last executing test programs: 2m47.463000346s ago: executing program 3 (id=324): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=0x0], 0x0, 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='snd_soc_jack_irq\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40187014, 0x0) syz_mount_image$squashfs(&(0x7f00000003c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x1d2, &(0x7f0000000580)="$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") 2m46.308750005s ago: executing program 3 (id=326): syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 2m46.109789558s ago: executing program 3 (id=328): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2701, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) socket(0x40000000015, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 2m45.536699476s ago: executing program 3 (id=332): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@fat=@flush}, {@shortname_winnt}, {@numtail}, {@fat=@usefree}, {@fat=@time_offset={'time_offset', 0x3d, 0x36c}}, {@uni_xlate}, {@utf8no}, {@numtail}]}, 0x0, 0x289, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 2m43.961186842s ago: executing program 3 (id=334): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_open_dev$vbi(0x0, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) getdents(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m43.336631841s ago: executing program 3 (id=342): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m43.030419316s ago: executing program 32 (id=342): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.887568481s ago: executing program 4 (id=1363): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000012", 0x5}], 0x1, 0x0, 0x1f, 0x1f00c00e}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b52221c709e644460775e", 0x27}], 0x1}, 0x24040050) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) preadv(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000180)=""/34, 0x22}], 0x2, 0x583, 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 24.712812574s ago: executing program 4 (id=1365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) 24.514337558s ago: executing program 4 (id=1366): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @loopback, 0x5}, 0x1c) 24.35392971s ago: executing program 4 (id=1367): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xbe6}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@acl}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x31) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x55e, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x161) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./bus\x00', 0x1000410, &(0x7f0000000b00)={[{@grpid}, {@bsdgroups}, {@dax_inode}, {@nobarrier}], [{@measure}, {@uid_lt={'uid<', 0xee00}}, {@euid_lt}, {@dont_hash}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@dont_appraise}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) inotify_init1(0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000002c0)='./file1\x00', 0x109042, 0x0) fallocate(r2, 0x11, 0x0, 0x6fffffc) 23.494077413s ago: executing program 4 (id=1370): r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1, 0x4, 0xfffffff7, 0x40670, 0x1, 0x962f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x9}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r7, &(0x7f00000000c0), 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xffffff69, 0x7dda, 0x1, 0x40, r1, 0x2, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0xa}, 0x50) r8 = syz_pidfd_open(r0, 0x0) setns(r8, 0x10000000) 22.244770783s ago: executing program 4 (id=1378): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40000010}) wait4(r1, 0x0, 0x8, 0x0) 21.815161779s ago: executing program 33 (id=1378): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x40000010}) wait4(r1, 0x0, 0x8, 0x0) 14.420698785s ago: executing program 0 (id=1399): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000084000040"]) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 14.335040866s ago: executing program 0 (id=1401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 14.268425427s ago: executing program 0 (id=1402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0x0, 0x7f, 0x9, '\x00', 0x5}, {0x6, 0x1, 0x7a, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x5c}, {0x0, 0x0, 0x2, '\x00', 0x8}, {0x6, 0x9, 0x1, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0xa, 0x9, 0x0, '\x00', 0xfb}, {0x7, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x6, 0x86, 0xc, '\x00', 0xf9}, {0x5, 0x4f}, {0x4, 0x4, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x7, '\x00', 0x81}, {0x3, 0x7, 0xd1, '\x00', 0x1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x12}, {0x3e, 0x4c, 0xa, '\x00', 0x3}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x40, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xdf, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x25, 0x0, "a386bcb957f6ee650a88e81a5cb3b0852da5b6b12cf6ffffffffff0f392be7124f3883ab73ec229f5fab90b052c3572c8e868f4f1ff8e2f4bff94f46103f6fb8ed729eed0700000000000000de127097"}, 0xd8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"0bd13af7e222d7b82977a894bcf2d741b99f8f02da617b9ad94014424a83db0314f34fdfe9a260e953f1aaf3610eec4c839a08a42b569d1e59b5520d8ad988ecacf773bc8c1855c13291a20986512ff73d4967f734679cb88ac4c1013a6d38828f96b71019283ce07d08bbb370738322ffae7a0afc79279598c1166ec564d5be5344fc87a5f00ca1354bced1fccde226dcd6e864d8262199e37fda0824cafccbe5f8cd0518aa106eb5f8a0986aca2d05a5eaa0177c72d3caeb3579fd729cfe1e7c8e2bb7a9dcfc32e31c7dd4cb48b11128a933481391a63c788de6306217984ef3aa5c402cf680385d96c065818632f2eb3b976ae7997d793ee5a91e26017c70319748f5b8505ce26e2fc2a50296523adc134596ff6ce79f6b58e5ca0612085af940096fb90cb23a7eac4d0e1f0933ef17dd5b760ed2864d8cc3dca7174f7d10bc4ccde5463f72f0265c673a73a1d7d41a581d8491c8f37615278b543c2c3310ae461a924409d0b5a1a75085d800e69f7351d6f2e058d6323d3ae70c7a1b7961a017dcbd827381d2133be3eda141656239ee6859843e51305726cc2444f1360e65e2993842d09428843f2c50c989084ed7722d34e930873d420e9c9fffda5fedf8370000000000000000885e2e653d083ccc91792e12e3082139763d44f68d1115d8e545444accee3bb38a9fa3b9ff7172868cfaf0a8f22a6939248404db646f2aa405a21b953498132fe3167e4783623451da9253e12187b4086f56bdd827e75a5523e04683335992552fa2cce95d2b23833d57bf2872f9e428b374d049a35636113207f68e34d7f1392c05add0d78b9d999c7a5d47dcbb803bcab54544dbceb73f41d5ac0970883308fecd0edcbb3eea10c1b56c851d13ff248353994d4fc68815b1bf45d202c9944b5cecc4d09a99b422ef51442a8c16e1dbb6a955c4618d592d43cd7e52c206929662f178afe060401868ffaf0db2f1eb3aaeb591be9eae546ae97266315e87487dd399ea4ec20423904c3953376a3ab41853f00b720b270b6ae8fd3cbd6c66e4af6d15bbae6aa085e56a3f8ca4a40117a72209d18e4e31e06389650b8115ef5f1fcd8c2d56b37d66fff06008836e501304a332dd3a9e6eea4f8f8d9e3671edc0abe7788692ba653850e980c36a4d3f60d090a58e34fa033b8e92ce7c19a1730872bd9b58530729400823e68ebb0ab9294bebfcd5404194a9dce119d204e01736b57ef37f7bc11ebf9bbf4d33a35ccebc67a3e38bc092cc208e8d70f33d830d26e16b5adcfb3a8928ececc4273771716dce7a0cd4d6f37f8cf70242fe91f09d9d07745e60c35b93bc343eb27751afc6ffb4693ef290668824287595c20cda170ff582c630e2a5df595cb8b7868b8f28665c7fb592d8763b6a0c3e20154f6400"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x1, 0xbb, 0x2, 0xc0, 0x6d, 0x9, 0x61, 0x7, 0x90, 0xd}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13.868622444s ago: executing program 0 (id=1404): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x15, 0xfeb8, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x1, 0x3, 0xb, 0x3, 0x7, 0xd}) 13.46915877s ago: executing program 0 (id=1407): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) write$dsp(r0, &(0x7f00000000c0)="5dff", 0x2) timer_settime(0x0, 0x0, 0x0, 0x0) 13.116826975s ago: executing program 0 (id=1408): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000084000040"]) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 12.79607823s ago: executing program 34 (id=1408): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000084000040"]) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 10.390393858s ago: executing program 1 (id=1421): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x24000090) unlink(&(0x7f0000000000)='./file0/file0\x00') setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 9.284787495s ago: executing program 1 (id=1423): syz_open_procfs$namespace(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r0, &(0x7f0000000180)='0\x00', 0x2) unshare(0x6a040000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 3.920231539s ago: executing program 1 (id=1440): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000400)="0c76d22d48e57f42d2f12a09585ba95962d9e7210822031d184c04123c4e78ed628eb7232d9d38c1dd229b269403d3ac796a4f9edb61a43033427f44d6a16d6c05ab90c6c8", 0x45}, {&(0x7f0000000740)="33f95823b99e3e2d53f5c940f778d9020e571f8a0429b2eda127be73d30fe8e52775a9f2ce5ff595913a72442f6a45df0b6c5650ad90589afeed76c4b836c1e9c05146067c4d77f9767bc29b7aa8c356189f2919f93799925bddc52989ecf381da325d12ab8b8f42fff167aaf4cd07ab5cebb7016b66de176d9beee6f05f24333cd30f6b3a277c114e06ad53e261ad80e09a989c8b07333174c799469c748406ce9100b2821dd9cced68e32eb087ee0142ab23a7f1f547063e0205fb2b0bae4132b6bc66788b4d4e09e9518ff9df6e0e0eeb9e72b95fec6e29aee48c868a8ca1d8970b39275e30779d45835c6a67aa9353f0e4150f95998471052d5568f01e36f58a1a385764e0d52f87ff2fb3b70503073d4c1c6c4039c815ef5bde28d00ffe1ee5c619c10c37213ccc49e9e8725028648b364a4a291f06c08878784652ef8e0d57782b5af992ba53b4d5ea4eb85dfbbdc28b79f6bf65ef7a4c8c23ab3fee4eb9224b885d8ca8c27624599c59ba0186928dc1bff6c99f25f66908e3ddae6bc6dcfe03c75273b6ac53e95cf428d410c9bbb543465e00d0db0b84975f3e32df4237b546c51c29bd3507a4ee99faae2bf3c1c09642adaf1f743f121e242b0273325894144d8273430edab5f5c0b6026bacae1d86812f84963f0507d3863ac68d7579949434f6b0ea97a4bd06e8cf2a75ec341b3e1295344e5096eeefadf3227c0c80e95ad49ad55d95f9975acf3fe5b95cdb08f52ce76bdd8e4c3f752b81168434878742644a817e4b8b374f8cd3b950ccf5f1ff4c3fa8e6686251accd66bcedab1dbf58006f1f2975e483419d29e2c261a8c20a4dfc51d9818f8d7fe9d3c15091f415e5451734edb9e5438c849c8542fca6d8ad50b10f7949e935982dac42a028fc3b80901feb5e306069ad384d228d7632324fb057ab0db59ac9ad152aeabdd01a01bcbf93d5f94756cd1f11070289f7e261cf40fcb5bc1913cccd7786ed3005251ed242ce3df21f66a6bd13f133adcf1e0f957fb4608bb0aac99be61fdb36a87fbd89c1a9ab95e545b25ab5e7e8476e1011301f3c2ae25f5e3d04a25c5330447e35cdc1306f003cb87a1d9f34e223beb7a4904bc9e1dc9b98fe9286dbee27eb12976f6eb734b9e6779ecf6e0aef24922026f9fbc336f0a8f96fc3d616605a2964002b27aa6f1f83ade5ae1634104f409b01d4679609a39a7a11d8aa8e4818b7ebc3fa61b2dc2609088fbd32a1d8c458ce4031518551fc02a84022b555ac8361e26df26e5ce830b616331e80a0fd6a05b33286cab93ef21fb9d8e1f48b3cb09bcdab5da9a9ea65606970b3fbcd88e57a93a67bb27ff9c57393e3f1cb51f550421a2de92ccca578333d6c6927328774c293e7dec80c6e62e9886f899ac15cf989ce21d6e7f26a0dde9906bdc3ba2fa4f25dc203e7c17a87a06adc1299e8c62a7e2456d64d49fa5fe9044dd7fe518747f10415787b714fe3404fd79e48a1a7157b52ccf212bf0defb6518ebf4988479bd50899199ef24d73beed4b240a3598659e27b45af0acaece9466ff5792008c4d8f44a313c05bf9c0b6729c92a138b11cd02af5d66e3df39e9d31d5e1188f47a4f4c0e1efe2cc8f6a72497eba3e49250d4ce010a57cd3039c8839f8cdf56ea6797952e1b9311743519307c300853c8ea888c40c33f6eae3b4d6a2fb760ad64d9d595dd7f959fa836bf5eee85987bd1e19d98f78eb93e66cb3aab71f688d5093f2f71ac77e9b3c46ef6268d59a1569d3b070fe1378fdb36b9fc25335a7d7bc4fd32cbb1dd12e930020a7a8471be8ae7700bff41a8297bdbbc1dd6e89ee199b71be0ddff397d303061372b5d1c55dec818d6d10d75747b8646e4ae70cea8f7c4f77338be84ba6734abd997fec74de25bfef1a92915ac24a8733b97148010bf27c0675af57d3961a8e0e2cd26aa2b3e630d0cbc51264432f5c3678308f3cc7835c70d474ba40a050198f379cc45bbd07b632b68b304fa6168576e21018ecc52e6eb82d72da0c69b2c3ab96f8fccfe356c8cfdd797d0864a137c7ff79b5d934958ccf438a9873caff8e7d2ee87ba50453ef05891c5839ab36218c7484ac1bfb608277e71ac1c970e4e36f5cebd9d5be3ad3f4d4640c36db846dfc069587553a13d4d864a385de323ca68a599a342932136ceaa1d719c67b18f86089175b42e97093f193666fcc0291822f54c15f543f0fecb4d83bc92063787b3950df1ff9f8e560442155ee9f63b51b4ef7b971a6abec75d8455462d03d11802956a03db02e0ecab14ddd96791b3dd1289d9583e1ead21dfa2acc86a41d907a77127aa968f33b2d22d5e03d8dd693139c8550ced8dd6e99d8c2a066cdffad40d0e0c55b0de404a28b3a4fa5cf41f48a44632d3522215e930ce0e1cccab818805811954f8fcf70a35813818d3e645e61ed3a9c0c5712e6b25cf9386107b1be9e2baf04c994344bf7e3c66b0c3a053ba093d5f23fea65216dce57f8bf3d9d74806ba854b8cf4364b34d47b61d3e4d1fd50004c9960c92c8bb5c9c70d77bc815f07c2d54113f0080b1c54878d073c1ff83ee4f7271e30008896d810c5102b36f442ce67429eda4d302e3cfa0b9645ca967dea1257a3463cb95d14235cdec53ce55dda12c604863fbc0a294622690633d3127d19dbb255ea60f89a567602e36d7feaf9627839d7d5b902ada1e6359a723a4ed2de440065474c99a33ac3884463b015d84923b5e542de6cc64abec0d404a6ada50cd393a33a4f3bd1eccaa6819c92743b6ac2f41149e6409bb37b563e54726ad2a7c38037500406e1d25e6d06ec094da1ec9d8d3db6f5687d1b3790157cb4ed5c87360869bea7ead6ff6bab2518ab183a4eedf0418d3d99b40310528f060201663a5239c250c3391c7c4be82df84e6d47abaa2cba21e98fee735e4a27b56931e65a9fa1692ef853ae2a1b17caae28bf872fc8e6c43827f718742d6c2e696dea018bf4ae72778c7d747dcd694e8c9a66e73287bb44737a4f974c7130028f959ae78d656935cd0e6617aae28a2a85c9ebb3f2de0a596f197a3ef153363bfb8065370f57cc3ad69106965a33ec7d2235cf4cd4cdd38ecb5b8eaef214c9b3a6289f817f539e74bca052b21c67b291ec073c17a8e7d6848fd55409bb445c6a5eaf1c5d93a8e191331988fd542dcd2f45fbe3828d4e42b3fa223164f5bb3bc63815d1a2aeca2b64274471928378179af979c2f9b2381448a3d76b8fd14c5fca7dccf14b0d9100162acdfb97c0dfcbe4171b832acb334f30cc8644612540322e0407220708611b5b1547b9137483c9560198242232e3d2e618ad34ca6eedcb7b74a7661eab1e6f38db050d66a46807336670287f5d08f8d4cdbc60e8d651a24b4becaaa370a350d7d0394406a4c43dc16187686038a1656130d952ed94b21eaa12c4aee2db010e0ad205f19af4117e6d204e5ecc89ae22196af4cdf091e089b703a01fe1a478140048186fb1fbd0e9f6a8f3f2b25783e9ce20b6c9a8d4756df674fe8445f36b3db0e5887fba7fce27c9da49988ec5dd80b75a45c73ae399c84f6994dec1d68da39a0083d56c287e0faf765dfe1ac654bf6e32840abc41445c1c31a71ecfcd45eb4e87efb9485a77ddfc6ce1f85c1e01a259fc7b59bf13271e105671ee3aee4b7a9f44d37826bf82571e3751a90ea485aed2407dc4c45b14a9461aeef4ab683b5d819df38424260a02d4268cd1a4fcab6ffc7674b9108706f70d4577e662c196db4997f6d8dd34ce8f9a99a924464dad5d72c16027b764eeebe33a937db30fda0a946994878d08bc7cbcc2d25bdeabc1c53632c91e65c8603fe7db1a4fdac12820a995e8694bbe0b3f06516a8752796fcc978a87bfbc333bd3699c33eb8017c0b9a6cc86ce648b6e9ff3b060b277140db4acda6fb7610da5fa234a3f70a7d68208574850ec116ed006fa8528d1a39faa0c7ee59f32c780f231a5c815ef6d7e54d97c1e95461723f3e638237dcec7a793da7b23ebe9648cb6e22c9b794f9c04ff92e5737578adece046641c4a046b7930ff64c176487de1fb589f3408f457d8cff9d616c200484c62bf92cfddd8a6e37c8401690983557085d4709117d7ef460cb19aca621c89e042eb0e18d8a2a19610c7a7dfec67fe1d66ec8391bbb03cb768f862ca7a73ac3b3e44fd8b5eb5a0a6d2c013319e5ee66ac427e16428e106fd1b0aa04b303fc2ddcf93a667f3899ce3b9fcee65f6d14fad50467af2fc1e07f5ca47acc0ce9e5470610d34f104a414218d31fa802f746316aa08b2c85f539d78120896a2cbfabb828c131a61a8fc0a56089b734c16418e01e8870a9a950a861bb3ba548745413ea86af8eaa9cac846e15812fa22d83e1a9c81fa6b36a7b3b222e554bff393965922b470bc663408056985a6ed3b3ab05c47a52faff8eb0bdaf92ccafff896d270fbe19aceed2223babc983e2c6a218e419c987ef149eeada5fcdecb1be12241eddd4e7231629973e5f0f856ae0614213fa0fe533180070380fd10b00c8b48131780648513e54aba54c2563b48d09f3eceb0e4745fec800a1dec04645e16b5c284f07da85e7e45dddda25d177114f440b6c9d4dce92e4e665b23bef394e53ed4060e2cead02427425ba5434d090cf885f3336c5437c86ec7a3ee2c119b8f17ac7d2f8366db85143dff5f4d584b5fc131b31bb273ee24b183bd2276b2315bb551ff8930fed87521f773e5d84b34dc36f1746a7bd4851e854ae007aafeef70f14cb9893c85aadbe91ed7bfe7823f2fbaf4a40f1ce7caebe6ebde9761dcef4e174c2f3c4e9fa4d8da8eab85059bb08f2b6e53632d9752d4dc9f920f86044cb1a048a24582d0926f08a64539d749eef7da86de94bf6b1dbab22588d583ddda238ec20e1ff7526f7b94728cc1ec757182c3b5f512e8f3b92cd9a29324bc3c521ae0d78b216077443db536fd9a6015dd67aa1b331ac4fe4966463513da53e7d1e3318e3109a4e2f5b1c0f00c6bfb56c3814d3ce17ceab08c9be45409b4ada607837094c1317859ef968e1f7e86ae4f4339ee0e17415774cb04661b2b1a59ed937b9f841f82bf68dbe1be4e67772f6518382cf50f5fdfbbf1d48329ed4e2d751c037a9b71e577b0c599c2997c6d39958f0ef564536391ef5e0a2f7696f9c87e350b1a66772022374963e7e131e732e528f58f954e17b3593a49e3509a5f3f5a22f5d06a06ce5c08312dad1380ea22803724ffcae5343fee074a22cad93a9e973d829e23b993056bd151b2c78f0e8c711904d3eb09b34fa74b5a876f6ba98cec7e185534a1e6ada7e0eb40946f2b52e8967399327413a051c122db6b23cc657c06ffa987e8718d0660d2ea3c260c30f1fde604613f3f6ce6630cc551ed1d2c07d21ba464bd55f20ea5d75639166ffff68696c24f45a5b5d8367f90abfb72eb0c6608fc730e84e9a5f310d243cd8821db0297cc565de46fa8872a480972266ac44a470c33033c4abfe01926eedf308b367204997ddeee39af8934617687a87ed524a6bb6293e6ca6d7462382ed5d44203ddf63cdd823994006bfae7a503b8997430de578f2e8f169bce5c315746729a743669f744d48292e126c6788d1b2be901f13861b94411c9eab9f058fa7ac0cccdb6f8774232d67ac057b84d915ef0eb6bcf2050f3174852f48025d922e461454d7b9986b897df7e008cbd7ae2a3f53fafaa3", 0xfbc}], 0x2}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000001c0)="eb1e246e0a5551fdf20442835757a68227c283a83fb1b28ce394e9988b08e181b8e5e77196a6d4", 0x27}], 0x1}}], 0x2, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 2.453781432s ago: executing program 2 (id=1444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.981744779s ago: executing program 5 (id=1379): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a80)=@newsa={0x10c, 0x10, 0x1, 0x8000000, 0xfffbffff, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2000, 0x0, 0xa, 0x0, 0x30, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x3c}, @in=@empty, {0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e21, @in=@private=0xa010102}}]}, 0x10c}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000001840)={0x2020}, 0x2020) 1.431089358s ago: executing program 2 (id=1445): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000400)={'caif0', 0x32, 0x39}, 0x8) 1.30258927s ago: executing program 2 (id=1446): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095", @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x2, 0x1002, &(0x7f0000002500)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x41) 1.208844641s ago: executing program 2 (id=1447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="cf00000000"]) 491.739943ms ago: executing program 2 (id=1448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x25, 0x0, "a386bcb957f6ee650a88e81a5cb3b0852da5b6b12cf6ffffffffff0f392be7124f3883ab73ec229f5fab90b052c3572c8e868f4f1ff8e2f4bff94f46103f6fb8ed729eed0700000000000000de127097"}, 0xd8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"0bd13af7e222d7b82977a894bcf2d741b99f8f02da617b9ad94014424a83db0314f34fdfe9a260e953f1aaf3610eec4c839a08a42b569d1e59b5520d8ad988ecacf773bc8c1855c13291a20986512ff73d4967f734679cb88ac4c1013a6d38828f96b71019283ce07d08bbb370738322ffae7a0afc79279598c1166ec564d5be5344fc87a5f00ca1354bced1fccde226dcd6e864d8262199e37fda0824cafccbe5f8cd0518aa106eb5f8a0986aca2d05a5eaa0177c72d3caeb3579fd729cfe1e7c8e2bb7a9dcfc32e31c7dd4cb48b11128a933481391a63c788de6306217984ef3aa5c402cf680385d96c065818632f2eb3b976ae7997d793ee5a91e26017c70319748f5b8505ce26e2fc2a50296523adc134596ff6ce79f6b58e5ca0612085af940096fb90cb23a7eac4d0e1f0933ef17dd5b760ed2864d8cc3dca7174f7d10bc4ccde5463f72f0265c673a73a1d7d41a581d8491c8f37615278b543c2c3310ae461a924409d0b5a1a75085d800e69f7351d6f2e058d6323d3ae70c7a1b7961a017dcbd827381d2133be3eda141656239ee6859843e51305726cc2444f1360e65e2993842d09428843f2c50c989084ed7722d34e930873d420e9c9fffda5fedf8370000000000000000885e2e653d083ccc91792e12e3082139763d44f68d1115d8e545444accee3bb38a9fa3b9ff7172868cfaf0a8f22a6939248404db646f2aa405a21b953498132fe3167e4783623451da9253e12187b4086f56bdd827e75a5523e04683335992552fa2cce95d2b23833d57bf2872f9e428b374d049a35636113207f68e34d7f1392c05add0d78b9d999c7a5d47dcbb803bcab54544dbceb73f41d5ac0970883308fecd0edcbb3eea10c1b56c851d13ff248353994d4fc68815b1bf45d202c9944b5cecc4d09a99b422ef51442a8c16e1dbb6a955c4618d592d43cd7e52c206929662f178afe060401868ffaf0db2f1eb3aaeb591be9eae546ae97266315e87487dd399ea4ec20423904c3953376a3ab41853f00b720b270b6ae8fd3cbd6c66e4af6d15bbae6aa085e56a3f8ca4a40117a72209d18e4e31e06389650b8115ef5f1fcd8c2d56b37d66fff06008836e501304a332dd3a9e6eea4f8f8d9e3671edc0abe7788692ba653850e980c36a4d3f60d090a58e34fa033b8e92ce7c19a1730872bd9b58530729400823e68ebb0ab9294bebfcd5404194a9dce119d204e01736b57ef37f7bc11ebf9bbf4d33a35ccebc67a3e38bc092cc208e8d70f33d830d26e16b5adcfb3a8928ececc4273771716dce7a0cd4d6f37f8cf70242fe91f09d9d07745e60c35b93bc343eb27751afc6ffb4693ef290668824287595c20cda170ff582c630e2a5df595cb8b7868b8f28665c7fb592d8763b6a0c3e20154f6400"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x1, 0xbb, 0x2, 0xc0, 0x6d, 0x9, 0x61, 0x7, 0x90, 0xd}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 457.811223ms ago: executing program 1 (id=1449): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000100)=0xfffffffa, 0x4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000100)={0xeeee8000, 0xf000, 0x3, 0x0, 0xfc}) 384.795364ms ago: executing program 5 (id=1450): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002280)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}, {{&(0x7f0000000280)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000000000001701"], 0x10}}], 0x2, 0xc000) 237.112287ms ago: executing program 2 (id=1451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002840)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x5}, @void, @val={0x25, 0x3, {0x1, 0x7, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 225.067327ms ago: executing program 1 (id=1452): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000001280)=ANY=[@ANYBLOB="8701000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03b1d1ca4cb3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc391a65c674a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b450ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bcab12fcc661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc0284c5a5d51f0e115ab159e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6dde4ab67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b418528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03e0d3ab2b71d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac00000000000080014573789425c4c22da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767c0700783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c4d885723734a3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac809c227aa25842f75981bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 176.641277ms ago: executing program 5 (id=1453): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000400)={'caif0', 0x32, 0x39}, 0x8) 41.436979ms ago: executing program 5 (id=1454): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080)={[{@nouid32}, {@grpid}, {@errors_remount}]}, 0x1, 0x4b6, &(0x7f0000000540)="$eJzs3c9vE9kdAPDvTBISQiChReoPtYVSWloh7MRAhDjRS6sKIVVFPfUAaWKiKHYcJQ4lKYfwP1QqUk/tn9BDpR4qceq9t+5tL+xhJXYX7YqstAevxnZCCHGSXYJnFX8+0tPMm2f8/T6cec95SfwC6FnnImI9Io5FxL2IGG1fT9olbrZK9riXLx5Nb7x4NJ1Eo3Hn46TZnl2Lbf8mc6L9nEMR8btfR/wxeTPu8ura/FSlUl5q14v16mJxeXXt8lx1arY8W14olSYnJsevX7lWOrS+nq3+8/mv5m79/j///uGz/63/4s9ZWiPttu39OEytrg9sxcn0R8StdxEsB33t/hzLOxG+ljQivhUR57P7v5F3NgBANzQao9EY3V4HAI66tLkGlqSF9lrASKRpodBawzsTw2mltly/dL+2sjDTWisbi4H0/lylPN5eKxyLgSSrTzTPX9VLO+pXIuJ0RPxl8HizXpiuVWbyfOMDAD3sxI75/7PB1vwPABxxQ3knAAB0nfkfAHqP+R8Aeo/5HwB6j/kfAHqP+R8Aeo/5HwB6ym9v385KY6P9+dczD1ZX5msPkoiYL1RXpgvTtaXFwmytNtv8zJ7qfs9XqdUWJ67GysNivbxcLy6vrt2t1lYW6nebn+t9tzzQlV4BAHs5ffbpe9lkv37jeLPEtr0czNVwtKV5JwDkpi/vBIDc9OedAJAb3+MDu2zR+5qOvyL05PBzAbrj4ves/0Ovsv4Pvcv6P/Qu6//QuxqNxJ7/ANBjrPEDfv4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX91IsyRpob0X+EikaaEQcTIixmIguT9XKY9HxKmI+P/gwGBWn8g7aQDgLaUfJu39vy6OXhjZ2Xos+XyweYyIP/3tzl8fTtXrSxPZ9U+2rteftK+X8sgfANjP5jy9OY9vevni0fRm6WY+z3/Z2lw0i7vRLq2W/uhvHodiICKGP03a9Zbs/UrfIcRffxwR392t/0lzbWSsvfPpzvhZ7JNdjZ++Fj9ttrWO2f/Ftw8hF+g1T7Px5+Zu918a55rH3e//oeYI9fY2x7+NN8a/dGv86+sw/p07aIyr//1Nx7bHEd/v3y1+shU/6RD/wgHjv/+DH53v1Nb4e8TF2D3+9ljFenWxuLy6dnmuOjVbni0vlEqTE5Pj169cKxWba9TFzZXqN31049Kpvfo/3CH+0D79/+kB+/+PL+794cd7xP/5T3Z//c/sET+bE392wPhTw//quH13Fn+mQ//3e/0vHTD+sw/WZg74UACgC5ZX1+anKpXykpOunWTv3b4BaTjJ7ST7CjiM5/nOO0w175EJeNde3fR5ZwIAAAAAAAAAAAAAAHTSjT94yruPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHF1fBgAA//+LHdVA") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141442, 0x38) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) write$UHID_INPUT(r0, &(0x7f0000001a40)={0x8, {"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", 0x1000}}, 0x1006) 0s ago: executing program 1 (id=1455): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x81, &(0x7f0000000000)=ANY=[], 0x47, 0xc54, &(0x7f00000018c0)="$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") kernel console output (not intermixed with test programs): .395759][ T6869] loop0: detected capacity change from 0 to 2048 [ 151.413277][ T6869] EXT4-fs: Ignoring removed bh option [ 151.515359][ T6869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.515683][ T6875] tipc: Started in network mode [ 151.533696][ T6875] tipc: Node identity 5a23adb0bc86, cluster identity 4711 [ 151.541263][ T6875] tipc: Enabled bearer , priority 0 [ 151.563884][ T6875] tipc: Resetting bearer [ 151.645510][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.669856][ T6874] tipc: Disabling bearer [ 151.788439][ T6848] loop2: detected capacity change from 0 to 32768 [ 151.981158][ T6848] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.528934][ T6848] XFS (loop2): Ending clean mount [ 152.540512][ T6848] XFS (loop2): Quotacheck needed: Please wait. [ 152.645886][ T6848] XFS (loop2): Quotacheck: Done. [ 152.762764][ T5788] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.836269][ T6899] loop0: detected capacity change from 0 to 8192 [ 152.851280][ T6899] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 152.898901][ T6899] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 152.910520][ T6899] REISERFS (device loop0): using ordered data mode [ 152.934177][ T6899] reiserfs: using flush barriers [ 152.943252][ T6899] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.612512][ T6899] REISERFS (device loop0): checking transaction log (loop0) [ 153.841574][ T6899] REISERFS (device loop0): Using tea hash to sort names [ 153.849988][ T6899] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 156.778087][ T6929] loop3: detected capacity change from 0 to 2048 [ 157.871614][ T6929] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 158.058013][ T6929] UDF-fs: Scanning with blocksize 512 failed [ 158.139478][ T6929] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.416503][ T6920] loop2: detected capacity change from 0 to 32768 [ 158.453216][ T6920] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.484255][ T6920] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 158.493645][ T6920] BTRFS info (device loop2): enabling auto defrag [ 158.500378][ T6920] BTRFS info (device loop2): doing ref verification [ 158.507211][ T6920] BTRFS info (device loop2): use no compression [ 158.513707][ T6920] BTRFS info (device loop2): force clearing of disk cache [ 158.580834][ T6920] BTRFS info (device loop2): max_inline at 4096 [ 158.607952][ T6920] BTRFS info (device loop2): disabling free space tree [ 158.650488][ T6920] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 158.670803][ T6920] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 158.736145][ T6920] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 158.761591][ T6920] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 159.509183][ T6920] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 159.520886][ T6920] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 159.555075][ T6920] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 159.565012][ T6943] syz.1.269 (6943) used greatest stack depth: 19760 bytes left [ 159.624590][ T6920] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 159.625238][ T6920] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 159.634686][ T6920] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 159.673757][ T6920] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 159.724024][ T6920] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 159.784722][ T6920] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 159.821238][ T6920] BTRFS error (device loop2): open_ctree failed: -12 [ 160.944805][ T6979] loop1: detected capacity change from 0 to 256 [ 160.975555][ T6979] FAT-fs (loop1): Directory bread(block 64) failed [ 160.982146][ T6979] FAT-fs (loop1): Directory bread(block 65) failed [ 160.988910][ T6979] FAT-fs (loop1): Directory bread(block 66) failed [ 160.995526][ T6979] FAT-fs (loop1): Directory bread(block 67) failed [ 161.002157][ T6979] FAT-fs (loop1): Directory bread(block 68) failed [ 161.008878][ T6979] FAT-fs (loop1): Directory bread(block 69) failed [ 161.015573][ T6979] FAT-fs (loop1): Directory bread(block 70) failed [ 161.022159][ T6979] FAT-fs (loop1): Directory bread(block 71) failed [ 161.029139][ T6979] FAT-fs (loop1): Directory bread(block 72) failed [ 161.036028][ T6979] FAT-fs (loop1): Directory bread(block 73) failed [ 161.401179][ T6986] FAT-fs (loop1): Filesystem has been set read-only [ 161.408860][ T6986] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000616b) [ 161.554332][ T28] audit: type=1800 audit(1753644982.824:10): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.275" name="memory.stat" dev="loop1" ino=1048617 res=0 errno=0 [ 161.846001][ T6973] loop0: detected capacity change from 0 to 2048 [ 162.129294][ T6973] NILFS (loop0): invalid segment: Inconsistency found [ 162.151627][ T6973] NILFS (loop0): trying rollback from an earlier position [ 162.167115][ T6973] NILFS (loop0): invalid segment: Checksum error in segment payload [ 162.242873][ T6973] NILFS (loop0): error -22 while searching super root [ 162.951155][ T6995] loop1: detected capacity change from 0 to 8 [ 163.108053][ T6998] loop2: detected capacity change from 0 to 22 [ 163.128712][ T6998] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 163.240893][ T6998] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 165.276845][ T7002] loop0: detected capacity change from 0 to 32768 [ 165.358052][ T7002] XFS: ikeep mount option is deprecated. [ 165.656428][ T7002] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 165.944216][ T7002] XFS (loop0): Ending clean mount [ 165.983539][ T7002] XFS (loop0): Quotacheck needed: Please wait. [ 166.051692][ T7002] XFS (loop0): Quotacheck: Done. [ 166.208302][ T5791] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.214512][ T7059] Invalid option length (1042845) for dns_resolver key [ 168.860776][ T7060] loop3: detected capacity change from 0 to 32768 [ 168.902232][ T7060] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.298 (7060) [ 168.945539][ T7060] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 168.983846][ T7060] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 169.007257][ T7060] BTRFS info (device loop3): enabling auto defrag [ 169.016610][ T7060] BTRFS info (device loop3): doing ref verification [ 169.023257][ T7060] BTRFS info (device loop3): use no compression [ 169.058305][ T7060] BTRFS info (device loop3): force clearing of disk cache [ 169.081717][ T7060] BTRFS info (device loop3): max_inline at 4096 [ 169.101690][ T7060] BTRFS info (device loop3): disabling free space tree [ 169.236613][ T7060] BTRFS info (device loop3): enabling ssd optimizations [ 169.244973][ T7060] BTRFS info (device loop3): auto enabling async discard [ 169.298646][ T7060] BTRFS info (device loop3): rebuilding free space tree [ 169.335687][ T7091] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.462161][ T7060] BTRFS info (device loop3): disabling free space tree [ 169.489951][ T7060] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 169.537926][ T7060] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 169.714341][ T5783] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 169.898743][ T6149] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop3 scanned by udevd (6149) [ 170.099641][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.304'. [ 174.839334][ T7125] netlink: 'syz.3.311': attribute type 64 has an invalid length. [ 174.847297][ T7125] netlink: 'syz.3.311': attribute type 4 has an invalid length. [ 174.855057][ T7125] netlink: 152 bytes leftover after parsing attributes in process `syz.3.311'. [ 176.363403][ T7135] loop3: detected capacity change from 0 to 2048 [ 176.415328][ T7135] EXT4-fs: Ignoring removed bh option [ 176.448600][ T7135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.559748][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.933483][ T7152] netlink: 108 bytes leftover after parsing attributes in process `syz.3.321'. [ 178.037622][ T7146] loop2: detected capacity change from 0 to 32768 [ 178.133038][ T7146] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.320 (7146) [ 178.281795][ T7146] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.341441][ T7146] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 178.368872][ T7171] loop3: detected capacity change from 0 to 8 [ 178.616405][ T7146] BTRFS info (device loop2): using free space tree [ 179.146025][ T7146] BTRFS info (device loop2): enabling ssd optimizations [ 179.178824][ T7146] BTRFS info (device loop2): auto enabling async discard [ 179.189167][ T7191] loop0: detected capacity change from 0 to 164 [ 179.251012][ T7191] rock: directory entry would overflow storage [ 179.260608][ T7191] rock: sig=0x66, size=4, remaining=3 [ 179.316415][ T7191] rock: directory entry would overflow storage [ 179.322971][ T7191] rock: sig=0x66, size=4, remaining=3 [ 179.362056][ T7191] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 179.470547][ T7193] loop3: detected capacity change from 0 to 2048 [ 179.505340][ T7193] EXT4-fs: Ignoring removed bh option [ 179.530758][ T5788] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.603179][ T7193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.647554][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'. [ 179.848000][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.865491][ T7197] syz_tun (unregistering): left allmulticast mode [ 180.440914][ T5848] IPVS: starting estimator thread 0... [ 180.468812][ T7208] loop3: detected capacity change from 0 to 128 [ 180.544362][ T7206] IPVS: using max 18 ests per chain, 43200 per kthread [ 182.152790][ T1000] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.268291][ T1000] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.589854][ T1000] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.314483][ T1000] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.541530][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.554934][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.566040][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.585149][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.597599][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 183.607437][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.830363][ T1000] tipc: Left network mode [ 183.842021][ T7257] dummy0 speed is unknown, defaulting to 1000 [ 184.805714][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 185.801408][ T5781] Bluetooth: hci1: command tx timeout [ 186.373288][ T7338] loop0: detected capacity change from 0 to 2048 [ 186.388647][ T7257] chnl_net:caif_netlink_parms(): no params data found [ 186.403664][ T7338] EXT4-fs: Ignoring removed bh option [ 186.451830][ T7338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.832351][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.043866][ T7373] loop0: detected capacity change from 0 to 256 [ 187.198856][ T7373] FAT-fs (loop0): Directory bread(block 64) failed [ 187.205616][ T7373] FAT-fs (loop0): Directory bread(block 65) failed [ 187.212260][ T7373] FAT-fs (loop0): Directory bread(block 66) failed [ 187.218986][ T7373] FAT-fs (loop0): Directory bread(block 67) failed [ 187.225672][ T7373] FAT-fs (loop0): Directory bread(block 68) failed [ 187.232225][ T7373] FAT-fs (loop0): Directory bread(block 69) failed [ 187.238927][ T7373] FAT-fs (loop0): Directory bread(block 70) failed [ 187.245557][ T7373] FAT-fs (loop0): Directory bread(block 71) failed [ 187.252187][ T7373] FAT-fs (loop0): Directory bread(block 72) failed [ 187.259076][ T7373] FAT-fs (loop0): Directory bread(block 73) failed [ 187.320536][ T7373] FAT-fs (loop0): Filesystem has been set read-only [ 187.329277][ T7373] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000616b) [ 187.338311][ T28] audit: type=1800 audit(1753645008.744:11): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.381" name="memory.stat" dev="loop0" ino=1048618 res=0 errno=0 [ 187.607966][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.628303][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.643408][ T7257] bridge_slave_0: entered allmulticast mode [ 187.662503][ T7257] bridge_slave_0: entered promiscuous mode [ 187.702047][ T7257] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.735501][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.754991][ T7257] bridge_slave_1: entered allmulticast mode [ 187.763055][ T7257] bridge_slave_1: entered promiscuous mode [ 187.825350][ T5781] Bluetooth: hci1: command tx timeout [ 187.851499][ T7402] hsr0: VLAN not yet supported [ 187.854813][ T1000] hsr_slave_0: left promiscuous mode [ 187.867098][ T1000] hsr_slave_1: left promiscuous mode [ 187.882167][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.934615][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.975852][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.995671][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.053633][ T1000] bridge_slave_1: left allmulticast mode [ 188.076592][ T1000] bridge_slave_1: left promiscuous mode [ 188.093891][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.121732][ T1000] bridge_slave_0: left allmulticast mode [ 188.127535][ T1000] bridge_slave_0: left promiscuous mode [ 188.133389][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.180841][ T1000] veth1_macvtap: left promiscuous mode [ 188.187199][ T1000] veth0_macvtap: left promiscuous mode [ 188.193632][ T1000] veth1_vlan: left promiscuous mode [ 188.199943][ T1000] veth0_vlan: left promiscuous mode [ 189.103056][ T7418] loop0: detected capacity change from 0 to 2048 [ 189.130059][ T7418] EXT4-fs: Ignoring removed bh option [ 189.197664][ T7418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.382523][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.745863][ T1000] team0 (unregistering): Port device team_slave_1 removed [ 189.827539][ T1000] team0 (unregistering): Port device team_slave_0 removed [ 189.870479][ T1000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.904336][ T5781] Bluetooth: hci1: command tx timeout [ 189.932317][ T1000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.448889][ T1000] bond0 (unregistering): Released all slaves [ 190.547213][ T7412] netlink: 'syz.1.395': attribute type 10 has an invalid length. [ 190.629235][ T7412] hsr_slave_0 (unregistering): left promiscuous mode [ 190.661297][ T5888] dummy0 speed is unknown, defaulting to 1000 [ 190.693207][ T7257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.732673][ T7257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.942422][ T7440] netlink: 132 bytes leftover after parsing attributes in process `syz.0.401'. [ 191.079795][ T7444] loop1: detected capacity change from 0 to 2048 [ 191.105419][ T7444] EXT4-fs: Ignoring removed bh option [ 191.142378][ T7444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.344007][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.512961][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 191.519273][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 191.785334][ T7458] netlink: 60 bytes leftover after parsing attributes in process `syz.0.408'. [ 191.986852][ T5102] Bluetooth: hci1: command tx timeout [ 192.883507][ T7467] netlink: 60 bytes leftover after parsing attributes in process `syz.1.411'. [ 193.673857][ T7257] team0: Port device team_slave_0 added [ 193.687826][ T7458] netlink: 60 bytes leftover after parsing attributes in process `syz.0.408'. [ 193.713445][ T7467] netlink: 60 bytes leftover after parsing attributes in process `syz.1.411'. [ 193.765443][ T7257] team0: Port device team_slave_1 added [ 193.944045][ T7257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.952258][ T7257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.988084][ T7476] loop2: detected capacity change from 0 to 256 [ 194.039510][ T7476] FAT-fs (loop2): Directory bread(block 64) failed [ 194.046200][ T7476] FAT-fs (loop2): Directory bread(block 65) failed [ 194.052829][ T7476] FAT-fs (loop2): Directory bread(block 66) failed [ 194.059509][ T7476] FAT-fs (loop2): Directory bread(block 67) failed [ 194.066318][ T7476] FAT-fs (loop2): Directory bread(block 68) failed [ 194.072875][ T7476] FAT-fs (loop2): Directory bread(block 69) failed [ 194.079543][ T7476] FAT-fs (loop2): Directory bread(block 70) failed [ 194.086225][ T7476] FAT-fs (loop2): Directory bread(block 71) failed [ 194.092872][ T7476] FAT-fs (loop2): Directory bread(block 72) failed [ 194.093235][ T7257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.099468][ T7476] FAT-fs (loop2): Directory bread(block 73) failed [ 194.150496][ T7476] FAT-fs (loop2): Filesystem has been set read-only [ 194.158118][ T7476] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000616b) [ 194.164460][ T28] audit: type=1800 audit(1753645015.574:12): pid=7476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.413" name="memory.stat" dev="loop2" ino=1048619 res=0 errno=0 [ 194.226959][ T7257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.238914][ T7257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.266241][ T7257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.567924][ T7257] hsr_slave_0: entered promiscuous mode [ 194.590772][ T7257] hsr_slave_1: entered promiscuous mode [ 194.610211][ T7257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.635151][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.642565][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.654601][ T7257] Cannot create hsr debugfs directory [ 195.175490][ T7257] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 195.202382][ T7257] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 195.235946][ T7257] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 195.259165][ T7257] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 195.273381][ T7512] netlink: 'syz.1.430': attribute type 10 has an invalid length. [ 195.291019][ T7512] team0: Device ipvlan1 failed to register rx_handler [ 195.419577][ T7515] netlink: 'syz.2.423': attribute type 10 has an invalid length. [ 195.518112][ T7519] loop1: detected capacity change from 0 to 256 [ 195.610253][ T7519] FAT-fs (loop1): Directory bread(block 64) failed [ 195.617956][ T7519] FAT-fs (loop1): Directory bread(block 65) failed [ 195.625240][ T7519] FAT-fs (loop1): Directory bread(block 66) failed [ 195.631811][ T7519] FAT-fs (loop1): Directory bread(block 67) failed [ 195.638512][ T7519] FAT-fs (loop1): Directory bread(block 68) failed [ 195.645269][ T7519] FAT-fs (loop1): Directory bread(block 69) failed [ 195.651912][ T7519] FAT-fs (loop1): Directory bread(block 70) failed [ 195.658531][ T7519] FAT-fs (loop1): Directory bread(block 71) failed [ 195.665675][ T7519] FAT-fs (loop1): Directory bread(block 72) failed [ 195.672242][ T7519] FAT-fs (loop1): Directory bread(block 73) failed [ 195.677750][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 195.711304][ T7519] FAT-fs (loop1): Filesystem has been set read-only [ 195.717149][ T7515] hsr_slave_0 (unregistering): left promiscuous mode [ 195.718863][ T7519] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000616b) [ 195.724900][ T28] audit: type=1800 audit(1753645017.134:13): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.424" name="memory.stat" dev="loop1" ino=1048620 res=0 errno=0 [ 196.176517][ T7257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.243232][ T7257] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.275465][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.282661][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.361049][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.368280][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.395390][ T7553] netlink: 'syz.2.433': attribute type 10 has an invalid length. [ 196.411709][ T7553] team0: Device ipvlan1 failed to register rx_handler [ 196.560866][ T7257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.019379][ T7257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.278721][ T7590] loop0: detected capacity change from 0 to 256 [ 197.310650][ T7590] FAT-fs (loop0): Directory bread(block 64) failed [ 197.317467][ T7590] FAT-fs (loop0): Directory bread(block 65) failed [ 197.324174][ T7590] FAT-fs (loop0): Directory bread(block 66) failed [ 197.330741][ T7590] FAT-fs (loop0): Directory bread(block 67) failed [ 197.337468][ T7590] FAT-fs (loop0): Directory bread(block 68) failed [ 197.344022][ T7590] FAT-fs (loop0): Directory bread(block 69) failed [ 197.350855][ T7590] FAT-fs (loop0): Directory bread(block 70) failed [ 197.357624][ T7590] FAT-fs (loop0): Directory bread(block 71) failed [ 197.364325][ T7590] FAT-fs (loop0): Directory bread(block 72) failed [ 197.370872][ T7590] FAT-fs (loop0): Directory bread(block 73) failed [ 197.402812][ T7590] FAT-fs (loop0): Filesystem has been set read-only [ 197.411197][ T7590] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000616b) [ 197.413266][ T28] audit: type=1800 audit(1753645018.824:14): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.445" name="memory.stat" dev="loop0" ino=1048621 res=0 errno=0 [ 197.761137][ T7257] veth0_vlan: entered promiscuous mode [ 197.778665][ T7257] veth1_vlan: entered promiscuous mode [ 197.903623][ T7257] veth0_macvtap: entered promiscuous mode [ 197.962468][ T7257] veth1_macvtap: entered promiscuous mode [ 198.007495][ T7613] loop1: detected capacity change from 0 to 512 [ 198.017215][ T7612] loop2: detected capacity change from 0 to 512 [ 198.025861][ T7257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.054942][ T7612] EXT4-fs: Ignoring removed nobh option [ 198.060675][ T7257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.070490][ T7613] EXT4-fs: Ignoring removed oldalloc option [ 198.088070][ T7612] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 198.095315][ T7613] EXT4-fs: inline encryption not supported [ 198.103903][ T7257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.118470][ T7257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.139155][ T7612] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.451: iget: bad i_size value: 38620345925642 [ 198.143372][ T7613] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 198.153544][ T7257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.202193][ T7612] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.451: couldn't read orphan inode 15 (err -117) [ 198.204214][ T7613] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.217839][ T7257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.240719][ T7612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.274307][ T7257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.291729][ T7257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.303884][ T7613] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 198.304731][ T7257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.336674][ T7613] EXT4-fs (loop1): 1 truncate cleaned up [ 198.339294][ T7612] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.451: bg 0: block 5: invalid block bitmap [ 198.358972][ T7612] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 17 with error 28 [ 198.366326][ T7613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.371638][ T7612] EXT4-fs (loop2): This should not happen!! Data will be lost [ 198.371638][ T7612] [ 198.393573][ T7612] EXT4-fs (loop2): Total free blocks count 0 [ 198.402024][ T7612] EXT4-fs (loop2): Free/Dirty block details [ 198.408066][ T7612] EXT4-fs (loop2): free_blocks=0 [ 198.413077][ T7612] EXT4-fs (loop2): dirty_blocks=17 [ 198.424138][ T7612] EXT4-fs (loop2): Block reservation details [ 198.430871][ T7612] EXT4-fs (loop2): i_reserved_data_blocks=17 [ 198.436723][ T7257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.442183][ T7617] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 198.453708][ T7617] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 198.480817][ T7257] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.493582][ T7617] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 198.510733][ T7257] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.522239][ T7257] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.532274][ T7257] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.549343][ T28] audit: type=1800 audit(1753645019.964:15): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.450" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 198.581793][ T7619] loop0: detected capacity change from 0 to 256 [ 198.602387][ T7619] exfat: Deprecated parameter 'namecase' [ 198.634315][ T7619] exfat: Bad value for 'uid' [ 198.768543][ T5779] EXT4-fs error (device loop1): mb_free_blocks:1943: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 198.790036][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.828201][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.880788][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.914763][ T7623] loop0: detected capacity change from 0 to 256 [ 198.979372][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.021610][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.884321][ T5771] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 200.116312][ T5771] usb 1-1: Using ep0 maxpacket: 16 [ 200.137815][ T5771] usb 1-1: config 0 has an invalid interface number: 58 but max is 0 [ 200.175118][ T5771] usb 1-1: config 0 has no interface number 0 [ 200.200746][ T5771] usb 1-1: config 0 interface 58 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32 [ 200.257124][ T5771] usb 1-1: config 0 interface 58 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 64 [ 200.282217][ T7662] loop2: detected capacity change from 0 to 256 [ 200.302108][ T5771] usb 1-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=9e.c9 [ 200.332011][ T5771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.366066][ T5771] usb 1-1: Product: syz [ 200.367823][ T7662] FAT-fs (loop2): Directory bread(block 64) failed [ 200.370267][ T5771] usb 1-1: Manufacturer: syz [ 200.377670][ T7662] FAT-fs (loop2): Directory bread(block 65) failed [ 200.389288][ T7662] FAT-fs (loop2): Directory bread(block 66) failed [ 200.396174][ T7662] FAT-fs (loop2): Directory bread(block 67) failed [ 200.402904][ T7662] FAT-fs (loop2): Directory bread(block 68) failed [ 200.409959][ T7662] FAT-fs (loop2): Directory bread(block 69) failed [ 200.415778][ T5771] usb 1-1: SerialNumber: syz [ 200.416654][ T7662] FAT-fs (loop2): Directory bread(block 70) failed [ 200.427898][ T7662] FAT-fs (loop2): Directory bread(block 71) failed [ 200.434584][ T7662] FAT-fs (loop2): Directory bread(block 72) failed [ 200.441134][ T7662] FAT-fs (loop2): Directory bread(block 73) failed [ 200.469858][ T7662] FAT-fs (loop2): Filesystem has been set read-only [ 200.475465][ T5771] usb 1-1: config 0 descriptor?? [ 200.478628][ T7662] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000616b) [ 200.484184][ T28] audit: type=1800 audit(1753645021.894:16): pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.463" name="memory.stat" dev="loop2" ino=1048626 res=0 errno=0 [ 200.518487][ T7644] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 200.760064][ T5771] usbtouchscreen: probe of 1-1:0.58 failed with error -8 [ 200.806376][ T5771] usb 1-1: USB disconnect, device number 3 [ 201.055630][ T787] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 201.244598][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 201.259728][ T787] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 201.272106][ T787] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.288625][ T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.310997][ T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.327842][ T787] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.366160][ T787] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 201.389688][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.463376][ T7688] binder: 7687:7688 unknown command 0 [ 201.479085][ T7688] binder: 7687:7688 ioctl c0306201 200000000080 returned -22 [ 201.627188][ T787] usb 3-1: GET_CAPABILITIES returned 0 [ 201.647071][ T787] usbtmc 3-1:16.0: can't read capabilities [ 201.659668][ T7691] loop1: detected capacity change from 0 to 2048 [ 201.680671][ T7691] EXT4-fs: Ignoring removed bh option [ 201.711737][ T7691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.833503][ T5867] usb 3-1: USB disconnect, device number 4 [ 201.926693][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.135343][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 202.287573][ T787] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 202.326338][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.346650][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.359576][ T23] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 202.369357][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.381751][ T23] usb 5-1: config 0 descriptor?? [ 202.507895][ T787] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 202.534135][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.550680][ T787] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.570714][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.590570][ T787] usb 2-1: config 0 descriptor?? [ 202.607048][ T7710] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 202.631540][ T787] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 202.726968][ T7730] loop2: detected capacity change from 0 to 256 [ 203.214231][ T787] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 203.394265][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 203.402395][ T787] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 203.413393][ T787] usb 1-1: config 0 has no interface number 0 [ 203.421042][ T787] usb 1-1: config 0 interface 12 has no altsetting 0 [ 203.435987][ T787] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 203.450203][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.460783][ T787] usb 1-1: Product: syz [ 203.467696][ T787] usb 1-1: Manufacturer: syz [ 203.472484][ T787] usb 1-1: SerialNumber: syz [ 203.481982][ T787] usb 1-1: config 0 descriptor?? [ 203.614616][ T23] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #100: -71 [ 203.623965][ T23] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 203.647718][ T23] uclogic 0003:256C:006D.0001: failed probing pen v1 parameters: -71 [ 203.664700][ T23] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 203.672860][ T23] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 203.701118][ T23] usb 5-1: USB disconnect, device number 2 [ 203.704947][ T7737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.732397][ T7737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.765994][ T787] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 203.785302][ T787] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 203.796519][ T787] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 203.809553][ T787] f81534: probe of 1-1:0.12 failed with error -71 [ 203.822780][ T787] usb 1-1: USB disconnect, device number 4 [ 204.196830][ T787] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 204.384296][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 204.392859][ T787] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 204.402685][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.421388][ T787] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 204.440851][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 204.454147][ T787] usb 1-1: Product: syz [ 204.458360][ T787] usb 1-1: Manufacturer: syz [ 204.471171][ T787] usb 1-1: SerialNumber: syz [ 204.483449][ T787] usb 1-1: config 0 descriptor?? [ 204.499348][ T787] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 204.517407][ T787] radio-si470x: probe of 1-1:0.0 failed with error -5 [ 204.534988][ T787] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 204.574238][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 204.719138][ T787] usb 1-1: USB disconnect, device number 5 [ 204.882894][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 204.889913][ T23] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 204.898110][ T23] usb 3-1: config 0 has no interface number 0 [ 204.904470][ T23] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 204.915171][ T23] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 204.925824][ T23] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 204.938859][ T23] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 204.949478][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.968930][ T23] usb 3-1: config 0 descriptor?? [ 204.978592][ T23] ldusb 3-1:0.55: Interrupt in endpoint not found [ 205.018120][ T9] usb 2-1: USB disconnect, device number 6 [ 205.078547][ T7772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.183699][ T23] usb 3-1: USB disconnect, device number 5 [ 205.498041][ T7783] loop0: detected capacity change from 0 to 256 [ 205.535453][ T7783] FAT-fs (loop0): Directory bread(block 64) failed [ 205.542162][ T7783] FAT-fs (loop0): Directory bread(block 65) failed [ 205.549469][ T7783] FAT-fs (loop0): Directory bread(block 66) failed [ 205.556197][ T7783] FAT-fs (loop0): Directory bread(block 67) failed [ 205.562964][ T7783] FAT-fs (loop0): Directory bread(block 68) failed [ 205.570054][ T7783] FAT-fs (loop0): Directory bread(block 69) failed [ 205.576922][ T7783] FAT-fs (loop0): Directory bread(block 70) failed [ 205.583526][ T7783] FAT-fs (loop0): Directory bread(block 71) failed [ 205.590374][ T7783] FAT-fs (loop0): Directory bread(block 72) failed [ 205.597806][ T7783] FAT-fs (loop0): Directory bread(block 73) failed [ 205.753832][ T7783] FAT-fs (loop0): Filesystem has been set read-only [ 205.775165][ T7783] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000616b) [ 205.776013][ T28] audit: type=1800 audit(1753645027.194:17): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.496" name="memory.stat" dev="loop0" ino=1048628 res=0 errno=0 [ 206.451834][ T7811] binder_alloc: 7810: binder_alloc_buf size 12312 failed, no address space [ 206.479915][ T7811] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 206.874395][ T787] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 206.915187][ T7829] ubi0: attaching mtd0 [ 206.922312][ T7832] binder: 7830:7832 unknown command 0 [ 206.935477][ T7832] binder: 7830:7832 ioctl c0306201 200000000080 returned -22 [ 206.960924][ T7829] ubi0: scanning is finished [ 206.967679][ T7829] ubi0: empty MTD device detected [ 207.067529][ T7829] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 207.080206][ T7829] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 207.090821][ T7829] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 207.098376][ T7829] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 207.109618][ T7829] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 207.109668][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 207.123192][ T7829] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 207.133771][ T7829] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3730061029 [ 207.144959][ T7829] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 207.156453][ T787] usb 5-1: unable to get BOS descriptor or descriptor too short [ 207.164499][ T7836] ubi0: background thread "ubi_bgt0d" started, PID 7836 [ 207.173769][ T787] usb 5-1: config 255 has an invalid interface number: 225 but max is 0 [ 207.191488][ T787] usb 5-1: config 255 has no interface number 0 [ 207.205088][ T787] usb 5-1: config 255 interface 225 has no altsetting 0 [ 207.216663][ T787] usb 5-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=bd.29 [ 207.226987][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.236754][ T787] usb 5-1: Product: syz [ 207.240958][ T787] usb 5-1: Manufacturer: syz [ 207.259110][ T787] usb 5-1: SerialNumber: syz [ 207.344659][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 207.536641][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.559308][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 207.587224][ T23] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 207.596976][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.615417][ T23] usb 2-1: config 0 descriptor?? [ 207.681959][ T7847] Bluetooth: MGMT ver 1.22 [ 207.875868][ T7856] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 207.937819][ T787] cxacru 5-1:255.225: usbatm_usb_probe: bind failed: -19! [ 208.106826][ T23] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 208.228792][ T7868] loop0: detected capacity change from 0 to 2048 [ 208.248454][ T7868] EXT4-fs: Ignoring removed bh option [ 208.281711][ T7868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.411659][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.420990][ T55] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 208.614422][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 208.625587][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.643727][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.654607][ T55] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 208.664903][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.682629][ T55] usb 3-1: config 0 descriptor?? [ 208.785159][ T5102] Bluetooth: hci2: command 0x0406 tx timeout [ 208.865389][ T23] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 208.886708][ T23] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 208.911080][ T23] kovaplus: probe of 0003:1E7D:2D50.0002 failed with error -71 [ 208.926081][ T23] usb 2-1: USB disconnect, device number 7 [ 209.044194][ T787] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 209.123941][ T55] uclogic 0003:28BD:0074.0003: interface is invalid, ignoring [ 209.234154][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 209.240845][ T787] usb 1-1: config 0 interface 0 altsetting 182 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.251094][ T787] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.257963][ T787] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 209.269781][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.279451][ T787] usb 1-1: config 0 descriptor?? [ 209.323028][ T5867] usb 3-1: USB disconnect, device number 6 [ 209.456001][ T7888] loop1: detected capacity change from 0 to 256 [ 209.496170][ T7888] FAT-fs (loop1): Directory bread(block 64) failed [ 209.502757][ T7888] FAT-fs (loop1): Directory bread(block 65) failed [ 209.511220][ T7888] FAT-fs (loop1): Directory bread(block 66) failed [ 209.518725][ T7888] FAT-fs (loop1): Directory bread(block 67) failed [ 209.528779][ T7888] FAT-fs (loop1): Directory bread(block 68) failed [ 209.535716][ T7888] FAT-fs (loop1): Directory bread(block 69) failed [ 209.542372][ T7888] FAT-fs (loop1): Directory bread(block 70) failed [ 209.552311][ T7888] FAT-fs (loop1): Directory bread(block 71) failed [ 209.559111][ T7888] FAT-fs (loop1): Directory bread(block 72) failed [ 209.567676][ T7888] FAT-fs (loop1): Directory bread(block 73) failed [ 209.630749][ T5867] usb 5-1: USB disconnect, device number 3 [ 209.708173][ T787] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x7 [ 209.813854][ T7894] overlayfs: failed to get inode (-116) [ 209.823138][ T7894] overlayfs: failed to get inode (-116) [ 209.905473][ T5867] usb 1-1: USB disconnect, device number 6 [ 210.149671][ T7907] loop4: detected capacity change from 0 to 256 [ 210.232755][ T7907] FAT-fs (loop4): Directory bread(block 64) failed [ 210.243613][ T7907] FAT-fs (loop4): Directory bread(block 65) failed [ 210.253907][ T7907] FAT-fs (loop4): Directory bread(block 66) failed [ 210.262036][ T7907] FAT-fs (loop4): Directory bread(block 67) failed [ 210.269112][ T7907] FAT-fs (loop4): Directory bread(block 68) failed [ 210.276115][ T7907] FAT-fs (loop4): Directory bread(block 69) failed [ 210.282834][ T7907] FAT-fs (loop4): Directory bread(block 70) failed [ 210.289885][ T7907] FAT-fs (loop4): Directory bread(block 71) failed [ 210.299838][ T7907] FAT-fs (loop4): Directory bread(block 72) failed [ 210.314116][ T7907] FAT-fs (loop4): Directory bread(block 73) failed [ 210.372477][ T7909] binder: 7908:7909 unknown command 0 [ 210.382025][ T7909] binder: 7908:7909 ioctl c0306201 200000000080 returned -22 [ 211.288296][ T7931] loop1: detected capacity change from 0 to 256 [ 211.359940][ T7931] FAT-fs (loop1): Directory bread(block 64) failed [ 211.372403][ T7931] FAT-fs (loop1): Directory bread(block 65) failed [ 211.385273][ T7931] FAT-fs (loop1): Directory bread(block 66) failed [ 211.392002][ T7931] FAT-fs (loop1): Directory bread(block 67) failed [ 211.399868][ T7931] FAT-fs (loop1): Directory bread(block 68) failed [ 211.406609][ T7931] FAT-fs (loop1): Directory bread(block 69) failed [ 211.413344][ T7931] FAT-fs (loop1): Directory bread(block 70) failed [ 211.420577][ T7931] FAT-fs (loop1): Directory bread(block 71) failed [ 211.427387][ T7931] FAT-fs (loop1): Directory bread(block 72) failed [ 211.434617][ T7931] FAT-fs (loop1): Directory bread(block 73) failed [ 211.525442][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 211.680395][ T7936] ubi: mtd0 is already attached to ubi0 [ 211.724688][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 211.791990][ T7939] binder: 7938:7939 unknown command 0 [ 211.797651][ T7939] binder: 7938:7939 ioctl c0306201 200000000080 returned -22 [ 211.855976][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.874280][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.904197][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.929819][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.982737][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.997967][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.095620][ T7951] netlink: 'syz.2.557': attribute type 21 has an invalid length. [ 212.103760][ T7951] netlink: 156 bytes leftover after parsing attributes in process `syz.2.557'. [ 212.157078][ T7949] loop1: detected capacity change from 0 to 2048 [ 212.182169][ T7949] EXT4-fs: Ignoring removed bh option [ 212.232874][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 212.234262][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 212.244165][ T9] usbtmc 5-1:16.0: can't read capabilities [ 212.267671][ T7949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.448630][ T5771] usb 5-1: USB disconnect, device number 4 [ 212.465955][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 212.483453][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.484817][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.538472][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.574139][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 212.594643][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 212.622329][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.648401][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 212.661067][ T23] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 212.673143][ T23] usb 1-1: Manufacturer: syz [ 212.685298][ T23] usb 1-1: config 0 descriptor?? [ 212.868428][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 212.974855][ T23] rc_core: IR keymap rc-hauppauge not found [ 213.004249][ T23] Registered IR keymap rc-empty [ 213.009497][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 213.064547][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 213.074264][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 213.086737][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.089366][ T7987] netlink: 'syz.4.563': attribute type 4 has an invalid length. [ 213.110547][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 213.124366][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 213.130531][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.166442][ T9] usb 3-1: config 0 descriptor?? [ 213.169881][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 213.237366][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 213.324413][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 213.360625][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 213.379277][ T7993] binder: 7991:7993 unknown command 0 [ 213.389518][ T7993] binder: 7991:7993 ioctl c0306201 200000000080 returned -22 [ 213.394892][ T9] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 213.404454][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 213.454234][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 213.500193][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 213.546918][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 213.563324][ T7998] syz.4.566 uses obsolete (PF_INET,SOCK_PACKET) [ 213.604358][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 213.637910][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 213.677705][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 213.736901][ T23] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 213.753451][ T23] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 213.778575][ T23] usb 1-1: USB disconnect, device number 7 [ 214.074401][ T5771] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 214.274146][ T5771] usb 5-1: Using ep0 maxpacket: 16 [ 214.285624][ T5771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.312581][ T5771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.328266][ T5771] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 214.344179][ T5771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.358489][ T8031] netlink: 'syz.0.571': attribute type 21 has an invalid length. [ 214.370443][ T8031] netlink: 156 bytes leftover after parsing attributes in process `syz.0.571'. [ 214.371239][ T5771] usb 5-1: config 0 descriptor?? [ 214.839222][ T5771] corsair 0003:1B1C:1B02.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 215.028289][ T5771] corsair 0003:1B1C:1B02.0005: Read invalid backlight brightness: 50. [ 215.237604][ T5771] usb 5-1: USB disconnect, device number 5 [ 215.489912][ T23] usb 3-1: USB disconnect, device number 7 [ 215.554804][ T5867] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 215.774137][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 215.781444][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.822572][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.856798][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 215.880128][ T5867] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 215.900731][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.929739][ T5867] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 215.945086][ T5867] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 215.966094][ T5867] usb 2-1: Manufacturer: syz [ 215.995123][ T5867] usb 2-1: config 0 descriptor?? [ 216.054170][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 216.234375][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 216.252104][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.275270][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.285225][ T8074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.579'. [ 216.294279][ T5867] rc_core: IR keymap rc-hauppauge not found [ 216.296622][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 216.304668][ T5867] Registered IR keymap rc-empty [ 216.312173][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.331129][ T23] usb 3-1: config 0 descriptor?? [ 216.349101][ T23] hub 3-1:0.0: USB hub found [ 216.355204][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 216.415624][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 216.470305][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 216.525472][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 216.552295][ T23] hub 3-1:0.0: 1 port detected [ 216.583980][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 216.634414][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 216.684346][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 216.737540][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 216.784331][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 217.025356][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 217.074184][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 217.106932][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 217.144517][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 217.174186][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 217.196429][ T23] hub 3-1:0.0: activate --> -90 [ 217.214852][ T5867] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 217.256705][ T5867] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 217.266336][ T5867] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 217.287071][ T5867] usb 2-1: USB disconnect, device number 8 [ 217.549971][ T8131] loop1: detected capacity change from 0 to 2048 [ 217.561891][ T8131] EXT4-fs: Ignoring removed bh option [ 217.597579][ T8131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.622074][ T55] usb 3-1: USB disconnect, device number 8 [ 217.770983][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.965009][ T8147] binder: 8145:8147 unknown command 0 [ 217.992883][ T8147] binder: 8145:8147 ioctl c0306201 200000000080 returned -22 [ 218.013758][ T8151] binder: 8149:8151 unknown command 0 [ 218.039411][ T8151] binder: 8149:8151 ioctl c0306201 200000000080 returned -22 [ 218.981538][ T8178] binder: 8177:8178 ioctl c0306201 200000000080 returned -14 [ 219.044032][ T8182] binder: 8176:8182 unknown command 0 [ 219.051064][ T8182] binder: 8176:8182 ioctl c0306201 200000000080 returned -22 [ 219.960481][ T50] Bluetooth: hci2: unexpected event for opcode 0x2012 [ 220.189395][ T50] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 220.201368][ T50] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 221.963051][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c20 [ 222.004736][ T8252] capability: warning: `syz.4.622' uses deprecated v2 capabilities in a way that may be insecure [ 222.171490][ T8255] sd 0:0:1:0: PR command failed: 1026 [ 222.181304][ T8255] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 222.198422][ T8255] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 222.369554][ T8263] binder: 8262:8263 unknown command 0 [ 222.378238][ T8263] binder: 8262:8263 ioctl c0306201 200000000080 returned -22 [ 222.523271][ T8269] binder: 8268:8269 unknown command 0 [ 222.546718][ T8269] binder: 8268:8269 ioctl c0306201 200000000080 returned -22 [ 222.561575][ T8269] binder_alloc: 8268: binder_alloc_buf, no vma [ 222.874167][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 222.944528][ T55] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 223.074341][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 223.082546][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.093770][ T23] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 223.104102][ T23] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xCC, skipping [ 223.117748][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.126916][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.135216][ T23] usb 5-1: Product: syz [ 223.139404][ T23] usb 5-1: Manufacturer: syz [ 223.144223][ T23] usb 5-1: SerialNumber: syz [ 223.153323][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 223.170763][ T55] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 223.183811][ T55] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 223.198674][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.207009][ T55] usb 2-1: Product: syz [ 223.211290][ T55] usb 2-1: Manufacturer: syz [ 223.216007][ T55] usb 2-1: SerialNumber: syz [ 223.222688][ T55] usb 2-1: config 0 descriptor?? [ 223.231461][ T8278] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 223.239338][ T8278] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 223.248120][ T55] usb 2-1: ucan: probing device on interface #0 [ 223.254545][ T55] usb 2-1: ucan: invalid EP count (1) [ 223.259971][ T55] usb 2-1: ucan: probe failed; try to update the device firmware [ 223.370196][ T8273] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.455895][ T8282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.634'. [ 223.566138][ T8286] ptrace attach of "./syz-executor exec"[5788] was attempted by ""[8286] [ 223.991254][ T8273] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 224.202803][ T23] cdc_ncm 5-1:1.0: bind() failure [ 224.216782][ T23] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 224.223790][ T23] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 224.237145][ T23] usbtest: probe of 5-1:1.1 failed with error -71 [ 224.248471][ T23] usb 5-1: USB disconnect, device number 6 [ 224.442829][ T8296] binder: 8295:8296 unknown command 0 [ 224.448955][ T8296] binder: 8295:8296 ioctl c0306201 200000000080 returned -22 [ 224.871696][ T8308] binder: 8307:8308 ioctl c0306201 200000000080 returned -14 [ 225.124283][ T55] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 225.153637][ T8319] binder: 8318:8319 unknown command 0 [ 225.160256][ T8319] binder: 8318:8319 ioctl c0306201 200000000080 returned -22 [ 225.326165][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 225.333521][ T55] usb 5-1: config 14 has an invalid interface number: 164 but max is 0 [ 225.343927][ T55] usb 5-1: config 14 has no interface number 0 [ 225.350220][ T55] usb 5-1: config 14 interface 164 altsetting 5 endpoint 0xD has invalid maxpacket 560, setting to 64 [ 225.361713][ T55] usb 5-1: config 14 interface 164 has no altsetting 0 [ 225.370499][ T55] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=14.aa [ 225.379662][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.387718][ T55] usb 5-1: Product: syz [ 225.391905][ T55] usb 5-1: Manufacturer: syz [ 225.396643][ T55] usb 5-1: SerialNumber: syz [ 225.474197][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 225.638135][ T55] usb 5-1: USB disconnect, device number 7 [ 225.664390][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 225.675168][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.707165][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.731394][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 225.734792][ T9] usb 2-1: USB disconnect, device number 9 [ 225.743491][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 225.770026][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.801842][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 225.821653][ T23] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 225.838547][ T23] usb 1-1: Manufacturer: syz [ 226.025249][ T23] usb 1-1: config 0 descriptor?? [ 226.184419][ T787] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 226.218893][ T8330] loop1: detected capacity change from 0 to 2048 [ 226.238143][ T8330] EXT4-fs: Ignoring removed bh option [ 226.288811][ T8330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.366378][ T787] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 226.376208][ T787] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 226.387430][ T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 226.396685][ T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 226.408097][ T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 226.442568][ T787] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 226.471523][ T787] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 226.489297][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.498564][ T787] usb 3-1: Product: syz [ 226.502750][ T787] usb 3-1: Manufacturer: syz [ 226.521663][ T787] cdc_wdm 3-1:1.0: skipping garbage [ 226.533916][ T787] cdc_wdm 3-1:1.0: skipping garbage [ 226.544039][ T787] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 226.562664][ T23] rc_core: IR keymap rc-hauppauge not found [ 226.571716][ T23] Registered IR keymap rc-empty [ 226.576995][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.594634][ T787] cdc_wdm 3-1:1.0: Unknown control protocol [ 226.625160][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.675623][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 226.720805][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 226.781111][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.824427][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.865054][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.904800][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.934241][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 226.984310][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.025195][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.064240][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.105259][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.142541][ T23] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.194947][ T23] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 227.208115][ T23] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 227.228178][ T23] usb 1-1: USB disconnect, device number 8 [ 227.292577][ T787] usb 3-1: USB disconnect, device number 9 [ 227.454850][ T8354] binder: 8353:8354 ioctl c0306201 200000000080 returned -14 [ 227.793388][ T8366] binder: 8365:8366 unknown command 0 [ 227.803425][ T8366] binder: 8365:8366 ioctl c0306201 200000000080 returned -22 [ 227.839526][ T787] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 228.214317][ T5848] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 228.354203][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 228.360867][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.371843][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.381698][ T787] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 228.390870][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.402072][ T787] usb 2-1: config 0 descriptor?? [ 228.417282][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.428850][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.439366][ T5848] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 228.448689][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.459580][ T5848] usb 3-1: config 0 descriptor?? [ 228.646264][ T8377] binder: 8376:8377 ioctl c0306201 200000000080 returned -14 [ 229.042593][ T5848] waltop 0003:172F:0034.0007: item fetching failed at offset 2/5 [ 229.051439][ T5848] waltop: probe of 0003:172F:0034.0007 failed with error -22 [ 229.083940][ T9] usb 3-1: USB disconnect, device number 10 [ 229.244646][ T787] letsketch 0003:6161:4D15.0006: Device info: цУГ [ 229.482613][ T787] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 229.504396][ T787] letsketch: probe of 0003:6161:4D15.0006 failed with error -71 [ 229.523800][ T787] usb 2-1: USB disconnect, device number 10 [ 230.300734][ T8413] binder: 8412:8413 unknown command 0 [ 230.316590][ T8413] binder: 8412:8413 ioctl c0306201 200000000080 returned -22 [ 230.335610][ T8413] binder: BINDER_SET_CONTEXT_MGR already set [ 230.356655][ T8413] binder: 8412:8413 ioctl 4018620d 200000000040 returned -16 [ 230.794159][ T5848] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 230.854266][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 230.974351][ T5848] usb 5-1: Using ep0 maxpacket: 16 [ 230.988706][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.002813][ T5848] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 231.020393][ T5848] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 231.024403][ T787] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 231.032629][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.052491][ T5848] usb 5-1: config 0 descriptor?? [ 231.054421][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 231.087894][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 231.100856][ T9] usb 3-1: config 255 has an invalid interface number: 225 but max is 0 [ 231.277240][ T787] usb 1-1: config 1 interface 0 altsetting 179 bulk endpoint 0x1 has invalid maxpacket 1024 [ 231.717626][ T5848] hid-generic 0003:057E:2019.0008: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 231.959042][ T5848] usb 5-1: USB disconnect, device number 8 [ 232.022536][ T9] usb 3-1: config 255 has no interface number 0 [ 232.029525][ T787] usb 1-1: config 1 interface 0 has no altsetting 0 [ 232.036617][ T9] usb 3-1: config 255 interface 225 has no altsetting 0 [ 232.046891][ T9] usb 3-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=bd.29 [ 232.056367][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.064656][ T9] usb 3-1: Product: syz [ 232.069079][ T9] usb 3-1: Manufacturer: syz [ 232.073804][ T9] usb 3-1: SerialNumber: syz [ 232.086916][ T787] usb 1-1: string descriptor 0 read error: -22 [ 232.093275][ T787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 232.105352][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.120444][ T8420] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 232.271059][ T8427] fido_id[8427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 232.452144][ T8432] binder: 8431:8432 ioctl c0306201 200000000080 returned -14 [ 232.556579][ T787] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 179 proto 1 vid 0x0525 pid 0xA4A8 [ 232.594989][ T787] usb 1-1: USB disconnect, device number 9 [ 232.617226][ T787] usblp0: removed [ 232.795435][ T9] cxacru 3-1:255.225: usbatm_usb_probe: bind failed: -19! [ 233.003317][ T8] usb 3-1: USB disconnect, device number 11 [ 233.147099][ T787] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 233.666666][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.770803][ T787] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=ad.7b [ 233.876081][ T787] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 233.989323][ T787] usb 2-1: Product: syz [ 234.055703][ T787] usb 2-1: Manufacturer: syz [ 234.065606][ T787] usb 2-1: SerialNumber: syz [ 234.096103][ T787] usb 2-1: config 0 descriptor?? [ 234.190933][ T787] comedi comedi5: Wrong number of endpoints [ 234.196784][ T8454] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 234.217913][ T787] dt9812 2-1:0.0: driver 'dt9812' failed to auto-configure device. [ 234.220856][ T8454] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 234.260673][ T8454] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 234.272366][ T8457] binder: 8455:8457 ioctl c0306201 200000000080 returned -14 [ 234.390697][ T787] usb 2-1: USB disconnect, device number 11 [ 234.444714][ T8460] syzkaller1: entered promiscuous mode [ 234.450404][ T8460] syzkaller1: entered allmulticast mode [ 235.235082][ T8484] binder: 8482:8484 ioctl c0306201 200000000080 returned -14 [ 235.508592][ T8497] kvm: MWAIT instruction emulated as NOP! [ 235.890589][ T28] audit: type=1326 audit(1753645057.304:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8511 comm="syz.4.719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f676ad8e9a9 code=0x0 [ 235.970518][ T8516] binder: 8515:8516 ioctl c0306201 200000000080 returned -14 [ 236.093025][ T8521] loop0: detected capacity change from 0 to 2048 [ 236.122148][ T8521] EXT4-fs: Ignoring removed bh option [ 236.186885][ T8521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.400740][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.789846][ T8553] binder: 8548:8553 ioctl c0306201 200000000080 returned -14 [ 237.839514][ T8556] loop1: detected capacity change from 0 to 2048 [ 237.865056][ T8556] EXT4-fs: Ignoring removed bh option [ 237.956215][ T8556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.110260][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.436901][ T50] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 238.789514][ T8590] syzkaller1: entered promiscuous mode [ 238.803542][ T8590] syzkaller1: entered allmulticast mode [ 238.865242][ T8567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.737'. [ 239.179901][ T8601] NILFS (nbd4): device size too small [ 239.650666][ T8618] serio: Serial port ptm0 [ 239.816381][ T8624] wg2: entered promiscuous mode [ 239.821767][ T8624] wg2: entered allmulticast mode [ 239.851465][ T8626] syzkaller1: entered promiscuous mode [ 239.857269][ T8626] syzkaller1: entered allmulticast mode [ 240.184224][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 240.264184][ T787] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 240.380669][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.391472][ T23] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 240.412998][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.424874][ T23] usb 2-1: config 0 descriptor?? [ 240.444258][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 240.457756][ T787] usb 3-1: unable to get BOS descriptor or descriptor too short [ 240.470270][ T787] usb 3-1: config 9 has an invalid interface number: 198 but max is 0 [ 240.492462][ T787] usb 3-1: config 9 has no interface number 0 [ 240.528860][ T787] usb 3-1: config 9 interface 198 has no altsetting 0 [ 240.542503][ T787] usb 3-1: string descriptor 0 read error: -22 [ 240.556456][ T787] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 240.578262][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.603630][ T787] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 240.616642][ T787] dvb-usb: bulk message failed: -22 (3/0) [ 240.659302][ T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 240.678430][ T787] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 240.689157][ T787] usb 3-1: media controller created [ 240.724758][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.826757][ T8642] binder: 8640:8642 unknown command 0 [ 240.832265][ T8642] binder: 8640:8642 ioctl c0306201 200000000080 returned -22 [ 240.841858][ T8642] binder: BINDER_SET_CONTEXT_MGR already set [ 240.848214][ T8642] binder: 8640:8642 ioctl 4018620d 200000000040 returned -16 [ 240.855813][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 240.863299][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 240.881199][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 240.900330][ T787] DVB: Unable to find symbol mt352_attach() [ 240.900547][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 240.909929][ T787] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 240.921985][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 240.935377][ T787] dvb-usb: bulk message failed: -22 (3/0) [ 240.945292][ T23] pwc: recv_control_msg error -32 req 04 val 1400 [ 240.952594][ T23] pwc: recv_control_msg error -32 req 02 val 2000 [ 240.964362][ T23] pwc: recv_control_msg error -32 req 02 val 2100 [ 240.973586][ T23] pwc: recv_control_msg error -32 req 04 val 1500 [ 240.984848][ T787] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 241.009857][ T787] usb 3-1: USB disconnect, device number 12 [ 241.088694][ T787] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 241.127422][ T8647] loop0: detected capacity change from 0 to 2048 [ 241.140683][ T8647] EXT4-fs: Ignoring removed bh option [ 241.164698][ T8647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.186125][ T23] pwc: recv_control_msg error -32 req 02 val 2400 [ 241.196328][ T23] pwc: recv_control_msg error -32 req 02 val 2600 [ 241.214407][ T23] pwc: recv_control_msg error -32 req 02 val 2900 [ 241.224207][ T23] pwc: recv_control_msg error -32 req 02 val 2800 [ 241.247796][ T23] pwc: recv_control_msg error -32 req 04 val 1100 [ 241.285379][ T23] pwc: Registered as video103. [ 241.293813][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 241.411171][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.520413][ T5771] usb 2-1: USB disconnect, device number 12 [ 241.597625][ T8657] comedi comedi3: bad chanlist[0]=0x00000003 chan=3 range length=4 [ 241.702977][ T8662] binder: 8661:8662 unknown command 0 [ 241.711714][ T8662] binder: 8661:8662 ioctl c0306201 200000000080 returned -22 [ 241.759977][ T8666] binder: 8665:8666 ioctl c0306201 200000000080 returned -14 [ 241.988144][ T8673] loop4: detected capacity change from 0 to 2048 [ 242.003987][ T8673] EXT4-fs: Ignoring removed bh option [ 242.047396][ T8673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.221140][ T7257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.033009][ T8711] loop2: detected capacity change from 0 to 2048 [ 243.045101][ T8711] EXT4-fs: Ignoring removed bh option [ 243.081714][ T8711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.132001][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.403154][ T8719] binder: 8718:8719 ioctl c0306201 200000000080 returned -14 [ 243.432905][ T8719] binder: BINDER_SET_CONTEXT_MGR already set [ 243.444541][ T8719] binder: 8718:8719 ioctl 4018620d 200000000040 returned -16 [ 244.181551][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'. [ 244.205602][ T8727] binder: BINDER_SET_CONTEXT_MGR already set [ 244.224240][ T8727] binder: 8725:8727 ioctl 4018620d 200000000040 returned -16 [ 244.758099][ T8748] binder: 8747:8748 ioctl c0306201 200000000080 returned -14 [ 244.774813][ T8748] binder: BINDER_SET_CONTEXT_MGR already set [ 244.781013][ T8748] binder: 8747:8748 ioctl 4018620d 200000000040 returned -16 [ 244.914888][ T8751] binder: 8750:8751 unknown command 0 [ 244.920854][ T8751] binder: 8750:8751 ioctl c0306201 200000000080 returned -22 [ 245.046352][ T8753] binder: BINDER_SET_CONTEXT_MGR already set [ 245.052621][ T8753] binder: 8752:8753 ioctl 4018620d 200000000040 returned -16 [ 245.446175][ T8758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.810'. [ 246.086960][ T8771] binder: 8770:8771 unknown command 0 [ 246.092581][ T8771] binder: 8770:8771 ioctl c0306201 200000000080 returned -22 [ 246.220050][ T8774] loop2: detected capacity change from 0 to 16 [ 246.262053][ T8774] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 23300) [ 247.050484][ T8791] loop0: detected capacity change from 0 to 2048 [ 247.058906][ T8791] EXT4-fs: Ignoring removed bh option [ 247.089568][ T8791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.158862][ T8797] loop9: detected capacity change from 0 to 7 [ 247.171608][ T8797] Dev loop9: unable to read RDB block 7 [ 247.183295][ T8797] loop9: unable to read partition table [ 247.192628][ T8797] loop9: partition table beyond EOD, truncated [ 247.205274][ T8797] loop_reread_partitions: partition scan of loop9 (■глx№        ) failed (rc=-5) [ 247.313377][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.488275][ T8808] loop0: detected capacity change from 0 to 4096 [ 247.531196][ T8808] EXT4-fs (loop0): Test dummy encryption mode enabled [ 247.562012][ T8808] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 247.574569][ T8808] System zones: 0-5 [ 247.593391][ T8808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.278588][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.382920][ T8831] loop1: detected capacity change from 0 to 2048 [ 249.405647][ T8831] EXT4-fs: Ignoring removed bh option [ 249.511755][ T8831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.522339][ T8836] loop0: detected capacity change from 0 to 16 [ 249.702619][ T8836] erofs: (device loop0): mounted with root inode @ nid 36. [ 250.229348][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.455873][ T8852] loop4: detected capacity change from 0 to 16 [ 250.498002][ T8852] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 23300) [ 251.480685][ T8864] binder: BINDER_SET_CONTEXT_MGR already set [ 251.487014][ T8864] binder: 8863:8864 ioctl 4018620d 200000000040 returned -16 [ 252.231403][ T8877] loop4: detected capacity change from 0 to 2048 [ 252.251238][ T8877] EXT4-fs: Ignoring removed bh option [ 252.298389][ T8877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.394448][ T8882] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 252.491418][ T7257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.632544][ T8888] loop4: detected capacity change from 0 to 128 [ 252.657673][ T8888] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 253.639162][ T8891] FAT-fs (loop4): FAT read failed (blocknr 128) [ 253.745264][ T79] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 254.123755][ T8899] binder: BINDER_SET_CONTEXT_MGR already set [ 254.178095][ T8899] binder: 8898:8899 ioctl 4018620d 200000000040 returned -16 [ 254.236871][ T8902] fuse: Bad value for 'fd' [ 254.965494][ T8909] loop1: detected capacity change from 0 to 1024 [ 254.987881][ T8909] EXT4-fs: Ignoring removed nobh option [ 255.010136][ T8909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.055105][ T8909] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 255.113442][ T8912] loop0: detected capacity change from 0 to 1024 [ 255.130762][ T8914] loop4: detected capacity change from 0 to 2048 [ 255.140579][ T8914] EXT4-fs: Ignoring removed bh option [ 255.140751][ T8909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.160422][ T8912] EXT4-fs (loop0): Test dummy encryption mode enabled [ 255.178635][ T8912] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 255.210256][ T8914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.213346][ T8922] loop2: detected capacity change from 0 to 512 [ 255.271093][ T8909] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4036: comm syz.1.859: Allocating blocks 385-513 which overlap fs metadata [ 255.316701][ T8912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.380274][ T8909] EXT4-fs (loop1): pa ffff888078f483a0: logic 16, phys. 129, len 24 [ 255.381664][ T8922] EXT4-fs (loop2): 1 orphan inode deleted [ 255.389024][ T8909] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 8 [ 255.431946][ T1085] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 255.469317][ T8922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.483713][ T1085] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:7: Failed to release dquot type 1 [ 255.510022][ T8922] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.533403][ T7257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.545145][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.656210][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.048421][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.113669][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.351936][ T8933] fuse: Bad value for 'fd' [ 256.430173][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.764372][ T8947] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 256.770901][ T8945] loop1: detected capacity change from 0 to 2048 [ 256.795509][ T8945] EXT4-fs: Ignoring removed bh option [ 257.166730][ T8951] loop7: detected capacity change from 0 to 16416 [ 257.441108][ T8945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.879146][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.171799][ T8962] fuse: Bad value for 'fd' [ 258.196695][ T8953] loop7: detected capacity change from 16416 to 0 [ 258.650670][ T8970] binder: 8969:8970 ioctl c0306201 200000000080 returned -14 [ 258.898468][ T8977] loop4: detected capacity change from 0 to 2048 [ 258.917042][ T8977] EXT4-fs: Ignoring removed bh option [ 258.959657][ T8977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.088046][ T7257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.123753][ T9003] binder: 9001:9003 ioctl c0306201 200000000080 returned -14 [ 260.126526][ T9002] binder: 9000:9002 ioctl c0306201 0 returned -14 [ 261.120462][ T9011] loop4: detected capacity change from 0 to 2048 [ 261.184896][ T9011] EXT4-fs: Ignoring removed bh option [ 261.288612][ T9011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.498356][ T7257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.649499][ T9029] binder: 9028:9029 ioctl c0306201 200000000080 returned -14 [ 261.734222][ T5771] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 261.857307][ T9033] binder: 9032:9033 ioctl c0306201 0 returned -14 [ 261.880527][ T9033] binder: BINDER_SET_CONTEXT_MGR already set [ 261.894389][ T9033] binder: 9032:9033 ioctl 4018620d 200000000040 returned -16 [ 261.935991][ T5771] usb 2-1: config 0 has an invalid interface number: 158 but max is 0 [ 261.952244][ T5771] usb 2-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 261.982578][ T5771] usb 2-1: config 0 has no interface number 0 [ 262.009344][ T5771] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=be.65 [ 262.047003][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.072143][ T5771] usb 2-1: config 0 descriptor?? [ 262.106097][ T5771] usb 2-1: unknown interface protocol 0xea, assuming v1 [ 262.127803][ T5771] usb 2-1: 158:2 : does not exist [ 262.315754][ T5771] usb 2-1: USB disconnect, device number 13 [ 262.371442][ T9043] loop2: detected capacity change from 0 to 128 [ 262.396993][ T9043] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 263.167315][ T9044] FAT-fs (loop2): FAT read failed (blocknr 128) [ 263.258052][ T79] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 263.487608][ T9052] binder: 9051:9052 ioctl c0306201 200000000080 returned -14 [ 264.265197][ T9057] binder: 9056:9057 ioctl c0306201 0 returned -14 [ 265.603902][ T9079] binder: 9077:9079 ioctl c0306201 200000000080 returned -14 [ 266.590012][ T9105] binder: 9103:9105 ioctl c0306201 200000000080 returned -14 [ 266.636935][ T9108] loop4: detected capacity change from 0 to 512 [ 266.683343][ T9108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.708889][ T9108] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.756682][ T9108] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #2: comm syz.4.932: corrupted inode contents [ 266.831396][ T9108] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #2: comm syz.4.932: mark_inode_dirty error [ 266.856514][ T9108] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #2: comm syz.4.932: corrupted inode contents [ 266.883272][ T9108] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.932: mark_inode_dirty error [ 266.953004][ T7257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.052222][ T9124] loop4: detected capacity change from 0 to 512 [ 267.214488][ T9124] EXT4-fs (loop4): 1 orphan inode deleted [ 267.223387][ T9124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.250586][ T9124] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.258266][ T79] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 267.303312][ T79] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:5: Failed to release dquot type 1 [ 268.660351][ T7257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.774686][ T9143] binder: 9142:9143 ioctl 4018620d 0 returned -22 [ 268.782407][ T9143] binder: 9142:9143 unknown command 0 [ 268.790545][ T9143] binder: 9142:9143 ioctl c0306201 200000000080 returned -22 [ 268.875474][ T9145] binder: 9144:9145 ioctl c0306201 200000000080 returned -14 [ 270.289737][ T9171] binder: 9170:9171 ioctl 4018620d 0 returned -22 [ 270.305483][ T9171] binder: 9170:9171 unknown command 0 [ 270.324217][ T9171] binder: 9170:9171 ioctl c0306201 200000000080 returned -22 [ 270.383616][ T9164] loop0: detected capacity change from 0 to 8192 [ 270.452294][ T9164] loop0: p1 p2 p4 < > [ 270.462415][ T9164] loop0: partition table partially beyond EOD, truncated [ 270.487975][ T9164] loop0: p1 start 16777216 is beyond EOD, truncated [ 270.499404][ T9164] loop0: p2 size 515840 extends beyond EOD, truncated [ 270.503951][ T9178] binder: 9177:9178 ioctl c0306201 200000000080 returned -14 [ 270.525322][ T9164] loop0: p4 start 16777216 is beyond EOD, truncated [ 270.811600][ T6149] udevd[6149]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 271.667433][ T9198] binder: 9197:9198 ioctl 4018620d 0 returned -22 [ 271.685032][ T9198] binder: 9197:9198 unknown command 0 [ 271.690624][ T9198] binder: 9197:9198 ioctl c0306201 200000000080 returned -22 [ 271.728553][ T9200] binder: 9199:9200 ioctl c0306201 200000000080 returned -14 [ 272.028381][ T9205] loop4: detected capacity change from 0 to 8192 [ 272.127180][ T9205] loop4: p1 p2 p4 < > [ 272.131335][ T9205] loop4: partition table partially beyond EOD, truncated [ 272.171515][ T9205] loop4: p1 start 16777216 is beyond EOD, truncated [ 272.212270][ T9205] loop4: p2 size 515840 extends beyond EOD, truncated [ 272.258059][ T9205] loop4: p4 start 16777216 is beyond EOD, truncated [ 272.578838][ T6149] udevd[6149]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 272.850429][ T9228] binder: BINDER_SET_CONTEXT_MGR already set [ 272.872671][ T9228] binder: 9227:9228 ioctl 4018620d 200000000040 returned -16 [ 272.979368][ T9233] binder: 9232:9233 ioctl 4018620d 0 returned -22 [ 272.987055][ T9233] binder: 9232:9233 ioctl c0306201 200000000080 returned -14 [ 273.140217][ T9236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.977'. [ 273.272560][ T28] audit: type=1326 audit(1753645094.684:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.0.978" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f642578e9a9 code=0x0 [ 273.424221][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 273.653804][ T9252] binder: BINDER_SET_CONTEXT_MGR already set [ 273.660441][ T9252] binder: 9251:9252 ioctl 4018620d 200000000040 returned -16 [ 273.829560][ T9257] binder: 9256:9257 ioctl 4018620d 0 returned -22 [ 273.858005][ T9257] binder: 9256:9257 ioctl c0306201 200000000080 returned -14 [ 273.887108][ T28] audit: type=1326 audit(1753645095.304:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.2.988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86e798e9a9 code=0x0 [ 274.401899][ T9278] binder: BINDER_SET_CONTEXT_MGR already set [ 274.416780][ T9278] binder: 9277:9278 ioctl 4018620d 200000000040 returned -16 [ 275.460850][ T9294] binder: 9293:9294 ioctl 4018620d 0 returned -22 [ 275.484933][ T9294] binder: 9293:9294 ioctl c0306201 200000000080 returned -14 [ 275.686848][ T9303] binder: 9302:9303 ioctl c0306201 0 returned -14 [ 276.586353][ T9321] binder: BINDER_SET_CONTEXT_MGR already set [ 276.605318][ T9321] binder: 9320:9321 ioctl 4018620d 200000000040 returned -16 [ 276.719745][ T9327] binder: 9326:9327 ioctl c0306201 0 returned -14 [ 278.047326][ T9340] loop4: detected capacity change from 0 to 1024 [ 278.098182][ T9340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.179757][ T9340] EXT4-fs error (device loop4): ext4_lookup:1858: comm syz.4.1018: inode #12: comm syz.4.1018: iget: illegal inode # [ 278.252557][ T9340] EXT4-fs (loop4): Remounting filesystem read-only [ 278.358066][ T7257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.577149][ T9353] binder: 9352:9353 ioctl c0306201 0 returned -14 [ 282.730045][ T9447] fuse: Bad value for 'fd' [ 282.770552][ T9448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1058'. [ 283.148929][ T9462] binder: BINDER_SET_CONTEXT_MGR already set [ 283.158795][ T9462] binder: 9461:9462 ioctl 4018620d 200000000040 returned -16 [ 283.382501][ T9479] fuse: Bad value for 'fd' [ 283.971480][ T9496] binder: 9495:9496 unknown command 0 [ 283.985491][ T9496] binder: 9495:9496 ioctl c0306201 200000000080 returned -22 [ 284.006079][ T9496] binder: 9495:9496 ioctl c0306201 0 returned -14 [ 284.194539][ T9499] fuse: Bad value for 'fd' [ 285.198170][ T9518] binder: 9514:9518 ioctl 4018620d 0 returned -22 [ 285.407931][ T9526] binder: 9525:9526 unknown command 0 [ 285.420961][ T9526] binder: 9525:9526 ioctl c0306201 200000000080 returned -22 [ 285.432316][ T9526] binder: 9525:9526 ioctl c0306201 0 returned -14 [ 286.195923][ T28] audit: type=1326 audit(1753645107.614:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9540 comm="syz.0.1094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f642578e9a9 code=0x0 [ 286.995710][ T9547] binder: 9546:9547 unknown command 0 [ 287.001151][ T9547] binder: 9546:9547 ioctl c0306201 200000000080 returned -22 [ 287.050298][ T9550] binder: 9548:9550 ioctl 4018620d 0 returned -22 [ 287.238118][ T9554] binder: 9553:9554 unknown command 0 [ 287.255123][ T9554] binder: 9553:9554 ioctl c0306201 200000000080 returned -22 [ 287.999626][ T28] audit: type=1326 audit(1753645109.414:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.1.1105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdefc38e9a9 code=0x0 [ 289.022808][ T9584] binder: 9583:9584 ioctl 4018620d 0 returned -22 [ 289.063349][ T9582] binder: 9581:9582 unknown command 0 [ 289.080639][ T9582] binder: 9581:9582 ioctl c0306201 200000000080 returned -22 [ 289.198520][ T9590] binder: 9588:9590 unknown command 0 [ 289.203952][ T9590] binder: 9588:9590 ioctl c0306201 200000000080 returned -22 [ 289.280748][ T9592] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 291.085651][ T9619] binder: 9617:9619 unknown command 0 [ 291.091100][ T9619] binder: 9617:9619 ioctl c0306201 200000000080 returned -22 [ 291.099463][ T9620] binder: 9616:9620 unknown command 0 [ 291.109461][ T9620] binder: 9616:9620 ioctl c0306201 200000000080 returned -22 [ 291.360618][ T9628] binder: BINDER_SET_CONTEXT_MGR already set [ 291.382065][ T9628] binder: 9626:9628 ioctl 4018620d 200000000040 returned -16 [ 292.881052][ T9652] binder: 9651:9652 unknown command 0 [ 292.889526][ T9650] binder: 9647:9650 unknown command 0 [ 292.895406][ T9652] binder: 9651:9652 ioctl c0306201 200000000080 returned -22 [ 292.903998][ T9650] binder: 9647:9650 ioctl c0306201 200000000080 returned -22 [ 292.946018][ T9650] binder: 9647:9650 ioctl 4018620d 0 returned -22 [ 293.036941][ T9656] binder: BINDER_SET_CONTEXT_MGR already set [ 293.043195][ T9656] binder: 9655:9656 ioctl 4018620d 200000000040 returned -16 [ 294.335053][ T9680] binder: 9679:9680 unknown command 0 [ 294.340495][ T9680] binder: 9679:9680 ioctl c0306201 200000000080 returned -22 [ 294.496318][ T9686] binder: 9684:9686 unknown command 0 [ 294.501760][ T9686] binder: 9684:9686 ioctl c0306201 200000000080 returned -22 [ 294.568300][ T9686] binder: 9684:9686 ioctl 4018620d 0 returned -22 [ 294.590111][ T9689] binder: 9687:9689 ioctl c0306201 0 returned -14 [ 295.198689][ T9712] binder: 9711:9712 unknown command 0 [ 295.208448][ T9712] binder: 9711:9712 ioctl c0306201 200000000080 returned -22 [ 296.212559][ T9725] binder: 9724:9725 unknown command 0 [ 296.219100][ T9725] binder: 9724:9725 ioctl c0306201 200000000080 returned -22 [ 296.237435][ T9725] binder: 9724:9725 ioctl 4018620d 0 returned -22 [ 296.815199][ T9740] binder: 9739:9740 unknown command 0 [ 296.839967][ T9740] binder: 9739:9740 ioctl c0306201 200000000080 returned -22 [ 296.851238][ T9740] binder: 9739:9740 ioctl c0306201 0 returned -14 [ 297.154297][ T9755] binder: 9754:9755 unknown command 0 [ 297.159735][ T9755] binder: 9754:9755 ioctl c0306201 200000000080 returned -22 [ 297.172848][ T9755] binder: 9754:9755 ioctl c0306201 0 returned -14 [ 299.301943][ T9788] binder: 9786:9788 unknown command 0 [ 299.314367][ T9788] binder: 9786:9788 ioctl c0306201 200000000080 returned -22 [ 299.357759][ T9788] binder: 9786:9788 ioctl c0306201 0 returned -14 [ 299.542774][ T9796] binder: 9795:9796 unknown command 0 [ 299.548855][ T9796] binder: 9795:9796 ioctl c0306201 200000000080 returned -22 [ 300.628549][ T9816] binder: 9815:9816 unknown command 0 [ 300.640464][ T9816] binder: 9815:9816 ioctl c0306201 200000000080 returned -22 [ 300.656664][ T9816] binder: 9815:9816 ioctl c0306201 0 returned -14 [ 300.806474][ T9822] binder: 9821:9822 unknown command 0 [ 300.812181][ T9822] binder: 9821:9822 ioctl c0306201 200000000080 returned -22 [ 302.392788][ T9850] binder: 9849:9850 unknown command 0 [ 302.402012][ T9850] binder: 9849:9850 ioctl c0306201 200000000080 returned -22 [ 302.504350][ T9853] binder: 9852:9853 unknown command 0 [ 302.513308][ T9853] binder: 9852:9853 ioctl c0306201 200000000080 returned -22 [ 302.763853][ T9866] fuse: Unknown parameter 'grou00000000000000000000' [ 303.817586][ T9886] binder: 9885:9886 unknown command 0 [ 303.838271][ T9886] binder: 9885:9886 ioctl c0306201 200000000080 returned -22 [ 303.848763][ T9889] binder: 9888:9889 unknown command 0 [ 303.855554][ T9889] binder: 9888:9889 ioctl c0306201 200000000080 returned -22 [ 304.026484][ T9892] fuse: Unknown parameter 'grou00000000000000000000' [ 305.092774][ T9918] binder: 9917:9918 unknown command 0 [ 305.124174][ T9918] binder: 9917:9918 ioctl c0306201 200000000080 returned -22 [ 305.175284][ T9920] binder: 9919:9920 unknown command 0 [ 305.180724][ T9920] binder: 9919:9920 ioctl c0306201 200000000080 returned -22 [ 306.149535][ T9945] binder: 9944:9945 unknown command 0 [ 306.171186][ T9945] binder: 9944:9945 ioctl c0306201 200000000080 returned -22 [ 306.231594][ T9948] binder: 9947:9948 unknown command 0 [ 306.237382][ T9948] binder: 9947:9948 ioctl c0306201 200000000080 returned -22 [ 307.039575][ T9970] binder: 9969:9970 unknown command 0 [ 307.045321][ T9970] binder: 9969:9970 ioctl c0306201 200000000080 returned -22 [ 307.113756][ T9974] binder: 9973:9974 unknown command 0 [ 307.122726][ T9974] binder: 9973:9974 ioctl c0306201 200000000080 returned -22 [ 307.410358][ T9987] fuse: Unknown parameter 'group_i00000000000000000000' [ 307.583603][ T9994] binder: 9993:9994 unknown command 0 [ 307.602533][ T9994] binder: 9993:9994 ioctl c0306201 200000000080 returned -22 [ 307.732710][ T9998] binder: 9996:9998 unknown command 0 [ 307.754537][ T9998] binder: 9996:9998 ioctl c0306201 200000000080 returned -22 [ 308.018197][T10007] fuse: Unknown parameter 'group_i00000000000000000000' [ 308.347286][T10020] binder: 10019:10020 unknown command 0 [ 308.352904][T10020] binder: 10019:10020 ioctl c0306201 200000000080 returned -22 [ 308.539217][T10025] binder: 10024:10025 ioctl 4018620d 0 returned -22 [ 308.701937][T10030] fuse: Unknown parameter 'group_id00000000000000000000' [ 309.052210][T10040] kvm: apic: phys broadcast and lowest prio [ 309.264561][ T5102] Bluetooth: hci1: command 0x0406 tx timeout [ 310.030885][ T50] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 310.727707][T10092] binder: 10091:10092 unknown command 0 [ 310.733463][T10092] binder: 10091:10092 ioctl c0306201 200000000080 returned -22 [ 310.770334][T10092] binder: 10091:10092 ioctl c0306201 0 returned -14 [ 312.300477][T10138] binder: 10137:10138 ioctl c00c6211 ffffffffffffffff returned -14 [ 313.740220][T10145] loop0: detected capacity change from 0 to 1024 [ 314.011503][T10145] hfsplus: xattr searching failed [ 314.029936][T10145] hfsplus: xattr searching failed [ 314.217034][ T59] hfsplus: bad catalog file entry [ 314.222999][ T59] hfsplus: b-tree write err: -5, ino 3 [ 316.781480][T10203] kvm: apic: phys broadcast and lowest prio [ 316.918014][ T28] audit: type=1326 audit(1753645138.324:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e798e9a9 code=0x7ffc0000 [ 317.096211][ T28] audit: type=1326 audit(1753645138.324:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e798e9a9 code=0x7ffc0000 [ 317.257400][ T28] audit: type=1326 audit(1753645138.324:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e798e9a9 code=0x7ffc0000 [ 317.442810][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.451949][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.465092][ T28] audit: type=1326 audit(1753645138.324:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e798e9a9 code=0x7ffc0000 [ 317.604258][ T28] audit: type=1326 audit(1753645138.324:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e798e9a9 code=0x7ffc0000 [ 317.766767][ T28] audit: type=1326 audit(1753645138.374:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f86e798e9a9 code=0x7ffc0000 [ 317.893551][ T28] audit: type=1326 audit(1753645138.374:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e798e9a9 code=0x7ffc0000 [ 318.003933][ T28] audit: type=1326 audit(1753645138.374:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e798e9a9 code=0x7ffc0000 [ 318.089698][ T28] audit: type=1326 audit(1753645138.374:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e798e9a9 code=0x7ffc0000 [ 318.151429][ T28] audit: type=1326 audit(1753645138.384:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.2.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f86e798e9a9 code=0x7ffc0000 [ 318.531783][T10246] loop2: detected capacity change from 0 to 512 [ 318.583130][T10246] EXT4-fs (loop2): orphan cleanup on readonly fs [ 318.596740][T10246] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.1350: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1) [ 318.621472][T10246] EXT4-fs error (device loop2): ext4_quota_enable:7132: comm syz.2.1350: Bad quota inode: 4, type: 1 [ 318.633939][T10246] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 318.683413][T10246] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 318.723750][T10246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.791375][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.435417][ T5849] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 320.636302][ T5849] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 320.656204][ T5849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.687867][ T5849] usb 2-1: config 0 has no interface number 0 [ 320.702436][ T5849] usb 2-1: config 0 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 320.719429][ T5849] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 320.742399][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.751944][ T5849] usb 2-1: Product: syz [ 320.758731][ T5849] usb 2-1: Manufacturer: syz [ 320.763578][ T5849] usb 2-1: SerialNumber: syz [ 320.792705][ T5849] usb 2-1: config 0 descriptor?? [ 321.081261][T10258] loop1: detected capacity change from 0 to 1024 [ 321.091861][T10258] EXT4-fs: Ignoring removed nobh option [ 321.111242][T10258] EXT4-fs: Ignoring removed bh option [ 321.137891][T10258] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 321.155631][T10287] loop4: detected capacity change from 0 to 1024 [ 321.163086][T10287] EXT4-fs: Ignoring removed nobh option [ 321.180170][T10287] EXT4-fs: Ignoring removed bh option [ 321.208425][T10287] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 321.275370][T10258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.343734][T10287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.389239][ T5849] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 321.422020][ T5849] usb 2-1: MIDIStreaming interface descriptor not found [ 321.505578][ T5849] usb 2-1: USB disconnect, device number 14 [ 321.580739][T10287] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4036: comm syz.4.1367: Allocating blocks 497-513 which overlap fs metadata [ 321.641075][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.646332][T10287] EXT4-fs (loop4): pa ffff888077626828: logic 256, phys. 385, len 8 [ 321.666023][T10287] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 1 [ 321.765234][T10287] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Out of memory [ 321.784795][T10287] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #15: comm syz.4.1367: mark_inode_dirty error [ 321.808253][T10287] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Out of memory [ 321.827002][T10287] EXT4-fs error (device loop4): ext4_alloc_file_blocks:4544: inode #15: comm syz.4.1367: mark_inode_dirty error [ 322.042009][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.238108][ T7257] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Out of memory [ 322.256586][ T7257] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #2: comm syz-executor: mark_inode_dirty error [ 322.357233][ T1000] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Out of memory [ 322.460437][ T1000] EXT4-fs error (device loop4): ext4_convert_unwritten_extents:4869: inode #15: comm kworker/u4:6: mark_inode_dirty error [ 322.473481][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.561490][ T1000] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -12) [ 322.629427][ T1000] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -12) [ 322.675612][ T1000] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -12) [ 322.692723][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.713052][ T1000] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -12) [ 322.737408][ T1000] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -12) [ 322.766447][ T1000] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -12) [ 322.783451][ T1000] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -12) [ 322.799446][ T1000] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -12) [ 322.925345][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.242468][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.884912][ T5102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.921032][ T5102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.936515][ T5102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.043503][ T5102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.053825][ T5102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 326.063229][ T5102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.204486][ T5102] Bluetooth: hci3: unexpected cc 0x0402 length: 4 > 1 [ 326.211344][ T5102] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 327.099144][T10354] chnl_net:caif_netlink_parms(): no params data found [ 327.319041][ T59] hsr_slave_0: left promiscuous mode [ 327.339491][ T59] hsr_slave_1: left promiscuous mode [ 327.359754][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.374837][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.418846][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.436673][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.459337][ T59] bridge_slave_1: left allmulticast mode [ 327.471734][ T59] bridge_slave_1: left promiscuous mode [ 327.488985][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.521795][ T59] bridge_slave_0: left allmulticast mode [ 327.538304][ T59] bridge_slave_0: left promiscuous mode [ 327.561989][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.712770][ T59] veth1_macvtap: left promiscuous mode [ 327.734355][ T59] veth0_macvtap: left promiscuous mode [ 327.740047][ T59] veth1_vlan: left promiscuous mode [ 327.765604][ T59] veth0_vlan: left promiscuous mode [ 327.911464][T10396] fuse: Invalid rootmode [ 328.146424][ T5102] Bluetooth: hci1: command tx timeout [ 329.732048][ T59] team0 (unregistering): Port device team_slave_1 removed [ 329.809808][ T59] team0 (unregistering): Port device team_slave_0 removed [ 329.875501][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.948980][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.224738][ T5102] Bluetooth: hci1: command tx timeout [ 330.797077][ T59] bond0 (unregistering): Released all slaves [ 330.883612][T10401] pimreg: entered allmulticast mode [ 331.129039][T10354] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.162014][T10354] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.187900][T10354] bridge_slave_0: entered allmulticast mode [ 331.214309][T10354] bridge_slave_0: entered promiscuous mode [ 331.238125][T10354] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.246361][T10354] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.264161][T10354] bridge_slave_1: entered allmulticast mode [ 331.271641][T10354] bridge_slave_1: entered promiscuous mode [ 331.347274][T10354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.362976][T10354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.568266][T10354] team0: Port device team_slave_0 added [ 331.604709][T10437] loop0: detected capacity change from 0 to 1024 [ 331.637192][T10354] team0: Port device team_slave_1 added [ 331.660293][T10437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.737229][T10354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.761505][T10354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.812109][T10354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.849303][T10437] EXT4-fs warning (device loop0): verify_group_input:172: Reserved blocks too high (13) [ 331.865034][T10354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.872519][T10354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.900606][T10354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.919590][ T5791] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 331.992422][ T5791] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 332.021498][ T5791] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #2: comm syz-executor: mark_inode_dirty error [ 332.083845][T10354] hsr_slave_0: entered promiscuous mode [ 332.092369][T10354] hsr_slave_1: entered promiscuous mode [ 332.106245][T10354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.113860][T10354] Cannot create hsr debugfs directory [ 332.142575][ T8952] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.304477][ T5102] Bluetooth: hci1: command tx timeout [ 332.418528][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.537020][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.636320][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.848710][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.242821][T10354] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 333.288353][T10354] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 333.351142][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.371659][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.384401][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.591404][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.602528][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.611452][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.819029][T10354] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 333.949107][T10354] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 334.227647][T10496] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1416'. [ 334.394609][ T50] Bluetooth: hci1: command tx timeout [ 334.869137][T10476] chnl_net:caif_netlink_parms(): no params data found [ 335.108059][T10354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.805994][ T50] Bluetooth: hci3: command tx timeout [ 336.308533][ T59] hsr_slave_0: left promiscuous mode [ 336.322937][ T59] hsr_slave_1: left promiscuous mode [ 336.454999][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.507473][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.561718][T10544] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1423'. [ 336.589226][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.597672][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.732241][ T59] veth1_macvtap: left promiscuous mode [ 336.738139][ T59] veth0_macvtap: left promiscuous mode [ 336.743666][ T59] veth1_vlan: left promiscuous mode [ 336.751773][ T59] veth0_vlan: left promiscuous mode [ 336.761271][T10546] loop2: detected capacity change from 0 to 512 [ 336.809568][T10546] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 336.841024][T10546] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002] [ 336.867816][T10546] System zones: 0-1, 15-15, 18-18, 34-34 [ 336.880782][T10546] EXT4-fs (loop2): orphan cleanup on readonly fs [ 336.889708][T10546] __quota_error: 62 callbacks suppressed [ 336.889723][T10546] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 336.905959][T10546] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 336.920604][T10546] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 336.931209][T10546] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #16: comm syz.2.1424: casefold flag without casefold feature [ 336.945395][T10546] EXT4-fs (loop2): Remounting filesystem read-only [ 336.953395][T10546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 336.966711][ T59] pimreg (unregistering): left allmulticast mode [ 336.982464][ T59] bond1 (unregistering): Released all slaves [ 337.053528][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.673879][ T59] team0 (unregistering): Port device team_slave_1 removed [ 337.728839][ T59] team0 (unregistering): Port device team_slave_0 removed [ 337.787824][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.833298][ T50] Bluetooth: hci3: command tx timeout [ 337.856069][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.671307][ T59] bond0 (unregistering): Released all slaves [ 338.726121][T10476] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.733290][T10476] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.741096][T10476] bridge_slave_0: entered allmulticast mode [ 338.748227][T10476] bridge_slave_0: entered promiscuous mode [ 338.781216][T10476] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.789792][T10476] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.797415][T10476] bridge_slave_1: entered allmulticast mode [ 338.805018][T10476] bridge_slave_1: entered promiscuous mode [ 338.818483][T10354] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.942368][T10476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.955447][T10476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.009978][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.017220][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.085123][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.092302][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.120653][T10476] team0: Port device team_slave_0 added [ 339.182587][T10476] team0: Port device team_slave_1 added [ 339.284871][T10476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.291840][T10476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.319368][T10476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.356484][T10476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.363477][T10476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.420342][T10476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.547742][T10476] hsr_slave_0: entered promiscuous mode [ 339.566645][T10476] hsr_slave_1: entered promiscuous mode [ 339.604295][T10476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.611920][T10476] Cannot create hsr debugfs directory [ 339.904184][ T50] Bluetooth: hci3: command tx timeout [ 340.664806][T10596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1438'. [ 341.429635][T10354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.542158][T10476] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 341.558894][T10476] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 341.578105][T10476] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 341.603719][T10476] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 341.967066][T10476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.985951][ T50] Bluetooth: hci3: command tx timeout [ 342.078057][T10476] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.123157][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.130401][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.184812][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.191999][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.370421][T10354] veth0_vlan: entered promiscuous mode [ 342.418828][T10354] veth1_vlan: entered promiscuous mode [ 342.482027][T10354] veth0_macvtap: entered promiscuous mode [ 342.506002][T10354] veth1_macvtap: entered promiscuous mode [ 342.526355][T10354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.565033][T10354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.585973][T10354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.612879][T10354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.632706][T10354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.645317][T10354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.667036][T10354] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.705658][T10354] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.734096][T10354] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.742855][T10354] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.953153][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.982328][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.020020][T10476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.067830][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.086404][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.058678][T10656] fuse: Bad value for 'fd' [ 345.243257][T10681] fuse: Bad value for 'fd' [ 345.309429][T10476] veth0_vlan: entered promiscuous mode [ 345.339917][T10476] veth1_vlan: entered promiscuous mode [ 345.475037][ C1] ------------[ cut here ]------------ [ 345.481114][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 345.492093][ C1] WARNING: CPU: 1 PID: 10692 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 345.502300][ C1] Modules linked in: [ 345.506291][ C1] CPU: 1 PID: 10692 Comm: syz.1.1455 Not tainted 6.6.100-syzkaller #0 [ 345.514525][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.524703][ C1] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 345.531027][ C1] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 60 7b be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 5b ef 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 345.550752][ C1] RSP: 0018:ffffc900001f0560 EFLAGS: 00010246 [ 345.556902][ C1] RAX: 66f278ec96342700 RBX: 000000000000000c RCX: ffff88802455bc00 [ 345.564935][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 345.572940][ C1] RBP: 0000000000000084 R08: ffffc900001f0167 R09: 1ffff9200003e02c [ 345.581004][ C1] R10: dffffc0000000000 R11: fffff5200003e02d R12: 0000000000000040 [ 345.589063][ C1] R13: dffffc0000000000 R14: ffff888030be3358 R15: ffff888079a89ca8 [ 345.597117][ C1] FS: 00007fdefd1bc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 345.606124][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.612741][ C1] CR2: 00007fdef1cf6e00 CR3: 000000002f3a6000 CR4: 00000000003506e0 [ 345.620805][ C1] Call Trace: [ 345.624146][ C1] [ 345.627059][ C1] rate_control_send_low+0x194/0x790 [ 345.632406][ C1] rate_control_get_rate+0x20b/0x5c0 [ 345.638252][ C1] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 345.644144][ C1] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 345.650191][ C1] ? __local_bh_enable_ip+0x12e/0x1c0 [ 345.655643][ C1] ? _local_bh_enable+0xa0/0xa0 [ 345.660544][ C1] ieee80211_beacon_get_ap+0x1429/0x1970 [ 345.666304][ C1] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 345.671482][ C1] ? read_lock_is_recursive+0x20/0x20 [ 345.676954][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 345.682554][ C1] __ieee80211_beacon_get+0x10eb/0x1600 [ 345.688215][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 345.693817][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 345.699826][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 345.706800][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 345.712393][ C1] __iterate_interfaces+0x243/0x500 [ 345.717683][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 345.723968][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 345.731293][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 345.737641][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 345.744750][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 345.749010][T10693] loop5: detected capacity change from 0 to 512 [ 345.749968][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 345.761484][ C1] ? hw_scan_work+0xf40/0xf40 [ 345.763418][T10476] veth0_macvtap: entered promiscuous mode [ 345.766245][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 345.777631][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 345.783755][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 345.788967][ C1] handle_softirqs+0x280/0x820 [ 345.793870][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 345.798734][ C1] ? do_softirq+0x180/0x180 [ 345.803299][ C1] __irq_exit_rcu+0xc7/0x190 [ 345.807979][ C1] ? irq_exit_rcu+0x20/0x20 [ 345.812535][ C1] irq_exit_rcu+0x9/0x20 [ 345.816841][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 345.820700][T10476] veth1_macvtap: entered promiscuous mode [ 345.822489][ C1] [ 345.831219][ C1] [ 345.834222][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.840276][ C1] RIP: 0010:xas_descend+0x2f/0x490 [ 345.845470][ C1] Code: 41 55 41 54 53 48 83 ec 18 48 89 34 24 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 1c 03 26 f7 4c 8d 73 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 02 49 7d f7 4d 8b 36 4c 8b 3c 24 [ 345.865168][ C1] RSP: 0018:ffffc900037bf820 EFLAGS: 00000a06 [ 345.871289][ C1] RAX: 1ffff920006f7f21 RBX: ffffc900037bf900 RCX: 0000000000080000 [ 345.875406][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.879323][ C1] RDX: ffffc9000b9e1000 RSI: 0000000000011dae RDI: 0000000000011daf [ 345.898244][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff21b46a4 [ 345.906311][ C1] R10: dffffc0000000000 R11: fffffbfff21b46a5 R12: 1ffff1100bd2e2c0 [ 345.912272][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.914337][ C1] R13: 0000000000000000 R14: ffffc900037bf908 R15: dffffc0000000000 [ 345.914376][ C1] ? xas_start+0x3b0/0x770 [ 345.914404][ C1] xas_load+0xbe/0x140 [ 345.914425][ C1] ? filemap_get_entry+0xb1/0x3c0 [ 345.914447][ C1] filemap_get_entry+0x165/0x3c0 [ 345.941297][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.945830][ C1] ? page_cache_prev_miss+0x360/0x360 [ 345.945868][ C1] ? page_copy_sane+0x4e/0x270 [ 345.945897][ C1] shmem_get_folio_gfp+0x2a5/0x2ac0 [ 345.945945][ C1] shmem_write_begin+0xf2/0x420 [ 345.945971][ C1] generic_perform_write+0x2fb/0x5b0 [ 345.952997][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.961370][ C1] ? generic_file_direct_write+0x3e0/0x3e0 [ 345.961416][ C1] ? file_update_time+0x1a2/0x1b0 [ 345.971077][T10476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.971559][ C1] shmem_file_write_iter+0xfb/0x120 [ 345.988276][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.996804][ C1] vfs_write+0x43b/0x940 [ 345.996844][ C1] ? file_end_write+0x250/0x250 [ 345.996872][ C1] ? __fget_files+0x44a/0x4d0 [ 346.002903][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.007722][ C1] ? __fdget_pos+0x1d8/0x330 [ 346.007749][ C1] ? ksys_write+0x75/0x250 [ 346.007774][ C1] ksys_write+0x147/0x250 [ 346.007803][ C1] ? __ia32_sys_read+0x90/0x90 [ 346.007833][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 346.007864][ C1] do_syscall_64+0x55/0xb0 [ 346.007886][ C1] ? clear_bhb_loop+0x40/0x90 [ 346.007905][ C1] ? clear_bhb_loop+0x40/0x90 [ 346.007927][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.007955][ C1] RIP: 0033:0x7fdefc38d45f [ 346.019747][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.020371][ C1] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 346.031073][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.035066][ C1] RSP: 002b:00007fdefd1bbdf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 346.035091][ C1] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fdefc38d45f [ 346.035105][ C1] RDX: 0000000000100000 RSI: 00007fdef1bf7000 RDI: 0000000000000003 [ 346.035118][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000c4e [ 346.035131][ C1] R10: 0000000000000fd2 R11: 0000000000000293 R12: 0000000000000003 [ 346.035145][ C1] R13: 00007fdefd1bbef0 R14: 00007fdefd1bbeb0 R15: 00007fdef1bf7000 [ 346.035175][ C1] [ 346.043823][T10476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.044702][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 346.044712][ C1] CPU: 1 PID: 10692 Comm: syz.1.1455 Not tainted 6.6.100-syzkaller #0 [ 346.044733][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 346.044742][ C1] Call Trace: [ 346.044751][ C1] [ 346.044758][ C1] dump_stack_lvl+0x16c/0x230 [ 346.044788][ C1] ? show_regs_print_info+0x20/0x20 [ 346.044809][ C1] ? load_image+0x3b0/0x3b0 [ 346.044848][ C1] panic+0x2c0/0x710 [ 346.044877][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 346.044918][ C1] __warn+0x2e0/0x470 [ 346.044941][ C1] ? __rate_control_send_low+0x635/0x880 [ 346.044969][ C1] ? __rate_control_send_low+0x635/0x880 [ 346.044993][ C1] report_bug+0x2be/0x4f0 [ 346.045014][ C1] ? __rate_control_send_low+0x635/0x880 [ 346.045040][ C1] ? __rate_control_send_low+0x635/0x880 [ 346.045066][ C1] ? __rate_control_send_low+0x637/0x880 [ 346.045090][ C1] handle_bug+0xcf/0x120 [ 346.045111][ C1] exc_invalid_op+0x1a/0x50 [ 346.045133][ C1] asm_exc_invalid_op+0x1a/0x20 [ 346.045160][ C1] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 346.045186][ C1] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 60 7b be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 5b ef 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 346.045203][ C1] RSP: 0018:ffffc900001f0560 EFLAGS: 00010246 [ 346.045227][ C1] RAX: 66f278ec96342700 RBX: 000000000000000c RCX: ffff88802455bc00 [ 346.045241][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 346.045253][ C1] RBP: 0000000000000084 R08: ffffc900001f0167 R09: 1ffff9200003e02c [ 346.045267][ C1] R10: dffffc0000000000 R11: fffff5200003e02d R12: 0000000000000040 [ 346.045280][ C1] R13: dffffc0000000000 R14: ffff888030be3358 R15: ffff888079a89ca8 [ 346.045324][ C1] rate_control_send_low+0x194/0x790 [ 346.045354][ C1] rate_control_get_rate+0x20b/0x5c0 [ 346.045387][ C1] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 346.045412][ C1] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 346.045439][ C1] ? __local_bh_enable_ip+0x12e/0x1c0 [ 346.045463][ C1] ? _local_bh_enable+0xa0/0xa0 [ 346.045489][ C1] ieee80211_beacon_get_ap+0x1429/0x1970 [ 346.045533][ C1] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 346.045571][ C1] ? read_lock_is_recursive+0x20/0x20 [ 346.045601][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 346.045630][ C1] __ieee80211_beacon_get+0x10eb/0x1600 [ 346.045659][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 346.045704][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 346.045743][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 346.045789][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 346.045820][ C1] __iterate_interfaces+0x243/0x500 [ 346.045841][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 346.045869][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 346.045893][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 346.045915][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 346.045946][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 346.045981][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 346.046009][ C1] ? hw_scan_work+0xf40/0xf40 [ 346.046037][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 346.046057][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 346.046086][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 346.046110][ C1] handle_softirqs+0x280/0x820 [ 346.046132][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 346.046156][ C1] ? do_softirq+0x180/0x180 [ 346.046181][ C1] __irq_exit_rcu+0xc7/0x190 [ 346.046199][ C1] ? irq_exit_rcu+0x20/0x20 [ 346.046230][ C1] irq_exit_rcu+0x9/0x20 [ 346.046244][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 346.046274][ C1] [ 346.046280][ C1] [ 346.046288][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 346.046321][ C1] RIP: 0010:xas_descend+0x2f/0x490 [ 346.046344][ C1] Code: 41 55 41 54 53 48 83 ec 18 48 89 34 24 48 89 fb 49 bf 00 00 00 00 00 fc ff df e8 1c 03 26 f7 4c 8d 73 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 02 49 7d f7 4d 8b 36 4c 8b 3c 24 [ 346.046360][ C1] RSP: 0018:ffffc900037bf820 EFLAGS: 00000a06 [ 346.046376][ C1] RAX: 1ffff920006f7f21 RBX: ffffc900037bf900 RCX: 0000000000080000 [ 346.046390][ C1] RDX: ffffc9000b9e1000 RSI: 0000000000011dae RDI: 0000000000011daf [ 346.046403][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff21b46a4 [ 346.046416][ C1] R10: dffffc0000000000 R11: fffffbfff21b46a5 R12: 1ffff1100bd2e2c0 [ 346.046430][ C1] R13: 0000000000000000 R14: ffffc900037bf908 R15: dffffc0000000000 [ 346.046460][ C1] ? xas_start+0x3b0/0x770 [ 346.046481][ C1] xas_load+0xbe/0x140 [ 346.046500][ C1] ? filemap_get_entry+0xb1/0x3c0 [ 346.046521][ C1] filemap_get_entry+0x165/0x3c0 [ 346.046541][ C1] ? page_cache_prev_miss+0x360/0x360 [ 346.046571][ C1] ? page_copy_sane+0x4e/0x270 [ 346.046599][ C1] shmem_get_folio_gfp+0x2a5/0x2ac0 [ 346.046644][ C1] shmem_write_begin+0xf2/0x420 [ 346.046671][ C1] generic_perform_write+0x2fb/0x5b0 [ 346.046705][ C1] ? generic_file_direct_write+0x3e0/0x3e0 [ 346.046741][ C1] ? file_update_time+0x1a2/0x1b0 [ 346.046764][ C1] shmem_file_write_iter+0xfb/0x120 [ 346.046788][ C1] vfs_write+0x43b/0x940 [ 346.046817][ C1] ? file_end_write+0x250/0x250 [ 346.046845][ C1] ? __fget_files+0x44a/0x4d0 [ 346.046876][ C1] ? __fdget_pos+0x1d8/0x330 [ 346.046896][ C1] ? ksys_write+0x75/0x250 [ 346.046922][ C1] ksys_write+0x147/0x250 [ 346.046947][ C1] ? __ia32_sys_read+0x90/0x90 [ 346.046973][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 346.047002][ C1] do_syscall_64+0x55/0xb0 [ 346.047020][ C1] ? clear_bhb_loop+0x40/0x90 [ 346.047035][ C1] ? clear_bhb_loop+0x40/0x90 [ 346.047054][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.047080][ C1] RIP: 0033:0x7fdefc38d45f [ 346.047096][ C1] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 346.047111][ C1] RSP: 002b:00007fdefd1bbdf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 346.047129][ C1] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fdefc38d45f [ 346.047152][ C1] RDX: 0000000000100000 RSI: 00007fdef1bf7000 RDI: 0000000000000003 [ 346.047164][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000c4e [ 346.047175][ C1] R10: 0000000000000fd2 R11: 0000000000000293 R12: 0000000000000003 [ 346.047186][ C1] R13: 00007fdefd1bbef0 R14: 00007fdefd1bbeb0 R15: 00007fdef1bf7000 [ 346.047224][ C1] [ 346.054737][ C1] Kernel Offset: disabled