last executing test programs: 13m8.525414048s ago: executing program 2 (id=231): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) rt_tgsigqueueinfo(0x0, r0, 0xd, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r6, 0x4, 0x2200) splice(r4, 0x0, r7, 0x0, 0x10003, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') gettid() 13m5.086071561s ago: executing program 2 (id=233): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bd", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 12m59.587784068s ago: executing program 2 (id=242): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) rt_tgsigqueueinfo(0x0, r0, 0xd, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r6, 0x4, 0x2200) splice(r4, 0x0, r7, 0x0, 0x10003, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') gettid() 12m56.204333695s ago: executing program 2 (id=244): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0086c43, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fchmodat(0xffffffffffffffff, 0x0, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000080)={0x1, 0x3, "0400", 0x7f, 0x9}) 12m54.255421476s ago: executing program 2 (id=250): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() ioperm(0x8, 0x1, 0x401) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000003000000000000080004000100", 0x22) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 12m52.28136599s ago: executing program 2 (id=251): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000480)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,overriderockperm,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303030332c00ab080ffe15364eeb007d7bb1ee4b7183794fff"], 0x1, 0xa2f, &(0x7f00000018c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast2, @in=@multicast2, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x20000a0de, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d5, 0x6c}, 0x0, @in6=@loopback, 0x3502, 0x3, 0x8, 0x80, 0x9075, 0x800, 0xc5e}}, 0xe8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x28000600) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@map=r2, 0xffffffffffffffff, 0x5, 0x2020}, 0x20) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='./file0\x00') 12m42.291400106s ago: executing program 3 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) sync() ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x7fe, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000cff30029000000340000000000"], 0x18}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00', @ANYRES32=r7], 0x40}}, 0x0) 12m37.313825746s ago: executing program 3 (id=264): syz_emit_vhci(0x0, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) 12m37.205055731s ago: executing program 32 (id=251): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000480)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,overriderockperm,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303030332c00ab080ffe15364eeb007d7bb1ee4b7183794fff"], 0x1, 0xa2f, &(0x7f00000018c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast2, @in=@multicast2, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x20000a0de, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d5, 0x6c}, 0x0, @in6=@loopback, 0x3502, 0x3, 0x8, 0x80, 0x9075, 0x800, 0xc5e}}, 0xe8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x28000600) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@map=r2, 0xffffffffffffffff, 0x5, 0x2020}, 0x20) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='./file0\x00') 12m32.739926475s ago: executing program 3 (id=269): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) clock_gettime(0x3, &(0x7f00000021c0)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}}) 12m30.928929529s ago: executing program 3 (id=271): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) rt_tgsigqueueinfo(0x0, r0, 0xd, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) fcntl$setstatus(r5, 0x4, 0x2200) 12m26.867798602s ago: executing program 3 (id=274): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000740)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYBLOB=',uid=', @ANYRESHEX, @ANYBLOB="2c4b454c8325e01cb24c2f3c7bd462c5b8f86ca56891f8085db68de13331ff83f0b12d3c55ab09898b831162e94af5aab93746cc9c2846172beff34b815944f62e60470cf4d16331b53bb359d1c446b18974ae35bced61d48cfc8149eb43bec86d871bc7c43763c6e7daebe349c300000001000000012dc90b9a5f8d0ff4117ef90aff1413e2e919558d4a6412b5fdaa2694c41bab32c5c81e01243ccef8dcd85a46cfb92323a8070db43b1ef562691c070e2749"], 0x1, 0x6f6, &(0x7f0000000b00)="$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") epoll_create(0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xd) wait4(r0, 0x0, 0x40000000, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0xfffffffffffffffb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20002015}) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 12m21.357426531s ago: executing program 3 (id=282): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) clock_gettime(0x3, &(0x7f00000021c0)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}}) 12m6.184202275s ago: executing program 33 (id=282): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) clock_gettime(0x3, &(0x7f00000021c0)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}}) 11m11.908464685s ago: executing program 5 (id=348): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x5836, 0x20000005, 0x8, 0x40, 0x5, 0x5477, 0x1037, 0x6, 0x0, 0x55, 0xe0e2, 0x100000002, 0x1, 0x8000, 0x109, 0x6a], 0xffffffff, 0x1c7a86}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m11.451065204s ago: executing program 5 (id=349): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 11m8.863931917s ago: executing program 5 (id=351): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0086c43, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fchmodat(0xffffffffffffffff, 0x0, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000080)={0x1, 0x3, "0400", 0x7f, 0x9}) 11m6.007074495s ago: executing program 5 (id=354): sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x2004005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@data_err_ignore}, {@user_xattr}, {@nombcache}, {@abort}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000000c0)='./file1\x00', 0x1) 11m4.574969589s ago: executing program 5 (id=355): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x0, 0x0) 11m0.68495646s ago: executing program 5 (id=358): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) rt_tgsigqueueinfo(0x0, r0, 0xd, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r5, 0x4, 0x2200) splice(r4, 0x0, r6, 0x0, 0x10003, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$nfs4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x106c0e0, &(0x7f00000006c0)={[{'inode64'}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') gettid() 10m45.62078605s ago: executing program 34 (id=358): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) rt_tgsigqueueinfo(0x0, r0, 0xd, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r5, 0x4, 0x2200) splice(r4, 0x0, r6, 0x0, 0x10003, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$nfs4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x106c0e0, &(0x7f00000006c0)={[{'inode64'}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') gettid() 10m21.495253356s ago: executing program 4 (id=399): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000240), 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) 10m20.832953231s ago: executing program 4 (id=400): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r0, &(0x7f00000001c0)="49bd", 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3ffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd) 10m17.309746975s ago: executing program 4 (id=404): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000046, &(0x7f0000000640)={[{@delalloc}, {@data_err_abort}, {@acl}, {@stripe={'stripe', 0x3d, 0x2}}, {@data_err_ignore}, {@nobarrier}, {@dioread_lock}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x6, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x2}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe4) 10m15.32222912s ago: executing program 4 (id=407): r0 = socket(0x10, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x5, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 10m9.5764361s ago: executing program 4 (id=410): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) rt_tgsigqueueinfo(0x0, r0, 0xd, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r5, 0x4, 0x2200) splice(r3, 0x0, r6, 0x0, 0x10003, 0x0) 10m8.900371768s ago: executing program 4 (id=411): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r0, &(0x7f00000001c0)="49bd", 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3ffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd) 10m8.403288652s ago: executing program 35 (id=411): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r0, &(0x7f00000001c0)="49bd", 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3ffff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd) 7m32.796094487s ago: executing program 7 (id=567): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="2508007a00000000000307000000080003"], 0x54}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 7m32.650943645s ago: executing program 7 (id=568): r0 = socket(0x10, 0x803, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000000)=@secondary) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100020000202ecc9f4396131c5008000300", @ANYRES32, @ANYBLOB="0a0006"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) listen(r4, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e130100"], 0x16) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3804810, &(0x7f0000000040)=ANY=[], 0x1, 0x6e7, &(0x7f0000001a40)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) sync() sync() sync() sync() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3b, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe8, 0x2}}]}}]}, 0x5c}}, 0x24040084) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r6, 0x1000) 7m31.630430697s ago: executing program 7 (id=569): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) socket$inet(0xa, 0x801, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) ioprio_set$pid(0x3, 0x0, 0x6000) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x1}, 0x1c) 7m26.337069848s ago: executing program 7 (id=576): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) 7m25.93260907s ago: executing program 7 (id=579): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@data_err_ignore}, {@user_xattr}, {@nombcache}, {@abort}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000000c0)='./file1\x00', 0x1) 7m22.98879788s ago: executing program 7 (id=582): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0086c43, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fchmodat(0xffffffffffffffff, 0x0, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000080)={0x1, 0x3, "0400", 0x7f, 0x9}) 7m6.276213181s ago: executing program 36 (id=582): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0086c43, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fchmodat(0xffffffffffffffff, 0x0, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000080)={0x1, 0x3, "0400", 0x7f, 0x9}) 4m36.552054229s ago: executing program 6 (id=790): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x0, 0x109, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x1, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m36.027822747s ago: executing program 6 (id=793): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYBLOB="1e02f92f48f3de97f4a8e604989a6bfdebf0e8581b45580099c28e562a8f27eaec69b123f1fa4550546c673ab3b90791788392aab31fd84aa909c76c35cfee00"/92], 0x1, 0x4b1, &(0x7f0000001d00)="$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") unlink(&(0x7f0000000100)='./file0/file1\x00') 4m34.701086997s ago: executing program 6 (id=795): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x77774002, 0x1b000, 0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x8000000, 0x10000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xdddd0000}) 4m33.663166031s ago: executing program 6 (id=799): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 4m28.139300223s ago: executing program 6 (id=813): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@data_err_ignore}, {@user_xattr}, {@nombcache}, {@abort}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000000c0)='./file1\x00', 0x1) 4m24.288185328s ago: executing program 6 (id=820): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x1000003, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x2}, @request_death={0x400c630e, 0x1}, @release={0x40046306, 0x2}, @request_death={0x400c630e, 0x3}, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000400)={@fd, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x1, &(0x7f0000000300), 0x0, 0x0, 0x1e}}, 0x0}}], 0x0, 0x0, 0x0}) 4m22.71927123s ago: executing program 37 (id=820): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x1000003, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x2}, @request_death={0x400c630e, 0x1}, @release={0x40046306, 0x2}, @request_death={0x400c630e, 0x3}, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000400)={@fd, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x1, &(0x7f0000000300), 0x0, 0x0, 0x1e}}, 0x0}}], 0x0, 0x0, 0x0}) 13.190366279s ago: executing program 9 (id=1171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 13.086118502s ago: executing program 8 (id=1175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000280)={[{@utf8}, {@hide, 0x0}, {@utf8}, {@overriderock}, {@map_off}, {@map_normal, 0x41}, {@session={'session', 0x3d, 0x37}}, {@unhide}, {@unhide}, {@overriderock}, {@map_off}, {@map_normal}, {}]}, 0x2, 0x6b1, &(0x7f0000001100)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000500)={0x2, 0x10, 0x12}, 0x18) move_mount(r2, 0x0, r3, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x196) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="1f54a197787700bc14a7877513540800"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 12.764133394s ago: executing program 9 (id=1176): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000180)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f00000003c0)='P', 0x1, 0x4fed0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@sysvgroups}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 11.279778375s ago: executing program 9 (id=1178): syz_usb_connect(0x3, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="120100023f639010861a2d754d2d0102030109021b0001000000000904010001e911bd0009050c03"], 0x0) socket(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xb, 0x904) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000180)=0x4) 10.811903995s ago: executing program 0 (id=1179): syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f00000000c0)='./file2\x00', 0x2208050, &(0x7f0000000240)=ANY=[], 0x1, 0x1530, &(0x7f0000002300)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(0x0, 0x0, 0x0, 0x887008, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x66) umount2(&(0x7f0000000040)='.\x00', 0x2) 10.300473091s ago: executing program 8 (id=1180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@data_err_ignore}, {@user_xattr}, {@nombcache}, {@abort}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x1) 10.177390126s ago: executing program 1 (id=1181): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys\x00\x00et/\x80\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000140)=""/61, 0x3d) getdents64(r1, 0xfffffffffffffffe, 0x43) 9.860098698s ago: executing program 0 (id=1182): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bd, &(0x7f0000001600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x6) 9.639519676s ago: executing program 1 (id=1183): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000"], 0x18}, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x0, 0x0) 7.102526981s ago: executing program 9 (id=1184): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x101, 0xa, 0x1, 0x8, 0x80, 0xaec}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_sco(r1, &(0x7f0000000340), 0x8) shutdown(r1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendto(r0, 0x0, 0x2a0, 0x2, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x40400, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x2, 0x1f0, &(0x7f0000000180)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 7.101461481s ago: executing program 1 (id=1192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@data_err_ignore}, {@user_xattr}, {@nombcache}, {@abort}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(0x0, 0x1) 7.100871551s ago: executing program 8 (id=1185): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000a5070000000000000d000000611104000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.940020452s ago: executing program 8 (id=1186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32], 0x1, 0x286, &(0x7f0000000640)="$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") r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x124) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x40047211, &(0x7f00000000c0)) 4.123448932s ago: executing program 9 (id=1187): unshare(0x2020480) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x84, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @loopback, [], [], 'veth1\x00', 'wlan1\x00', {}, {0x1fe}}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x3], 0xff, 0x0, 0x24dc13b7d730343}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4199fc6505f93cb13d0617f57700e5dba5afc775234fe52cca718b1ef125"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x1}) 3.813223781s ago: executing program 8 (id=1188): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x130, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_usb_connect$uac1(0x2, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002000a000a00040c240202030202508000010111240605020507002e130a004ef10200000924030102020505f50904010000010200000904010101010200000905010920009301050725010003480f090402000001020000090402010101"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 2.458839365s ago: executing program 1 (id=1189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 2.372188776s ago: executing program 0 (id=1190): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20002015}) 2.263865959s ago: executing program 0 (id=1191): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys\x00\x00et/\x80\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000140)=""/61, 0x3d) getdents64(r1, 0xfffffffffffffffe, 0x43) 1.959713888s ago: executing program 9 (id=1193): syz_usb_connect(0x3, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="120100023f639010861a2d754d2d0102030109021b0001000000000904010001e911bd0009050c03"], 0x0) socket(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xb, 0x904) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000180)=0x4) 1.860094812s ago: executing program 0 (id=1194): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="140000"], 0x18}, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x0, 0x0) 225.85116ms ago: executing program 0 (id=1195): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000480)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) r3 = socket$inet6(0xa, 0x2, 0x3a) epoll_create1(0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x1}) connect$inet6(r3, &(0x7f0000000180)={0xa, 0xffff, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000100)={'batadv_slave_1\x00', {0x2, 0x40, @empty}}) 225.525741ms ago: executing program 1 (id=1196): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280)=0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x19, 0xf, &(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000000000000700000014000000b703000000000000850000000f000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000ffb60000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000005c0)=@generic={0x0, 0x7fff, 0xb}) 191.073215ms ago: executing program 8 (id=1197): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18410, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000000380)=[{0x3, 0xffff}], 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x10000000000041}, 0xc) getdents(r0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000080)) 0s ago: executing program 1 (id=1198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@data_err_ignore}, {@user_xattr}, {@nombcache}, {@abort}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(0x0, 0x1) kernel console output (not intermixed with test programs): [ 516.132523][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.678788][ T48] team0 (unregistering): Port device team_slave_1 removed [ 516.741047][ T48] team0 (unregistering): Port device team_slave_0 removed [ 516.814744][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.892968][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.495235][ T48] bond0 (unregistering): Released all slaves [ 517.593089][ T7870] veth1_vlan: entered promiscuous mode [ 517.737221][ T7870] veth0_macvtap: entered promiscuous mode [ 517.771693][ T7870] veth1_macvtap: entered promiscuous mode [ 517.866320][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.883842][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.899603][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.915536][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.955210][ T7870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.999979][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.018483][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.030514][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.043255][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.073043][ T7870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.089487][ T7870] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.103960][ T7870] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.114845][ T7870] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.126232][ T7870] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.198813][ T8054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.262892][ T8054] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.329212][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.337824][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.358066][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.395852][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.444703][ T7911] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.454445][ T7911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.508829][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.534764][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.666048][ T8054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.786273][ T8232] loop7: detected capacity change from 0 to 512 [ 522.870962][ T8232] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 522.903406][ T8232] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 522.914386][ T8232] System zones: 1-12 [ 522.919808][ T8232] EXT4-fs (loop7): orphan cleanup on readonly fs [ 522.932430][ T8232] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.443: invalid indirect mapped block 12 (level 1) [ 522.948938][ T8232] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.443: invalid indirect mapped block 2 (level 2) [ 522.967431][ T8232] EXT4-fs (loop7): 1 truncate cleaned up [ 522.976073][ T8232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 523.201546][ T7870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 524.192908][ T8054] veth0_vlan: entered promiscuous mode [ 524.245840][ T8054] veth1_vlan: entered promiscuous mode [ 524.387027][ T8054] veth0_macvtap: entered promiscuous mode [ 524.423844][ T8054] veth1_macvtap: entered promiscuous mode [ 524.545358][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.600118][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.634125][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.669272][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.696733][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.710490][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.730023][ T8054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.756538][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.774113][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.809072][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.839754][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.867251][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.886001][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.898768][ T8054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.955996][ T8054] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.571387][ T8054] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.611680][ T8054] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.630555][ T8054] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.242739][ T7911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.279308][ T7911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.419599][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.429137][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.815829][ T8275] loop7: detected capacity change from 0 to 1024 [ 529.824843][ T8275] EXT4-fs: inline encryption not supported [ 529.843515][ T8275] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 529.932572][ T8275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.048430][ T7870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.936077][ T8297] loop7: detected capacity change from 0 to 164 [ 543.914186][ T8350] fuse: Bad value for 'fd' [ 550.086300][ T8376] loop6: detected capacity change from 0 to 512 [ 550.139567][ T8376] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 550.182938][ T8376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 550.192254][ T8376] System zones: 1-12 [ 550.196651][ T8376] EXT4-fs (loop6): orphan cleanup on readonly fs [ 550.204389][ T8376] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.458: invalid indirect mapped block 12 (level 1) [ 550.220185][ T8376] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.458: invalid indirect mapped block 2 (level 2) [ 550.237835][ T8376] EXT4-fs (loop6): 1 truncate cleaned up [ 550.246326][ T8376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 550.423936][ T8054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 550.515741][ T8383] loop0: detected capacity change from 0 to 1024 [ 550.546327][ T8383] EXT4-fs: Ignoring removed nomblk_io_submit option [ 550.621131][ T8383] EXT4-fs (loop0): Test dummy encryption mode enabled [ 550.659834][ T8383] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e815c01c, mo2=0003] [ 550.719050][ T8383] System zones: 0-1, 3-36 [ 550.797021][ T8383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.923485][ T8383] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.471: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 551.060155][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.095996][ T8447] netlink: 60 bytes leftover after parsing attributes in process `syz.7.480'. [ 562.275912][ T8451] loop7: detected capacity change from 0 to 512 [ 563.008678][ T8451] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 563.034209][ T8451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 563.042716][ T8451] System zones: 1-12 [ 563.046897][ T8451] EXT4-fs (loop7): orphan cleanup on readonly fs [ 563.053651][ T8451] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.482: invalid indirect mapped block 12 (level 1) [ 563.068323][ T8451] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.482: invalid indirect mapped block 2 (level 2) [ 563.082377][ T8451] EXT4-fs (loop7): 1 truncate cleaned up [ 563.090288][ T8451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 563.221121][ T7870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 563.305250][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.319205][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.038038][ T8486] loop6: detected capacity change from 0 to 1024 [ 568.045670][ T8486] EXT4-fs: inline encryption not supported [ 568.061618][ T8486] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 568.114997][ T8486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.198865][ T8054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.400778][ T8564] Bluetooth: MGMT ver 1.22 [ 582.987061][ T8580] loop7: detected capacity change from 0 to 1024 [ 582.994554][ T8580] EXT4-fs: inline encryption not supported [ 583.001034][ T8580] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 583.072690][ T8580] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.080986][ T7870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.048039][ T8637] loop6: detected capacity change from 0 to 1024 [ 593.056136][ T8637] EXT4-fs: inline encryption not supported [ 593.063399][ T8637] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 593.164438][ T8637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.172945][ T8054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.879489][ T8656] loop7: detected capacity change from 0 to 1024 [ 595.887017][ T8656] EXT4-fs: inline encryption not supported [ 595.910696][ T8656] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 595.983660][ T8656] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.206389][ T7530] Bluetooth: hci0: command 0x0406 tx timeout [ 597.000378][ T7870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.389625][ T5823] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 602.641555][ T5823] usb 1-1: Using ep0 maxpacket: 16 [ 602.730740][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.759297][ T5823] usb 1-1: config 0 has no interfaces? [ 602.764890][ T5823] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 602.806378][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.870506][ T5823] usb 1-1: config 0 descriptor?? [ 602.891925][ T8708] loop6: detected capacity change from 0 to 1024 [ 602.899622][ T8708] EXT4-fs: inline encryption not supported [ 602.906301][ T8708] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 602.969480][ T8708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.941514][ T8054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.360382][ T8719] loop6: detected capacity change from 0 to 512 [ 604.399495][ T8719] EXT4-fs: Ignoring removed orlov option [ 604.438671][ T8719] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 604.541330][ T8719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 604.661151][ T8719] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.538: corrupted in-inode xattr: e_value size too large [ 604.703643][ T8719] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.538: couldn't read orphan inode 15 (err -117) [ 604.790902][ T8719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.672445][ T8054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.795264][ T1188] usb 1-1: USB disconnect, device number 4 [ 607.351347][ T8747] loop6: detected capacity change from 0 to 512 [ 608.470928][ T8747] EXT4-fs: Ignoring removed i_version option [ 608.578732][ T8747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.640187][ T28] audit: type=1800 audit(1768509520.392:75): pid=8747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.545" name="file1" dev="loop6" ino=13 res=0 errno=0 [ 609.524302][ T8054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.843869][ T8761] loop6: detected capacity change from 0 to 1024 [ 609.851416][ T8761] EXT4-fs: inline encryption not supported [ 609.860314][ T8761] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 609.946920][ T8761] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.876858][ T8054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.072100][ T7530] Bluetooth: hci3: command 0x0406 tx timeout [ 623.773536][ T8850] warning: `syz.7.567' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 624.077459][ T8854] loop7: detected capacity change from 0 to 1024 [ 624.104315][ T8854] hfsplus: unable to parse mount options [ 624.755720][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.762225][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.020904][ T8869] loop0: detected capacity change from 0 to 1024 [ 625.028025][ T8869] EXT4-fs: inline encryption not supported [ 625.039734][ T8869] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 625.130621][ T8869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.058687][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.099607][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 632.423736][ T8930] loop7: detected capacity change from 0 to 1024 [ 632.431414][ T8930] EXT4-fs: inline encryption not supported [ 632.460576][ T8930] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 632.503052][ T8930] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.244683][ T28] audit: type=1326 audit(1768509544.992:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8940 comm="syz.1.581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe747b8f749 code=0x0 [ 633.593698][ T7870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.440781][ T8974] netlink: 'syz.0.580': attribute type 4 has an invalid length. [ 635.671406][ T8982] netlink: 'syz.0.580': attribute type 17 has an invalid length. [ 635.785122][ T8982] syz.0.580 (8982) used greatest stack depth: 20648 bytes left [ 636.024534][ T8989] loop6: detected capacity change from 0 to 256 [ 636.032145][ T8989] exfat: Bad value for 'uid' [ 636.072089][ T8696] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 655.708919][ T7530] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 655.723645][ T7530] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 655.731916][ T7530] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 655.755570][ T7530] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 655.763651][ T7530] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 655.779678][ T7530] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 656.558300][ T9043] chnl_net:caif_netlink_parms(): no params data found [ 657.008791][ T7911] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.050019][ T9060] loop6: detected capacity change from 0 to 1024 [ 657.233914][ T7911] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.290222][ T9043] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.297463][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.310137][ T9043] bridge_slave_0: entered allmulticast mode [ 657.317781][ T9043] bridge_slave_0: entered promiscuous mode [ 657.362517][ T7911] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.381509][ T9043] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.388893][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.399095][ T9043] bridge_slave_1: entered allmulticast mode [ 657.407279][ T9043] bridge_slave_1: entered promiscuous mode [ 657.484396][ T7911] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.513000][ T9043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.533582][ T9043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.675205][ T9043] team0: Port device team_slave_0 added [ 657.735959][ T9043] team0: Port device team_slave_1 added [ 657.860676][ T5778] Bluetooth: hci4: command tx timeout [ 660.999803][ T5778] Bluetooth: hci4: command tx timeout [ 661.101387][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.109000][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.136151][ T9043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.152107][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.160078][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.341560][ T9043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.334321][ T9043] hsr_slave_0: entered promiscuous mode [ 662.366276][ T9043] hsr_slave_1: entered promiscuous mode [ 662.473896][ T9043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.500234][ T9043] Cannot create hsr debugfs directory [ 663.709533][ T5778] Bluetooth: hci4: command tx timeout [ 665.779637][ T5778] Bluetooth: hci4: command tx timeout [ 667.778525][ T9124] v: renamed from dummy0 (while UP) [ 668.012722][ T9043] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 668.129721][ T9043] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 668.152778][ T9043] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 668.161665][ T5778] Bluetooth: hci3: unexpected event for opcode 0x200f [ 668.303392][ T9043] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 670.210482][ T7911] hsr_slave_0: left promiscuous mode [ 670.220012][ T7911] hsr_slave_1: left promiscuous mode [ 670.235931][ T7911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.247023][ T7911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.261536][ T7911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.268996][ T7911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.300449][ T7911] bridge_slave_1: left allmulticast mode [ 670.306159][ T7911] bridge_slave_1: left promiscuous mode [ 670.319470][ T7911] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.333168][ T7911] bridge_slave_0: left allmulticast mode [ 670.338863][ T7911] bridge_slave_0: left promiscuous mode [ 670.351883][ T7911] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.415626][ T7911] veth1_macvtap: left promiscuous mode [ 670.429714][ T7911] veth0_macvtap: left promiscuous mode [ 670.435441][ T7911] veth1_vlan: left promiscuous mode [ 670.449898][ T7911] veth0_vlan: left promiscuous mode [ 671.457736][ T7911] team0 (unregistering): Port device team_slave_1 removed [ 671.515032][ T7911] team0 (unregistering): Port device team_slave_0 removed [ 671.566147][ T7911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.621863][ T7911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.136236][ T7911] bond0 (unregistering): Released all slaves [ 672.294627][ T9043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.375160][ T9043] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.410509][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.417700][ T7934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.454232][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.461473][ T7934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.845766][ T9043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.217830][ T9043] veth0_vlan: entered promiscuous mode [ 673.256953][ T9043] veth1_vlan: entered promiscuous mode [ 673.305611][ T9043] veth0_macvtap: entered promiscuous mode [ 673.323330][ T9043] veth1_macvtap: entered promiscuous mode [ 673.348818][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.360086][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.372963][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.384197][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.394458][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.410261][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.425562][ T9043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.450387][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.468268][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.484715][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.495709][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.509561][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.523624][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.535314][ T9043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.567029][ T9043] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.577686][ T9043] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.590411][ T9043] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.602798][ T9043] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.732144][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.750546][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.793999][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.804693][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.041359][ T9232] syzkaller0: entered promiscuous mode [ 681.046911][ T9232] syzkaller0: entered allmulticast mode [ 684.732270][ T5778] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 685.040388][ T9261] loop8: detected capacity change from 0 to 1024 [ 685.047903][ T9261] EXT4-fs: inline encryption not supported [ 685.056807][ T9261] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 685.124267][ T9261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.160940][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.185614][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.193470][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.778089][ T9277] loop6: detected capacity change from 0 to 2048 [ 686.817266][ T9277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 687.078506][ T9282] netlink: 32 bytes leftover after parsing attributes in process `syz.0.624'. [ 687.562364][ T9292] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 688.203504][ T9296] binder_alloc: 9294: binder_alloc_buf, no vma [ 695.439994][ T9346] xt_TPROXY: Can be used only with -p tcp or -p udp [ 701.441909][ T9386] netlink: 'syz.0.652': attribute type 12 has an invalid length. [ 701.507072][ T9386] netlink: 'syz.0.652': attribute type 29 has an invalid length. [ 701.540057][ T9386] netlink: 148 bytes leftover after parsing attributes in process `syz.0.652'. [ 701.596817][ T9386] netlink: 59 bytes leftover after parsing attributes in process `syz.0.652'. [ 702.717354][ T9404] loop0: detected capacity change from 0 to 1024 [ 702.724981][ T9404] EXT4-fs: inline encryption not supported [ 702.741887][ T9404] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 702.785942][ T9404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.765807][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.962587][ T9447] loop0: detected capacity change from 0 to 128 [ 708.997218][ T9447] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 709.035990][ T9445] loop6: detected capacity change from 0 to 512 [ 709.053492][ T9447] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 709.248342][ T4338] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 709.298129][ T9445] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.350627][ T9445] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 710.177350][ T28] audit: type=1800 audit(1768509621.912:77): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.650" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 711.048985][ T8054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.490822][ T9471] loop8: detected capacity change from 0 to 1024 [ 711.498297][ T9471] EXT4-fs: inline encryption not supported [ 711.514786][ T9471] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 711.612443][ T9471] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.336483][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.659955][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.666'. [ 714.828092][ T9491] loop8: detected capacity change from 0 to 4096 [ 714.911245][ T9491] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.823135][ T9495] syz.8.669 (9495) used greatest stack depth: 19528 bytes left [ 715.884880][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.666'. [ 716.258808][ T9492] loop6: detected capacity change from 0 to 16 [ 716.287294][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.447945][ T9492] erofs: (device loop6): mounted with root inode @ nid 36. [ 716.599297][ T28] audit: type=1800 audit(1768509628.322:78): pid=9492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.666" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 716.954393][ T9503] netlink: 220 bytes leftover after parsing attributes in process `syz.8.671'. [ 718.369495][ T9515] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 719.407881][ T9525] netlink: 32 bytes leftover after parsing attributes in process `syz.1.659'. [ 720.337124][ T9534] loop6: detected capacity change from 0 to 1024 [ 720.344444][ T9534] EXT4-fs: inline encryption not supported [ 720.351247][ T9534] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 720.396097][ T9534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.574086][ T8054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.949454][ T5823] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 726.304644][ T5823] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 726.366727][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.441939][ T5823] usb 1-1: config 0 descriptor?? [ 726.450442][ T5823] cp210x 1-1:0.0: cp210x converter detected [ 726.977996][ T5823] usb 1-1: cp210x converter now attached to ttyUSB0 [ 728.719039][ T5873] usb 1-1: USB disconnect, device number 5 [ 728.813896][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 728.893581][ T5873] cp210x 1-1:0.0: device disconnected [ 729.292300][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.681'. [ 729.540112][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.681'. [ 729.722398][ T9600] loop6: detected capacity change from 0 to 1024 [ 729.729749][ T9600] EXT4-fs: inline encryption not supported [ 729.751070][ T9600] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 729.835906][ T9600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.905794][ T8054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.799382][ T9661] loop0: detected capacity change from 0 to 1024 [ 737.806902][ T9661] EXT4-fs: inline encryption not supported [ 737.830201][ T9661] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 737.900005][ T9661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.884788][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.350033][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.8.701'. [ 747.649641][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.656010][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.111766][ T9771] loop6: detected capacity change from 0 to 512 [ 753.170119][ T9771] EXT4-fs: Ignoring removed i_version option [ 753.176187][ T9771] EXT4-fs: Ignoring removed bh option [ 753.284813][ T9771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.350592][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 753.364939][ T9771] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 753.589189][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 753.646327][ T8054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.699252][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 753.719438][ T9] usb 9-1: config 0 has no interface number 0 [ 753.725614][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 753.780168][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 753.824146][ T9780] loop0: detected capacity change from 0 to 512 [ 754.019380][ T9] usb 9-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 754.042708][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.090979][ T9780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.291759][ T9] usb 9-1: Product: syz [ 754.321416][ T9] usb 9-1: Manufacturer: syz [ 755.258305][ T9] usb 9-1: SerialNumber: syz [ 755.281735][ T9] usb 9-1: config 0 descriptor?? [ 755.292092][ T9] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 755.319690][ T9780] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.169473][ T9] usb 9-1: USB disconnect, device number 2 [ 757.592039][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.087170][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'. [ 759.214959][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'. [ 759.434349][ T9824] loop0: detected capacity change from 0 to 16 [ 759.530194][ T9824] erofs: (device loop0): mounted with root inode @ nid 36. [ 759.568508][ T28] audit: type=1800 audit(1768509671.312:79): pid=9824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.721" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 762.364812][ T9858] loop6: detected capacity change from 0 to 164 [ 763.724441][ T9858] rock: directory entry would overflow storage [ 763.754223][ T9858] rock: sig=0x4d4e, size=5, remaining=4 [ 770.683195][ T9925] loop6: detected capacity change from 0 to 512 [ 770.832771][ T9925] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 770.894302][ T9925] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 771.012280][ T9925] System zones: 1-12 [ 771.016425][ T9925] EXT4-fs (loop6): orphan cleanup on readonly fs [ 771.101232][ T9932] loop8: detected capacity change from 0 to 8 [ 771.158710][ T9925] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.738: invalid indirect mapped block 12 (level 1) [ 771.197143][ T9932] SQUASHFS error: Failed to read block 0x4de: -5 [ 771.233631][ T9932] SQUASHFS error: Failed to read block 0x4de: -5 [ 771.430836][ T9932] SQUASHFS error: Failed to read block 0x4de: -5 [ 771.440094][ T9932] SQUASHFS error: Failed to read block 0x4de: -5 [ 772.121714][ T9925] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.738: invalid indirect mapped block 2 (level 2) [ 772.139786][ T28] audit: type=1800 audit(1768509683.022:80): pid=9932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.739" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 772.231755][ T9925] EXT4-fs (loop6): 1 truncate cleaned up [ 772.238286][ T9925] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 774.880831][ T8054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 775.114550][ T9958] loop0: detected capacity change from 0 to 256 [ 775.739363][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 776.459197][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 776.477072][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.229190][ T9] usb 7-1: config 0 has no interface number 0 [ 777.235383][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 777.247204][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 777.284190][ T9] usb 7-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 777.331631][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.360976][ T9] usb 7-1: Product: syz [ 777.367489][ T9] usb 7-1: Manufacturer: syz [ 777.377278][ T9] usb 7-1: SerialNumber: syz [ 777.427098][ T9] usb 7-1: config 0 descriptor?? [ 777.466610][ T9] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 777.826593][ T9982] loop0: detected capacity change from 0 to 1024 [ 779.389222][ T9982] EXT4-fs: inline encryption not supported [ 779.403484][ T9] usb 7-1: USB disconnect, device number 2 [ 779.443180][ T9982] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 779.594136][ T9982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.399019][T10011] loop8: detected capacity change from 0 to 164 [ 781.462958][ T9985] Bluetooth: hci4: command 0x0406 tx timeout [ 781.546707][T10011] rock: directory entry would overflow storage [ 781.590132][T10011] rock: sig=0x4d4e, size=5, remaining=4 [ 781.702733][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.271611][T10022] loop0: detected capacity change from 0 to 1024 [ 782.278726][T10022] EXT4-fs: inline encryption not supported [ 782.349362][T10022] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 782.434979][T10022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.696928][T10037] loop8: detected capacity change from 0 to 256 [ 785.901447][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.972879][T10077] loop6: detected capacity change from 0 to 256 [ 786.067584][T10079] loop8: detected capacity change from 0 to 1024 [ 786.999737][T10079] EXT4-fs: inline encryption not supported [ 787.031874][T10079] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 787.139308][ T5770] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 787.155472][T10079] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.339691][ T5770] usb 1-1: Using ep0 maxpacket: 16 [ 787.356858][ T5770] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 787.370312][ T5770] usb 1-1: config 0 has no interface number 0 [ 787.409357][ T5770] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 787.446483][ T5770] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 787.502206][ T5770] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 787.529538][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.537688][ T5770] usb 1-1: Product: syz [ 787.569139][ T5770] usb 1-1: Manufacturer: syz [ 787.589137][ T5770] usb 1-1: SerialNumber: syz [ 787.616490][ T5770] usb 1-1: config 0 descriptor?? [ 787.643900][ T5770] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 789.547278][ T5770] usb 1-1: USB disconnect, device number 6 [ 789.816626][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.111680][T10112] loop8: detected capacity change from 0 to 1024 [ 790.133211][T10112] EXT4-fs: inline encryption not supported [ 790.231047][T10112] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 790.370537][T10112] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.772109][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.885226][T10148] loop0: detected capacity change from 0 to 164 [ 794.937744][T10148] rock: directory entry would overflow storage [ 794.957477][T10148] rock: sig=0x4d4e, size=5, remaining=4 [ 796.668022][T10176] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 796.722538][T10180] loop8: detected capacity change from 0 to 512 [ 796.985483][T10180] ext4: Unknown parameter 'obj_user' [ 798.381035][T10203] loop0: detected capacity change from 0 to 1024 [ 798.388487][T10203] EXT4-fs: inline encryption not supported [ 798.464139][T10203] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 798.579668][T10203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.080161][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.225460][ T5838] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 800.336881][T10232] loop0: detected capacity change from 0 to 1024 [ 800.352384][T10232] EXT4-fs: Ignoring removed orlov option [ 800.408810][T10232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.451786][ T5838] usb 9-1: unable to get BOS descriptor or descriptor too short [ 800.461201][ T5838] usb 9-1: not running at top speed; connect to a high speed hub [ 800.471629][ T5838] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 800.486466][ T5838] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 800.505931][ T5838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.519404][ T5838] usb 9-1: Product: syz [ 800.523631][ T5838] usb 9-1: Manufacturer: syz [ 800.528396][ T5838] usb 9-1: SerialNumber: syz [ 800.597966][T10236] loop6: detected capacity change from 0 to 128 [ 800.869897][T10236] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 801.293785][T10236] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 801.364450][ T5838] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 801.441367][ T5838] usb 9-1: unit 5 not found! [ 801.687608][ T5838] usb 9-1: USB disconnect, device number 3 [ 801.830550][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.008994][T10271] loop8: detected capacity change from 0 to 1024 [ 803.016896][T10272] loop6: detected capacity change from 0 to 1024 [ 803.024411][T10271] EXT4-fs: inline encryption not supported [ 803.058590][T10271] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 803.130227][T10272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 803.191286][T10271] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.797110][T10272] loop6: detected capacity change from 1024 to 0 [ 803.807012][T10287] syz.6.799: attempt to access beyond end of device [ 803.807012][T10287] loop6: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 803.882832][T10287] EXT4-fs error (device loop6): __ext4_find_entry:1685: inode #2: comm syz.6.799: reading directory lblock 0 [ 803.927216][T10287] syz.6.799: attempt to access beyond end of device [ 803.927216][T10287] loop6: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 804.916414][T10287] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 804.964485][T10287] EXT4-fs (loop6): I/O error while writing superblock [ 805.091709][T10294] netlink: 'syz.1.803': attribute type 11 has an invalid length. [ 805.283465][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.249165][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 808.186985][T10273] kmmpd-loop6: attempt to access beyond end of device [ 808.186985][T10273] loop6: rw=14337, sector=128, nr_sectors = 2 limit=0 [ 808.213341][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 808.235246][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 808.247787][T10273] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 808.262038][ T9] usb 9-1: config 0 has no interface number 0 [ 808.277474][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 808.308122][T10273] EXT4-fs error (device loop6): kmmpd:186: comm kmmpd-loop6: Error writing to MMP block [ 808.329248][ T9] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 808.333214][ T8054] syz-executor: attempt to access beyond end of device [ 808.333214][ T8054] loop6: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 808.343776][T10273] kmmpd-loop6: attempt to access beyond end of device [ 808.343776][T10273] loop6: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 808.379328][T10273] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 808.393754][T10273] EXT4-fs (loop6): I/O error while writing superblock [ 808.400823][ T9] usb 9-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 808.413773][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.440344][ T9] usb 9-1: Product: syz [ 808.480788][ T9] usb 9-1: Manufacturer: syz [ 808.543185][ T9] usb 9-1: SerialNumber: syz [ 808.573573][ T9] usb 9-1: config 0 descriptor?? [ 808.602147][ T9] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 808.648052][ T8054] syz-executor: attempt to access beyond end of device [ 808.648052][ T8054] loop6: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 808.697741][ T8054] syz-executor: attempt to access beyond end of device [ 808.697741][ T8054] loop6: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 808.744610][ T8054] syz-executor: attempt to access beyond end of device [ 808.744610][ T8054] loop6: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 808.819489][ T8054] syz-executor: attempt to access beyond end of device [ 808.819489][ T8054] loop6: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 810.326312][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.332793][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.332861][ T9] usb 9-1: USB disconnect, device number 4 [ 810.536983][ T9798] udevd[9798]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 810.553828][ T8054] syz-executor: attempt to access beyond end of device [ 810.553828][ T8054] loop6: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 810.592087][ T8054] syz-executor: attempt to access beyond end of device [ 810.592087][ T8054] loop6: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 810.629453][ T8054] syz-executor: attempt to access beyond end of device [ 810.629453][ T8054] loop6: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 810.645633][ T8054] syz-executor: attempt to access beyond end of device [ 810.645633][ T8054] loop6: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 810.660562][ T8054] syz-executor: attempt to access beyond end of device [ 810.660562][ T8054] loop6: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 810.692299][ T8054] EXT4-fs error (device loop6): ext4_get_inode_loc:4627: inode #2: block 5: comm syz-executor: unable to read itable block [ 810.818883][ T8054] syz-executor: attempt to access beyond end of device [ 810.818883][ T8054] loop6: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 810.875971][ T8054] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 810.913587][ T8054] EXT4-fs (loop6): I/O error while writing superblock [ 810.977151][ T8054] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5920: IO failure [ 810.998595][ T8054] syz-executor: attempt to access beyond end of device [ 810.998595][ T8054] loop6: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 811.079197][ T8054] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 811.099191][ T8054] EXT4-fs (loop6): I/O error while writing superblock [ 811.106024][ T8054] EXT4-fs error (device loop6): ext4_dirty_inode:6124: inode #2: comm syz-executor: mark_inode_dirty error [ 811.169237][ T8054] syz-executor: attempt to access beyond end of device [ 811.169237][ T8054] loop6: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 811.223497][ T8054] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 811.253912][ T8054] EXT4-fs (loop6): I/O error while writing superblock [ 811.280501][ T7945] kworker/u4:24: attempt to access beyond end of device [ 811.280501][ T7945] loop6: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 811.322198][ T7945] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4612: inode #2: block 5: comm kworker/u4:24: unable to read itable block [ 811.375370][ T7945] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 811.399631][ T7945] EXT4-fs (loop6): I/O error while writing superblock [ 811.424171][ T8054] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.504108][ T8054] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 811.549180][ T8054] EXT4-fs (loop6): I/O error while writing superblock [ 811.557793][T10273] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 813.555347][ T48] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.852913][ T48] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.896028][T10376] netlink: 'syz.8.814': attribute type 11 has an invalid length. [ 815.292330][ T48] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.546204][ T48] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.310909][T10400] loop8: detected capacity change from 0 to 1024 [ 816.318251][T10400] EXT4-fs: inline encryption not supported [ 816.327472][T10400] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 816.346616][ T9985] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 816.357571][ T9985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 816.365968][ T9985] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 816.379792][ T9985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 816.391484][ T9985] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 816.401501][ T9985] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 816.503421][T10400] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.241123][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.375255][T10399] chnl_net:caif_netlink_parms(): no params data found [ 818.499349][ T5778] Bluetooth: hci0: command tx timeout [ 819.171015][T10399] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.178342][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.212295][T10399] bridge_slave_0: entered allmulticast mode [ 819.242655][T10399] bridge_slave_0: entered promiscuous mode [ 819.292473][T10399] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.318766][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.339435][T10399] bridge_slave_1: entered allmulticast mode [ 819.346844][T10399] bridge_slave_1: entered promiscuous mode [ 819.525511][T10399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.626692][T10399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.700402][T10399] team0: Port device team_slave_0 added [ 819.746638][T10399] team0: Port device team_slave_1 added [ 819.786092][T10399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.805353][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.840269][T10399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.881906][T10399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.889002][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.920495][T10399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.943400][ T48] hsr_slave_0: left promiscuous mode [ 819.955019][ T48] hsr_slave_1: left promiscuous mode [ 819.962253][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.969806][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.978013][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.988522][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.996710][ T48] bridge_slave_1: left allmulticast mode [ 820.002972][ T48] bridge_slave_1: left promiscuous mode [ 820.008850][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.018631][ T48] bridge_slave_0: left allmulticast mode [ 820.024494][ T48] bridge_slave_0: left promiscuous mode [ 820.030921][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.064551][ T48] veth1_macvtap: left promiscuous mode [ 820.070281][ T48] veth0_macvtap: left promiscuous mode [ 820.075951][ T48] veth1_vlan: left promiscuous mode [ 820.082162][ T48] veth0_vlan: left promiscuous mode [ 820.580914][ T5778] Bluetooth: hci0: command tx timeout [ 820.754442][ T48] team0 (unregistering): Port device team_slave_1 removed [ 820.803078][ T48] team0 (unregistering): Port device team_slave_0 removed [ 820.847576][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.898698][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.409676][ T48] bond0 (unregistering): Released all slaves [ 821.548667][T10399] hsr_slave_0: entered promiscuous mode [ 821.555909][T10399] hsr_slave_1: entered promiscuous mode [ 821.565968][T10399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 821.577014][T10399] Cannot create hsr debugfs directory [ 821.947332][T10399] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 821.977394][T10399] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 821.998063][T10399] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 822.020316][T10399] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 822.126409][T10399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.158050][T10399] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.183393][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.190625][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.229213][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.236425][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.560486][T10399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.660288][ T5778] Bluetooth: hci0: command tx timeout [ 822.950348][T10399] veth0_vlan: entered promiscuous mode [ 822.965515][T10399] veth1_vlan: entered promiscuous mode [ 823.021936][T10399] veth0_macvtap: entered promiscuous mode [ 823.038804][T10399] veth1_macvtap: entered promiscuous mode [ 823.076938][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.093998][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.104680][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.115402][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.125675][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.136397][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.155638][T10399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.175465][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.188256][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.198563][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.210730][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.221104][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.233749][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.245576][T10399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.268678][T10399] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.278585][T10399] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.293682][T10399] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.303743][T10399] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.427066][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.442173][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.485017][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.498888][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.310062][ T5778] Bluetooth: hci0: command tx timeout [ 825.352970][T10518] loop0: detected capacity change from 0 to 1024 [ 825.360487][T10518] EXT4-fs: inline encryption not supported [ 825.382171][T10518] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 825.438214][T10518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.499171][ T23] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 826.760928][ T23] usb 10-1: Using ep0 maxpacket: 16 [ 826.791342][ T23] usb 10-1: device descriptor read/all, error -71 [ 829.002796][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.019627][ T23] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 829.229146][ T23] usb 10-1: Using ep0 maxpacket: 32 [ 829.246222][ T23] usb 10-1: unable to get BOS descriptor or descriptor too short [ 829.266241][ T23] usb 10-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 829.291268][T10553] netlink: 'syz.0.833': attribute type 11 has an invalid length. [ 829.309418][ T23] usb 10-1: config 1 interface 0 has no altsetting 0 [ 829.322444][ T23] usb 10-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.40 [ 829.339267][ T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.347421][ T23] usb 10-1: Product: syz [ 829.351953][ T23] usb 10-1: Manufacturer: syz [ 829.356689][ T23] usb 10-1: SerialNumber: syz [ 830.920220][ T23] usbhid 10-1:1.0: can't add hid device: -71 [ 830.926404][ T23] usbhid: probe of 10-1:1.0 failed with error -71 [ 830.939417][ T23] usb 10-1: USB disconnect, device number 3 [ 833.339151][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 833.569152][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 833.576608][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 833.609243][ T23] usb 1-1: config 0 has no interface number 0 [ 833.639219][ T23] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 833.662653][ T23] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 833.701332][ T23] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 833.730665][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.738747][ T23] usb 1-1: Product: syz [ 833.769215][ T23] usb 1-1: Manufacturer: syz [ 833.773898][ T23] usb 1-1: SerialNumber: syz [ 833.811418][ T23] usb 1-1: config 0 descriptor?? [ 833.831945][ T23] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 835.527404][ T1188] usb 1-1: USB disconnect, device number 7 [ 836.629596][T10612] loop9: detected capacity change from 0 to 1024 [ 836.637065][T10612] EXT4-fs: inline encryption not supported [ 836.646491][T10612] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 836.734915][T10612] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.836413][T10399] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.873389][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.8.844'. [ 839.189133][ T1188] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 839.399002][ T1188] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.441195][ T1188] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.466761][ T1188] usb 10-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 839.489246][ T1188] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.525026][ T1188] usb 10-1: config 0 descriptor?? [ 839.968881][ T1188] hid (null): nested delimiters [ 840.012599][ T1188] wacom 0003:056A:030C.0002: nested delimiters [ 840.048626][ T1188] wacom 0003:056A:030C.0002: item 0 1 2 10 parsing failed [ 840.081107][ T1188] wacom 0003:056A:030C.0002: parse failed [ 840.107738][ T1188] wacom: probe of 0003:056A:030C.0002 failed with error -22 [ 841.936321][ T5770] usb 10-1: USB disconnect, device number 4 [ 847.449135][ T5873] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 847.669333][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 847.689708][ T5873] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 847.712643][ T5873] usb 1-1: config 0 has no interface number 0 [ 847.729588][ T5873] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 847.779391][ T5873] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 847.802387][ T5873] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 847.819126][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.836978][ T5873] usb 1-1: Product: syz [ 847.849483][ T5873] usb 1-1: Manufacturer: syz [ 847.864588][ T5873] usb 1-1: SerialNumber: syz [ 847.878998][ T5873] usb 1-1: config 0 descriptor?? [ 847.923823][ T5873] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 849.714792][ T1188] usb 1-1: USB disconnect, device number 8 [ 851.698517][T10721] loop9: detected capacity change from 0 to 1024 [ 851.706064][T10721] EXT4-fs: inline encryption not supported [ 851.717358][T10721] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 851.739288][ T5830] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 851.778027][T10721] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 852.409296][ T5830] usb 9-1: Using ep0 maxpacket: 32 [ 852.829559][ T5830] usb 9-1: unable to get BOS descriptor or descriptor too short [ 852.851648][ T5830] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 852.866500][ T5830] usb 9-1: can't read configurations, error -71 [ 854.007348][T10399] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.021206][T10755] loop0: detected capacity change from 0 to 16 [ 856.920570][T10755] erofs: (device loop0): mounted with root inode @ nid 36. [ 856.932812][T10752] erofs: (device loop0): z_erofs_read_folio: read error -95 @ 8200 of nid 36 [ 859.059239][ T9985] Bluetooth: hci0: command tx timeout [ 859.646684][T10782] loop9: detected capacity change from 0 to 128 [ 860.761774][T10782] EXT4-fs (loop9): Test dummy encryption mode enabled [ 860.823032][T10782] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 860.991010][T10782] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 861.530760][T10399] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 864.241939][T10816] loop9: detected capacity change from 0 to 1024 [ 864.249232][T10816] EXT4-fs: inline encryption not supported [ 864.272381][T10816] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 864.330292][T10816] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 865.230330][T10399] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.963049][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.970028][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.131166][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 872.481595][T10863] loop9: detected capacity change from 0 to 16 [ 873.067153][ T27] usb 1-1: device not accepting address 9, error -71 [ 873.107438][T10863] erofs: (device loop9): mounted with root inode @ nid 36. [ 873.117773][T10863] erofs: (device loop9): z_erofs_read_folio: read error -95 @ 8200 of nid 36 [ 875.189275][ T5778] Bluetooth: hci0: command tx timeout [ 876.053910][T10883] loop0: detected capacity change from 0 to 512 [ 876.089375][T10883] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 876.227429][T10883] EXT4-fs (loop0): 1 truncate cleaned up [ 876.306925][T10883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 876.487833][T10890] loop9: detected capacity change from 0 to 1024 [ 876.495365][T10890] EXT4-fs: inline encryption not supported [ 876.503518][T10890] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 876.538047][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.619497][T10890] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 877.491072][T10399] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.190311][T10910] loop9: detected capacity change from 0 to 16 [ 878.218832][T10910] erofs: (device loop9): mounted with root inode @ nid 36. [ 878.243012][T10909] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 878.262275][T10909] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -20 in[46, 4050] out[1851] [ 878.274042][T10909] erofs: (device loop9): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 880.505334][T10476] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 880.594358][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.9.893'. [ 880.746032][T10476] usb 9-1: device descriptor read/all, error -71 [ 880.880222][T10929] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 880.929465][T10929] Error parsing options; rc = [-22] [ 882.915997][T10948] loop8: detected capacity change from 0 to 1024 [ 882.950916][T10948] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 883.020726][T10948] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 883.074315][T10948] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 883.090134][T10948] EXT4-fs (loop8): orphan cleanup on readonly fs [ 883.096822][T10948] EXT4-fs error (device loop8): ext4_free_blocks:6692: comm syz.8.896: Freeing blocks not in datazone - block = 0, count = 4096 [ 883.119136][ T5830] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 883.203607][T10948] EXT4-fs (loop8): 1 orphan inode deleted [ 883.233731][T10948] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 883.359785][ T5830] usb 10-1: Using ep0 maxpacket: 16 [ 883.393482][ T5830] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 883.450628][ T5830] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 883.490385][ T5830] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.537023][ T5830] usb 10-1: Product: syz [ 883.552140][ T5830] usb 10-1: Manufacturer: syz [ 883.556899][ T5830] usb 10-1: SerialNumber: syz [ 883.750990][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.287444][ T5830] cdc_ncm 10-1:1.0: bind() failure [ 885.300391][ T5830] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 885.307405][ T5830] cdc_ncm 10-1:1.1: bind() failure [ 885.372912][T10950] loop9: detected capacity change from 0 to 2048 [ 885.381848][ T5830] usb 10-1: USB disconnect, device number 5 [ 885.491378][T10973] loop8: detected capacity change from 0 to 1024 [ 885.499449][T10973] EXT4-fs: inline encryption not supported [ 885.505993][T10973] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 885.534993][T10950] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 885.552287][T10973] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 886.537877][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.070465][T10989] loop9: detected capacity change from 0 to 1024 [ 888.088285][T10989] hfsplus: unable to change nls mapping [ 888.105671][T10989] hfsplus: unable to parse mount options [ 888.159784][ T27] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 888.399246][ T27] usb 9-1: Using ep0 maxpacket: 16 [ 888.422983][ T27] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 888.431438][ T27] usb 9-1: config 0 has no interface number 0 [ 888.437594][ T27] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 888.469153][ T27] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 888.502511][ T27] usb 9-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 888.520053][ T27] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.538573][ T27] usb 9-1: Product: syz [ 888.543148][ T27] usb 9-1: Manufacturer: syz [ 888.547789][ T27] usb 9-1: SerialNumber: syz [ 888.575464][ T27] usb 9-1: config 0 descriptor?? [ 888.600031][ T27] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 890.647390][ T5830] usb 9-1: USB disconnect, device number 9 [ 892.643758][ T5830] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 893.109342][ T5830] usb 10-1: Using ep0 maxpacket: 32 [ 893.122175][ T5830] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.149189][ T5830] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.161835][ T5830] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 893.171131][ T5830] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.189427][ T5830] usb 10-1: config 0 descriptor?? [ 893.714927][ T5830] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 894.345511][ T1188] usb 10-1: USB disconnect, device number 6 [ 895.551033][T11040] loop8: detected capacity change from 0 to 16 [ 896.204592][T11040] erofs: (device loop8): mounted with root inode @ nid 36. [ 896.215261][T11040] erofs: (device loop8): z_erofs_read_folio: read error -95 @ 8200 of nid 36 [ 896.410821][T11034] fido_id[11034]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 898.810448][ T5778] Bluetooth: hci0: command tx timeout [ 898.817306][ T27] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 899.109160][ T27] usb 10-1: Using ep0 maxpacket: 16 [ 899.119143][ T5830] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 899.159513][ T27] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 899.167745][ T27] usb 10-1: config 0 has no interface number 0 [ 899.212675][ T27] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 899.278281][ T27] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 899.311733][ T27] usb 10-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 899.321749][ T27] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.376826][ T27] usb 10-1: Product: syz [ 899.379462][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 899.389594][ T27] usb 10-1: Manufacturer: syz [ 899.394356][ T27] usb 10-1: SerialNumber: syz [ 899.419606][ T5830] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 899.430813][ T27] usb 10-1: config 0 descriptor?? [ 899.454607][ T5830] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 899.472747][ T27] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 899.494784][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.519255][ T5830] usb 1-1: Product: syz [ 899.523437][ T5830] usb 1-1: Manufacturer: syz [ 899.559100][ T5830] usb 1-1: SerialNumber: syz [ 901.411233][ T9] usb 10-1: USB disconnect, device number 7 [ 901.491634][ T9772] udevd[9772]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 901.586375][ T5830] cdc_ncm 1-1:1.0: bind() failure [ 901.614978][ T5830] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 901.646524][ T5830] cdc_ncm 1-1:1.1: bind() failure [ 901.765707][ T5830] usb 1-1: USB disconnect, device number 11 [ 901.835222][T11054] loop0: detected capacity change from 0 to 2048 [ 901.970764][T11054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 903.066012][T11084] loop8: detected capacity change from 0 to 16 [ 903.139145][T11084] erofs: (device loop8): mounted with root inode @ nid 36. [ 903.169841][T11084] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 903.228840][T11084] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -20 in[46, 4050] out[1851] [ 903.241253][T11084] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 904.759200][T11095] loop8: detected capacity change from 0 to 16 [ 905.475993][T11095] erofs: (device loop8): mounted with root inode @ nid 36. [ 905.486111][T11095] erofs: (device loop8): z_erofs_read_folio: read error -95 @ 8200 of nid 36 [ 907.773044][ T5778] Bluetooth: hci0: command tx timeout [ 908.967542][T11130] loop8: detected capacity change from 0 to 1024 [ 908.975927][T11130] EXT4-fs: inline encryption not supported [ 909.005029][T11130] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 909.073500][T11130] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.935449][T11142] loop0: detected capacity change from 0 to 1024 [ 910.942608][T11142] EXT4-fs: inline encryption not supported [ 910.949271][T11142] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 910.990931][T11142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.188667][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.035888][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.275971][T11156] loop9: detected capacity change from 0 to 128 [ 912.455240][T11156] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 912.502814][T11156] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 912.609485][T10474] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 912.905296][T11156] EXT4-fs error (device loop9): ext4_append:79: inode #2: comm syz.9.930: Logical block already allocated [ 912.927816][T10474] usb 9-1: Using ep0 maxpacket: 16 [ 913.015302][T11166] loop0: detected capacity change from 0 to 16 [ 913.069066][T11166] erofs: (device loop0): mounted with root inode @ nid 36. [ 913.097138][T11166] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 913.112276][T11166] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -20 in[46, 4050] out[1851] [ 913.123694][T11166] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 913.654557][T11156] EXT4-fs (loop9): Remounting filesystem read-only [ 913.668523][T10474] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 913.714612][T10474] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 913.724069][T10474] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.732339][T10474] usb 9-1: Product: syz [ 913.736552][T10474] usb 9-1: Manufacturer: syz [ 913.744378][T10474] usb 9-1: SerialNumber: syz [ 913.885941][T10399] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 913.940888][T11168] loop0: detected capacity change from 0 to 1024 [ 914.035527][T10474] cdc_ncm 9-1:1.0: bind() failure [ 914.083331][T10474] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 914.114547][T11168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 914.138955][T11153] loop8: detected capacity change from 0 to 2048 [ 914.145964][T10474] cdc_ncm 9-1:1.1: bind() failure [ 914.359411][T11168] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 914.389546][T10474] usb 9-1: USB disconnect, device number 10 [ 914.430475][T11153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 914.541246][T11168] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.932: inode has both inline data and extents flags [ 914.623011][T11168] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.932: inode has both inline data and extents flags [ 915.295012][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 915.587283][T11187] loop9: detected capacity change from 0 to 512 [ 918.769427][T11187] fscrypt: Error allocating hmac(sha512): -4 [ 919.539356][ T5823] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 919.829507][ T5823] usb 1-1: Using ep0 maxpacket: 16 [ 919.870470][ T5823] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 919.878534][ T5823] usb 1-1: config 0 has no interface number 0 [ 919.909093][ T5823] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 919.973544][ T5823] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 920.083694][ T5823] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 920.123841][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.169107][ T5823] usb 1-1: Product: syz [ 920.173334][ T5823] usb 1-1: Manufacturer: syz [ 920.177978][ T5823] usb 1-1: SerialNumber: syz [ 920.232346][ T5823] usb 1-1: config 0 descriptor?? [ 920.272577][ T5823] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 922.002699][ T8072] usb 1-1: USB disconnect, device number 12 [ 928.899178][ T5778] Bluetooth: hci0: command tx timeout [ 930.378734][T11291] loop0: detected capacity change from 0 to 128 [ 930.434602][T11291] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 930.542632][T11291] ext4 filesystem being mounted at /242/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 930.729609][T11291] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.953: Logical block already allocated [ 930.777721][T11291] EXT4-fs (loop0): Remounting filesystem read-only [ 931.010290][ T5769] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 932.800602][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.807025][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.427007][T11313] loop8: detected capacity change from 0 to 512 [ 933.571148][T11313] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 933.714495][T11313] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 934.029175][T11313] EXT4-fs (loop8): 1 truncate cleaned up [ 934.041591][T11313] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 934.290192][T11325] loop9: detected capacity change from 0 to 1024 [ 934.297683][T11325] EXT4-fs: inline encryption not supported [ 934.304424][T11325] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 934.375945][T11325] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.439158][T10476] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 935.210142][T10476] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.307152][T10476] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 935.411287][T10476] usb 9-1: config 0 interface 0 has no altsetting 0 [ 935.417991][T10476] usb 9-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 935.482791][T10399] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.543256][T10476] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.612734][T10476] usb 9-1: config 0 descriptor?? [ 937.468498][T10476] sony 0003:054C:0268.0004: item fetching failed at offset 3/5 [ 937.571083][T10476] sony 0003:054C:0268.0004: parse failed [ 937.576894][T10476] sony: probe of 0003:054C:0268.0004 failed with error -22 [ 937.678624][T11313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.687799][T11313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.759390][T10476] usb 9-1: USB disconnect, device number 11 [ 938.484228][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.199135][ T5770] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 940.419137][ T5770] usb 1-1: Using ep0 maxpacket: 16 [ 940.438120][ T5770] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 940.446207][ T5770] usb 1-1: config 0 has no interface number 0 [ 940.455789][T11377] loop8: detected capacity change from 0 to 128 [ 940.468418][ T5770] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 940.511197][ T5770] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 940.554389][ T5770] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 940.598099][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.653446][T11377] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 940.659279][ T5770] usb 1-1: Product: syz [ 940.690080][ T5770] usb 1-1: Manufacturer: syz [ 940.694832][ T5770] usb 1-1: SerialNumber: syz [ 940.704977][ T5770] usb 1-1: config 0 descriptor?? [ 940.718564][ T5770] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 940.818097][T11377] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 942.700062][T10476] usb 1-1: USB disconnect, device number 13 [ 942.765381][T11377] EXT4-fs error (device loop8): ext4_append:79: inode #2: comm syz.8.964: Logical block already allocated [ 942.799495][T11377] EXT4-fs (loop8): Remounting filesystem read-only [ 942.924100][ T9043] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 943.614548][T11411] loop8: detected capacity change from 0 to 256 [ 943.784301][T11411] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 945.602631][T11428] loop9: detected capacity change from 0 to 1024 [ 945.610167][T11428] EXT4-fs: inline encryption not supported [ 945.633906][T11428] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 945.678124][T11428] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 945.859203][T10476] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 946.130181][T10476] usb 9-1: Using ep0 maxpacket: 8 [ 946.254003][T10476] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 946.379327][T10476] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 946.453171][T10476] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 946.518563][T10476] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 177, changing to 7 [ 946.589532][T10476] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 58312, setting to 1024 [ 946.664337][T10476] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 946.682250][T10399] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.701648][T10476] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.249890][T10476] usb 9-1: config 0 descriptor?? [ 948.449365][T11446] loop9: detected capacity change from 0 to 1024 [ 948.508479][ T5838] usb 9-1: USB disconnect, device number 12 [ 948.591205][T11446] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.884015][T10399] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.399209][T10164] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 950.609720][T10164] usb 10-1: Using ep0 maxpacket: 16 [ 950.653901][T10164] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 950.669151][T10164] usb 10-1: config 0 has no interface number 0 [ 950.675499][T10164] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 950.700096][T10164] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 950.762756][T10164] usb 10-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 950.787255][T10164] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.805960][T10164] usb 10-1: Product: syz [ 950.814732][T10164] usb 10-1: Manufacturer: syz [ 950.828194][T10164] usb 10-1: SerialNumber: syz [ 950.883467][T10164] usb 10-1: config 0 descriptor?? [ 950.923104][T10164] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 950.956883][T11485] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 951.060769][T11488] loop8: detected capacity change from 0 to 512 [ 951.142159][T11488] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 951.164721][T11488] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 951.183294][T11488] System zones: 0-1, 15-15, 18-18, 34-34 [ 951.199655][T11488] EXT4-fs (loop8): orphan cleanup on readonly fs [ 951.206176][T11488] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 952.276696][T10476] usb 10-1: USB disconnect, device number 8 [ 952.302483][T11488] EXT4-fs warning (device loop8): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 952.356950][T11488] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 952.383282][T11488] EXT4-fs (loop8): 1 truncate cleaned up [ 952.411503][T11488] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 952.494238][T11488] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 952.503519][T11498] loop0: detected capacity change from 0 to 1024 [ 952.511507][T11498] EXT4-fs: inline encryption not supported [ 952.523788][T11498] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 952.529648][T11488] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 952.580109][T11498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.190039][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.803648][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.707640][T11514] loop0: detected capacity change from 0 to 1024 [ 956.840500][T11514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 957.071926][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 963.281040][T11541] loop9: detected capacity change from 0 to 1024 [ 963.288530][T11541] EXT4-fs: inline encryption not supported [ 963.299388][T11541] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 963.361864][T11541] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 964.326395][T10399] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.839338][ T5838] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 966.054739][ T5838] usb 1-1: Using ep0 maxpacket: 16 [ 966.078612][ T5838] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 966.105637][ T5838] usb 1-1: config 0 has no interface number 0 [ 966.115611][ T5838] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 966.139052][ T5838] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 966.160420][ T5838] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 966.179251][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.990672][T11565] Bluetooth: MGMT ver 1.22 [ 967.096833][ T5838] usb 1-1: Product: syz [ 967.159885][ T5838] usb 1-1: Manufacturer: syz [ 967.164805][ T5838] usb 1-1: SerialNumber: syz [ 967.208676][ T5838] usb 1-1: config 0 descriptor?? [ 967.259502][ T5838] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 967.577411][T10474] usb 1-1: USB disconnect, device number 14 [ 967.808028][ T9761] udevd[9761]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 969.595118][ T9985] Bluetooth: hci0: command 0x0c1a tx timeout [ 969.601918][ T5778] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 971.563787][T11595] loop0: detected capacity change from 0 to 1024 [ 971.670003][T11595] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 971.676840][T11595] hfsplus: xattr searching failed [ 971.761779][ T48] hfsplus: b-tree write err: -5, ino 4 [ 972.149104][T10474] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 972.248959][T11604] loop8: detected capacity change from 0 to 512 [ 972.311531][T11604] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 972.344116][T11604] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 972.355220][T10474] usb 1-1: Using ep0 maxpacket: 16 [ 972.405296][T10474] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 972.421050][T11604] System zones: 0-1, 15-15, 18-18, 34-34 [ 972.427161][T11604] EXT4-fs (loop8): orphan cleanup on readonly fs [ 972.445799][T10474] usb 1-1: config 0 has no interface number 0 [ 972.477951][T11604] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 972.479923][T10474] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 972.498133][T11604] EXT4-fs warning (device loop8): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 972.498166][T11604] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 972.539524][T11604] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.1018: bg 0: block 40: padding at end of block bitmap is not set [ 972.609533][T10474] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 972.632976][T10474] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 972.652260][T10474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.681155][T10474] usb 1-1: Product: syz [ 972.685373][T10474] usb 1-1: Manufacturer: syz [ 972.690391][T11604] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 972.699286][T10474] usb 1-1: SerialNumber: syz [ 972.708262][T10474] usb 1-1: config 0 descriptor?? [ 972.723346][T10474] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 972.732136][T11604] EXT4-fs (loop8): 1 truncate cleaned up [ 972.741987][T11604] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 973.928639][T11604] EXT4-fs error (device loop8): ext4_encrypted_get_link:46: inode #16: comm syz.8.1018: bad symlink. [ 975.376061][ T5770] usb 1-1: USB disconnect, device number 15 [ 975.693979][T11615] EXT4-fs error (device loop8): ext4_encrypted_get_link:46: inode #16: comm syz.8.1018: bad symlink. [ 976.341265][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.573887][T11626] loop0: detected capacity change from 0 to 2048 [ 978.724461][T11626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 979.769569][T11634] blktrace: Concurrent blktraces are not allowed on loop3 [ 980.095646][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 982.133652][T11648] loop0: detected capacity change from 0 to 128 [ 982.170522][T11648] EXT4-fs: Ignoring removed nomblk_io_submit option [ 982.177198][T11648] EXT4-fs: Ignoring removed nomblk_io_submit option [ 982.209163][ T5770] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 982.279710][T11648] EXT4-fs (loop0): Test dummy encryption mode enabled [ 983.456296][T11648] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 983.489757][T11648] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 983.509382][ T5770] usb 10-1: Using ep0 maxpacket: 16 [ 983.524495][ T5770] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 983.539510][ T5770] usb 10-1: config 0 has no interface number 0 [ 983.563254][ T5770] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 983.600513][ T5770] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 983.622601][ T5770] usb 10-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 983.649084][ T5770] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.657216][ T5770] usb 10-1: Product: syz [ 983.688257][ T5770] usb 10-1: Manufacturer: syz [ 983.724648][ T5770] usb 10-1: SerialNumber: syz [ 983.749669][ T5770] usb 10-1: config 0 descriptor?? [ 983.774076][ T5770] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 984.031315][ T5770] usb 10-1: USB disconnect, device number 9 [ 984.189645][T11648] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 985.099488][T11671] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1033'. [ 986.256841][ T5769] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 987.736567][T11691] loop0: detected capacity change from 0 to 1024 [ 987.802307][T11691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 988.053893][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.835005][T10476] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 990.234073][T10476] usb 10-1: Using ep0 maxpacket: 16 [ 990.265596][T10476] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 990.293136][T10476] usb 10-1: config 0 has no interface number 0 [ 990.324572][T10476] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 990.349130][T10476] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 990.425252][T10476] usb 10-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 990.448332][T10476] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.456551][T10476] usb 10-1: Product: syz [ 990.460977][T10476] usb 10-1: Manufacturer: syz [ 990.465692][T10476] usb 10-1: SerialNumber: syz [ 990.473262][T10476] usb 10-1: config 0 descriptor?? [ 990.557098][T10476] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 992.272990][T10476] usb 10-1: USB disconnect, device number 10 [ 992.367192][ T9798] udevd[9798]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 992.840621][T11722] loop8: detected capacity change from 0 to 1024 [ 992.848155][T11722] EXT4-fs: inline encryption not supported [ 993.385436][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.392100][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.541341][T11722] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 993.734920][T11722] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.051256][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 995.551022][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.828450][T11753] loop8: detected capacity change from 0 to 2048 [ 997.891001][T11753] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 997.912263][T11753] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1) [ 997.979249][T10476] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 998.172777][T10476] usb 10-1: Using ep0 maxpacket: 16 [ 998.192598][T10476] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 998.209080][T10476] usb 10-1: config 0 has no interface number 0 [ 998.229121][T10476] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 998.262486][T10476] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 998.296891][T10476] usb 10-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 998.316815][T10476] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.340917][T10476] usb 10-1: Product: syz [ 998.345230][T10476] usb 10-1: Manufacturer: syz [ 998.359159][T10476] usb 10-1: SerialNumber: syz [ 998.377689][T10476] usb 10-1: config 0 descriptor?? [ 998.393664][T10476] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 998.604238][T11760] loop8: detected capacity change from 0 to 512 [ 998.656859][T11760] EXT4-fs: Ignoring removed oldalloc option [ 1000.194077][T10476] usb 10-1: USB disconnect, device number 11 [ 1000.205113][T11760] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1000.269939][T11760] EXT4-fs (loop8): 1 truncate cleaned up [ 1000.304152][T11760] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1000.368106][T11769] loop0: detected capacity change from 0 to 512 [ 1000.387214][T11769] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1000.629368][T11757] loop8: detected capacity change from 512 to 64 [ 1000.661151][T11757] bio_check_eod: 11 callbacks suppressed [ 1000.661168][T11757] syz.8.1058: attempt to access beyond end of device [ 1000.661168][T11757] loop8: rw=2049, sector=70, nr_sectors = 2 limit=64 [ 1000.680621][T11757] EXT4-fs warning (device loop8): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 35) [ 1000.692169][T11757] Buffer I/O error on device loop8, logical block 35 [ 1000.699571][T11757] syz.8.1058: attempt to access beyond end of device [ 1000.699571][T11757] loop8: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 1000.713050][T11757] EXT4-fs warning (device loop8): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 255) [ 1000.724353][T11757] Buffer I/O error on device loop8, logical block 255 [ 1000.731357][T11757] syz.8.1058: attempt to access beyond end of device [ 1000.731357][T11757] loop8: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 1000.746439][T11757] EXT4-fs warning (device loop8): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 253) [ 1000.757767][T11757] Buffer I/O error on device loop8, logical block 253 [ 1000.764570][T11757] Buffer I/O error on device loop8, logical block 254 [ 1000.774690][T11757] syz.8.1058: attempt to access beyond end of device [ 1000.774690][T11757] loop8: rw=2049, sector=74, nr_sectors = 2 limit=64 [ 1000.787988][T11757] EXT4-fs warning (device loop8): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 37) [ 1000.799268][T11757] Buffer I/O error on device loop8, logical block 37 [ 1000.846215][T11769] EXT4-fs (loop0): 1 truncate cleaned up [ 1000.867647][T11769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1000.973880][T11769] 9pnet_fd: Insufficient options for proto=fd [ 1001.720208][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.984813][ T9043] EXT4-fs error (device loop8): mb_free_blocks:1954: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 1003.071060][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.862463][T11786] netlink: 'syz.8.1065': attribute type 4 has an invalid length. [ 1004.320969][T11793] loop0: detected capacity change from 0 to 2048 [ 1004.393529][T11793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1004.412927][T11793] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1004.688647][ T7945] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm kworker/u4:24: bg 0: block 345: padding at end of block bitmap is not set [ 1004.746226][ T7945] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 64 with error 117 [ 1004.809061][ T7945] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1004.809061][ T7945] [ 1004.854359][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.927575][T11807] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1006.073633][T11814] loop0: detected capacity change from 0 to 1024 [ 1006.082107][T11814] EXT4-fs: inline encryption not supported [ 1006.090584][T11814] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1006.131083][T11814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.457784][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.115305][T11824] loop0: detected capacity change from 0 to 512 [ 1009.122930][T11824] EXT4-fs: Ignoring removed oldalloc option [ 1009.132445][T11824] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1009.162160][T11824] EXT4-fs (loop0): 1 truncate cleaned up [ 1009.169230][T11824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1009.659268][T11824] loop0: detected capacity change from 512 to 64 [ 1009.982123][ T5769] EXT4-fs error (device loop0): mb_free_blocks:1954: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 1010.056801][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.497245][T11842] loop8: detected capacity change from 0 to 1024 [ 1010.540203][T11842] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1011.659164][T11842] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1011.681062][T11842] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1011.951981][ T5838] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1012.589059][ T5838] usb 1-1: Using ep0 maxpacket: 16 [ 1012.596766][ T5838] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1012.610613][ T5838] usb 1-1: config 0 has no interface number 0 [ 1012.616774][ T5838] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1012.748686][ T5838] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1012.760699][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.773528][ T5838] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1012.787768][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.796052][ T5838] usb 1-1: Product: syz [ 1012.800340][ T5838] usb 1-1: Manufacturer: syz [ 1012.804967][ T5838] usb 1-1: SerialNumber: syz [ 1012.822764][ T5838] usb 1-1: config 0 descriptor?? [ 1012.843638][ T5838] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1016.070592][ T5838] usb 1-1: USB disconnect, device number 16 [ 1016.812882][ T9761] udevd[9761]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1019.541423][T11891] loop0: detected capacity change from 0 to 128 [ 1029.359185][T10547] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1029.401808][T11940] loop9: detected capacity change from 0 to 512 [ 1029.416234][T11940] EXT4-fs: Ignoring removed oldalloc option [ 1029.435736][T11940] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1029.483996][T11940] EXT4-fs (loop9): 1 truncate cleaned up [ 1029.491640][T11940] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.729351][T10547] usb 1-1: Using ep0 maxpacket: 16 [ 1029.760843][T10547] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1029.797365][T10547] usb 1-1: config 0 has no interface number 0 [ 1029.837742][T10547] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1029.931810][T10547] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1029.958085][T10547] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1029.969636][T11939] loop9: detected capacity change from 512 to 64 [ 1029.990927][T10547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.993999][T11939] syz.9.1101: attempt to access beyond end of device [ 1029.993999][T11939] loop9: rw=2049, sector=70, nr_sectors = 2 limit=64 [ 1030.013461][T11939] EXT4-fs warning (device loop9): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 35) [ 1030.017834][T10547] usb 1-1: Product: syz [ 1030.024650][T11939] Buffer I/O error on device loop9, logical block 35 [ 1030.035917][T11939] syz.9.1101: attempt to access beyond end of device [ 1030.035917][T11939] loop9: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 1030.047869][T10547] usb 1-1: Manufacturer: syz [ 1030.049851][T11939] EXT4-fs warning (device loop9): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 255) [ 1030.065343][T11939] Buffer I/O error on device loop9, logical block 255 [ 1030.069563][T10547] usb 1-1: SerialNumber: syz [ 1030.072581][T11939] syz.9.1101: attempt to access beyond end of device [ 1030.072581][T11939] loop9: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 1030.090176][T11939] EXT4-fs warning (device loop9): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 253) [ 1030.101459][T11939] Buffer I/O error on device loop9, logical block 253 [ 1030.108228][T11939] Buffer I/O error on device loop9, logical block 254 [ 1030.116129][T11939] syz.9.1101: attempt to access beyond end of device [ 1030.116129][T11939] loop9: rw=2049, sector=74, nr_sectors = 2 limit=64 [ 1030.129617][T11939] EXT4-fs warning (device loop9): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 37) [ 1030.140832][T11939] Buffer I/O error on device loop9, logical block 37 [ 1030.173192][T10547] usb 1-1: config 0 descriptor?? [ 1030.186345][T10547] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1031.789590][T10476] usb 1-1: USB disconnect, device number 17 [ 1032.033748][T10399] EXT4-fs error (device loop9): mb_free_blocks:1954: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 1032.079378][T10399] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.580864][T11976] loop8: detected capacity change from 0 to 16 [ 1032.732878][T11976] erofs: (device loop8): mounted with root inode @ nid 36. [ 1033.072038][T11984] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1118'. [ 1033.089324][T10476] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1034.896717][T10476] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.908834][T10476] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.919085][T10476] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1034.952132][T10476] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1034.976921][T10476] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.988460][T10476] usb 9-1: config 0 descriptor?? [ 1035.239317][T11996] loop9: detected capacity change from 0 to 512 [ 1035.257805][T11996] EXT4-fs: Ignoring removed oldalloc option [ 1035.270064][T11996] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1035.309338][T11996] EXT4-fs (loop9): 1 truncate cleaned up [ 1035.320795][T11996] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.470235][T10476] usbhid 9-1:0.0: can't add hid device: -71 [ 1035.476386][T10476] usbhid: probe of 9-1:0.0 failed with error -71 [ 1035.519074][T10476] usb 9-1: USB disconnect, device number 13 [ 1036.719762][T11991] loop9: detected capacity change from 512 to 64 [ 1037.017673][T10399] EXT4-fs error (device loop9): mb_free_blocks:1954: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 1037.074212][T10399] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.119064][T10547] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1039.309926][T10547] usb 1-1: Using ep0 maxpacket: 16 [ 1039.317321][T10547] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1039.340110][T10547] usb 1-1: config 0 has no interface number 0 [ 1039.346367][T10547] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1039.377757][T10547] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1039.411126][T10547] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1039.426742][T10547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.449024][T10547] usb 1-1: Product: syz [ 1039.453256][T10547] usb 1-1: Manufacturer: syz [ 1039.478279][T10547] usb 1-1: SerialNumber: syz [ 1039.498114][T10547] usb 1-1: config 0 descriptor?? [ 1039.514728][T10547] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1039.624356][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1124'. [ 1041.030196][T10476] usb 1-1: USB disconnect, device number 18 [ 1041.303675][T12021] loop8: detected capacity change from 0 to 8192 [ 1042.783784][T12027] loop9: detected capacity change from 0 to 1024 [ 1042.791261][T12027] EXT4-fs: inline encryption not supported [ 1042.797963][T12027] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1042.860200][T12027] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.408731][T10399] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.019103][T10547] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1046.724716][T12062] loop0: detected capacity change from 0 to 16 [ 1047.604029][T10547] usb 9-1: Using ep0 maxpacket: 16 [ 1047.612016][T12062] erofs: (device loop0): mounted with root inode @ nid 36. [ 1047.625346][T12058] erofs: (device loop0): z_erofs_read_folio: read error -95 @ 8200 of nid 36 [ 1047.663937][T10547] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1047.706423][T10547] usb 9-1: config 0 has no interface number 0 [ 1047.823803][T10547] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1047.837167][T10547] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1047.852718][T10547] usb 9-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1047.876151][T10547] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.884470][T10547] usb 9-1: Product: syz [ 1047.888678][T10547] usb 9-1: Manufacturer: syz [ 1047.894129][T10547] usb 9-1: SerialNumber: syz [ 1047.902772][T10547] usb 9-1: config 0 descriptor?? [ 1047.922877][T10547] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 1049.480930][ T5830] usb 9-1: USB disconnect, device number 14 [ 1049.619210][ T7530] Bluetooth: hci0: command 0x0c1a tx timeout [ 1052.680971][T12087] loop0: detected capacity change from 0 to 1024 [ 1052.690328][T12087] EXT4-fs: inline encryption not supported [ 1052.696955][T12087] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1052.743889][T12087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1054.238924][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.809610][T12105] loop9: detected capacity change from 0 to 128 [ 1054.912644][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.930192][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.319637][T10546] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1057.455470][T12122] loop0: detected capacity change from 0 to 256 [ 1057.499238][T12122] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1057.529073][T12122] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1057.529510][T10546] usb 10-1: Using ep0 maxpacket: 16 [ 1057.551299][T10546] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1057.561171][T10546] usb 10-1: config 0 has no interface number 0 [ 1057.567797][T10546] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1057.578918][T10546] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1057.592176][T10546] usb 10-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1057.608044][T10546] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.616760][T10546] usb 10-1: Product: syz [ 1057.632329][T12122] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1057.636947][T10546] usb 10-1: Manufacturer: syz [ 1057.660985][T10546] usb 10-1: SerialNumber: syz [ 1057.682786][T10546] usb 10-1: config 0 descriptor?? [ 1057.708691][T10546] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1059.151298][ T5830] usb 10-1: USB disconnect, device number 12 [ 1059.342516][T12132] loop8: detected capacity change from 0 to 512 [ 1059.380819][T12132] EXT4-fs error (device loop8): __ext4_fill_super:5513: inode #2: comm syz.8.1162: inode has both inline data and extents flags [ 1059.398231][T12132] EXT4-fs (loop8): get root inode failed [ 1059.409372][T12132] EXT4-fs (loop8): mount failed [ 1059.570408][T12136] loop0: detected capacity change from 0 to 1024 [ 1059.577754][T12136] EXT4-fs: inline encryption not supported [ 1059.585690][T12136] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1059.628067][T12136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.098795][T12148] loop8: detected capacity change from 0 to 16 [ 1062.112692][T12148] erofs: (device loop8): mounted with root inode @ nid 36. [ 1062.123349][T12148] erofs: (device loop8): z_erofs_read_folio: read error -95 @ 8200 of nid 36 [ 1062.150936][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.872963][T12162] loop0: detected capacity change from 0 to 128 [ 1064.110155][ T7530] Bluetooth: hci0: command 0x0c1a tx timeout [ 1064.578219][T12164] loop9: detected capacity change from 0 to 1024 [ 1064.652722][T12164] hfsplus: invalid length 32517 has been corrected to 255 [ 1065.054161][T12167] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1065.094187][T12167] kvm: pic: level sensitive irq not supported [ 1065.094480][T12167] kvm: pic: non byte read [ 1065.129376][T12167] kvm: pic: level sensitive irq not supported [ 1065.129476][T12167] kvm: pic: non byte read [ 1065.162114][T12167] kvm: pic: level sensitive irq not supported [ 1065.162189][T12167] kvm: pic: non byte read [ 1065.219419][T12167] kvm: pic: level sensitive irq not supported [ 1065.219520][T12167] kvm: pic: non byte read [ 1065.249733][T12167] kvm: pic: level sensitive irq not supported [ 1065.249805][T12167] kvm: pic: non byte read [ 1065.277232][T12167] kvm: pic: level sensitive irq not supported [ 1065.277333][T12167] kvm: pic: non byte read [ 1065.324093][T12167] kvm: pic: level sensitive irq not supported [ 1065.324162][T12167] kvm: pic: non byte read [ 1065.348149][T12167] kvm: pic: level sensitive irq not supported [ 1065.348217][T12167] kvm: pic: non byte read [ 1065.385002][T12167] kvm: pic: level sensitive irq not supported [ 1065.385124][T12167] kvm: pic: non byte read [ 1065.594509][T12175] loop8: detected capacity change from 0 to 164 [ 1065.613280][T12175] Unable to read rock-ridge attributes [ 1065.667505][T12177] Unable to read rock-ridge attributes [ 1065.689966][T12177] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1065.876738][T10474] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1066.247390][T12181] loop0: detected capacity change from 0 to 256 [ 1066.277200][T12181] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae174d, utbl_chksum : 0xe619d30d) [ 1066.316029][T12183] loop8: detected capacity change from 0 to 1024 [ 1066.323394][T12183] EXT4-fs: inline encryption not supported [ 1066.329997][T12183] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1066.351988][T12181] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1066.379439][T10474] usb 10-1: Using ep0 maxpacket: 16 [ 1066.393442][T10474] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1066.411882][T10474] usb 10-1: config 0 has no interface number 0 [ 1066.420994][T12183] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.465005][T10474] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1066.477439][T10474] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1066.694858][T10474] usb 10-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1066.706635][T10474] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.714821][T10474] usb 10-1: Product: syz [ 1066.719641][T10474] usb 10-1: Manufacturer: syz [ 1066.724495][T10474] usb 10-1: SerialNumber: syz [ 1066.733263][T10474] usb 10-1: config 0 descriptor?? [ 1067.055587][T12191] loop0: detected capacity change from 0 to 1024 [ 1068.682747][T10474] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 1068.697334][ T9043] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.869736][T10474] usb 10-1: USB disconnect, device number 13 [ 1070.555532][T12213] loop9: detected capacity change from 0 to 16 [ 1071.313974][T12213] erofs: (device loop9): mounted with root inode @ nid 36. [ 1071.324224][T12213] erofs: (device loop9): z_erofs_read_folio: read error -95 @ 8200 of nid 36 [ 1071.454200][T12219] loop8: detected capacity change from 0 to 128 [ 1072.866736][T12221] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1073.149365][ T7530] Bluetooth: hci0: command 0x0c1a tx timeout [ 1073.179317][T10476] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1073.398590][T10476] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1073.443740][T10476] usb 9-1: not running at top speed; connect to a high speed hub [ 1073.602069][T10476] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.774396][T10476] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1073.859907][T10476] usb 9-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1073.916316][T10476] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1073.946554][T10476] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.981268][T10476] usb 9-1: Product: syz [ 1073.996974][T10476] usb 9-1: Manufacturer: syz [ 1074.017907][T10476] usb 9-1: SerialNumber: syz [ 1074.394075][T10476] usb 9-1: USB disconnect, device number 15 [ 1074.469474][T12237] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1075.090783][T11955] udevd[11955]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1076.369241][T10474] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1076.381754][T12247] loop8: detected capacity change from 0 to 128 [ 1076.414323][T12247] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1076.689170][T10474] usb 10-1: Using ep0 maxpacket: 16 [ 1076.830706][ T28] audit: type=1800 audit(1768509988.532:81): pid=12250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1197" name="file1" dev="loop8" ino=94 res=0 errno=0 [ 1076.873468][T10474] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1076.883860][T12247] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1076.899353][T12247] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1076.999499][T10474] usb 10-1: config 0 has no interface number 0 [ 1077.006027][T10474] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1077.018056][T10474] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1077.028526][ T28] audit: type=1800 audit(1768509988.562:82): pid=12250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1197" name="file1" dev="loop8" ino=94 res=0 errno=0 [ 1077.053652][T12249] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1077.068447][T12249] ------------[ cut here ]------------ [ 1077.074252][T12249] WARNING: CPU: 0 PID: 12249 at fs/udf/truncate.c:224 udf_truncate_extents+0xd46/0xeb0 [ 1077.084032][T12249] Modules linked in: [ 1077.087940][T12249] CPU: 0 PID: 12249 Comm: syz.8.1197 Not tainted syzkaller #0 [ 1077.095433][T12249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1077.105584][T12249] RIP: 0010:udf_truncate_extents+0xd46/0xeb0 [ 1077.112663][T12249] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 01 00 00 75 70 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5a 7f 8d fe <0f> 0b eb 8e 44 89 e9 80 e1 07 38 c1 0f 8c ec f3 ff ff 4c 89 ef e8 [ 1077.132533][T12249] RSP: 0018:ffffc90003106ee0 EFLAGS: 00010293 [ 1077.138614][T12249] RAX: ffffffff82f82ba6 RBX: 1ffff1100bcf480a RCX: ffff88802dd23c00 [ 1077.146722][T12249] RDX: 0000000000000000 RSI: 0000000000000120 RDI: 0000000000000000 [ 1077.154735][T12249] RBP: ffffc900031070c0 R08: ffff88802dd23c00 R09: 0000000000000002 [ 1077.162812][T12249] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1077.170813][T12249] R13: 0000000000000000 R14: 0000000000000120 R15: 0000000000000120 [ 1077.178786][T12249] FS: 00007f0d5c5656c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1077.187765][T12249] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1077.194405][T12249] CR2: 000000110c43268c CR3: 000000002a361000 CR4: 00000000003506f0 [ 1077.202426][T12249] Call Trace: [ 1077.205737][T12249] [ 1077.208683][T12249] ? udf_discard_prealloc+0x570/0x570 [ 1077.214692][T12249] ? udf_write_failed+0x178/0x1b0 [ 1077.219854][T12249] ? __lock_acquire+0x7c80/0x7c80 [ 1077.224951][T12249] ? __rwlock_init+0x80/0x150 [ 1077.229662][T12249] ? down_write+0x162/0x1f0 [ 1077.234268][T12249] ? do_raw_spin_unlock+0x121/0x230 [ 1077.239533][T12249] udf_write_failed+0x180/0x1b0 [ 1077.244440][T12249] udf_write_begin+0x21f/0x430 [ 1077.249285][T12249] generic_perform_write+0x2fb/0x5b0 [ 1077.254618][T12249] ? generic_file_direct_write+0x3e0/0x3e0 [ 1077.260531][T12249] ? __generic_file_write_iter+0xf7/0x230 [ 1077.266259][T12249] ? udf_file_write_iter+0x2b1/0x620 [ 1077.271613][T12249] udf_file_write_iter+0x2c0/0x620 [ 1077.276742][T12249] __kernel_write_iter+0x274/0x670 [ 1077.281917][T12249] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1077.287617][T12249] ? vfs_read+0x920/0x920 [ 1077.291988][T12249] ? __asan_memset+0x22/0x40 [ 1077.296591][T12249] ? iov_iter_kvec+0xd4/0x1b0 [ 1077.301743][T12249] __kernel_write+0xf0/0x140 [ 1077.306345][T12249] ? __kernel_write_iter+0x670/0x670 [ 1077.311713][T12249] __dump_emit+0x206/0x310 [ 1077.316801][T12249] ? __dump_skip+0x240/0x240 [ 1077.321522][T12249] ? dump_emit+0xa6/0xe0 [ 1077.325770][T12249] ? elf_core_dump+0x2b1c/0x36e0 [ 1077.330745][T12249] elf_core_dump+0x2b53/0x36e0 [ 1077.335538][T12249] ? load_elf_binary+0x2700/0x2700 [ 1077.340716][T12249] ? verify_lock_unused+0x140/0x140 [ 1077.345934][T12249] ? lockdep_hardirqs_on+0x98/0x150 [ 1077.351271][T12249] ? rcu_read_lock_any_held+0xb4/0x120 [ 1077.356762][T12249] do_coredump+0x1755/0x2480 [ 1077.361398][T12249] ? nfs_ssc_unregister+0x30/0x30 [ 1077.366464][T12249] ? lock_chain_count+0x20/0x20 [ 1077.371350][T12249] ? _raw_spin_unlock_irq+0x23/0x50 [ 1077.376554][T12249] ? lockdep_hardirqs_on+0x98/0x150 [ 1077.381864][T12249] get_signal+0x1133/0x1400 [ 1077.386421][T12249] arch_do_signal_or_restart+0x9c/0x7b0 [ 1077.392037][T12249] ? get_sigframe_size+0x20/0x20 [ 1077.396989][T12249] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1077.403007][T12249] ? exit_to_user_mode_loop+0x3b/0x110 [ 1077.408480][T12249] exit_to_user_mode_loop+0x70/0x110 [ 1077.413807][T12249] exit_to_user_mode_prepare+0xf6/0x180 [ 1077.420048][T12249] irqentry_exit_to_user_mode+0x9/0x40 [ 1077.425522][T12249] exc_page_fault+0x8f/0x110 [ 1077.430222][T12249] asm_exc_page_fault+0x26/0x30 [ 1077.435081][T12249] RIP: 0033:0x7f0d5b78f751 [ 1077.439546][T12249] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1077.459208][T12249] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1077.465285][T12249] RAX: 0000000000000000 RBX: 00007f0d5b9e6090 RCX: 00007f0d5b78f749 [ 1077.473286][T12249] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1077.481279][T12249] RBP: 00007f0d5b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1077.489278][T12249] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1077.497253][T12249] R13: 00007f0d5b9e6128 R14: 00007f0d5b9e6090 R15: 00007ffcd4b5ed88 [ 1077.505301][T12249] [ 1077.508330][T12249] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1077.515605][T12249] CPU: 0 PID: 12249 Comm: syz.8.1197 Not tainted syzkaller #0 [ 1077.523145][T12249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1077.533223][T12249] Call Trace: [ 1077.536503][T12249] [ 1077.539437][T12249] dump_stack_lvl+0x16c/0x230 [ 1077.544136][T12249] ? show_regs_print_info+0x20/0x20 [ 1077.549359][T12249] ? load_image+0x3b0/0x3b0 [ 1077.553903][T12249] panic+0x2c0/0x710 [ 1077.557804][T12249] ? bpf_jit_dump+0xd0/0xd0 [ 1077.562332][T12249] __warn+0x2e0/0x470 [ 1077.566336][T12249] ? udf_truncate_extents+0xd46/0xeb0 [ 1077.571750][T12249] ? udf_truncate_extents+0xd46/0xeb0 [ 1077.577119][T12249] report_bug+0x2be/0x4f0 [ 1077.581491][T12249] ? udf_truncate_extents+0xd46/0xeb0 [ 1077.586901][T12249] ? udf_truncate_extents+0xd46/0xeb0 [ 1077.592274][T12249] ? udf_truncate_extents+0xd48/0xeb0 [ 1077.597647][T12249] handle_bug+0xcf/0x120 [ 1077.601892][T12249] exc_invalid_op+0x1a/0x50 [ 1077.606402][T12249] asm_exc_invalid_op+0x1a/0x20 [ 1077.611265][T12249] RIP: 0010:udf_truncate_extents+0xd46/0xeb0 [ 1077.617253][T12249] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 01 00 00 75 70 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5a 7f 8d fe <0f> 0b eb 8e 44 89 e9 80 e1 07 38 c1 0f 8c ec f3 ff ff 4c 89 ef e8 [ 1077.636855][T12249] RSP: 0018:ffffc90003106ee0 EFLAGS: 00010293 [ 1077.642928][T12249] RAX: ffffffff82f82ba6 RBX: 1ffff1100bcf480a RCX: ffff88802dd23c00 [ 1077.650903][T12249] RDX: 0000000000000000 RSI: 0000000000000120 RDI: 0000000000000000 [ 1077.658885][T12249] RBP: ffffc900031070c0 R08: ffff88802dd23c00 R09: 0000000000000002 [ 1077.666852][T12249] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1077.674862][T12249] R13: 0000000000000000 R14: 0000000000000120 R15: 0000000000000120 [ 1077.682849][T12249] ? udf_truncate_extents+0xd46/0xeb0 [ 1077.688240][T12249] ? udf_discard_prealloc+0x570/0x570 [ 1077.693613][T12249] ? udf_write_failed+0x178/0x1b0 [ 1077.698641][T12249] ? __lock_acquire+0x7c80/0x7c80 [ 1077.703684][T12249] ? __rwlock_init+0x80/0x150 [ 1077.708358][T12249] ? down_write+0x162/0x1f0 [ 1077.712872][T12249] ? do_raw_spin_unlock+0x121/0x230 [ 1077.718082][T12249] udf_write_failed+0x180/0x1b0 [ 1077.722940][T12249] udf_write_begin+0x21f/0x430 [ 1077.727739][T12249] generic_perform_write+0x2fb/0x5b0 [ 1077.733036][T12249] ? generic_file_direct_write+0x3e0/0x3e0 [ 1077.738853][T12249] ? __generic_file_write_iter+0xf7/0x230 [ 1077.744570][T12249] ? udf_file_write_iter+0x2b1/0x620 [ 1077.749859][T12249] udf_file_write_iter+0x2c0/0x620 [ 1077.754977][T12249] __kernel_write_iter+0x274/0x670 [ 1077.760093][T12249] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1077.765746][T12249] ? vfs_read+0x920/0x920 [ 1077.770083][T12249] ? __asan_memset+0x22/0x40 [ 1077.774681][T12249] ? iov_iter_kvec+0xd4/0x1b0 [ 1077.779369][T12249] __kernel_write+0xf0/0x140 [ 1077.783969][T12249] ? __kernel_write_iter+0x670/0x670 [ 1077.789268][T12249] __dump_emit+0x206/0x310 [ 1077.793687][T12249] ? __dump_skip+0x240/0x240 [ 1077.798296][T12249] ? dump_emit+0xa6/0xe0 [ 1077.802535][T12249] ? elf_core_dump+0x2b1c/0x36e0 [ 1077.807480][T12249] elf_core_dump+0x2b53/0x36e0 [ 1077.812264][T12249] ? load_elf_binary+0x2700/0x2700 [ 1077.817396][T12249] ? verify_lock_unused+0x140/0x140 [ 1077.822605][T12249] ? lockdep_hardirqs_on+0x98/0x150 [ 1077.827839][T12249] ? rcu_read_lock_any_held+0xb4/0x120 [ 1077.833322][T12249] do_coredump+0x1755/0x2480 [ 1077.837932][T12249] ? nfs_ssc_unregister+0x30/0x30 [ 1077.842984][T12249] ? lock_chain_count+0x20/0x20 [ 1077.847841][T12249] ? _raw_spin_unlock_irq+0x23/0x50 [ 1077.853080][T12249] ? lockdep_hardirqs_on+0x98/0x150 [ 1077.858285][T12249] get_signal+0x1133/0x1400 [ 1077.862828][T12249] arch_do_signal_or_restart+0x9c/0x7b0 [ 1077.868396][T12249] ? get_sigframe_size+0x20/0x20 [ 1077.873355][T12249] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1077.879366][T12249] ? exit_to_user_mode_loop+0x3b/0x110 [ 1077.884828][T12249] exit_to_user_mode_loop+0x70/0x110 [ 1077.890115][T12249] exit_to_user_mode_prepare+0xf6/0x180 [ 1077.895664][T12249] irqentry_exit_to_user_mode+0x9/0x40 [ 1077.901121][T12249] exc_page_fault+0x8f/0x110 [ 1077.905718][T12249] asm_exc_page_fault+0x26/0x30 [ 1077.910571][T12249] RIP: 0033:0x7f0d5b78f751 [ 1077.914989][T12249] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1077.934597][T12249] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1077.940668][T12249] RAX: 0000000000000000 RBX: 00007f0d5b9e6090 RCX: 00007f0d5b78f749 [ 1077.948636][T12249] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1077.956603][T12249] RBP: 00007f0d5b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1077.964575][T12249] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1077.972545][T12249] R13: 00007f0d5b9e6128 R14: 00007f0d5b9e6090 R15: 00007ffcd4b5ed88 [ 1077.980532][T12249] [ 1077.984135][T12249] Kernel Offset: disabled [ 1077.988610][T12249] Rebooting in 86400 seconds..