock,resgid=0x0000000000000000,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,jqfmt=vfsv0,user_xattr,. Quota mode: none. [ 654.507429][T12292] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 655.345360][T12315] loop5: detected capacity change from 0 to 2048 [ 655.505544][T12315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 655.513568][T12324] loop0: detected capacity change from 0 to 512 [ 655.723711][T12324] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 655.866699][T12324] EXT4-fs (loop0): 1 orphan inode deleted [ 655.982488][T12331] loop9: detected capacity change from 0 to 256 [ 655.989257][T12324] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 656.604624][T12331] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 656.888615][T12331] loop_set_status: loop9 () has still dirty pages (nrpages=2) [ 657.227528][T12353] loop5: detected capacity change from 0 to 16 [ 657.264467][T12353] erofs: (device loop5): mounted with root inode @ nid 36. [ 657.289799][ T23] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 657.361777][T12353] erofs: (device loop5): z_erofs_readpage: failed to read, err [-95] [ 657.582567][T12357] loop9: detected capacity change from 0 to 2048 [ 657.590419][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 657.766164][T12357] loop9: p1 < > p4 [ 657.849724][ T23] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 657.882930][ T23] usb 1-1: config 179 has no interface number 0 [ 657.889250][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 657.907085][T12357] loop9: p4 size 8388608 extends beyond EOD, truncated [ 657.946864][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 657.988989][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 658.011026][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 658.041785][ T23] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 658.089699][ T23] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 658.119184][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.195231][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1834'. [ 658.199768][T12347] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 658.261381][ T23] xpad: probe of 1-1:179.65 failed with error -5 [ 658.350591][T12380] loop5: detected capacity change from 0 to 2048 [ 658.420999][T12384] loop9: detected capacity change from 0 to 512 [ 658.466044][ T2303] usb 1-1: USB disconnect, device number 14 [ 658.485771][T12384] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 658.506589][T12380] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 658.569709][T11121] udevd[11121]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 658.643353][T11327] udevd[11327]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 658.758999][T12384] EXT4-fs (loop9): 1 orphan inode deleted [ 658.772988][T12384] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 659.889909][ T1111] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 660.072736][T12424] loop9: detected capacity change from 0 to 128 [ 660.290040][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.378957][T12424] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 660.390226][T12424] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.540130][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.684261][ T1111] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 660.779718][ T1111] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 660.799098][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.846348][ T1111] usb 1-1: config 0 descriptor?? [ 661.450156][T12401] loop0: detected capacity change from 0 to 8 [ 661.914969][T12401] SQUASHFS error: Unable to read inode 0x11f [ 662.265041][T12451] loop7: detected capacity change from 0 to 512 [ 662.345702][T12451] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 662.399542][ T1111] usbhid 1-1:0.0: can't add hid device: -71 [ 662.405657][ T1111] usbhid: probe of 1-1:0.0 failed with error -71 [ 662.466564][ T1111] usb 1-1: USB disconnect, device number 15 [ 662.483137][T12451] EXT4-fs (loop7): 1 orphan inode deleted [ 662.488978][T12451] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 662.633598][T12460] loop9: detected capacity change from 0 to 1024 [ 662.709327][T12460] EXT4-fs (loop9): Ignoring removed orlov option [ 662.778998][T12460] EXT4-fs (loop9): mounted filesystem without journal. Opts: dax=never,noload,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,noload,mb_optimize_scan=0x0000000000000001,nodelalloc,,errors=continue. Quota mode: writeback. [ 663.055674][T12474] loop0: detected capacity change from 0 to 1024 [ 665.943545][T12503] loop0: detected capacity change from 0 to 256 [ 666.113064][T12503] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 666.276712][T12503] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 670.085339][ T2303] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 670.305926][ T2303] Bluetooth: hci1: Injecting HCI hardware error event [ 670.362109][ T4196] Bluetooth: hci1: hardware error 0x00 [ 670.633727][T12558] loop9: detected capacity change from 0 to 2048 [ 672.308397][T12563] loop7: detected capacity change from 0 to 1024 [ 672.384773][T12563] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 672.400659][T12563] EXT4-fs (loop7): orphan cleanup on readonly fs [ 672.421107][T12558] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 672.470205][T12563] EXT4-fs error (device loop7): ext4_free_blocks:6218: comm syz.7.1880: Freeing blocks not in datazone - block = 0, count = 4096 [ 672.550641][T12563] EXT4-fs (loop7): 1 orphan inode deleted [ 672.564049][T12563] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 673.000722][T12585] loop7: detected capacity change from 0 to 16 [ 673.103513][T12585] erofs: (device loop7): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 674.337268][T12616] netlink: 'syz.0.1882': attribute type 4 has an invalid length. [ 674.378864][T12616] netlink: 'syz.0.1882': attribute type 4 has an invalid length. [ 674.567993][T12623] loop5: detected capacity change from 0 to 1024 [ 674.639418][ T4238] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 674.677967][T12623] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 674.728337][T12626] loop0: detected capacity change from 0 to 2048 [ 674.764550][T12626] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 674.846937][T12626] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 675.019824][T12626] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 675.027544][T12626] UDF-fs: Scanning with blocksize 512 failed [ 675.272557][ T4238] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.597815][ T4238] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.653902][ T4238] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 675.680018][T12626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 675.768772][T12648] loop7: detected capacity change from 0 to 128 [ 675.810343][ T4238] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 675.870196][ T4238] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.906765][T12648] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 675.919725][T12648] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 676.063953][ T4238] usb 10-1: config 0 descriptor?? [ 677.505680][ T4238] usbhid 10-1:0.0: can't add hid device: -71 [ 677.527035][ T4238] usbhid: probe of 10-1:0.0 failed with error -71 [ 677.537483][ T4238] usb 10-1: USB disconnect, device number 17 [ 678.902191][T12700] loop7: detected capacity change from 0 to 2048 [ 679.880171][T12709] loop9: detected capacity change from 0 to 256 [ 679.892234][T12700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 683.582454][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 683.593042][T12714] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 684.119617][ T1336] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 684.338348][T12738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1924'. [ 684.355702][T12738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1924'. [ 684.365404][ T1336] usb 10-1: Using ep0 maxpacket: 32 [ 684.489562][ T1336] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.515293][ T1336] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.543066][ T1336] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 684.568114][ T1336] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.592423][ T1336] usb 10-1: config 0 descriptor?? [ 684.643819][ T1336] hub 10-1:0.0: USB hub found [ 684.649740][T12741] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1925'. [ 684.669718][T12741] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1925'. [ 684.700622][T12741] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1925'. [ 684.859729][ T1336] hub 10-1:0.0: 1 port detected [ 686.266528][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.279643][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.512065][ T4593] hub 10-1:0.0: activate --> -90 [ 687.402675][T12776] loop0: detected capacity change from 0 to 256 [ 687.424791][ T4238] usb 10-1: USB disconnect, device number 18 [ 687.505984][T12787] loop9: detected capacity change from 0 to 512 [ 687.754913][T12787] EXT4-fs (loop9): Ignoring removed oldalloc option [ 687.769893][T12787] EXT4-fs (loop9): Unrecognized mount option "smackfsfloor=ext4" or missing value [ 688.580973][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 688.675308][T12805] loop7: detected capacity change from 0 to 128 [ 690.590375][T12820] loop7: detected capacity change from 0 to 16 [ 691.172745][T12820] erofs: (device loop7): mounted with root inode @ nid 36. [ 692.330771][T12830] loop7: detected capacity change from 0 to 1764 [ 694.679151][T12860] loop9: detected capacity change from 0 to 512 [ 694.787810][T12860] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 694.827534][T12860] EXT4-fs (loop9): orphan cleanup on readonly fs [ 694.870834][T12860] Quota error (device loop9): v2_read_file_info: Free block number too big (0 >= 0). [ 694.897045][T12860] EXT4-fs warning (device loop9): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 694.919622][T12860] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 694.952364][T12860] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1951: bg 0: block 40: padding at end of block bitmap is not set [ 695.077500][T12860] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 695.128719][ T4593] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 695.145341][T12860] EXT4-fs (loop9): 1 truncate cleaned up [ 695.170247][T12860] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 695.390090][ T4593] usb 1-1: Using ep0 maxpacket: 32 [ 695.699593][ T4593] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 695.718118][ T4593] usb 1-1: config 0 has no interface number 0 [ 695.724950][ T4593] usb 1-1: config 0 interface 175 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 695.909695][ T4593] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0313, bcdDevice=5b.a8 [ 695.937120][ T4593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.947544][T12884] loop9: detected capacity change from 0 to 512 [ 696.012993][ T4593] usb 1-1: Product: syz [ 696.023858][T12884] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 696.034050][ T4593] usb 1-1: Manufacturer: syz [ 696.039426][T12882] loop5: detected capacity change from 0 to 128 [ 696.042028][ T4593] usb 1-1: SerialNumber: syz [ 696.052989][ T4593] usb 1-1: config 0 descriptor?? [ 696.069822][T12864] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 696.170468][T12882] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 696.182036][T12882] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 696.217417][T12884] EXT4-fs (loop9): 1 truncate cleaned up [ 696.259257][T12884] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 696.421083][ T4593] option 1-1:0.175: GSM modem (1-port) converter detected [ 696.481513][ T4593] usb 1-1: USB disconnect, device number 16 [ 696.543965][ T4593] option 1-1:0.175: device disconnected [ 696.973606][T12894] loop5: detected capacity change from 0 to 256 [ 698.870065][T12920] xt_TPROXY: Can be used only with -p tcp or -p udp [ 698.956538][T12919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 698.960916][T12922] binder: BINDER_SET_CONTEXT_MGR already set [ 699.080187][ T4593] Bluetooth: hci0: command 0x0406 tx timeout [ 699.109904][T12922] binder: 12917:12922 ioctl 4018620d 200000004a80 returned -16 [ 700.311993][T12944] loop7: detected capacity change from 0 to 8 [ 700.601997][T12950] loop5: detected capacity change from 0 to 512 [ 700.841692][T12954] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.1972' sets config #1 [ 700.910829][T12950] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 701.081257][T12950] EXT4-fs (loop5): 1 truncate cleaned up [ 701.087121][T12950] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 703.092747][T12982] xt_TPROXY: Can be used only with -p tcp or -p udp [ 703.164851][T12984] binder: BINDER_SET_CONTEXT_MGR already set [ 703.364382][T12984] binder: 12976:12984 ioctl 4018620d 200000004a80 returned -16 [ 706.395255][T13040] loop7: detected capacity change from 0 to 512 [ 706.788845][T13040] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 706.929654][T13040] EXT4-fs (loop7): 1 truncate cleaned up [ 706.936814][T13040] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 707.336282][T13056] xt_TPROXY: Can be used only with -p tcp or -p udp [ 709.551939][ T1111] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 710.109744][ T1111] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 710.122876][ T1111] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.169974][ T1111] usb 6-1: config 0 has no interface number 0 [ 710.349714][ T1111] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 710.369238][ T1111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.397530][ T1111] usb 6-1: Product: syz [ 710.426373][ T1111] usb 6-1: Manufacturer: syz [ 710.461810][ T1111] usb 6-1: SerialNumber: syz [ 710.484115][ T1111] usb 6-1: config 0 descriptor?? [ 710.541564][ T1111] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 710.548116][ T1111] usb 6-1: No valid video chain found. [ 710.596048][T13113] loop9: detected capacity change from 0 to 512 [ 710.722051][T13113] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 710.743535][ T1111] usb 6-1: USB disconnect, device number 4 [ 710.911235][T13113] EXT4-fs (loop9): 1 orphan inode deleted [ 710.917016][T13113] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 711.409746][T13125] xt_TPROXY: Can be used only with -p tcp or -p udp [ 711.659176][T13134] loop9: detected capacity change from 0 to 1024 [ 712.055788][T13134] EXT4-fs (loop9): Ignoring removed bh option [ 712.068484][T13134] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 712.161817][T13134] EXT4-fs (loop9): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,abort,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 712.446423][T13134] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3871: comm syz.9.2008: Allocating blocks 385-513 which overlap fs metadata [ 713.203956][T13160] loop0: detected capacity change from 0 to 256 [ 713.553653][T13133] EXT4-fs (loop9): pa ffff8880612bb380: logic 16, phys. 129, len 24 [ 713.561797][T13133] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 713.972798][T13186] loop9: detected capacity change from 0 to 512 [ 714.036448][T13189] loop0: detected capacity change from 0 to 128 [ 714.077686][T13189] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 714.088685][T13189] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 714.116136][T13186] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 714.190112][T13186] EXT4-fs (loop9): 1 orphan inode deleted [ 714.204069][T13186] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 714.672837][T13200] loop7: detected capacity change from 0 to 1764 [ 715.569208][T13212] xt_TPROXY: Can be used only with -p tcp or -p udp [ 715.748040][T13218] loop9: detected capacity change from 0 to 512 [ 716.024819][T13218] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 716.122989][T13218] EXT4-fs (loop9): 1 truncate cleaned up [ 716.165294][T13218] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 717.840637][T13243] loop5: detected capacity change from 0 to 256 [ 718.192703][T13254] loop7: detected capacity change from 0 to 512 [ 718.284378][T13254] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 718.312871][T13254] EXT4-fs (loop7): 1 orphan inode deleted [ 718.318727][T13254] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 718.553863][T13265] loop7: detected capacity change from 0 to 128 [ 718.622684][T13265] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 718.647429][T13265] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.959505][ T26] audit: type=1326 audit(1764142724.178:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz.0.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ea7a7749 code=0x7ffc0000 [ 721.280291][ T26] audit: type=1326 audit(1764142724.178:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz.0.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18ea7a7749 code=0x7ffc0000 [ 721.359292][T13312] loop0: detected capacity change from 0 to 512 [ 721.391457][ T26] audit: type=1326 audit(1764142724.178:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz.0.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ea7a7749 code=0x7ffc0000 [ 721.460195][ T26] audit: type=1326 audit(1764142724.178:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz.0.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f18ea7a7749 code=0x7ffc0000 [ 721.593863][ T26] audit: type=1326 audit(1764142724.178:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz.0.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ea7a7749 code=0x7ffc0000 [ 721.698585][T13312] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 721.750284][T13312] EXT4-fs (loop0): 1 orphan inode deleted [ 721.756077][T13312] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 722.035226][T13324] loop9: detected capacity change from 0 to 16 [ 722.115663][T13327] loop0: detected capacity change from 0 to 256 [ 722.139694][T13324] erofs: (device loop9): mounted with root inode @ nid 36. [ 722.538634][T13338] loop9: detected capacity change from 0 to 128 [ 722.603657][T13338] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 722.753612][T13338] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 725.023993][T13379] loop5: detected capacity change from 0 to 512 [ 725.101350][T13379] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 725.132616][T13379] EXT4-fs (loop5): 1 orphan inode deleted [ 725.139455][T13379] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 725.588537][T13389] loop5: detected capacity change from 0 to 256 [ 730.183182][T13426] loop5: detected capacity change from 0 to 256 [ 731.334806][T13439] loop7: detected capacity change from 0 to 256 [ 732.594397][T13464] loop9: detected capacity change from 0 to 128 [ 732.800281][T13464] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 732.860755][T13464] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 732.931621][T13474] loop7: detected capacity change from 0 to 256 [ 733.066625][T13474] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 733.099447][T13474] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 733.171719][T13474] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 734.568584][T13497] loop7: detected capacity change from 0 to 512 [ 734.646259][T13497] EXT4-fs (loop7): Ignoring removed oldalloc option [ 734.679554][T13497] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 734.713851][T13497] EXT4-fs (loop7): 1 truncate cleaned up [ 734.719682][T13497] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x000000000000007c,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 734.981555][T13503] loop5: detected capacity change from 0 to 2048 [ 735.693595][T13503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 735.930657][T13514] loop9: detected capacity change from 0 to 256 [ 736.727588][T13523] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2087'. [ 737.530310][T13541] loop5: detected capacity change from 0 to 128 [ 737.588550][T13545] ipt_REJECT: ECHOREPLY no longer supported. [ 737.729112][T13551] loop9: detected capacity change from 0 to 512 [ 737.752463][T13545] loop0: detected capacity change from 0 to 2048 [ 737.754765][T13550] loop7: detected capacity change from 0 to 256 [ 737.775124][T13551] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 737.866430][T13541] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 737.909776][T13545] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,dioread_lock,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,. Quota mode: none. [ 737.954352][T13541] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 737.969571][T13545] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 737.987318][T13551] EXT4-fs (loop9): 1 truncate cleaned up [ 738.003829][T13551] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 738.101405][T13546] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz.0.2092: path /82/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 738.764036][T13546] EXT4-fs (loop0): Remounting filesystem read-only [ 739.011661][T13543] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2092: bg 0: block 345: padding at end of block bitmap is not set [ 739.657609][T13543] EXT4-fs (loop0): Remounting filesystem read-only [ 739.779618][T13555] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 739.859490][T13543] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 739.879418][T13543] EXT4-fs (loop0): Remounting filesystem read-only [ 739.887371][T13555] EXT4-fs (loop0): Remounting filesystem read-only [ 741.060206][T13591] loop5: detected capacity change from 0 to 1024 [ 741.437960][ T2303] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 742.351113][T13611] loop5: detected capacity change from 0 to 256 [ 742.389442][ T2303] usb 1-1: Using ep0 maxpacket: 16 [ 742.509679][ T2303] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 742.518418][ T2303] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 742.717849][ T2303] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 742.761236][T13617] loop5: detected capacity change from 0 to 128 [ 742.863209][T13617] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 742.889629][ T2303] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 742.908936][ T2303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.919064][ T2303] usb 1-1: Product: syz [ 742.925514][T13617] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.929198][ T2303] usb 1-1: Manufacturer: syz [ 742.940896][ T2303] usb 1-1: SerialNumber: syz [ 743.429644][ T2303] usb 1-1: 0:2 : does not exist [ 743.830505][T13634] loop5: detected capacity change from 0 to 2048 [ 744.162947][T13634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 744.226199][ T2303] usb 1-1: USB disconnect, device number 17 [ 745.619916][T11133] udevd[11133]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 746.246588][T11436] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 746.254030][T13659] loop5: detected capacity change from 0 to 256 [ 746.753256][T13674] loop0: detected capacity change from 0 to 512 [ 746.959882][T11436] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.989776][T13674] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 747.022539][T11436] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 747.038657][T13674] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.108820][T11436] usb 8-1: config 1 has no interface number 0 [ 747.153367][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.159807][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.174810][T11436] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.236299][T11436] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 747.289231][T11436] usb 8-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 747.377716][T11436] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 748.639523][T11436] usb 8-1: string descriptor 0 read error: -71 [ 748.646727][T11436] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 748.716542][T11436] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.978259][T11436] usb 8-1: can't set config #1, error -71 [ 749.015050][T11436] usb 8-1: USB disconnect, device number 7 [ 749.697112][T13698] loop0: detected capacity change from 0 to 2048 [ 749.847768][T13706] loop7: detected capacity change from 0 to 512 [ 750.197404][T13706] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 750.238818][T13698] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 750.477238][T13706] EXT4-fs (loop7): 1 truncate cleaned up [ 750.608394][T13706] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 751.008421][T13724] loop9: detected capacity change from 0 to 256 [ 752.470068][T13719] binder: 13718:13719 ioctl c0306201 200000000080 returned -14 [ 752.724935][T13750] loop0: detected capacity change from 0 to 16 [ 752.837627][T13750] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 755.046452][T13776] loop0: detected capacity change from 0 to 256 [ 755.119892][T13775] loop9: detected capacity change from 0 to 2048 [ 755.203284][T13775] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 757.699936][ T4257] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 758.069644][ T4257] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.272424][ T4257] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 758.311685][ T4257] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 759.062715][ T4257] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.206629][ T4257] usb 8-1: config 0 descriptor?? [ 759.259735][ T4257] usb 8-1: can't set config #0, error -71 [ 759.557215][ T4257] usb 8-1: USB disconnect, device number 8 [ 760.027470][T13831] loop5: detected capacity change from 0 to 512 [ 760.106025][T13833] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 760.124668][T13831] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 760.148687][T13835] loop7: detected capacity change from 0 to 256 [ 760.262316][T13831] EXT4-fs (loop5): 1 truncate cleaned up [ 760.270584][T13831] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 760.892442][T13846] loop9: detected capacity change from 0 to 256 [ 761.197426][T13851] loop7: detected capacity change from 0 to 1024 [ 761.397217][T13851] EXT4-fs (loop7): Ignoring removed orlov option [ 761.438324][T13851] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,nogrpid,grpquota,data_err=ignore,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,barrier,stripe=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 762.810587][T13882] input: syz0 as /devices/virtual/input/input18 [ 763.040609][T13889] loop7: detected capacity change from 0 to 256 [ 763.303400][ T26] audit: type=1326 audit(1764142766.518:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.1.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 763.541837][T13889] exfat: Deprecated parameter 'utf8' [ 763.944362][T13889] exfat: Deprecated parameter 'namecase' [ 763.980824][T13889] exfat: Unknown parameter 'keep_last_dots' [ 764.067515][ T26] audit: type=1326 audit(1764142766.528:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.1.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 764.159388][ T26] audit: type=1326 audit(1764142766.528:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.1.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 764.266669][ T26] audit: type=1326 audit(1764142766.528:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.1.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 764.489458][ T26] audit: type=1326 audit(1764142766.528:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.1.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 765.038935][ T26] audit: type=1326 audit(1764142766.528:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.1.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 765.326389][ T26] audit: type=1326 audit(1764142766.528:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.1.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 765.349148][ T26] audit: type=1326 audit(1764142766.528:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.1.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 765.389408][ T26] audit: type=1326 audit(1764142766.528:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.1.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 765.539643][ T26] audit: type=1326 audit(1764142766.528:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13879 comm="syz.1.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f568f3b3749 code=0x7ffc0000 [ 766.671824][T13938] loop0: detected capacity change from 0 to 512 [ 766.744835][T13942] loop7: detected capacity change from 0 to 764 [ 766.812094][T13938] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2174: invalid indirect mapped block 4294967295 (level 1) [ 766.849801][T13938] EXT4-fs (loop0): Remounting filesystem read-only [ 766.879624][T13938] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2174: invalid indirect mapped block 4294967295 (level 1) [ 767.009860][T13938] EXT4-fs (loop0): Remounting filesystem read-only [ 767.016756][T13938] EXT4-fs (loop0): 2 truncates cleaned up [ 767.023737][T13951] loop9: detected capacity change from 0 to 256 [ 767.051695][T13938] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,abort,mb_optimize_scan=0x0000000000000001,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: writeback. [ 767.120072][T13951] exfat: Deprecated parameter 'namecase' [ 767.168631][T13951] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 767.204736][T13951] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 767.564776][T13976] fuse: Unknown parameter 'root00000000000000100000' [ 767.756117][T13988] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 768.319593][T11436] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 768.599596][T11436] usb 10-1: Using ep0 maxpacket: 8 [ 768.750268][T11436] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 768.788136][T11436] usb 10-1: config 179 has no interface number 0 [ 768.905468][T11436] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 769.249574][T11436] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 769.417608][T11436] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 769.465910][T11436] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 769.830426][T11436] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 769.902583][T14026] binder: BINDER_SET_CONTEXT_MGR already set [ 769.915041][T11436] usb 10-1: config 179 interface 65 has no altsetting 0 [ 769.950012][T11436] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 769.959720][T14026] binder: 14020:14026 ioctl 4018620d 200000004a80 returned -16 [ 770.011759][T11436] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.025727][T14032] loop0: detected capacity change from 0 to 512 [ 770.104620][T14032] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 770.135849][T11436] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input19 [ 770.180673][T14032] EXT4-fs (loop0): 1 truncate cleaned up [ 770.186367][T14032] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 770.434693][T14054] loop7: detected capacity change from 0 to 4096 [ 770.546860][T14054] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,. Quota mode: writeback. [ 770.634666][ T4593] usb 10-1: USB disconnect, device number 19 [ 770.640756][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 770.669880][ T4593] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 770.734429][T14084] loop5: detected capacity change from 0 to 8 [ 771.598618][T14097] loop7: detected capacity change from 0 to 1024 [ 771.899858][T14112] xt_TPROXY: Can be used only with -p tcp or -p udp [ 771.989073][T14116] hfsplus: failed to extend attributes file [ 773.252398][T14148] loop9: detected capacity change from 0 to 128 [ 773.274524][T14142] loop7: detected capacity change from 0 to 2048 [ 773.338899][T14148] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 773.555684][T14142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 773.631178][T14148] ext4 filesystem being mounted at /240/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 774.426736][T14148] EXT4-fs (loop9): shut down requested (1) [ 774.493797][T14148] fscrypt (loop9, inode 12): Error -5 getting encryption context [ 774.650886][T14174] loop7: detected capacity change from 0 to 512 [ 774.800760][T14174] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c0a8, mo2=0002] [ 774.808930][T14174] System zones: 1-3, 19-19, 35-38 [ 774.937365][T14174] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,dioread_lock,init_itable=0x0000000000000001,errors=remount-ro,grpquota,minixdf,i_version,debug,. Quota mode: writeback. [ 775.034137][T14174] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.749333][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 775.749350][ T26] audit: type=1800 audit(1764142778.978:133): pid=14174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2213" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 775.807989][T14202] loop0: detected capacity change from 0 to 512 [ 775.943484][T14202] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 775.980388][T14202] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 776.164785][T14220] loop7: detected capacity change from 0 to 2048 [ 776.274950][T14220] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 776.392355][T14220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 776.568271][T14229] loop9: detected capacity change from 0 to 1024 [ 776.769593][T14229] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 776.871356][T14229] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_lock,resgid=0x0000000000000000,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,jqfmt=vfsv0,user_xattr,. Quota mode: none. [ 777.049515][ T23] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 777.250785][T14249] loop7: detected capacity change from 0 to 128 [ 777.329588][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 777.454117][ T23] usb 1-1: config 0 has no interfaces? [ 777.549794][ T23] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 777.766439][T14249] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 777.782609][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.800195][ T23] usb 1-1: config 0 descriptor?? [ 777.806656][T14249] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 778.828584][ T1336] usb 1-1: USB disconnect, device number 18 [ 779.961447][T14301] loop0: detected capacity change from 0 to 256 [ 780.047853][T14320] loop7: detected capacity change from 0 to 128 [ 780.120692][T14301] exfat: Deprecated parameter 'utf8' [ 780.149438][T14301] exfat: Deprecated parameter 'namecase' [ 780.163074][T14320] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 780.189519][T14301] exfat: Unknown parameter 'keep_last_dots' [ 780.242283][T14333] xt_CT: You must specify a L4 protocol and not use inversions on it [ 780.260421][ T1336] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 780.529463][ T1336] usb 6-1: Using ep0 maxpacket: 16 [ 780.690123][ T1336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.213564][ T1336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.420548][T14364] loop7: detected capacity change from 0 to 512 [ 781.421530][ T1336] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 781.509813][ T1336] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 781.573813][T14364] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 781.594157][T14364] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 781.628344][ T1336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.730400][ T1336] usb 6-1: config 0 descriptor?? [ 782.282396][ T1336] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 782.469156][ T1336] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 782.729495][ T1336] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 782.789755][ T1336] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 782.797030][ T1336] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 782.867027][T14413] loop9: detected capacity change from 0 to 1024 [ 782.897813][ T1336] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 782.921151][T14419] netlink: 'syz.7.2253': attribute type 41 has an invalid length. [ 783.112172][ T1336] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 783.125556][ T1336] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 783.133013][ T1336] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 783.141016][ T1336] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 783.155591][ T1336] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0015/input/input20 [ 783.610931][T14434] loop7: detected capacity change from 0 to 1024 [ 783.676832][ T1336] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 783.907606][ T1336] usb 6-1: USB disconnect, device number 5 [ 784.527697][T14457] fido_id[14457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 785.639657][ T2303] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 786.009768][ T2303] usb 10-1: Using ep0 maxpacket: 16 [ 786.200128][ T2303] usb 10-1: config 0 interface 0 has no altsetting 0 [ 786.217520][ T2303] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 786.328771][ T2303] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.555975][ T2303] usb 10-1: config 0 descriptor?? [ 786.678147][T14510] loop0: detected capacity change from 0 to 1024 [ 786.731118][T14511] loop5: detected capacity change from 0 to 2048 [ 786.749146][T14510] EXT4-fs (loop0): inline encryption not supported [ 786.802650][T14511] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 786.830176][T14511] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.849110][T14510] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 786.858667][T14510] System zones: 0-1, 3-12 [ 786.867744][T14510] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,dioread_lock,resgid=0x0000000000000000,bsddf,resgid=0x0000000000000000,inlinecrypt,debug,usrquota,,errors=continue. Quota mode: writeback. [ 786.993573][T14504] loop_set_status: loop0 () has still dirty pages (nrpages=2) [ 787.272910][T11436] usb 10-1: USB disconnect, device number 20 [ 787.308121][T14544] loop0: detected capacity change from 0 to 1024 [ 787.375764][T14544] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 787.438010][T14544] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,noinit_itable,sysvgroups,journal_ioprio=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,jqfmt=vfsold,nomblk_io_submit,,errors=continue. Quota mode: none. [ 787.853703][T11436] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 788.710434][T14577] loop9: detected capacity change from 0 to 1024 [ 788.814128][T14585] loop0: detected capacity change from 0 to 16 [ 788.887744][T14577] EXT4-fs (loop9): Ignoring removed oldalloc option [ 788.909363][T11436] usb 8-1: Using ep0 maxpacket: 16 [ 788.920537][T14577] EXT4-fs (loop9): Test dummy encryption mode enabled [ 788.939459][T14577] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 789.118063][T14585] erofs: (device loop0): mounted with root inode @ nid 36. [ 789.240981][T14577] EXT4-fs (loop9): mounted filesystem without journal. Opts: oldalloc,dioread_lock,test_dummy_encryption=v1,nomblk_io_submit,delalloc,nobarrier,errors=continue,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 789.719713][T11436] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.765783][T11436] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 789.792963][T14577] EXT4-fs (loop9): re-mounted. Opts: (null). Quota mode: writeback. [ 789.802641][T11436] usb 8-1: New USB device found, idVendor=045e, idProduct=00da, bcdDevice= 0.90 [ 789.987802][T14599] loop0: detected capacity change from 0 to 2048 [ 790.376675][T14599] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 790.612508][T11436] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.623250][T11436] usb 8-1: config 0 descriptor?? [ 790.649389][T11436] usb 8-1: can't set config #0, error -71 [ 790.687675][T11436] usb 8-1: USB disconnect, device number 9 [ 790.775154][T14616] loop7: detected capacity change from 0 to 512 [ 790.929362][T14616] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 791.430742][T14616] EXT4-fs (loop7): 1 truncate cleaned up [ 791.569187][T14616] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 791.751288][T14636] loop9: detected capacity change from 0 to 512 [ 791.794202][T14644] loop5: detected capacity change from 0 to 164 [ 791.886154][T14636] EXT4-fs (loop9): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none. [ 792.176967][T14644] rock: directory entry would overflow storage [ 792.392434][T14644] rock: sig=0x4f50, size=4, remaining=3 [ 792.429161][T14644] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 793.098399][T14670] loop0: detected capacity change from 0 to 2048 [ 793.170821][T14681] loop9: detected capacity change from 0 to 1024 [ 793.216896][T14670] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 793.249620][T14681] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 793.280594][T14681] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 793.378465][T14712] loop5: detected capacity change from 0 to 512 [ 793.530626][T14712] EXT4-fs (loop5): Ignoring removed nobh option [ 793.540088][T14681] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 793.588391][T14681] System zones: 0-1, 3-36 [ 793.627619][T14712] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 793.649735][T14712] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 793.660030][T14681] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 793.690288][T14712] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.2288: Corrupt directory, running e2fsck is recommended [ 793.790079][T14712] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 793.846535][T14712] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2229: inode #15: comm syz.5.2288: corrupted in-inode xattr [ 794.014206][T14712] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.2288: couldn't read orphan inode 15 (err -117) [ 794.333634][T14712] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,auto_da_alloc,grpjquota=.usrjquota=,barrier=0x0000000000000007,nobh,grpid,,,errors=continue. Quota mode: writeback. [ 794.675432][T14741] loop9: detected capacity change from 0 to 2048 [ 794.696754][T14748] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 794.767177][T14741] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 794.802842][T14741] UDF-fs: Scanning with blocksize 512 failed [ 794.852304][T14741] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 795.559719][ T2303] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 795.971839][T14780] binder: 14778:14780 ioctl 4018620d 0 returned -22 [ 796.130355][T14785] loop7: detected capacity change from 0 to 512 [ 796.189660][ T2303] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 796.217191][ T2303] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.229539][ T2303] usb 6-1: Product: syz [ 796.233918][ T2303] usb 6-1: Manufacturer: syz [ 796.238429][T14785] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 796.248848][ T2303] usb 6-1: SerialNumber: syz [ 796.261939][ T2303] usb 6-1: config 0 descriptor?? [ 796.270592][T14795] mmap: syz.1.2303 (14795) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 796.308778][T14785] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.530865][ T4196] Bluetooth: hci2: unknown advertising packet type: 0x17 [ 796.530968][ T4196] Bluetooth: hci2: Dropping invalid advertising data [ 796.545743][ T4196] Bluetooth: hci2: Malicious advertising data. [ 796.587112][ T2303] usb-storage 6-1:0.0: USB Mass Storage device detected [ 796.912131][ T2303] usb 6-1: USB disconnect, device number 6 [ 798.137950][T14824] loop9: detected capacity change from 0 to 2048 [ 798.523378][T14846] loop5: detected capacity change from 0 to 8 [ 798.793436][T14846] SQUASHFS error: zlib decompression failed, data probably corrupt [ 798.801849][T14846] SQUASHFS error: Failed to read block 0x9b: -5 [ 798.808244][T14846] SQUASHFS error: Unable to read metadata cache entry [99] [ 798.815674][T14846] SQUASHFS error: Unable to read inode 0x127 [ 799.486450][T14866] binder: 14864:14866 ioctl 4018620d 0 returned -22 [ 800.197261][T14879] loop5: detected capacity change from 0 to 1024 [ 800.267297][T14881] loop0: detected capacity change from 0 to 1024 [ 800.280882][T14879] EXT4-fs (loop5): Ignoring removed oldalloc option [ 800.287605][T14879] EXT4-fs (loop5): Test dummy encryption mode enabled [ 800.319422][T14879] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 800.335452][T14879] EXT4-fs (loop5): mounted filesystem without journal. Opts: oldalloc,dioread_lock,test_dummy_encryption=v1,nomblk_io_submit,delalloc,nobarrier,errors=continue,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 800.428237][T14889] loop7: detected capacity change from 0 to 1024 [ 800.455993][T14879] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 800.769356][T14881] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.2314: lblock 2 mapped to illegal pblock 2 (length 1) [ 800.816885][T14881] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 801.024518][T14889] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 801.081420][T14881] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.2314: lblock 0 mapped to illegal pblock 48 (length 1) [ 801.315591][T14881] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 801.332632][T14881] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.2314: Failed to acquire dquot type 0 [ 801.354618][T14881] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 801.943393][T14881] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.2314: mark_inode_dirty error [ 802.267094][T14881] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 802.278623][T14881] EXT4-fs (loop0): 1 orphan inode deleted [ 802.284665][T14881] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,grpid,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 802.305198][ T4509] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 802.374336][ T4509] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 802.393322][T14889] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #11: comm syz.7.2316: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 802.432604][ T4509] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:16: Failed to release dquot type 0 [ 802.490193][T14889] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.2316: couldn't read orphan inode 11 (err -117) [ 802.649930][T14889] EXT4-fs (loop7): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,noload,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 802.693146][ T4509] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 802.736040][ T4509] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 802.813748][ T4509] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:16: Failed to release dquot type 0 [ 803.030685][T10993] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 803.110780][T10993] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 803.216637][T10993] EXT4-fs error (device loop0): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 803.969754][T14949] loop0: detected capacity change from 0 to 1024 [ 803.977621][T14952] binder: 14951:14952 ioctl 4018620d 0 returned -22 [ 807.915638][ T9] hfsplus: b-tree write err: -5, ino 4 [ 808.813549][T15003] loop0: detected capacity change from 0 to 256 [ 808.845176][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.851676][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.938522][T15013] binder: BINDER_SET_CONTEXT_MGR already set [ 809.170318][T15013] binder: 15011:15013 ioctl 4018620d 200000004a80 returned -16 [ 809.900879][T15003] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 810.111538][T15029] loop5: detected capacity change from 0 to 1024 [ 810.219508][T15029] EXT4-fs (loop5): inline encryption not supported [ 810.308662][T15029] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,dioread_lock,errors=remount-ro,. Quota mode: writeback. [ 810.460033][ T26] audit: type=1800 audit(2000000018.680:134): pid=15029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2341" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 810.689998][ T26] audit: type=1800 audit(2000000018.710:135): pid=15029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2341" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 810.769022][T15029] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3871: comm syz.5.2341: Allocating blocks 449-513 which overlap fs metadata [ 811.243776][T15029] EXT4-fs (loop5): Remounting filesystem read-only [ 812.602406][T15089] binder: 15088:15089 ioctl 400c620e 200000000100 returned -22 [ 812.650417][T15089] loop9: detected capacity change from 0 to 128 [ 813.771575][T15100] ------------[ cut here ]------------ [ 813.777091][T15100] WARNING: CPU: 0 PID: 15100 at mm/page_alloc.c:5462 __alloc_pages+0x391/0x470 [ 813.799101][T15100] Modules linked in: [ 813.854302][T15100] CPU: 0 PID: 15100 Comm: syz.7.2354 Not tainted syzkaller #0 [ 813.881334][T15100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 813.927603][T15100] RIP: 0010:__alloc_pages+0x391/0x470 [ 813.951210][T15100] Code: 31 ff e9 b2 fe ff ff e8 fd e6 f6 07 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fd ff ff 4c 89 e7 e8 34 ad 09 00 e9 43 fd ff ff <0f> 0b 45 31 ff e9 ef fe ff ff 65 44 8b 2d 55 8e 4f 7e 41 83 fd 08 [ 813.991441][T15100] RSP: 0018:ffffc9000352fa60 EFLAGS: 00010246 [ 813.997718][T15100] RAX: ffffc9000352faa0 RBX: 1ffff920006a5f50 RCX: 0000000000000000 [ 814.006010][T15100] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000352fac8 [ 814.015742][T15100] RBP: ffffc9000352fb58 R08: dffffc0000000000 R09: ffffc9000352faa0 [ 814.027167][T15100] R10: fffff520006a5f59 R11: 1ffff920006a5f54 R12: dffffc0000000000 [ 814.050348][T15100] R13: 0000000000000000 R14: 0000000000040cc0 R15: 0000000000000013 [ 814.075017][T15100] FS: 00007f23a3e366c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 814.089432][T15100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 814.098516][T15100] CR2: 00007ffba193b6b0 CR3: 0000000065f68000 CR4: 00000000003506e0 [ 814.117559][T15100] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 814.127139][T15100] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 814.137892][T15100] Call Trace: [ 814.141538][T15100] [ 814.144645][T15100] ? zone_statistics+0x170/0x170 [ 814.149955][T15100] ? alloc_pages+0x438/0x550 [ 814.154760][T15100] kmalloc_order+0x40/0x150 [ 814.160138][T15100] ? __might_fault+0xb3/0x110 [ 814.164987][T15100] kmalloc_order_trace+0x14/0xf0 [ 814.170323][T15100] raw_ioctl+0x1636/0x3560 [ 814.174910][T15100] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 814.180909][T15100] ? verify_lock_unused+0x140/0x140 [ 814.186283][T15100] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 814.192111][T15100] ? make_qualifier+0x3b0/0x3b0 [ 814.197173][T15100] ? bpf_lsm_file_ioctl+0x5/0x10 [ 814.202444][T15100] ? security_file_ioctl+0x7c/0xa0 [ 814.207707][T15100] ? make_qualifier+0x3b0/0x3b0 [ 814.212903][T15100] __se_sys_ioctl+0xfa/0x170 [ 814.217657][T15100] do_syscall_64+0x4c/0xa0 [ 814.222273][T15100] ? clear_bhb_loop+0x30/0x80 [ 814.227177][T15100] ? clear_bhb_loop+0x30/0x80 [ 814.232778][T15100] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 814.238947][T15100] RIP: 0033:0x7f23a5bcf749 [ 814.245888][T15100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.265873][T15100] RSP: 002b:00007f23a3e36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.274512][T15100] RAX: ffffffffffffffda RBX: 00007f23a5e25fa0 RCX: 00007f23a5bcf749 [ 814.282780][T15100] RDX: 0000200000000000 RSI: 00000000c0085504 RDI: 0000000000000003 [ 814.299599][T15100] RBP: 00007f23a5c53f91 R08: 0000000000000000 R09: 0000000000000000 [ 814.307821][T15100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.316008][T15100] R13: 00007f23a5e26038 R14: 00007f23a5e25fa0 R15: 00007ffc593b1968 [ 814.330722][T15100] [ 814.333984][T15100] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 814.341291][T15100] CPU: 0 PID: 15100 Comm: syz.7.2354 Not tainted syzkaller #0 [ 814.348770][T15100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 814.359054][T15100] Call Trace: [ 814.362354][T15100] [ 814.365306][T15100] dump_stack_lvl+0x168/0x230 [ 814.370028][T15100] ? show_regs_print_info+0x20/0x20 [ 814.375262][T15100] ? load_image+0x3b0/0x3b0 [ 814.379811][T15100] panic+0x2c9/0x7f0 [ 814.383745][T15100] ? bpf_jit_dump+0xd0/0xd0 [ 814.388290][T15100] ? __alloc_pages+0x391/0x470 [ 814.393083][T15100] __warn+0x248/0x2b0 [ 814.397092][T15100] ? __alloc_pages+0x391/0x470 [ 814.401895][T15100] report_bug+0x1b7/0x2e0 [ 814.406258][T15100] handle_bug+0x3a/0x70 [ 814.410439][T15100] exc_invalid_op+0x16/0x40 [ 814.414962][T15100] asm_exc_invalid_op+0x16/0x20 [ 814.419839][T15100] RIP: 0010:__alloc_pages+0x391/0x470 [ 814.425234][T15100] Code: 31 ff e9 b2 fe ff ff e8 fd e6 f6 07 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fd ff ff 4c 89 e7 e8 34 ad 09 00 e9 43 fd ff ff <0f> 0b 45 31 ff e9 ef fe ff ff 65 44 8b 2d 55 8e 4f 7e 41 83 fd 08 [ 814.444857][T15100] RSP: 0018:ffffc9000352fa60 EFLAGS: 00010246 [ 814.450949][T15100] RAX: ffffc9000352faa0 RBX: 1ffff920006a5f50 RCX: 0000000000000000 [ 814.458940][T15100] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000352fac8 [ 814.466939][T15100] RBP: ffffc9000352fb58 R08: dffffc0000000000 R09: ffffc9000352faa0 [ 814.474931][T15100] R10: fffff520006a5f59 R11: 1ffff920006a5f54 R12: dffffc0000000000 [ 814.482925][T15100] R13: 0000000000000000 R14: 0000000000040cc0 R15: 0000000000000013 [ 814.490934][T15100] ? zone_statistics+0x170/0x170 [ 814.495910][T15100] ? alloc_pages+0x438/0x550 [ 814.500533][T15100] kmalloc_order+0x40/0x150 [ 814.505049][T15100] ? __might_fault+0xb3/0x110 [ 814.509751][T15100] kmalloc_order_trace+0x14/0xf0 [ 814.514971][T15100] raw_ioctl+0x1636/0x3560 [ 814.519409][T15100] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 814.525065][T15100] ? verify_lock_unused+0x140/0x140 [ 814.530291][T15100] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 814.535786][T15100] ? make_qualifier+0x3b0/0x3b0 [ 814.540724][T15100] ? bpf_lsm_file_ioctl+0x5/0x10 [ 814.545687][T15100] ? security_file_ioctl+0x7c/0xa0 [ 814.550829][T15100] ? make_qualifier+0x3b0/0x3b0 [ 814.555700][T15100] __se_sys_ioctl+0xfa/0x170 [ 814.560319][T15100] do_syscall_64+0x4c/0xa0 [ 814.564752][T15100] ? clear_bhb_loop+0x30/0x80 [ 814.569446][T15100] ? clear_bhb_loop+0x30/0x80 [ 814.574144][T15100] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 814.580052][T15100] RIP: 0033:0x7f23a5bcf749 [ 814.584483][T15100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.604116][T15100] RSP: 002b:00007f23a3e36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.612548][T15100] RAX: ffffffffffffffda RBX: 00007f23a5e25fa0 RCX: 00007f23a5bcf749 [ 814.620537][T15100] RDX: 0000200000000000 RSI: 00000000c0085504 RDI: 0000000000000003 [ 814.628529][T15100] RBP: 00007f23a5c53f91 R08: 0000000000000000 R09: 0000000000000000 [ 814.636527][T15100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.644601][T15100] R13: 00007f23a5e26038 R14: 00007f23a5e25fa0 R15: 00007ffc593b1968 [ 814.652609][T15100] [ 814.655933][T15100] Kernel Offset: disabled [ 814.667978][T15100] Rebooting in 86400 seconds..