last executing test programs: 2m56.455257226s ago: executing program 2 (id=245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000040)=0x25) 2m56.195841342s ago: executing program 2 (id=247): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0xf040}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000001e80)=[{{&(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001d40)=[{0x0}], 0x1}}], 0x1, 0x2000c044) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) setuid(0xee01) prctl$PR_CAPBSET_DROP(0x18, 0x4000001b) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) splice(r0, 0x0, r3, 0x0, 0x714f, 0x0) 2m55.128817768s ago: executing program 2 (id=255): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000240)={0x0, 0x0, 0xa, 0xa, 0x7ffc, &(0x7f0000000940)="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"}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'N\xb0\xdd\'\x0e\xdf\x14\t>\x9b\xccH\x00\xbf!\xd9\xc8\x96;r\xcc?//\xa5\xa6c\xc3\x05\xd1\x17\xea\x8b\x9b\xedNs\xb0\xe7\x13N\xc9g\x9f'}]}, 0x38) close(r6) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 2m53.82802112s ago: executing program 2 (id=258): syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x4810, &(0x7f00000001c0)=ANY=[], 0x14, 0x693, &(0x7f0000000880)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000240)='./file1\x00', 0x14, &(0x7f0000000280)={[{@norecovery}]}, 0xee, 0x474, &(0x7f0000001440)="$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") open(&(0x7f0000003000)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000003040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000030c0)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000003100)={0x0, 0x0, 0x0, 0xacdd, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x4]}) 2m52.155866831s ago: executing program 2 (id=264): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='auto', 0x4) 2m50.847133553s ago: executing program 2 (id=268): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r1, &(0x7f0000001640)="8b", 0x11) 2m50.193554359s ago: executing program 32 (id=268): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r1, &(0x7f0000001640)="8b", 0x11) 47.76403947s ago: executing program 3 (id=1115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) 47.435281848s ago: executing program 3 (id=1118): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r3, 0x0, 0x0) rename(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x64042, 0x49) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x88002, 0x0) read$FUSE(r4, &(0x7f0000000d80)={0x2020}, 0x2020) 44.47203288s ago: executing program 3 (id=1133): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x161c00, 0x0) r0 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xa) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) mount(0x0, 0x0, 0x0, 0x186093, &(0x7f00000004c0)='\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000012fc0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000013000), &(0x7f0000013040)='./file0\x00', 0x0, &(0x7f0000013080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000013140)="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", 0x2000, &(0x7f0000015140)={&(0x7f0000015200)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000175c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008000}, 0x8010) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000200)={0x3ff, 0x0, 0x9, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 42.083141319s ago: executing program 3 (id=1145): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x804818, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRES8, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c9f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000000680)="$eJzs3V1v00oawPHHpV2irNRdLSuEqgJD2ZWKVIKTQFDEldeZpIbEjmwHtVeooimqSGFFWWnbG7Y37K50zofgXJ4Pcb4ROh+BI4+dvuYF6Oup/r+ojGOPPY/TaB6miccCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSk6fmdJTWcWwuD1t7TbO8jK+TegWJEuyJW8iO5nNxIV934697m68k/czKbPpuVXFLkZPuP1//85NrkRH//EQF/k5++80ibW9uvV3q97ruTCuQCunl1+LaG9r0o8FpOQysvClS1UrEfLNYjVfeaOlqOYt1SbqidOAjVvHtPFavVstKF5aDjN2pOU/dXPr5fsu2KelpoayeMAv/B00LkLnrNpuc3TJ1kc1LncfJGfObFKtZOS6m19V63PO4EkkrFr6lUGlepZJdKxWKpVKw8qj56bNuTR1bYh8iRGif3psXv0wn23sDxTGT5X5riiS8dWRI18OFKTUIJpDVke6af///+QI9sd3/+72f5G3ubZ8Tk/1vps1vD8v+QWM7usSlbsi2vZUV60pOuvDv3iM720RAtvngSSSCetMQxa1S2RklVKlIRW17IotSnkl9iXTxpipZIliWSWLR5R7kSihZHYgkkFCXz4so9UVKUqlSlLEq0FGRZAumILw2piWOOsibr5nUvi7KGxbhbqTj0NPL9911XSiPOlvyP4zvJ7hs4li/9/A8AAAAAAC4ty/z1fcr83DTP615T2+cdFgAAAAAAOEHmk//ZpDDfzropFuN/AAAAAAAuG8tcY2eJSF5up0trYpnLpfgjAAAAAAAAl4T5/P9WUpg5UG6LtTtdCuN/AAAAAAAuif+NnWM/al+1fvlVwnDK2mkv/c3aMHPzOhtX0v2uHD5iXJ+xprODmKKSFpOTrp61cmml3UkwP2fF2rg4rL0AnN0A/vMtAVyblB/kTlrnzmparmZb/pS2kq97TV1wg+aTojjO9ESsl+J/vVn/t5jT/7/fmrZyst7rFl6+7a2aWHaSo+xsZBMoHplHcUQs7818C+aai4FnPGUuxMjazVuytt7r2u2lq9mRnY2JdGHiYIsfpke0+VHm0lpz2Yy3+f6WtM1c0maxMOzssyiKxzzzj3I3rXN3/m5aDIiiNC6K0v4oBr8Wx4+iPC6K8jGjAIDzsjYmC1lyJO9+Ry93KLsn3d5XZHf5xuz+UebTOvMzpmOdnBnQo9vjenT7mNnt5yP3QBqWY5N2fzyUVT8lO3wa2m7ULFnJS3jl/cY/5frm1vb99Y2VV91X3TelUrliP7TtRyWZMqeRFeQeAMAA+++xYw3M/6PuwvPlS5K7H2aj6p3Do+os4/1l9ysFBXkpb6Unq7JgrjYw3zgY+P+O/L6vISyMGbXmTZpM7/CyMGJU9wdzlUP/uKWRdQ/GUD6LXwUAAGdmbkweHp3/07H7wphx98FcPnp0nN93tzYAAHA6dPjZysf/tcLQa78oVqtFJ17UKgzcZyr0ag2tPD/Wobvo+A2t2mEQB27QTBaeezUdqajTbgdhrOpBqNpB5C2Z6QNVduv3SLccP/bcqN3UTqSVG/ix48aq5kWuanf+0fSiRR2anaO2dr265zqxF/gqCjqhqwtKRVrvq+jVtB97dS9Z9FU79FpOmFPPg2anpVVNR27oteMgPWC/Lc+vB2HLHLZw3i82AAAXxObW9uuVXq/77hQXBjacO/NTBQAAmTFZGgAAAAAAAAAAAAAAAAAAAAAAXABncf0fC5d8oT8V9EWJh4UTWBjbdXw49c4JwKn6LQAA//8FIlBo") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x4008031, 0xffffffffffffffff, 0x1000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x115) getdents64(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x200002e6) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0xb1098, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x3c5093, 0x0) 40.591172986s ago: executing program 3 (id=1155): bind$unix(0xffffffffffffffff, &(0x7f0000002500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000002580)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002600), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r0, &(0x7f0000002640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f00000026c0)=[{r0, 0x4000}, {r0, 0x200}], 0x2, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002700)=[{&(0x7f0000002740)=""/150, 0x96}], 0x1) 40.42801443s ago: executing program 3 (id=1158): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x8, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000010000000800000002"], 0x50) pselect6(0x40, &(0x7f0000000000)={0x2, 0xfffffffffffffffe, 0x2, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x8000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_clone(0x10008400, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r4, 0x20, &(0x7f0000000ac0)={0x2, 0xc4, 0xff7ffffe}) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r0, 0x1) 39.59984129s ago: executing program 33 (id=1158): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x8, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000010000000800000002"], 0x50) pselect6(0x40, &(0x7f0000000000)={0x2, 0xfffffffffffffffe, 0x2, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x8000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_clone(0x10008400, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r4, 0x20, &(0x7f0000000ac0)={0x2, 0xc4, 0xff7ffffe}) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r0, 0x1) 6.510917221s ago: executing program 6 (id=1328): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000002500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000002580)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002600), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, 0x0, 0x0) ppoll(&(0x7f00000026c0)=[{r1, 0x4000}, {r1, 0x200}], 0x2, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000002700)=[{&(0x7f0000002740)=""/150, 0x96}], 0x1) 5.773045879s ago: executing program 6 (id=1330): r0 = syz_open_dev$loop(&(0x7f0000000800), 0x8, 0x48541) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) 5.439916027s ago: executing program 6 (id=1334): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r3, 0x0, 0x0) rename(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x64042, 0x49) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x88002, 0x0) read$FUSE(r4, &(0x7f0000000d80)={0x2020}, 0x2020) 5.420460088s ago: executing program 4 (id=1335): r0 = fsopen(&(0x7f00000002c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) 5.404377137s ago: executing program 5 (id=1336): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x10, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000680)="$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") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000900)) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0080, 0x9) getdents64(r0, &(0x7f00000009c0)=""/48, 0x30) 4.995387288s ago: executing program 0 (id=1338): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000540)="$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") gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000009c0)={'syz', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000a80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b00)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000bc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000140)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c80)={'wlan1\x00'}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60040880}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1a, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xf}, 0x48) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x3808c4e, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0xf5, 0x331, &(0x7f0000000f80)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[@ANYBLOB="1c020000", @ANYRES16], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000087001500ffffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.91613745s ago: executing program 5 (id=1339): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x141080, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pwrite64(r2, &(0x7f0000000400)="1b465ef5cdd960358cf976925991f96c1d20925c9faf3ed9f181890cd92b95237b83a1a8c349", 0x26, 0x1486) fchownat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000940)=0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000980)={0x2, 0x7, 0x4, 0x2000000, 0xb, "4b94b89fc43c3328eae4cae1f5eba329e6f216"}) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x1) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000a00)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4040845}, 0x80) syz_usb_connect$uac3(0x2, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl(0xffffffffffffffff, 0xc138fd09, 0x0) write(r6, &(0x7f0000000bc0)='0', 0x1) 4.743929724s ago: executing program 4 (id=1340): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000002500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000002580)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002600), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, 0x0, 0x0) ppoll(&(0x7f00000026c0)=[{r1, 0x4000}, {r1, 0x200}], 0x2, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000002700)=[{&(0x7f0000002740)=""/150, 0x96}], 0x1) 4.293428215s ago: executing program 4 (id=1342): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000bc0)={0x1, &(0x7f0000000c00)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mount$bpf(0x0, 0x0, 0x0, 0x345eca2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) pwrite64(r0, 0x0, 0x0, 0x4001e) 4.049708901s ago: executing program 0 (id=1343): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0xa500, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) dup2(r2, r1) 3.28816723s ago: executing program 6 (id=1344): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2800000, &(0x7f0000000080), 0x0, 0xbcd, &(0x7f00000000c0)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000d40)={0xe, 0x5, 0x7fffffff, 0x4, 0x7}) 3.217507021s ago: executing program 4 (id=1346): r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x300884c, &(0x7f0000000240)={[{@debug}]}, 0x3, 0x515, &(0x7f0000000b40)="$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") syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2008000, &(0x7f0000000b00)=ANY=[@ANYRES8=r0], 0x2, 0x5f8, &(0x7f0000002140)="$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") lsetxattr$security_capability(&(0x7f0000001d80)='./file1\x00', &(0x7f0000001dc0), &(0x7f0000001e00)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000001e40)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000001e80)='2', 0xfdef, 0xc00) 3.217337701s ago: executing program 0 (id=1347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400000}, 0x30) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) 3.146037393s ago: executing program 5 (id=1348): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000740)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000900)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000940)={0x28, 0x0, 0x2710, @local}, 0x10) accept4(r4, 0x0, 0x0, 0x80000) close_range(r2, 0xffffffffffffffff, 0x0) 3.134780823s ago: executing program 1 (id=1349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000240), &(0x7f0000000280)=""/122}, 0x20) 2.903411379s ago: executing program 1 (id=1350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) syz_usb_connect$uac2(0x0, 0x95, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x9, 0xc0, 0x40, {0x8, 0xb, 0x0, 0x2, 0x1, 0xc, 0x20, 0x60}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x3, 0x9, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x8, 0x8, 0x3, 0x1002, 0x8, 0x80000000, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9528, 0xffbb, 0x78, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x438, 0x6, 0xff, 0x1, {0x8, 0x25, 0x1, 0x0, 0x30, 0x8, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xa, 0x33, 0x5, {0x8, 0x25, 0x1, 0x2, 0x3, 0x9, 0xfc00}}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 2.829949481s ago: executing program 4 (id=1351): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 2.794012532s ago: executing program 6 (id=1352): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000002500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000002580)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002600), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000002640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000002700)=[{&(0x7f0000002740)=""/150, 0x96}], 0x1) 1.982051312s ago: executing program 4 (id=1353): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x4}]}]}, {0x0, [0x2e, 0x30, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000700)=""/4089, 0x3f, 0xff9, 0x1}, 0x28) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x1c1040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c1002, 0x40) write(r3, &(0x7f00000001c0)='t', 0x1) sendfile(r3, r2, 0x0, 0x7fffffff) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x1000000201005) creat(0x0, 0x40) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) 1.970496722s ago: executing program 5 (id=1354): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000540)="$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") gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f00000009c0)={'syz', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000a80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b00)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000bc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000140)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c80)={'wlan1\x00'}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60040880}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1a, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xf}, 0x48) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x3808c4e, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0xf5, 0x331, &(0x7f0000000f80)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[@ANYBLOB="1c020000", @ANYRES16], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000087001500ffffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.920166873s ago: executing program 1 (id=1355): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r3, 0x0, 0x0) rename(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x64042, 0x49) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x88002, 0x0) read$FUSE(r4, &(0x7f0000000d80)={0x2020}, 0x2020) 1.827948655s ago: executing program 0 (id=1356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, r3, 0x0, 0x0, 'syz1\x00', 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) ptrace$peek(0xffffffffffffffff, r0, &(0x7f00000000c0)) clock_gettime(0x4, &(0x7f0000000040)) ioprio_set$pid(0x3, 0x0, 0x4004) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='mountinfo\x00') ioctl$XFS_IOC_FSGEOMETRY_V4(r4, 0x8070587c, &(0x7f00000002c0)) 989.148086ms ago: executing program 5 (id=1357): syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x804818, &(0x7f0000000000)={[{@overriderock}, {@check_strict}, {@showassoc}, {@check_strict}, {@hide}, {}, {@overriderock}, {@map_acorn}, {@cruft}]}, 0x2, 0x571, &(0x7f0000000400)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000980)=ANY=[@ANYBLOB="20000000020000001f"], 0x8600) 849.572839ms ago: executing program 6 (id=1358): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x141080, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pwrite64(r2, &(0x7f0000000400)="1b465ef5cdd960358cf976925991f96c1d20925c9faf3ed9f181890cd92b95237b83a1a8c349", 0x26, 0x1486) fchownat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000940)=0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000980)={0x2, 0x7, 0x4, 0x2000000, 0xb, "4b94b89fc43c3328eae4cae1f5eba329e6f216"}) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x1) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000a00)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4040845}, 0x80) syz_usb_connect$uac3(0x2, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl(0xffffffffffffffff, 0xc138fd09, 0x0) write(r6, &(0x7f0000000bc0)='0', 0x1) 563.992676ms ago: executing program 0 (id=1359): read$FUSE(0xffffffffffffffff, 0x0, 0x0) truncate(0x0, 0x1) umount2(0x0, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000004c0)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000009c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000003fc0)={0x2020}, 0x2020) 545.248097ms ago: executing program 0 (id=1360): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000080)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) write$P9_RATTACH(r1, &(0x7f0000000200)={0x14, 0x69, 0x0, {0x80}}, 0x14) write$P9_RGETATTR(r1, &(0x7f00000002c0)={0x25, 0x19, 0x0, {0x1ccf, {0x80, 0x0, 0x2}, 0x41ed, 0x0, 0x0, 0x8000, 0x4, 0x200, 0x0, 0x5, 0x0, 0x20100000000000, 0xfffffffffffefffe, 0x100000000000404, 0x6, 0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}}, 0xa0) 408.87443ms ago: executing program 5 (id=1361): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000004c0), 0x1000, r0}, 0x38) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0502103, 0xfffffffffffffffe) 269.427674ms ago: executing program 1 (id=1362): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x4000) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x2, 0x3ff, 0x8, 0x3}) 107.753357ms ago: executing program 1 (id=1363): syz_open_dev$usbmon(&(0x7f0000010540), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='fd/3\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f00000005c0)='.\x00', &(0x7f0000000600), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 0s ago: executing program 1 (id=1364): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file7\x00', 0x21081e, &(0x7f0000000100)={[{@noinit_itable}, {@errors_remount}, {@noauto_da_alloc}]}, 0x1, 0x51f, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x0, 0x42) r1 = creat(&(0x7f0000001980)='./file1\x00', 0xa4) r2 = openat(0xffffffffffffff9c, &(0x7f00000019c0)='./file1\x00', 0x8902, 0x9c) pwritev2(r2, &(0x7f0000001a00)=[{&(0x7f0000001a40)="ff", 0x1}], 0x1, 0x3fffc, 0xfffff804, 0x0) write$UHID_INPUT(r1, &(0x7f0000001a80)={0x8, {"7fda3706741c0c3de58bf77e2cb663038ea93754da43ffb9e302a7cd120bbadfbc1acfde238b08109e8da2fb2b03e4bf68b31bca2f7140a5ac11d69e32d1633f8253d29e2996e0a2318a65b842c35dafd89d0092b5b80039ebfc6e28b25cc1737e4337566e10a0b867a96b33c6f7d6499fc7a9171d59201982310cdedc70e1cf82512268ed4f03fc6b8034e3499c0fcbcb896a4227e8164620b323b145baaa45c3c119b68fb87881257b5238c76c24b25f580a09c76d0ce9a6556a0e1c1d4a410ed2057f8bce7811156a67bc0695cfafd3a12bce1d06820a9b9725a163d69ef9e6f515e46cfeec35994811f5ec0689b0e62c573caac39696915de880e4653f20fd83b226b11942a578909e121219c41e41f5a7bb5144b2af6841a105a79ad4560f4155bcf427c391cf5e1a14039506bcc7117da942161d391b73c05b9c7b2758ca72654d5891aa7d863bcc8f456ed9c5d2a3e5be25196d074bbd73b75161cb2cee765256f28573c27dab7bed271d9b3a5f58ed82f25205e35d956ab10c83d449985003148312fb72e5a4bb1e52a2e6c9977cbc6334023110946d97b108183668d87c4bcb01355206606e4f7275e06221da58165471a06af43a487cf81850567a1337dfe830552712e43f746106a074095dcd0864e16dd3226609217189551cbf1fa7c18016cd528056e13b63575cad98941bb04afd51223dee0048fc36b375a6fc3e5cdd37a56109b6de60fff9a316fd242f3ab5e4c64119d9b8543dce9db6cea65590b21fe340c3267719e0723f1239afe0ed2a5992b1acd739c0fbbec7eeb2fb3de1c051cd529ca8d85cebb0de8a3a84221ec5a10574590e485168b40783589f09aa5ada32565393433c9f6db4645ad625cb2d9af13f57c424798df8e1fc57552f36100efb62a370ff9095b4f0423dfdb41b3286c3b7a783bb43edefb5e1691d691ae6f915a4629bfa25da7466c80f05d80e0083026f3d02cf9701cf3753e06511af84641159d19ea67c43f0ef99f641bc4ffd42516eaa44f11e51d1e770f75b7f36f5b3e56a3ea29aed6a0e9921e8498aeae8692d1473337a92801e01a17159aed13f0375d248b8403810695a66d4fe0747234b448e075f20ec7c1d44e425d029afc5835cd7568441755ad29e4c8970d124adb9a2eddb5a4b197db61039f82fc5c5592846c84af4e92eac014777d4de53798c83e864e3f990584051f0ff87be3749cfdfe4abede9ad5b64817925c54e47c5fb9e8de2be943549e339410b739c2be2bf555e820eb5df397c22fe9ec468d2d979272c347e17315b2d11db490daf620173c430403ee2504b885bc97ab30d032840ff661cf0200eb1763b4093b686582f0086f7c4ece97ebcbe1f6a71b3395294a2d769f5b667085789c7c538314644d1d20f3dc4544eff0f70f3b7b1087417e36bf8e5f6ffab3a4cf6824402f9649555ec1ebb3375e182ec086181237cca700243e06d6a0d9135395160bfd4790bdef0787973567346d481f21d924e41f3d88e9133577e3e60a5b2feb0ee5e6c3131513a7b0c2344bd96af71d964a9ce14df0fc2aa4b83b64a3ce5646076ed74133a31b132e4f21bc25a8f51e368ee23b7f8ec2d9521fe85a63dea29013748cc1bdefae5dedf510836ae15bb234c7aba5489563b51060a5a4776dbf84411b19a014a922b4779c8dd56741d0c0c9b16cd2fcd28a379398a4f8634b8ff8fdf211abdb75d037255b9b0345cad1e2b9f9a6adc5186c9f2c54f8911620bb59f1cc1c7e36f63a29d3a0d66b6f79e0b79090235e661775795c7e5480f91edff25d421cf718ffddc809d4791f9d114c05d4a5408d17396d9ee8ef836447984bc3fb462888e79f467553a3f09b30e782a41fab516355adb32cae71d9b64652552da8d8aa9c12ace42769e9621d84e10c198d1d7a7f61c1aba68907f56be4f17ce737bd5037ce51f13387d933cf7834d4ebfc64bec7c5b5e7cf5c0eb513baed6ac96c88dbe4d66be6f8a6d7882c61b98bcc84dc1b89d3f8cb387ccbbab54502bcccc5d45aa7f1ae37f821a51fe437522dc3fbbe68fed7bd61613ac5dc26daeb56efc0b23d404799d0788252673fce1983a79b5a5706182b3fc9154144ee57d40e75f36133729be10dc2775d304694bdf2eb33ee02a9abce98bced1b824971225b0e7c217b297e7d53c88d605c8985a1a49c8a0882ed39acffc439c8d679faa484f00f001da6000741cd1b37be1b40137a426b1679bdb221bccd04af1a6110a973fef792cfb5a072ceb708e3b6b9a74d5190a8c95fec0a495c6276c9d425b254493059aca3c3d4c0838769b0561d9ab58784f96f7a0737e280081a38a247131d5ad0e943f56ca6cd4d7f04b343225bda0f33ee40a8196dcf7f2c709abd927791948ab26baf3eaef7a07c0aa10784203c10530762b598a8fdc8eca05d09b3b29da83532d30f9ca1e2c08fa05c71f1cfd0098d7eb2fdaccf0a7332986aaccb1e70b9972c281c04e5b6891dce25c4afdfa386433daf068c0ecf962e231cf1a7a4443234065d8e2742de8310496ae0e98b41e324cfd904780bf8a4f7512258cfc515aa929eaba46e6319d4152fd4dc2c44dc973ef9b5add2be7c966e2203d8c44c0b6d7c0e8784a0a3fc4b806deb0a79eb0161149f2af125dd25ec2b356d64bfd8873fbee2c5b078dbe8115636efd961370e5a1de59a39cafd326f6c66ed24ada5e67972cb11f851968e57e3bc1ac3e32ea5b16a8c4aa75b1a69f9ebf0ee799974b107b81c88ecbab651e6e905d2a8427383ab21a82ceb00f04aae2973f01cfc859d13480067aa83faaa3140c5e42c81f88789a499e1aac55299b21c9e55703cef2aa976165a97d418b6031a0a10871e749a4d4e7347a1fffdb0ff05e978eb19b29c605c178857082a46b7c7c333013909d2182df26f4c55d4b43fbdd62591cbd4d221b3e6fd195c01dc712749c86226d948cd45fce5a1cc8992d2e96664c323f043429a903d2f09b3cc3f0dbb525a6d723ee6a15a0121207f4ca928abe0347bac460fdd460a447f9320ee798b81e6fa617d13c9c765b2ea15cbac4b2f1d69d415bbfe692df34049c23eff7aa4250864b11028e48944cfaa73534b6c82c68bd48ca2a4a90d4c0057cde910f2cfb79820d6d641b0716c74e70402b45da2d9f86a96bcb404de5be0bfd173c207d9ca1db7b20d121cb78a6ed2667ab24b79783b3f9f436862e89f5e41829008c6dfe187dc06ee6e87b6be64059397d283a4b7a30eb01924ffaa127640e79e2cf9b6f0fd0b45c2ef77becd20fff5e3236824dcf6c3d6b2175b00f20bfe48a543d01a5827519bde600016d4a9e866751f0981f683809792efe96e18ea978312b0910f2b1492c786967049a6b93dc959ea622abd0a0eb1a472ecfee838740ef25cf2939cc9bfbd9f6acfa64a72407848183fabd451ac001c1fb2656bc41603f9e0cc2ffb39aea0bcfaf82ecbc5feb668ad118e7ce944602e9c277c0df573a6ced3b9578d4066e5edb733c3fe71dd7dba045660347770a81695247621e540cf1558fb4d8c4b3f68e0da99af0816ede240e038e4fe77b39e3b7fed3eafec0560ce6e6e564d5b69e550adf4bd8ffa68bb7c7c09a5597afc8d1e967b1093692a578a70e8564cfa26826b4add2c9523669b85b7a0f9c3ed8298691affef59411b9a3733f94c416eef5b5056a14cabb75e880ac1e2359a85068c354485fb0eb8b2ae799f192a1915082ad4d153311008e84872189a19fa34c73f37e2ae0890aed3748111bda52bf613e0c9d2755c4b4e0d283eb023283568ae91ef4341cccfa6842cf97f52080e0b3af4cd520c9817385da8d6d34730e31f39f1f3479b254dd589baf5766873e8da6b8356dff6389d3e74b04ff78f998bf8ecbce5bafd4e187e14fe5c238fd8472ed8edcbe05c9a291bfb1c7b607808a76060fb6759f89cef41e92ce1cb845dfd6328d3c71ff921fe5a6f58bc3ae124d221d80c89f9ab40bdd7c841dc7f3bb14d7a51d2decf17e7858a7d2d1be813c25eb790e3467019291d44f4ea5d8d917b078b9f8faa75d27a5e3bb7965c72bd618780fe32c3c34f409afd49ee90c1a1c3bd668bf4facd0b346f145c4a70fd33d0dd17c5214fd48b65a760f076757bcf8b16f58a9a1ebf916b2980a4c6a7e9368a9bffccd5f814e367583986a27c1eda7b4f97047d018fba2666a80cf93bf301589b8e92cdd4b6b02582aebb605977e2725585e6b098638131de8baee3a55791258de78c100643dede61013d771d429b2c634bb67c17b56147c058e65d169bcf6439f33ee4fd7e45c86e3f2fe4fd4780634256011df65f78c462ee0841ca0349f14741d3576ffe8c072772012e3c65826e754907c5c3cdcda9b29b55725622df7028be126868034549ccd65982860725a00d9e1071bde01f214ffb3745ca96729fe2cb29cb0f87a48266539c85f4bad8fabce1664ed0b870df4b03b8c66a9a66fb3eb9f3aa9b65edaead897bd6bb695380daf3aa306c2cf110890dfc863e26758378999de3b51e9efabc452adc0a913587f98b4b1d2ca9619f2ea6c181745e546500561339c1878ab8df19467688552d1a6d93b977af27e7d03e6af72d78f391dcb72cb51e93367c11e0b2002ff552fccd1b91d855f27b902a1c7e397c27406ac08501ed95cf697220fe4475dfdc7893dd6f64e7fc470a165cf0bbe7f6c8347863827c57f4558184c699ec98fdb8327722dbb2c52a27562729459c324115cbff1e675205fd80c11be617c789b1a5e60b269f019bde48b49d6e65c7f2c4e2fe1fdd007e8987dbb67cfe63291819015ef46ff31b9ee0eb08b9a2dcc5bc58c0d5efbb1c94fdf0488bf93ea703558545a65ba465908cc269a35d73391aa687bedf2ba2386bd6e0a085461e658df84a03cf917d1f082948698798ed2673db775ec7f2bd08e7be0ed07bf9fc9c78955253161211db9c4b0e06dccbe9dd3b63c763cc25fa3232c4f95c2a9d8f312ee16ca9387ea8d231b6c3ce34a1a5a29588a8193bed98bcd867c07ae5e2f853a320a58b01bbaa57998eef25798fd8d8fb4da1d2edc12f6c0222ccb3072f990bac2c417ebab6dde9693ce067e6c3535238d03e455958051a57d2cb6e0634983a83034f83a0e8625a2dde2da2e208dc3efe24a05d754a3519cdf6995c9e7cfbad85bce00c63615233119c7fd7547adfec7b7ae21c5b404ba1c6630edf770fd114dde3e8be43445504145ab1be1625abca0c85aba8251684527808f4c5aeed1a59829d2c9ee48f394058ed94c0cfab25b99cc3b2e0866f843838d328c01e09ff40c309c03237b2bfae7f369eb7514b34f0453efffcba0150cbcf36d673f47b696349122f20c75d00fdec7331264d3b269d2da52f831ecbe74260256be26d2f6deadd7193494ec3d713f7f59469dc7501af253494f3df66cbf07ad34076a0326ef21f71d5f6f0083ec31589c1f49ad75e03f2d9a53500876dfa9e87d026e3f8a4155268d59142166396e2bdc5470e204116740f3a8ffe717d6437c3ad8725130720b4ddf118f152b99a01ca3d9362fb6db7958c752484d6e3de9b15f2015c1b14cc75693324938e1bfe76f09a550690556d572f09a4bd51bbb70a11db82d9fc4d7353be3b81a34bb585fe5651a9631d42d24c57802aaeb19fa7c9d0b94b4dce19bf21b5d511e4f6629fc729ce2189c0e6b4fd2bcaa611e2df449c6f8f1ab08ff23855ca7496486e66e158819089c167a47409d0d10e4c79857cc4cd13b67c6b90a48577b8ff249beaff6ba89ef37b5a55d1b654c05b4c0bdcbec206c60053d9118a347", 0x1000}}, 0xfffffd96) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000006c0)={@id={0x2, 0x0, @d}}) listen(0xffffffffffffffff, 0x5) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./mnt\x00', 0x1ff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000002ac0)=""/87, 0x57, 0x40010000, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000001140), 0x4) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext3\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000000840)="$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") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0}) kernel console output (not intermixed with test programs): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.778757][ T4682] kworker/u4:12: attempt to access beyond end of device [ 124.778757][ T4682] loop2: rw=2049, sector=204, nr_sectors = 2 limit=8 [ 124.805790][ T5194] hfsplus: request for non-existent node 16777217 in B*Tree [ 124.807204][ T4682] kworker/u4:12: attempt to access beyond end of device [ 124.807204][ T4682] loop2: rw=2049, sector=206, nr_sectors = 2 limit=8 [ 124.851013][ T5194] hfsplus: request for non-existent node 16777217 in B*Tree [ 124.956837][ T5196] loop3: detected capacity change from 0 to 8 [ 124.999664][ T5196] squashfs: Unknown parameter '' [ 125.118394][ T4358] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.420892][ T4326] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.640948][ T4326] usb 4-1: Using ep0 maxpacket: 16 [ 125.664990][ T4326] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.705995][ T4326] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.750869][ T4326] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 125.815001][ T4326] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.842096][ T4326] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 125.880933][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.899080][ T4326] usb 4-1: config 0 descriptor?? [ 126.363181][ T4326] hid (null): unknown global tag 0xc [ 126.368547][ T4326] hid (null): unknown global tag 0xc [ 126.414164][ T4326] hid (null): unknown global tag 0xe [ 126.492174][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.501290][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.509209][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.517448][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.531657][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 126.538869][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.567129][ T5196] loop3: detected capacity change from 0 to 256 [ 126.622679][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 126.725077][ T4326] usb 4-1: USB disconnect, device number 2 [ 128.601416][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 128.861247][ T5252] loop0: detected capacity change from 0 to 128 [ 128.918895][ T5254] loop3: detected capacity change from 0 to 256 [ 128.939842][ T5216] chnl_net:caif_netlink_parms(): no params data found [ 128.966109][ T5252] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 129.059698][ T5254] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 129.101339][ T5252] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.164344][ T27] audit: type=1800 audit(1791723836.957:17): pid=5254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.281" name="file1" dev="loop3" ino=1048658 res=0 errno=0 [ 129.427772][ T11] device hsr_slave_0 left promiscuous mode [ 129.461182][ T11] device hsr_slave_1 left promiscuous mode [ 129.501424][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.508932][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.549142][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.570999][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.589755][ T11] device bridge_slave_1 left promiscuous mode [ 129.602721][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.624553][ T11] device bridge_slave_0 left promiscuous mode [ 129.630775][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.752608][ T11] device veth1_macvtap left promiscuous mode [ 129.759130][ T11] device veth0_macvtap left promiscuous mode [ 129.793348][ T11] device veth1_vlan left promiscuous mode [ 129.800081][ T11] device veth0_vlan left promiscuous mode [ 130.711079][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 131.329026][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 131.711406][ T5311] loop0: detected capacity change from 0 to 512 [ 131.720750][ T5311] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 131.772976][ T11] team0 (unregistering): Port device team_slave_1 removed [ 131.796252][ T5311] EXT4-fs (loop0): 1 truncate cleaned up [ 131.809491][ T5311] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 131.857545][ T11] team0 (unregistering): Port device team_slave_0 removed [ 131.955501][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.010434][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.668586][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.675069][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.685308][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 132.761192][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 132.933383][ T11] bond0 (unregistering): Released all slaves [ 133.054004][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.070951][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.079342][ T5216] device bridge_slave_0 entered promiscuous mode [ 133.114364][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.182322][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.190442][ T5216] device bridge_slave_1 entered promiscuous mode [ 133.322647][ T5216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.409315][ T5216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.528790][ T5216] team0: Port device team_slave_0 added [ 133.562969][ T5216] team0: Port device team_slave_1 added [ 133.628571][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.647208][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.714264][ T5361] loop0: detected capacity change from 0 to 128 [ 133.724313][ T5216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.754738][ T5361] FAT-fs (loop0): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 133.792040][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.809494][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.885308][ T5216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.014783][ T5216] device hsr_slave_0 entered promiscuous mode [ 134.031892][ T5216] device hsr_slave_1 entered promiscuous mode [ 134.071136][ T5216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.103759][ T5216] Cannot create hsr debugfs directory [ 134.476307][ T5216] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 134.494795][ T5216] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 134.510260][ T5216] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 134.535568][ T5216] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 134.745540][ T5216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.776712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.800195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.834144][ T5216] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.841207][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 134.861723][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.890755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.909331][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.916506][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.967739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.982222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.011053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.019635][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.026808][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.044520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.079952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.103176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.105296][ T5417] loop3: detected capacity change from 0 to 512 [ 135.131295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.160399][ T5417] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 135.197572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.206713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.209431][ T5417] EXT4-fs (loop3): 1 truncate cleaned up [ 135.231239][ T5417] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 135.234138][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.310573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.344504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.389113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.428522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.439261][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.461043][ T954] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.552590][ T27] audit: type=1800 audit(1791723843.317:18): pid=5428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.334" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 135.691941][ T954] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.767789][ T954] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 135.957912][ T954] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 136.008177][ T954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.100340][ T954] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 136.146898][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 136.281990][ T5421] support for the xor transformation has been removed. [ 136.305059][ T5421] Bluetooth: MGMT ver 1.22 [ 136.366219][ T5421] loop4: detected capacity change from 0 to 1024 [ 136.442699][ T5421] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 136.523981][ T954] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 136.574618][ T954] usb 5-1: USB disconnect, device number 5 [ 136.665055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.679162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.715611][ T5216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.744861][ T5454] syz.3.340 uses obsolete (PF_INET,SOCK_PACKET) [ 136.812372][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.117387][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 137.424037][ T5475] loop0: detected capacity change from 0 to 512 [ 137.437948][ T5479] loop3: detected capacity change from 0 to 512 [ 137.474388][ T5475] ext4: Unknown parameter 'nouser_xattr' [ 137.519637][ T5479] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 137.606963][ T5479] EXT4-fs (loop3): 1 truncate cleaned up [ 137.669750][ T5479] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 138.691940][ T27] audit: type=1800 audit(1791723846.417:19): pid=5494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.346" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 138.976618][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 138.983245][ T5492] netlink: 'syz.0.349': attribute type 13 has an invalid length. [ 138.992915][ T5492] netlink: 'syz.0.349': attribute type 17 has an invalid length. [ 139.000645][ T5492] netlink: 'syz.0.349': attribute type 27 has an invalid length. [ 139.009521][ T5492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.256959][ T5507] loop3: detected capacity change from 0 to 512 [ 139.281783][ T5507] EXT4-fs: Ignoring removed oldalloc option [ 139.320369][ T5507] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a840c02c, mo2=0002] [ 139.320447][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.341374][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.423055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.435508][ T5507] System zones: 0-2, 18-18, 34-34 [ 139.446556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.475285][ T5507] EXT4-fs (loop3): orphan cleanup on readonly fs [ 139.504652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.512662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.531968][ T5507] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 139.546831][ T954] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 139.581035][ T5507] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 139.617322][ T5507] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.352: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 139.662666][ T5216] device veth0_vlan entered promiscuous mode [ 139.714969][ T5216] device veth1_vlan entered promiscuous mode [ 139.743770][ T954] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 139.753203][ T954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.774140][ T954] usb 1-1: config 0 descriptor?? [ 139.789327][ T5507] EXT4-fs (loop3): Remounting filesystem read-only [ 139.810947][ T5507] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.352: couldn't read orphan inode 13 (err -117) [ 139.823564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.833145][ T954] cp210x 1-1:0.0: cp210x converter detected [ 139.843638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.871447][ T5507] EXT4-fs (loop3): Remounting filesystem read-only [ 139.875090][ T5520] loop4: detected capacity change from 0 to 2048 [ 139.878829][ T5507] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 139.891075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.949526][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.963132][ T5507] EXT4-fs error (device loop3): ext4_lookup:1864: inode #2: comm syz.3.352: deleted inode referenced: 12 [ 139.977034][ T5216] device veth0_macvtap entered promiscuous mode [ 140.035167][ T5216] device veth1_macvtap entered promiscuous mode [ 140.050990][ T5520] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.120275][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.168899][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.199186][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.226595][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.244706][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.264483][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.277979][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.290135][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.303266][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.321768][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.332723][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.351907][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 140.370290][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.386269][ T954] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 140.407630][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.423509][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.437053][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.923619][ T49] Bluetooth: hci0: command 0x0405 tx timeout [ 140.934501][ T954] usb 1-1: cp210x converter now attached to ttyUSB0 [ 140.944870][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.955660][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.061982][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.127075][ T4323] usb 1-1: USB disconnect, device number 5 [ 141.299056][ T5216] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.375346][ T5216] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.427327][ T5216] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.475412][ T5216] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.601975][ T4323] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 141.618297][ T4323] cp210x 1-1:0.0: device disconnected [ 141.763611][ T5525] device syzkaller0 entered promiscuous mode [ 142.096661][ T5552] FAULT_INJECTION: forcing a failure. [ 142.096661][ T5552] name failslab, interval 1, probability 0, space 0, times 1 [ 142.109789][ T5552] CPU: 0 PID: 5552 Comm: syz.4.366 Not tainted syzkaller #0 [ 142.117100][ T5552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.127186][ T5552] Call Trace: [ 142.130468][ T5552] [ 142.133404][ T5552] dump_stack_lvl+0x188/0x24e [ 142.138117][ T5552] ? show_regs_print_info+0x12/0x12 [ 142.143308][ T5552] ? load_image+0x410/0x410 [ 142.147799][ T5552] ? __might_sleep+0xd0/0xd0 [ 142.152389][ T5552] ? __lock_acquire+0x7ea0/0x7ea0 [ 142.157429][ T5552] should_fail_ex+0x390/0x4c0 [ 142.162103][ T5552] should_failslab+0x5/0x20 [ 142.166601][ T5552] slab_pre_alloc_hook+0x59/0x300 [ 142.171640][ T5552] kmem_cache_alloc+0x56/0x2f0 [ 142.176410][ T5552] ? getname_flags+0xb7/0x500 [ 142.181086][ T5552] getname_flags+0xb7/0x500 [ 142.185597][ T5552] do_sys_openat2+0xdd/0x4f0 [ 142.190177][ T5552] ? do_sys_open+0xe0/0xe0 [ 142.194596][ T5552] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 142.200601][ T5552] ? lock_chain_count+0x20/0x20 [ 142.205474][ T5552] __x64_sys_openat+0x135/0x160 [ 142.210325][ T5552] do_syscall_64+0x4c/0xa0 [ 142.214741][ T5552] ? clear_bhb_loop+0x60/0xb0 [ 142.219425][ T5552] ? clear_bhb_loop+0x60/0xb0 [ 142.224108][ T5552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.230347][ T5552] RIP: 0033:0x7fb59a35ea0e [ 142.234760][ T5552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.254384][ T5552] RSP: 002b:00007fb59b1cfea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 142.262817][ T5552] RAX: ffffffffffffffda RBX: 00007fb59b1d26c0 RCX: 00007fb59a35ea0e [ 142.270786][ T5552] RDX: 0000000000000002 RSI: 00007fb59a434c1a RDI: ffffffffffffff9c [ 142.278753][ T5552] RBP: 00007fb59a435888 R08: 0000000000000000 R09: 0000000000000000 [ 142.286716][ T5552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000036 [ 142.294691][ T5552] R13: 0000200000000040 R14: 0000000000000000 R15: 00007ffe451d0798 [ 142.302676][ T5552] [ 143.555817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.566606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.575703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.584612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.593950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.603160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.658451][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 143.800454][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.819633][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.852103][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.864188][ T5569] deleting an unspecified loop device is not supported. [ 143.879698][ T5572] loop4: detected capacity change from 0 to 164 [ 143.911082][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.925932][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.957020][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.115598][ T5577] loop3: detected capacity change from 0 to 128 [ 144.138852][ T5577] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 144.921553][ T4327] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 145.052300][ T5592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.377'. [ 145.148683][ T4327] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.170146][ T4327] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.195545][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.220549][ T4327] usb 1-1: Product: syz [ 145.235313][ T4327] usb 1-1: Manufacturer: syz [ 145.251057][ T4327] usb 1-1: SerialNumber: syz [ 145.604676][ T5616] loop3: detected capacity change from 0 to 512 [ 145.628869][ T5616] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 145.718239][ T5616] EXT4-fs (loop3): 1 truncate cleaned up [ 145.728173][ T5622] loop5: detected capacity change from 0 to 128 [ 145.735765][ T5616] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 145.838143][ T5622] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 146.096445][ T5622] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.198634][ T27] audit: type=1800 audit(1791723853.987:20): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.385" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 146.354128][ T4327] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 146.405276][ T4327] cdc_ncm 1-1:1.0: bind() failure [ 146.477480][ T4327] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 146.663970][ T4327] cdc_ncm 1-1:1.1: bind() failure [ 146.683377][ T4327] usb 1-1: USB disconnect, device number 6 [ 146.700157][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 147.279029][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 148.011209][ T5658] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 148.262833][ T5665] loop0: detected capacity change from 0 to 1024 [ 148.368771][ T5665] EXT4-fs: inline encryption not supported [ 148.450613][ T5674] 9pnet_fd: Insufficient options for proto=fd [ 148.481565][ T5665] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.677633][ T5665] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.397: lblock 2 mapped to illegal pblock 2 (length 1) [ 148.981367][ T5665] EXT4-fs (loop0): Remounting filesystem read-only [ 149.020621][ T5665] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 149.201099][ T5665] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.397: Invalid inode table block 1 in block_group 0 [ 149.393357][ T5665] EXT4-fs (loop0): Remounting filesystem read-only [ 149.550059][ T5665] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 149.613190][ T5665] EXT4-fs (loop0): Remounting filesystem read-only [ 149.619753][ T5665] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.397: mark_inode_dirty error [ 149.690722][ T5688] netlink: 12 bytes leftover after parsing attributes in process `syz.5.402'. [ 149.704987][ T5665] EXT4-fs (loop0): Remounting filesystem read-only [ 149.720960][ T5665] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 149.730333][ T5665] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.397: Failed to acquire dquot type 0 [ 149.775230][ T5665] EXT4-fs (loop0): Remounting filesystem read-only [ 149.800107][ T5665] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 149.835754][ T5665] EXT4-fs (loop0): Remounting filesystem read-only [ 149.880660][ T5665] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.397: mark_inode_dirty error [ 149.909898][ T5665] EXT4-fs (loop0): Remounting filesystem read-only [ 149.934056][ T5665] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 150.004158][ T5665] EXT4-fs (loop0): 1 orphan inode deleted [ 150.009948][ T5665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 150.044199][ T4344] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 150.179834][ T4344] EXT4-fs (loop0): Remounting filesystem read-only [ 150.389643][ T4344] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 150.443217][ T5698] loop3: detected capacity change from 0 to 256 [ 150.651711][ T5698] exfat: Bad value for 'uid' [ 150.656440][ T4344] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 0 [ 150.761497][ T4344] EXT4-fs (loop0): Remounting filesystem read-only [ 150.922859][ T5665] EXT4-fs: Ignoring sb option on remount [ 150.951144][ T5665] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 150.958922][ T5665] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 151.138497][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 151.149699][ T5718] loop3: detected capacity change from 0 to 512 [ 151.158840][ T4280] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 151.195692][ T4280] EXT4-fs (loop0): Remounting filesystem read-only [ 151.218926][ T5718] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 151.228598][ T4280] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 151.253815][ T4280] EXT4-fs (loop0): Remounting filesystem read-only [ 151.276096][ T4280] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 151.312681][ T4280] EXT4-fs (loop0): Remounting filesystem read-only [ 151.319681][ T5718] EXT4-fs (loop3): 1 truncate cleaned up [ 151.351177][ T5727] loop5: detected capacity change from 0 to 512 [ 151.363221][ T5718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 151.402491][ T5727] EXT4-fs: Ignoring removed nobh option [ 151.588944][ T5734] loop0: detected capacity change from 0 to 512 [ 151.661052][ T5734] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 151.679316][ T5734] EXT4-fs (loop0): 1 truncate cleaned up [ 151.685263][ T5734] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 151.700193][ T5727] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 151.709750][ T5727] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.411975][ T27] audit: type=1800 audit(1791723859.987:21): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.413" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 152.522535][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 152.626124][ T5745] loop4: detected capacity change from 0 to 256 [ 152.645657][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 152.806273][ T5745] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 152.930720][ T5745] exFAT-fs (loop4): failed to load alloc-bitmap [ 152.944617][ T5745] exFAT-fs (loop4): failed to recognize exfat type [ 153.053005][ T5754] fuse: Bad value for 'fd' [ 153.682882][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 154.206860][ T5779] loop0: detected capacity change from 0 to 256 [ 154.215468][ T5781] loop5: detected capacity change from 0 to 512 [ 154.260154][ T5748] cgroup: No subsys list or none specified [ 154.279578][ T5781] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 154.338937][ T5778] loop3: detected capacity change from 0 to 1024 [ 154.339109][ T5779] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 154.355255][ T5778] hfsplus: unable to parse mount options [ 154.395857][ T5781] EXT4-fs (loop5): 1 truncate cleaned up [ 154.416692][ T5781] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 154.605035][ T5792] bio_check_eod: 3 callbacks suppressed [ 154.605049][ T5792] syz.0.428: attempt to access beyond end of device [ 154.605049][ T5792] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 154.691202][ T27] audit: type=1800 audit(1791723862.397:22): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.428" name="file1" dev="loop0" ino=1048670 res=0 errno=0 [ 155.240689][ T5799] netlink: 'syz.4.433': attribute type 4 has an invalid length. [ 155.346275][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 155.483796][ T5808] loop0: detected capacity change from 0 to 128 [ 155.492565][ T5801] netlink: 'syz.4.433': attribute type 4 has an invalid length. [ 155.536338][ T5808] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 155.576313][ T5808] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.654050][ T5811] loop5: detected capacity change from 0 to 128 [ 155.767191][ T5811] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 155.878197][ T5811] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.544040][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 156.915007][ T5834] loop0: detected capacity change from 0 to 128 [ 156.993137][ T5834] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 157.063123][ T5834] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.283880][ T5845] loop3: detected capacity change from 0 to 512 [ 157.351269][ T5845] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 157.353646][ T5848] loop4: detected capacity change from 0 to 16 [ 157.382902][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 157.404149][ T5845] EXT4-fs (loop3): 1 truncate cleaned up [ 157.409833][ T5845] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 157.437784][ T5848] erofs: (device loop4): mounted with root inode @ nid 36. [ 157.558999][ T5848] syz.4.448: attempt to access beyond end of device [ 157.558999][ T5848] loop4: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 157.652532][ T5848] syz.4.448: attempt to access beyond end of device [ 157.652532][ T5848] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 157.705525][ T5848] syz.4.448: attempt to access beyond end of device [ 157.705525][ T5848] loop4: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 157.719779][ T27] audit: type=1800 audit(1791723865.507:23): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.448" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 157.901003][ T27] audit: type=1800 audit(1791723865.617:24): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.447" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 158.337450][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 158.436333][ T5867] loop0: detected capacity change from 0 to 128 [ 158.469091][ T5869] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 158.518687][ T5867] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 158.527843][ T5867] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.598200][ T5874] loop3: detected capacity change from 0 to 512 [ 158.615773][ T5874] EXT4-fs: Ignoring removed i_version option [ 158.766092][ T5874] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 158.800037][ T5874] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.375529][ T5887] kvm: pic: level sensitive irq not supported [ 159.375729][ T5887] kvm: pic: non byte read [ 159.416846][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 159.429064][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 159.457918][ T5887] kvm: pic: level sensitive irq not supported [ 159.457991][ T5887] kvm: pic: non byte read [ 159.491262][ T5887] kvm: pic: level sensitive irq not supported [ 159.491332][ T5887] kvm: pic: non byte read [ 159.510422][ T5887] kvm: pic: level sensitive irq not supported [ 159.510494][ T5887] kvm: pic: non byte read [ 159.561106][ T5887] kvm: pic: level sensitive irq not supported [ 159.561181][ T5887] kvm: pic: non byte read [ 159.578934][ T5896] loop3: detected capacity change from 0 to 164 [ 159.584128][ T5887] kvm: pic: level sensitive irq not supported [ 159.600689][ T5887] kvm: pic: non byte read [ 159.623255][ T5887] kvm: pic: level sensitive irq not supported [ 159.623322][ T5887] kvm: pic: non byte read [ 159.641536][ T5887] kvm: pic: level sensitive irq not supported [ 159.641605][ T5887] kvm: pic: non byte read [ 159.691384][ T5887] kvm: pic: level sensitive irq not supported [ 159.691455][ T5887] kvm: pic: non byte read [ 159.736811][ T5887] kvm: pic: level sensitive irq not supported [ 159.736882][ T5887] kvm: pic: non byte read [ 159.886885][ T5903] loop3: detected capacity change from 0 to 512 [ 160.079760][ T5903] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 160.098419][ T5903] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.465: invalid indirect mapped block 256 (level 1) [ 160.104514][ T5913] loop4: detected capacity change from 0 to 512 [ 160.131022][ T957] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 160.294790][ T5903] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.465: invalid indirect mapped block 2683928664 (level 1) [ 160.363622][ T957] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.403117][ T5915] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 160.486439][ T5913] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 160.540064][ T957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 160.579756][ T5903] EXT4-fs (loop3): 1 truncate cleaned up [ 160.628377][ T5913] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.662021][ T5903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 160.689323][ T957] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 160.915374][ T957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.953137][ T957] usb 1-1: config 0 descriptor?? [ 160.972830][ T27] audit: type=1800 audit(1791723868.767:25): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.469" name="file2" dev="loop5" ino=1048671 res=0 errno=0 [ 160.982788][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 161.151719][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 161.171213][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 161.216456][ T957] Bluetooth: Can't get state to change to load ram patch err [ 161.234210][ T957] Bluetooth: Loading patch file failed [ 161.251135][ T957] ath3k: probe of 1-1:0.0 failed with error -121 [ 161.346337][ T5930] set_capacity_and_notify: 1 callbacks suppressed [ 161.346352][ T5930] loop5: detected capacity change from 0 to 2048 [ 161.422933][ T5930] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 161.427225][ T957] usb 1-1: USB disconnect, device number 7 [ 161.437244][ T5934] loop3: detected capacity change from 0 to 2048 [ 161.487061][ T5930] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.473: bg 0: block 240: padding at end of block bitmap is not set [ 161.514278][ T5934] EXT4-fs: test_dummy_encryption requires encrypt feature [ 161.527895][ T5938] loop4: detected capacity change from 0 to 512 [ 161.554679][ T5938] EXT4-fs: Ignoring removed oldalloc option [ 161.560650][ T5938] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.579449][ T5930] EXT4-fs error (device loop5) in ext4_setattr:5695: error 28 [ 161.628864][ T5938] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.474: corrupted in-inode xattr [ 161.655827][ T5938] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.474: couldn't read orphan inode 15 (err -117) [ 161.726777][ T5938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 161.754343][ T5930] EXT4-fs (loop5): unmounting filesystem. [ 161.899834][ T5949] loop3: detected capacity change from 0 to 256 [ 162.020532][ T5958] loop5: detected capacity change from 0 to 512 [ 162.048575][ T5958] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 162.067061][ T5958] EXT4-fs (loop5): 1 truncate cleaned up [ 162.073206][ T5958] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 162.224660][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 162.361335][ T27] audit: type=1800 audit(1791723870.147:26): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.481" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 162.936797][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 164.566146][ T5985] loop0: detected capacity change from 0 to 512 [ 164.587957][ T5985] ext4: Unknown parameter 'nouser_xattr' [ 165.334079][ T5993] loop4: detected capacity change from 0 to 256 [ 165.592507][ T5999] netlink: 160 bytes leftover after parsing attributes in process `syz.0.490'. [ 165.595146][ T5997] loop3: detected capacity change from 0 to 1024 [ 165.610915][ T5999] netlink: 160 bytes leftover after parsing attributes in process `syz.0.490'. [ 165.622771][ T5999] netlink: 160 bytes leftover after parsing attributes in process `syz.0.490'. [ 165.717820][ T5997] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 165.736932][ T5997] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.778643][ T5997] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.488: bg 0: block 112: padding at end of block bitmap is not set [ 165.846855][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 165.921438][ T6011] loop3: detected capacity change from 0 to 512 [ 165.942983][ T6011] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 165.951012][ T4325] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 165.966350][ T6011] EXT4-fs (loop3): 1 truncate cleaned up [ 165.978092][ T6011] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.142571][ T4325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.157623][ T4325] usb 5-1: config 0 has no interfaces? [ 166.166824][ T4325] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 166.220777][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.236176][ T27] audit: type=1800 audit(1791723874.027:27): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.493" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 166.365641][ T4325] usb 5-1: Product: syz [ 166.417324][ T4325] usb 5-1: Manufacturer: syz [ 166.458881][ T4325] usb 5-1: SerialNumber: syz [ 166.575490][ T4325] usb 5-1: config 0 descriptor?? [ 166.842915][ T4323] usb 5-1: USB disconnect, device number 6 [ 166.877052][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 167.826236][ T6039] loop4: detected capacity change from 0 to 1024 [ 168.045321][ T6039] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 168.054430][ T6039] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.076864][ T6039] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.503: bg 0: block 112: padding at end of block bitmap is not set [ 168.199404][ T6047] loop0: detected capacity change from 0 to 512 [ 168.220933][ T6047] EXT4-fs: Ignoring removed oldalloc option [ 168.227385][ T6047] EXT4-fs: Ignoring removed i_version option [ 168.255729][ T6047] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.321212][ T6047] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.506: invalid indirect mapped block 4294967295 (level 1) [ 168.336761][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 168.378964][ T6047] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.506: invalid indirect mapped block 4294967295 (level 1) [ 168.423163][ T6050] support for the xor transformation has been removed. [ 168.436646][ T6047] EXT4-fs (loop0): 2 truncates cleaned up [ 168.454231][ T6047] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 168.536154][ T6055] loop3: detected capacity change from 0 to 512 [ 168.596861][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 168.605350][ T6055] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 168.673617][ T6055] EXT4-fs (loop3): 1 truncate cleaned up [ 168.679312][ T6055] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.954521][ T27] audit: type=1800 audit(1791723876.747:28): pid=6063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.508" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 169.563103][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 170.294805][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'. [ 170.352647][ T6098] loop0: detected capacity change from 0 to 1024 [ 170.540706][ T6105] loop4: detected capacity change from 0 to 2048 [ 170.623801][ T6098] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 170.640104][ T6105] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.640214][ T6098] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.032751][ T6098] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.517: bg 0: block 112: padding at end of block bitmap is not set [ 171.435052][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 171.478159][ T6121] loop3: detected capacity change from 0 to 512 [ 171.486538][ T6121] EXT4-fs: Ignoring removed oldalloc option [ 171.538493][ T6121] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a840c02c, mo2=0002] [ 171.547131][ T6121] System zones: 0-2, 18-18, 34-34 [ 171.553812][ T6121] EXT4-fs (loop3): orphan cleanup on readonly fs [ 171.574519][ T6121] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 171.621138][ T6121] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 171.651245][ T6121] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.525: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 171.821110][ T6121] EXT4-fs (loop3): Remounting filesystem read-only [ 171.828714][ T6121] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.525: couldn't read orphan inode 13 (err -117) [ 172.031268][ T6121] EXT4-fs (loop3): Remounting filesystem read-only [ 172.079176][ T6121] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.683079][ T6121] EXT4-fs error (device loop3): ext4_lookup:1864: inode #2: comm syz.3.525: deleted inode referenced: 12 [ 172.839660][ T6148] loop0: detected capacity change from 0 to 512 [ 172.886057][ T6121] device syzkaller0 entered promiscuous mode [ 172.889653][ T6151] loop4: detected capacity change from 0 to 128 [ 172.919259][ T6148] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 172.985599][ T6148] EXT4-fs (loop0): 1 truncate cleaned up [ 173.007469][ T6151] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 173.081324][ T6148] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 173.131088][ T6151] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.911416][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 173.990998][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 175.106708][ T6197] ip_tables: iptables: counters copy to user failed while replacing table [ 176.322404][ T6221] loop5: detected capacity change from 0 to 512 [ 176.330474][ T6221] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.360365][ T6221] EXT4-fs (loop5): orphan cleanup on readonly fs [ 176.371101][ T6221] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 176.383678][ T6221] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.555: attempt to clear invalid blocks 2 len 1 [ 176.456926][ T6221] EXT4-fs (loop5): Remounting filesystem read-only [ 176.465326][ T6221] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 176.498490][ T6221] EXT4-fs (loop5): Remounting filesystem read-only [ 176.513355][ T6221] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.555: invalid indirect mapped block 1819239214 (level 0) [ 176.531725][ T6221] EXT4-fs (loop5): Remounting filesystem read-only [ 176.545500][ T6221] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.555: invalid indirect mapped block 1819239214 (level 1) [ 176.565589][ T6221] EXT4-fs (loop5): Remounting filesystem read-only [ 176.584919][ T6221] EXT4-fs (loop5): 1 truncate cleaned up [ 176.590601][ T6221] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 176.637494][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 176.817799][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.558'. [ 177.879420][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 177.890575][ T6239] ip_tables: iptables: counters copy to user failed while replacing table [ 177.990280][ T6243] loop0: detected capacity change from 0 to 2048 [ 178.031707][ T6243] EXT4-fs: Ignoring removed orlov option [ 178.037397][ T6243] EXT4-fs: Ignoring removed i_version option [ 178.195814][ T6249] loop4: detected capacity change from 0 to 128 [ 178.253258][ T6249] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 178.625643][ T6243] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 178.747799][ T6243] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.963463][ T6243] fs-verity: sha512 using implementation "sha512-avx2" [ 179.239785][ T6243] EXT4-fs (loop0): unmounting filesystem. [ 179.446838][ T6284] loop5: detected capacity change from 0 to 512 [ 179.512961][ T27] audit: type=1326 audit(1791723887.317:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.1.574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb624f9e1d9 code=0x7fc00000 [ 179.549914][ T6288] loop3: detected capacity change from 0 to 1024 [ 179.554467][ T6284] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 179.593637][ T6291] loop4: detected capacity change from 0 to 512 [ 179.603647][ T6288] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 179.618154][ T6288] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.637694][ T6291] EXT4-fs: Ignoring removed nobh option [ 179.640935][ T6284] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 179.657244][ T6288] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.578: bg 0: block 112: padding at end of block bitmap is not set [ 179.670940][ T6284] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 179.711187][ T6284] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 179.720668][ T6284] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e02c, mo2=0000] [ 179.731871][ T6291] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 179.792275][ T6284] EXT4-fs (loop5): orphan cleanup on readonly fs [ 179.818268][ T6284] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.576: bg 0: block 34: padding at end of block bitmap is not set [ 179.839956][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 179.853645][ T6291] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 179.890002][ T6291] EXT4-fs (loop4): Remounting filesystem read-only [ 179.897329][ T6291] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.579: invalid indirect mapped block 4278190080 (level 0) [ 179.944021][ T6301] 9pnet_fd: Insufficient options for proto=fd [ 179.951201][ T6291] EXT4-fs (loop4): Remounting filesystem read-only [ 179.964501][ T6284] EXT4-fs (loop5): Remounting filesystem read-only [ 179.975109][ T6291] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.579: invalid indirect mapped block 1 (level 1) [ 179.984899][ T6284] Quota error (device loop5): write_blk: dquota write failed [ 180.003066][ T6284] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 180.017564][ T6284] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.576: Failed to acquire dquot type 1 [ 180.038535][ T6291] EXT4-fs (loop4): Remounting filesystem read-only [ 180.043604][ T6284] EXT4-fs (loop5): Remounting filesystem read-only [ 180.063602][ T6291] EXT4-fs (loop4): 1 truncate cleaned up [ 180.077511][ T6291] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 180.101087][ T6284] EXT4-fs (loop5): 1 truncate cleaned up [ 180.130678][ T6284] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 180.150923][ T27] audit: type=1326 audit(1791723887.937:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.1.574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb624f9e1d9 code=0x7fc00000 [ 180.191399][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 180.218372][ T6309] loop3: detected capacity change from 0 to 128 [ 180.232527][ T27] audit: type=1326 audit(1791723887.947:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.1.574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb624f9e1d9 code=0x7fc00000 [ 180.292585][ T6309] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 180.311432][ T6309] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.452896][ T27] audit: type=1326 audit(1791723887.947:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.1.574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb624f9e1d9 code=0x7fc00000 [ 180.481834][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 180.752223][ T27] audit: type=1326 audit(1791723887.947:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.1.574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb624f9e1d9 code=0x7fc00000 [ 180.783300][ T27] audit: type=1326 audit(1791723887.947:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.1.574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb624f9e1d9 code=0x7fc00000 [ 180.930170][ T27] audit: type=1326 audit(1791723887.947:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.1.574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb624f9e1d9 code=0x7fc00000 [ 181.127253][ T27] audit: type=1326 audit(1791723887.947:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.1.574" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb624f9e1d9 code=0x7fc00000 [ 181.156964][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 181.377185][ T6338] loop4: detected capacity change from 0 to 256 [ 181.509837][ T6338] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 181.557305][ T6338] syz.4.593: attempt to access beyond end of device [ 181.557305][ T6338] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 181.615855][ T6338] syz.4.593: attempt to access beyond end of device [ 181.615855][ T6338] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 181.741891][ T6353] loop5: detected capacity change from 0 to 2048 [ 182.852596][ T6375] loop3: detected capacity change from 0 to 1024 [ 182.953391][ T6375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 182.966027][ T6385] loop5: detected capacity change from 0 to 512 [ 183.087268][ T6385] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 183.158350][ T6385] EXT4-fs (loop5): 1 truncate cleaned up [ 183.200922][ T6385] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 183.233923][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 183.742756][ T6411] loop3: detected capacity change from 0 to 128 [ 183.824912][ T6374] loop4: detected capacity change from 0 to 2048 [ 183.875972][ T6411] tmpfs: Unknown parameter 'grpquota' [ 183.904402][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 183.992897][ T6374] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 185.006207][ T6430] loop3: detected capacity change from 0 to 512 [ 185.319032][ T6430] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 185.347620][ T6430] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 185.711404][ T6430] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 186.253470][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 186.255343][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 186.409881][ T6453] loop4: detected capacity change from 0 to 512 [ 186.446908][ T6455] loop3: detected capacity change from 0 to 256 [ 186.457682][ T6453] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 186.507634][ T6455] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 186.591073][ T6453] EXT4-fs (loop4): 1 truncate cleaned up [ 186.596767][ T6453] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 186.858382][ T6466] loop5: detected capacity change from 0 to 1024 [ 186.940491][ T6466] EXT4-fs: Ignoring removed oldalloc option [ 187.014278][ T27] kauditd_printk_skb: 62 callbacks suppressed [ 187.014292][ T27] audit: type=1800 audit(1791723894.807:99): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.625" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 187.160592][ T6466] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 187.420736][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 187.555981][ T6485] loop4: detected capacity change from 0 to 512 [ 187.579664][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 187.593964][ T6485] EXT4-fs: Ignoring removed nobh option [ 187.623285][ T6485] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 187.777062][ T6485] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 187.845505][ T6485] EXT4-fs (loop4): orphan cleanup on readonly fs [ 187.856603][ T6485] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.632: attempt to clear invalid blocks 1024 len 1 [ 187.889117][ T6485] EXT4-fs (loop4): Remounting filesystem read-only [ 187.920711][ T6485] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.632: bg 0: block 361: padding at end of block bitmap is not set [ 188.090483][ T6485] EXT4-fs (loop4): Remounting filesystem read-only [ 188.141291][ T6485] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 188.203272][ T6485] EXT4-fs (loop4): Remounting filesystem read-only [ 188.255803][ T6485] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.632: invalid indirect mapped block 1811939328 (level 0) [ 188.359956][ T6485] EXT4-fs (loop4): Remounting filesystem read-only [ 188.408380][ T6485] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.632: invalid indirect mapped block 2185560079 (level 1) [ 188.551343][ T6485] EXT4-fs (loop4): Remounting filesystem read-only [ 188.568305][ T6485] EXT4-fs (loop4): 1 truncate cleaned up [ 188.578263][ T6485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 188.679299][ T6504] loop3: detected capacity change from 0 to 512 [ 188.706826][ T6504] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 188.732063][ T6505] netlink: 160 bytes leftover after parsing attributes in process `syz.1.639'. [ 188.732660][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 188.741192][ T6505] netlink: 160 bytes leftover after parsing attributes in process `syz.1.639'. [ 188.756907][ T6505] netlink: 160 bytes leftover after parsing attributes in process `syz.1.639'. [ 188.942243][ T6508] loop5: detected capacity change from 0 to 512 [ 188.994327][ T6508] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 189.005551][ T6504] EXT4-fs (loop3): 1 truncate cleaned up [ 189.015788][ T6504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 189.118785][ T6508] EXT4-fs (loop5): 1 truncate cleaned up [ 189.174671][ T6508] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 190.138651][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 190.293408][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 190.386961][ T6529] loop5: detected capacity change from 0 to 512 [ 190.472525][ T6529] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 190.527716][ T6529] EXT4-fs (loop5): shut down requested (0) [ 190.851854][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 191.011388][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 191.019230][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 191.019255][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 191.028167][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 191.216474][ T6559] loop4: detected capacity change from 0 to 1024 [ 191.771467][ T6582] loop5: detected capacity change from 0 to 512 [ 191.843482][ T6582] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 191.864502][ T6582] ext4 filesystem being mounted at /59/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.077150][ T6594] EXT4-fs (loop5): shut down requested (2) [ 192.186513][ T6602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.649933][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 192.660586][ T4384] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 192.673402][ T4384] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 193.794790][ T6636] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 193.820944][ T6636] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 194.026110][ T6648] loop5: detected capacity change from 0 to 512 [ 194.031453][ T6646] loop4: detected capacity change from 0 to 2048 [ 194.046358][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.052716][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.072266][ T6646] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 194.096082][ T6648] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 194.128393][ T6646] UDF-fs: Scanning with blocksize 512 failed [ 194.175451][ T6646] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 194.209244][ T6646] UDF-fs: Scanning with blocksize 1024 failed [ 194.248552][ T6646] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 194.293324][ T6648] EXT4-fs (loop5): 1 truncate cleaned up [ 194.300984][ T6648] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 194.320899][ T6646] UDF-fs: Scanning with blocksize 2048 failed [ 194.327473][ T6646] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 195.104378][ T6646] UDF-fs: Scanning with blocksize 4096 failed [ 195.170906][ T27] audit: type=1800 audit(1791723902.957:100): pid=6657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.683" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 195.359963][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 195.447573][ T6671] loop4: detected capacity change from 0 to 512 [ 195.482974][ T6671] EXT4-fs: Ignoring removed nobh option [ 195.656090][ T6671] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 195.667277][ T6679] loop5: detected capacity change from 0 to 512 [ 195.675562][ T6671] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.765895][ T6684] netlink: 64 bytes leftover after parsing attributes in process `syz.0.691'. [ 196.433913][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 196.456151][ T6679] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 196.473807][ T6679] ext4 filesystem being mounted at /65/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.522170][ T6691] loop3: detected capacity change from 0 to 256 [ 196.625542][ T6694] loop4: detected capacity change from 0 to 128 [ 196.639851][ T6691] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 196.693020][ T6691] exFAT-fs (loop3): failed to load alloc-bitmap [ 196.704634][ T6691] exFAT-fs (loop3): failed to recognize exfat type [ 196.732648][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 196.759660][ T6691] loop3: detected capacity change from 0 to 128 [ 196.810747][ T27] audit: type=1800 audit(1791723904.597:101): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.693" name="bus" dev="loop3" ino=1048694 res=0 errno=0 [ 197.929006][ T6711] loop3: detected capacity change from 0 to 1024 [ 197.978790][ T6711] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 198.038509][ T6711] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 198.061387][ T6711] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 198.079916][ T6711] System zones: 0-1, 3-36 [ 198.176675][ T6711] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.326930][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 198.334620][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 198.336938][ T6732] loop4: detected capacity change from 0 to 512 [ 198.516892][ T6738] loop3: detected capacity change from 0 to 512 [ 198.577659][ T6738] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.711: inode has both inline data and extents flags [ 198.672171][ T6738] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.711: couldn't read orphan inode 15 (err -117) [ 198.714511][ T6738] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.775325][ T6744] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 198.805670][ T6744] EXT4-fs (loop4): 1 truncate cleaned up [ 198.841778][ T6744] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 198.868244][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 199.053461][ T27] audit: type=1800 audit(1791723906.847:102): pid=6744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.714" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 199.221843][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 199.673270][ T6764] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfsb] [ 199.836461][ T6764] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs▀paqsthrouИh] [ 199.902694][ T6764] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 199.910376][ T6764] Error parsing options; rc = [-22] [ 200.139868][ T6771] set_capacity_and_notify: 1 callbacks suppressed [ 200.139883][ T6771] loop4: detected capacity change from 0 to 128 [ 200.216122][ T6771] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 200.250772][ T6771] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 200.290592][ T6775] loop3: detected capacity change from 0 to 1024 [ 200.377090][ T76] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 200.393168][ T6775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 200.443029][ T6775] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.487383][ T6775] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.735: bg 0: block 112: padding at end of block bitmap is not set [ 200.748475][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 200.790010][ T6797] loop4: detected capacity change from 0 to 256 [ 200.900646][ T6802] loop3: detected capacity change from 0 to 128 [ 200.950110][ T6802] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 201.008609][ T6802] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.049770][ T6821] loop3: detected capacity change from 0 to 512 [ 202.071164][ T6821] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 202.090126][ T6821] EXT4-fs (loop3): 1 truncate cleaned up [ 202.101880][ T6821] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 202.143186][ T27] audit: type=1800 audit(1791723909.937:103): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.746" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 202.206184][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 203.470329][ T6853] loop3: detected capacity change from 0 to 1024 [ 203.474471][ T6856] loop5: detected capacity change from 0 to 2048 [ 203.495526][ T6856] UDF-fs: bad mount option "fscontext=uncon" or missing value [ 203.568525][ T6853] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 203.608086][ T6853] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.653487][ T6853] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.759: bg 0: block 112: padding at end of block bitmap is not set [ 203.915716][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 204.050370][ T6880] loop3: detected capacity change from 0 to 256 [ 204.091605][ T6880] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 204.290818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 204.310825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 204.320817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 204.330821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 204.340814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 204.350816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 204.360815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 204.370819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 204.380816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 204.390814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 205.058872][ T6880] syz.3.770: attempt to access beyond end of device [ 205.058872][ T6880] loop3: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 205.152286][ T6880] syz.3.770: attempt to access beyond end of device [ 205.152286][ T6880] loop3: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 205.167455][ T6880] syz.3.770: attempt to access beyond end of device [ 205.167455][ T6880] loop3: rw=0, sector=280, nr_sectors = 8 limit=256 [ 205.181404][ T27] audit: type=1800 audit(1791723912.977:104): pid=6880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.770" name="file1" dev="loop3" ino=1048699 res=0 errno=0 [ 205.670852][ T4378] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 205.747331][ T6906] loop4: detected capacity change from 0 to 256 [ 205.815407][ T6906] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 205.859690][ T27] audit: type=1800 audit(1791723913.647:105): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.779" name="file2" dev="loop4" ino=1048700 res=0 errno=0 [ 205.881071][ T4378] usb 6-1: Using ep0 maxpacket: 32 [ 205.894338][ T4378] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 205.918613][ T4378] usb 6-1: config 0 has no interface number 0 [ 205.947640][ T4378] usb 6-1: config 0 interface 184 has no altsetting 0 [ 205.970634][ T4378] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 205.999345][ T4378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.015868][ T4378] usb 6-1: Product: syz [ 206.020192][ T4378] usb 6-1: Manufacturer: syz [ 206.026278][ T4378] usb 6-1: SerialNumber: syz [ 206.058784][ T4378] usb 6-1: config 0 descriptor?? [ 206.076966][ T4378] smsc75xx v1.0.0 [ 206.790566][ T4378] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 206.811091][ T6916] loop4: detected capacity change from 0 to 512 [ 206.817519][ T4378] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 206.882817][ T6916] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 206.955723][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 207.210440][ T49] Bluetooth: hci0: link tx timeout [ 207.216191][ T49] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 207.225343][ T49] Bluetooth: hci0: link tx timeout [ 207.230507][ T49] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 207.238294][ T49] Bluetooth: hci0: link tx timeout [ 207.250863][ T49] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 207.278319][ T4378] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 207.292353][ T4378] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 207.302093][ T4378] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 207.311990][ T4378] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 207.339027][ T4378] usb 6-1: USB disconnect, device number 2 [ 207.393721][ T6932] loop4: detected capacity change from 0 to 4096 [ 207.421558][ T6932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 207.843305][ T6935] EXT4-fs (loop4): shut down requested (2) [ 208.381770][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 208.756969][ T6950] loop3: detected capacity change from 0 to 512 [ 208.816663][ T6950] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 208.873277][ T6950] EXT4-fs (loop3): 1 truncate cleaned up [ 208.878970][ T6950] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 209.086345][ T6965] loop4: detected capacity change from 0 to 128 [ 209.240975][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 209.429898][ T6965] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 209.596503][ T6965] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.779439][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 210.038595][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 210.590879][ T7008] loop4: detected capacity change from 0 to 128 [ 210.657890][ T7008] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 210.682081][ T7008] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.013491][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 211.291496][ T7034] loop4: detected capacity change from 0 to 16 [ 211.325572][ T7034] erofs: (device loop4): mounted with root inode @ nid 36. [ 211.340763][ T7034] syz.4.829: attempt to access beyond end of device [ 211.340763][ T7034] loop4: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 211.364513][ T7034] syz.4.829: attempt to access beyond end of device [ 211.364513][ T7034] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 211.380050][ T7034] syz.4.829: attempt to access beyond end of device [ 211.380050][ T7034] loop4: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 211.446713][ T27] audit: type=1800 audit(1791723919.237:106): pid=7034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.829" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 211.659444][ T7026] loop3: detected capacity change from 0 to 32768 [ 211.740640][ T7026] loop3: p1 p3 < > [ 212.129197][ T7054] loop4: detected capacity change from 0 to 256 [ 212.264133][ T7054] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 212.295919][ T7054] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 212.333682][ T7054] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 212.348214][ T7054] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 212.367253][ T7054] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 212.386781][ T7054] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 212.408878][ T7054] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 212.421340][ T7054] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 212.430288][ T7054] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 212.439390][ T7054] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 212.463266][ T27] audit: type=1800 audit(1791723920.257:107): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.837" name="file1" dev="loop4" ino=1048701 res=0 errno=0 [ 212.479924][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 212.486717][ T4364] udevd[4364]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 212.506878][ T7054] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 212.649878][ T7063] loop4: detected capacity change from 0 to 1024 [ 212.708603][ T7063] hfsplus: bad catalog entry type [ 212.769420][ T4682] hfsplus: b-tree write err: -5, ino 25 [ 212.775573][ T4682] hfsplus: b-tree write err: -5, ino 4 [ 212.790204][ T4682] hfsplus: b-tree write err: -5, ino 2 [ 212.954729][ T7065] loop4: detected capacity change from 0 to 1024 [ 212.999017][ T7065] EXT4-fs: Ignoring removed bh option [ 213.036581][ T7065] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.119057][ T7065] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 213.354105][ T7065] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 214.167660][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 214.314279][ T7096] loop3: detected capacity change from 0 to 512 [ 214.366800][ T7096] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 214.414129][ T7096] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.850: bad orphan inode 13 [ 214.456872][ T7096] ext4_test_bit(bit=12, block=18) = 1 [ 214.468323][ T7096] is_bad_inode(inode)=0 [ 214.472595][ T7096] NEXT_ORPHAN(inode)=0 [ 214.476806][ T7096] max_ino=32 [ 214.480080][ T7096] i_nlink=1 [ 214.483526][ T7096] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 214.540839][ T7107] loop5: detected capacity change from 0 to 128 [ 214.624111][ T7096] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 214.677965][ T7107] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 214.688968][ T7107] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.247939][ T7118] loop4: detected capacity change from 0 to 512 [ 215.276078][ T7118] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 215.289955][ T7118] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.854: inode #15: comm syz.4.854: iget: illegal inode # [ 215.304236][ T7118] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.854: couldn't read orphan inode 15 (err -117) [ 215.329295][ T7118] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 215.418018][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 215.505333][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 215.525591][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 215.805647][ T7141] loop5: detected capacity change from 0 to 128 [ 216.077029][ T7139] x86/PAT: syz.4.864:7139 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 216.174628][ T7149] x86/PAT: syz.4.864:7149 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 216.272765][ T7161] netlink: 'syz.5.874': attribute type 13 has an invalid length. [ 216.726326][ T7189] binder: 7188:7189 ioctl c0306201 0 returned -14 [ 216.866299][ T7192] loop3: detected capacity change from 0 to 1024 [ 216.919338][ T7192] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 216.928314][ T7192] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.946844][ T7192] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.887: bg 0: block 112: padding at end of block bitmap is not set [ 216.967561][ T7192] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 1 with error 28 [ 216.982772][ T7192] EXT4-fs (loop3): This should not happen!! Data will be lost [ 216.982772][ T7192] [ 216.992619][ T7192] EXT4-fs (loop3): Total free blocks count 0 [ 217.000002][ T7192] EXT4-fs (loop3): Free/Dirty block details [ 217.006815][ T7192] EXT4-fs (loop3): free_blocks=0 [ 217.011966][ T7192] EXT4-fs (loop3): dirty_blocks=16 [ 217.017245][ T7192] EXT4-fs (loop3): Block reservation details [ 217.023387][ T7192] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 217.156090][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 217.524205][ T7212] loop5: detected capacity change from 0 to 512 [ 217.582515][ T7212] EXT4-fs error (device loop5): __ext4_iget:5102: inode #11: block 1: comm syz.5.894: invalid block [ 217.628054][ T7212] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.894: couldn't read orphan inode 11 (err -117) [ 217.655013][ T7212] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 217.717034][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 217.940854][ T7230] loop5: detected capacity change from 0 to 512 [ 217.956343][ T7230] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 218.014047][ T7230] EXT4-fs (loop5): 1 truncate cleaned up [ 218.019757][ T7230] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 218.259146][ T7238] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 218.266774][ T7238] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 218.278551][ T7238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.924873][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 219.838060][ T7253] loop4: detected capacity change from 0 to 2048 [ 219.883609][ T7253] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 220.100149][ T7274] loop5: detected capacity change from 0 to 1024 [ 220.115841][ T7275] loop3: detected capacity change from 0 to 512 [ 220.159359][ T7275] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 220.200880][ T7274] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 220.216148][ T7274] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.263905][ T7275] EXT4-fs (loop3): 1 truncate cleaned up [ 220.269735][ T7275] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 220.276858][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 221.006360][ T4726] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm kworker/u4:13: lblock 0 mapped to illegal pblock 0 (length 1) [ 221.029114][ T7288] loop4: detected capacity change from 0 to 4096 [ 221.076254][ T4726] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 221.096903][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 221.174366][ T7288] EXT4-fs (loop4): Test dummy encryption mode enabled [ 221.196822][ T4726] EXT4-fs (loop5): This should not happen!! Data will be lost [ 221.196822][ T4726] [ 221.428006][ T7288] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 221.486321][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 221.635725][ T7288] System zones: 0-5 [ 222.031173][ T7288] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 222.186295][ T7310] loop5: detected capacity change from 0 to 128 [ 222.212956][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 222.251733][ T7310] EXT4-fs (loop5): Test dummy encryption mode enabled [ 222.300263][ T7310] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 222.370528][ T7310] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 222.440445][ T7319] loop4: detected capacity change from 0 to 512 [ 222.470511][ T7319] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 222.509715][ T7323] loop3: detected capacity change from 0 to 128 [ 222.563056][ T7323] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 222.586534][ T7323] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.010041][ T7310] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 223.181742][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 223.272051][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 223.370450][ T7345] loop3: detected capacity change from 0 to 512 [ 223.396699][ T7345] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 223.445956][ T7347] loop5: detected capacity change from 0 to 128 [ 223.449837][ T7345] EXT4-fs (loop3): 1 truncate cleaned up [ 223.474281][ T7345] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 223.686978][ T7353] loop5: detected capacity change from 0 to 2048 [ 223.695070][ T7353] ext4: Unknown parameter 'subj_user' [ 223.838469][ T27] audit: type=1800 audit(1791723931.627:108): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.939" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 223.998839][ T7359] loop4: detected capacity change from 0 to 256 [ 224.050128][ T7360] loop5: detected capacity change from 0 to 2048 [ 224.067654][ T7359] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 224.102057][ T7360] UDF-fs: bad mount option "      " or missing value [ 224.423476][ T7364] loop5: detected capacity change from 0 to 512 [ 224.996654][ T27] audit: type=1326 audit(1791723932.787:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.0.947" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f48b9e1d9 code=0x0 [ 225.093885][ T7373] loop5: detected capacity change from 0 to 128 [ 225.137181][ T7373] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 225.155372][ T7373] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.191837][ T7376] EXT4-fs: Ignoring removed oldalloc option [ 225.225322][ T7376] EXT4-fs: quotafile must be on filesystem root [ 225.845899][ T7390] binder: 7385:7390 ioctl 40046205 0 returned -22 [ 225.897024][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 226.149459][ T7396] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 226.237460][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 226.240678][ T7406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.957'. [ 226.279996][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 226.542654][ T7419] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 226.583295][ T7419] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.685154][ T7425] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 226.757290][ T7425] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.814943][ T7433] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 226.918557][ T7433] EXT4-fs (loop5): 1 truncate cleaned up [ 226.931520][ T7433] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 227.010854][ T957] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 227.179250][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 227.366960][ T27] audit: type=1800 audit(1791723935.127:110): pid=7444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.968" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 227.491091][ T957] usb 5-1: Using ep0 maxpacket: 32 [ 227.588171][ T957] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.772405][ T957] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 228.006444][ T957] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 228.090684][ T957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.115235][ T957] usb 5-1: SerialNumber: рам [ 228.220875][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 228.340449][ T7428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.359917][ T7428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.378593][ T957] usb 5-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 228.399311][ T957] usb 5-1: found format II with max.bitrate = 515, frame size=4095 [ 228.408947][ T957] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 228.423369][ T957] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 228.431006][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 228.448800][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 228.477783][ T14] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 228.501465][ T14] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 228.519084][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.538047][ T14] usb 4-1: Product: syz [ 228.558057][ T14] usb 4-1: Manufacturer: syz [ 228.573522][ T14] usb 4-1: SerialNumber: syz [ 228.588886][ T957] usb 5-1: USB disconnect, device number 7 [ 228.783831][ T4366] udevd[4366]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.811992][ T14] usb 4-1: found format II with max.bitrate = 0, frame size=4 [ 228.830437][ T14] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 228.842493][ T14] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 228.903577][ T14] usb 4-1: USB disconnect, device number 3 [ 228.946132][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 229.182896][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.303669][ T7476] set_capacity_and_notify: 5 callbacks suppressed [ 229.303684][ T7476] loop4: detected capacity change from 0 to 512 [ 229.340314][ T7476] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 229.367635][ T7476] EXT4-fs (loop4): 1 truncate cleaned up [ 229.373902][ T7476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 229.565666][ T7482] loop3: detected capacity change from 0 to 16 [ 229.604815][ T7482] erofs: (device loop3): mounted with root inode @ nid 36. [ 230.311471][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 230.328064][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 230.340957][ T7488] netlink: 'syz.1.987': attribute type 1 has an invalid length. [ 230.349082][ T7488] netlink: 'syz.1.987': attribute type 1 has an invalid length. [ 230.431009][ T7488] netlink: 'syz.1.987': attribute type 2 has an invalid length. [ 230.450896][ T7488] netlink: 80 bytes leftover after parsing attributes in process `syz.1.987'. [ 230.465645][ T7494] loop5: detected capacity change from 0 to 512 [ 230.536692][ T7494] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 230.577959][ T7494] EXT4-fs (loop5): 1 truncate cleaned up [ 230.613336][ T7503] loop4: detected capacity change from 0 to 128 [ 230.646289][ T7494] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 230.781617][ T7503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 230.870279][ T7503] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.892718][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 232.040886][ T27] audit: type=1800 audit(1791723939.807:111): pid=7528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.990" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 232.378133][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 232.462317][ T7539] loop3: detected capacity change from 0 to 128 [ 232.496423][ T7539] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 232.505443][ T7539] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.395624][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 233.956551][ T7566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1015'. [ 234.045172][ T7571] loop3: detected capacity change from 0 to 512 [ 234.067228][ T7571] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 234.080924][ T954] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 234.093144][ T7571] EXT4-fs (loop3): 1 truncate cleaned up [ 234.098930][ T7571] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 234.227713][ T7574] loop5: detected capacity change from 0 to 512 [ 234.254166][ T7574] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 234.276573][ T954] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.319737][ T954] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 234.329985][ T7574] EXT4-fs (loop5): 1 truncate cleaned up [ 234.335942][ T7574] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 234.344852][ T954] usb 5-1: config 1 has no interface number 0 [ 234.355294][ T954] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.392672][ T954] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.401878][ T954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.409878][ T954] usb 5-1: Product: syz [ 234.414949][ T954] usb 5-1: Manufacturer: syz [ 234.419561][ T954] usb 5-1: SerialNumber: syz [ 234.442150][ T954] cdc_ncm 5-1:1.1: NCM or ECM functional descriptors missing [ 234.449571][ T954] cdc_ncm 5-1:1.1: bind() failure [ 234.541867][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 234.635676][ T27] audit: type=1800 audit(1791723942.427:112): pid=7580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1017" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 234.752581][ T954] usb 5-1: USB disconnect, device number 8 [ 234.839087][ T7583] netlink: 'syz.5.1020': attribute type 11 has an invalid length. [ 234.893036][ T7583] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1020'. [ 235.030404][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 235.219601][ T7590] loop3: detected capacity change from 0 to 2048 [ 235.250348][ T7590] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 235.266374][ T7590] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.345791][ T7607] loop4: detected capacity change from 0 to 4096 [ 236.386084][ T7607] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 236.633227][ T7614] ip_tables: iptables: counters copy to user failed while replacing table [ 236.658359][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 237.652969][ T7638] loop5: detected capacity change from 0 to 512 [ 237.684802][ T7638] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 237.794282][ T7638] EXT4-fs (loop5): 1 truncate cleaned up [ 237.806937][ T7638] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 240.096489][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 240.265119][ T7671] loop4: detected capacity change from 0 to 128 [ 240.528990][ T7671] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 240.578714][ T7671] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.599309][ T7681] loop3: detected capacity change from 0 to 512 [ 240.622235][ T7681] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 240.648041][ T7681] EXT4-fs (loop3): 1 truncate cleaned up [ 240.660837][ T7681] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 241.230266][ T7698] loop5: detected capacity change from 0 to 512 [ 241.263313][ T7698] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 241.327857][ T7698] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 241.349274][ T7698] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 241.494959][ T27] audit: type=1800 audit(1791723949.287:113): pid=7702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1056" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 241.602271][ T7698] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.1061: Invalid inode table block 3858644753 in block_group 0 [ 241.651331][ T7698] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 241.699061][ T7698] EXT4-fs error (device loop5): ext4_setattr:5634: inode #18: comm syz.5.1061: mark_inode_dirty error [ 241.736530][ T7698] EXT4-fs error (device loop5) in ext4_setattr:5695: Corrupt filesystem [ 241.846448][ T76] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm kworker/u4:4: Invalid inode table block 3858644753 in block_group 0 [ 241.913705][ T5216] EXT4-fs (loop5): unmounting filesystem. [ 242.016541][ T7706] loop5: detected capacity change from 0 to 512 [ 242.104978][ T7706] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 242.121026][ T7706] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.298442][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 242.463916][ T7706] EXT4-fs (loop5): unmounting filesystem. [ 242.710964][ T957] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 242.915644][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 242.929965][ T957] usb 5-1: config 0 has no interfaces? [ 242.947933][ T957] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 242.990411][ T957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.010708][ T957] usb 5-1: Product: syz [ 243.020373][ T957] usb 5-1: Manufacturer: syz [ 243.025191][ T957] usb 5-1: SerialNumber: syz [ 243.047512][ T957] usb 5-1: config 0 descriptor?? [ 243.302593][ T6972] usb 5-1: USB disconnect, device number 9 [ 243.312344][ T7713] FAULT_INJECTION: forcing a failure. [ 243.312344][ T7713] name failslab, interval 1, probability 0, space 0, times 0 [ 243.343084][ T7713] CPU: 1 PID: 7713 Comm: syz.4.1064 Not tainted syzkaller #0 [ 243.350493][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.360575][ T7713] Call Trace: [ 243.363866][ T7713] [ 243.366811][ T7713] dump_stack_lvl+0x188/0x24e [ 243.371516][ T7713] ? show_regs_print_info+0x12/0x12 [ 243.376737][ T7713] ? load_image+0x410/0x410 [ 243.381264][ T7713] ? __might_sleep+0xd0/0xd0 [ 243.385874][ T7713] ? __lock_acquire+0x7ea0/0x7ea0 [ 243.390926][ T7713] ? trace_contention_end+0x5f/0x170 [ 243.396231][ T7713] should_fail_ex+0x390/0x4c0 [ 243.400938][ T7713] should_failslab+0x5/0x20 [ 243.405455][ T7713] slab_pre_alloc_hook+0x59/0x300 [ 243.410505][ T7713] ? kobject_uevent_env+0x278/0x890 [ 243.415728][ T7713] __kmem_cache_alloc_node+0x4f/0x270 [ 243.421127][ T7713] ? _raw_spin_lock_irqsave+0x100/0x100 [ 243.426696][ T7713] ? kobject_uevent_env+0x278/0x890 [ 243.431924][ T7713] kmalloc_trace+0x26/0xe0 [ 243.436361][ T7713] ? dev_uevent_filter+0xb0/0xb0 [ 243.441316][ T7713] kobject_uevent_env+0x278/0x890 [ 243.446367][ T7713] ? gadget_unbind_driver+0x2c3/0x3d0 [ 243.451767][ T7713] ? gadget_bind_driver+0x760/0x760 [ 243.456979][ T7713] device_release_driver_internal+0x47d/0x7c0 [ 243.463071][ T7713] driver_detach+0x1ef/0x2d0 [ 243.467685][ T7713] bus_remove_driver+0x11c/0x230 [ 243.472640][ T7713] ? sysfs_remove_groups+0x8a/0xa0 [ 243.477779][ T7713] usb_gadget_unregister_driver+0x4a/0x70 [ 243.483519][ T7713] raw_release+0xd6/0x260 [ 243.487864][ T7713] ? raw_open+0x510/0x510 [ 243.492208][ T7713] __fput+0x20a/0x8b0 [ 243.496210][ T7713] task_work_run+0x1d0/0x260 [ 243.500821][ T7713] ? task_work_cancel+0x220/0x220 [ 243.505869][ T7713] ? exit_to_user_mode_loop+0x3b/0x110 [ 243.511357][ T7713] exit_to_user_mode_loop+0xe6/0x110 [ 243.516662][ T7713] exit_to_user_mode_prepare+0xee/0x180 [ 243.522225][ T7713] syscall_exit_to_user_mode+0x16/0x40 [ 243.527704][ T7713] do_syscall_64+0x58/0xa0 [ 243.532137][ T7713] ? clear_bhb_loop+0x60/0xb0 [ 243.536822][ T7713] ? clear_bhb_loop+0x60/0xb0 [ 243.541511][ T7713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.547412][ T7713] RIP: 0033:0x7fb59a39e1d9 [ 243.551850][ T7713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.571477][ T7713] RSP: 002b:00007fb59b1d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 243.579905][ T7713] RAX: 0000000000000000 RBX: 00007fb59a625fa0 RCX: 00007fb59a39e1d9 [ 243.587885][ T7713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 243.595868][ T7713] RBP: 00007fb59a435888 R08: 0000000000000000 R09: 0000000000000000 [ 243.603849][ T7713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.611831][ T7713] R13: 00007fb59a626038 R14: 00007fb59a625fa0 R15: 00007ffe451d0798 [ 243.619838][ T7713] [ 244.921331][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 244.962248][ T7784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.186229][ T7790] ip_tables: iptables: counters copy to user failed while replacing table [ 245.549500][ T7801] loop4: detected capacity change from 0 to 1024 [ 246.208330][ T7812] ptrace attach of ""[7814] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7812] [ 247.127605][ T7829] loop4: detected capacity change from 0 to 512 [ 247.204397][ T7829] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 248.382865][ T7866] loop3: detected capacity change from 0 to 512 [ 248.419760][ T7866] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 248.476432][ T7866] EXT4-fs (loop3): 1 truncate cleaned up [ 248.482242][ T7866] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 249.101781][ T7878] binder: BINDER_SET_CONTEXT_MGR already set [ 249.108250][ T7878] binder: 7872:7878 ioctl 4018620d 200000000540 returned -16 [ 249.282210][ T27] audit: type=1800 audit(1791723957.077:114): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1118" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 249.733326][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.741508][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.930876][ T7909] loop4: detected capacity change from 0 to 512 [ 251.155485][ T7909] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.1132: Directory hole found for htree index block 0 [ 251.272350][ T7909] EXT4-fs (loop4): Remounting filesystem read-only [ 251.294213][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 251.300234][ T7909] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 251.381227][ T7909] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 251.455763][ T7909] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.1132: Directory hole found for htree index block 0 [ 251.518640][ T7909] EXT4-fs (loop4): Remounting filesystem read-only [ 251.589024][ T7874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.652855][ T7874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.725401][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 252.487881][ T7874] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.503271][ T7874] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.517096][ T7874] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.529963][ T7874] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.769629][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.831773][ T7934] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 252.858075][ T7879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.892749][ T7879] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.044081][ T7879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.608062][ T7936] fuse: Bad value for 'fd' [ 253.809918][ T7942] loop3: detected capacity change from 0 to 164 [ 254.833485][ T7942] mmap: syz.3.1145 (7942) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 255.025247][ T7962] loop4: detected capacity change from 0 to 512 [ 255.115660][ T7962] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 255.142550][ T4278] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 255.151994][ T4278] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 255.164304][ T4278] ISOFS: unable to read i-node block [ 255.170232][ T4278] ISOFS: unable to read i-node block [ 255.376903][ T4382] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.483441][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.489777][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.873695][ T4382] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.178219][ T4283] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 67: padding at end of block bitmap is not set [ 256.253643][ T4283] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 256.270662][ T4382] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.390512][ T4382] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.428083][ T7984] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1164'. [ 256.470963][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1164'. [ 256.480297][ T7984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1164'. [ 257.110421][ T7984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1164'. [ 257.127940][ T4283] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2921: inode #12: comm syz-executor: corrupted xattr block 8 [ 257.200963][ T4283] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 257.212801][ T7984] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1164'. [ 257.231058][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1164'. [ 257.255606][ T7984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1164'. [ 257.286877][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 257.292960][ T7984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1164'. [ 257.421782][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.435942][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.444172][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.452511][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.459984][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 257.467601][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.986137][ T8012] loop4: detected capacity change from 0 to 512 [ 258.098084][ T8012] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.1171: inode has both inline data and extents flags [ 258.133550][ T7994] chnl_net:caif_netlink_parms(): no params data found [ 258.170384][ T8012] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1171: couldn't read orphan inode 15 (err -117) [ 258.183868][ T8012] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 258.199444][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1171'. [ 258.900971][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 259.225907][ T8040] loop4: detected capacity change from 0 to 512 [ 259.232519][ T7994] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.259191][ T8040] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 259.269443][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.302199][ T7994] device bridge_slave_0 entered promiscuous mode [ 259.327432][ T8040] EXT4-fs (loop4): 1 truncate cleaned up [ 259.334152][ T8040] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 259.480969][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 259.524041][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.540886][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.549015][ T7994] device bridge_slave_1 entered promiscuous mode [ 259.641459][ T27] audit: type=1800 audit(1791723967.427:115): pid=8048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1175" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 260.221244][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 260.388390][ T7994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.419332][ T7994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.147789][ T7994] team0: Port device team_slave_0 added [ 261.519337][ T8072] loop4: detected capacity change from 0 to 512 [ 261.561117][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 261.599201][ T8072] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 261.633190][ T7994] team0: Port device team_slave_1 added [ 261.665758][ T8072] EXT4-fs (loop4): 1 truncate cleaned up [ 261.715249][ T8072] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 261.767664][ T4382] device hsr_slave_0 left promiscuous mode [ 261.812682][ T4382] device hsr_slave_1 left promiscuous mode [ 261.951405][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.975466][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.990616][ T8078] raw_sendmsg: syz.5.1189 forgot to set AF_INET. Fix it! [ 262.017680][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.025300][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.044823][ T4382] device bridge_slave_1 left promiscuous mode [ 262.610219][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.676919][ T4382] device bridge_slave_0 left promiscuous mode [ 262.712427][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.940470][ T4382] device veth1_macvtap left promiscuous mode [ 262.946664][ T4382] device veth0_macvtap left promiscuous mode [ 262.952937][ T4382] device veth1_vlan left promiscuous mode [ 262.959376][ T4382] device veth0_vlan left promiscuous mode [ 263.670834][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 264.498523][ T4382] team0 (unregistering): Port device team_slave_1 removed [ 264.638328][ T4382] team0 (unregistering): Port device team_slave_0 removed [ 264.751145][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.797258][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.731167][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 265.924588][ T4382] bond0 (unregistering): Released all slaves [ 266.075425][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.082655][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.170917][ T7994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.303402][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.359481][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.613454][ T7994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.685848][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 266.891787][ T7994] device hsr_slave_0 entered promiscuous mode [ 266.947164][ T7994] device hsr_slave_1 entered promiscuous mode [ 266.955114][ T7994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.965784][ T7994] Cannot create hsr debugfs directory [ 267.346778][ T7994] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 267.397497][ T7994] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 267.482238][ T7994] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 267.524894][ T7994] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 268.365880][ T7994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.443151][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.459873][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.839234][ T7994] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.202083][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.211500][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.234817][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.241990][ T4382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.287215][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.316669][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.335845][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.361178][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.368314][ T4382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.441753][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.465725][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.495204][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.536693][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.571406][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.583053][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.627895][ T7994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.660854][ T7994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.703432][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.712104][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.740252][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.772562][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.802070][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.830928][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.088253][ T8224] input: syz0 as /devices/virtual/input/input10 [ 271.799750][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.812204][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.876682][ T7994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.216216][ T8253] loop4: detected capacity change from 0 to 512 [ 272.317093][ T8253] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 272.608653][ T8253] EXT4-fs (loop4): 1 truncate cleaned up [ 272.696446][ T8253] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 273.451384][ T27] audit: type=1800 audit(1791723981.217:116): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1242" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 274.129634][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 274.357408][ T8282] loop4: detected capacity change from 0 to 512 [ 274.410168][ T8282] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 274.471299][ T8282] EXT4-fs (loop4): 1 truncate cleaned up [ 274.473974][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.476974][ T8282] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 274.510646][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.694118][ T7994] device veth0_vlan entered promiscuous mode [ 274.704429][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.723171][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.858944][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.959175][ T7304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.972682][ T8289] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1251'. [ 275.248972][ T7994] device veth1_vlan entered promiscuous mode [ 275.273505][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 275.391270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 275.408130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 275.445347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.476857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.506644][ T7994] device veth0_macvtap entered promiscuous mode [ 275.531256][ T7994] device veth1_macvtap entered promiscuous mode [ 275.585964][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.719200][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.750870][ T4321] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 275.759320][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.782734][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.843811][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.882990][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.930445][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.973750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.991696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.105604][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.285418][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.515500][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.646072][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.696119][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.702576][ T4321] usb 5-1: Using ep0 maxpacket: 16 [ 276.714159][ T4321] usb 5-1: unable to get BOS descriptor or descriptor too short [ 276.723198][ T4321] usb 5-1: config 6 has an invalid interface number: 231 but max is 0 [ 276.731670][ T4321] usb 5-1: config 6 has no interface number 0 [ 276.739948][ T4321] usb 5-1: New USB device found, idVendor=04f2, idProduct=aff9, bcdDevice=98.5b [ 276.760874][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.770971][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.778979][ T4321] usb 5-1: Product: syz [ 276.785248][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.796224][ T7994] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.805750][ T4321] usb 5-1: Manufacturer: syz [ 276.810368][ T4321] usb 5-1: SerialNumber: syz [ 276.829482][ T7994] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.849096][ T7994] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.868611][ T7994] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.883180][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.913425][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.115989][ T7114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.135991][ T7114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.192362][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.231329][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.274828][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.454556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 277.974960][ T8343] loop6: detected capacity change from 0 to 128 [ 278.035819][ T8343] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 278.072321][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.089453][ T8343] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.094119][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.599597][ T4325] usb 5-1: USB disconnect, device number 10 [ 281.256558][ T7994] EXT4-fs (loop6): unmounting filesystem. [ 282.579665][ T8427] loop4: detected capacity change from 0 to 128 [ 282.621435][ T8427] EXT4-fs (loop4): Test dummy encryption mode enabled [ 282.682464][ T8427] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 282.738318][ T8427] ext4 filesystem being mounted at /233/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 282.912164][ T8437] loop6: detected capacity change from 0 to 512 [ 282.968217][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 282.975492][ T8437] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 283.065800][ T8437] EXT4-fs (loop6): 1 truncate cleaned up [ 283.085290][ T8437] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 283.945054][ T7994] EXT4-fs (loop6): unmounting filesystem. [ 283.953784][ T8453] loop4: detected capacity change from 0 to 128 [ 284.036842][ T8453] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 284.057418][ T8453] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.850644][ T8497] loop6: detected capacity change from 0 to 512 [ 285.896964][ T8497] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 285.932807][ T8497] EXT4-fs (loop6): 1 truncate cleaned up [ 285.942864][ T8497] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 286.882657][ T7994] EXT4-fs (loop6): unmounting filesystem. [ 287.315703][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 288.030148][ T8537] loop4: detected capacity change from 0 to 128 [ 288.150579][ T8537] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 288.191018][ T8537] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 288.318187][ T8537] syz.4.1319 (pid 8537) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 288.372519][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 290.330011][ T8576] loop6: detected capacity change from 0 to 512 [ 290.435410][ T8576] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 290.627082][ T8576] EXT4-fs (loop6): 1 truncate cleaned up [ 290.653344][ T8576] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 291.357897][ T27] audit: type=1800 audit(1791723999.147:117): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1334" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 292.373142][ T7994] EXT4-fs (loop6): unmounting filesystem. [ 292.498000][ T8614] loop4: detected capacity change from 0 to 512 [ 292.562499][ T8614] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 292.617532][ T8614] System zones: 0-7 [ 292.677099][ T8614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 292.778854][ T8622] loop6: detected capacity change from 0 to 4096 [ 292.867366][ T8622] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 292.899060][ T8622] EXT4-fs (loop6): Online resizing not supported with bigalloc [ 292.925910][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 292.941612][ T8631] bridge0: port 3(wlan1) entered blocking state [ 292.954817][ T7994] EXT4-fs (loop6): unmounting filesystem. [ 292.991865][ T8631] bridge0: port 3(wlan1) entered disabled state [ 293.045674][ T8631] device wlan1 entered promiscuous mode [ 293.143562][ T8633] bridge0: port 3(wlan1) entered disabled state [ 293.277793][ T8633] device wlan1 left promiscuous mode [ 293.627629][ T8633] bridge0: port 3(wlan1) entered disabled state [ 295.658188][ T8685] 9pnet_fd: Insufficient options for proto=fd [ 295.956544][ T8688] [ 295.958918][ T8688] ====================================================== [ 295.965944][ T8688] WARNING: possible circular locking dependency detected [ 295.972987][ T8688] syzkaller #0 Not tainted [ 295.977413][ T8688] ------------------------------------------------------ [ 295.984450][ T8688] syz.1.1364/8688 is trying to acquire lock: [ 295.990434][ T8688] ffff88803114c4d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 296.000130][ T8688] [ 296.000130][ T8688] but task is already holding lock: [ 296.007507][ T8688] ffff88807adadaf0 (&sb->s_type->i_mutex_key#14){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 296.018394][ T8688] [ 296.018394][ T8688] which lock already depends on the new lock. [ 296.018394][ T8688] [ 296.028786][ T8688] [ 296.028786][ T8688] the existing dependency chain (in reverse order) is: [ 296.037787][ T8688] [ 296.037787][ T8688] -> #1 (&sb->s_type->i_mutex_key#14){+.+.}-{3:3}: [ 296.046471][ T8688] down_write+0x36/0x60 [ 296.051149][ T8688] process_measurement+0x3af/0x1c40 [ 296.056864][ T8688] ima_file_mmap+0xe9/0x140 [ 296.061882][ T8688] __se_sys_remap_file_pages+0x55a/0x7b0 [ 296.068026][ T8688] do_syscall_64+0x4c/0xa0 [ 296.072956][ T8688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.079363][ T8688] [ 296.079363][ T8688] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 296.086910][ T8688] __lock_acquire+0x3a03/0x7ea0 [ 296.092278][ T8688] lock_acquire+0x1bc/0x4a0 [ 296.097293][ T8688] down_read_killable+0x4c/0x340 [ 296.102743][ T8688] mmap_read_lock_killable+0x1d/0x60 [ 296.108540][ T8688] lock_mm_and_find_vma+0x2b1/0x2f0 [ 296.114247][ T8688] do_user_addr_fault+0x2e8/0xb20 [ 296.119784][ T8688] exc_page_fault+0x60/0x100 [ 296.124893][ T8688] asm_exc_page_fault+0x22/0x30 [ 296.130252][ T8688] fault_in_readable+0x13e/0x1f0 [ 296.135705][ T8688] fault_in_iov_iter_readable+0xbf/0x2f0 [ 296.141851][ T8688] generic_perform_write+0x1f1/0x5c0 [ 296.147650][ T8688] __generic_file_write_iter+0x148/0x2a0 [ 296.153794][ T8688] generic_file_write_iter+0xab/0x2e0 [ 296.159676][ T8688] vfs_write+0x482/0x9a0 [ 296.164440][ T8688] ksys_write+0x14d/0x260 [ 296.169284][ T8688] do_syscall_64+0x4c/0xa0 [ 296.174211][ T8688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.180640][ T8688] [ 296.180640][ T8688] other info that might help us debug this: [ 296.180640][ T8688] [ 296.190852][ T8688] Possible unsafe locking scenario: [ 296.190852][ T8688] [ 296.198286][ T8688] CPU0 CPU1 [ 296.203635][ T8688] ---- ---- [ 296.208985][ T8688] lock(&sb->s_type->i_mutex_key#14); [ 296.214445][ T8688] lock(&mm->mmap_lock); [ 296.221284][ T8688] lock(&sb->s_type->i_mutex_key#14); [ 296.229254][ T8688] rlock(&mm->mmap_lock); [ 296.233658][ T8688] [ 296.233658][ T8688] *** DEADLOCK *** [ 296.233658][ T8688] [ 296.241787][ T8688] 3 locks held by syz.1.1364/8688: [ 296.246883][ T8688] #0: ffff8880288e7768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 296.256103][ T8688] #1: ffff88807a04e460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 296.264978][ T8688] #2: ffff88807adadaf0 (&sb->s_type->i_mutex_key#14){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 296.276281][ T8688] [ 296.276281][ T8688] stack backtrace: [ 296.282158][ T8688] CPU: 1 PID: 8688 Comm: syz.1.1364 Not tainted syzkaller #0 [ 296.289517][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.299560][ T8688] Call Trace: [ 296.302834][ T8688] [ 296.305754][ T8688] dump_stack_lvl+0x188/0x24e [ 296.310430][ T8688] ? load_image+0x410/0x410 [ 296.314923][ T8688] ? show_regs_print_info+0x12/0x12 [ 296.320115][ T8688] ? print_circular_bug+0x12b/0x1a0 [ 296.325307][ T8688] check_noncircular+0x2f8/0x400 [ 296.330242][ T8688] ? print_deadlock_bug+0x5d0/0x5d0 [ 296.335436][ T8688] ? lockdep_lock+0xf1/0x1f0 [ 296.340019][ T8688] ? _find_first_zero_bit+0xd2/0x100 [ 296.345296][ T8688] __lock_acquire+0x3a03/0x7ea0 [ 296.350151][ T8688] ? verify_lock_unused+0x140/0x140 [ 296.355349][ T8688] ? verify_lock_unused+0x140/0x140 [ 296.360539][ T8688] ? verify_lock_unused+0x140/0x140 [ 296.365732][ T8688] lock_acquire+0x1bc/0x4a0 [ 296.370226][ T8688] ? mmap_read_lock_killable+0x1d/0x60 [ 296.375698][ T8688] ? read_lock_is_recursive+0x10/0x10 [ 296.381060][ T8688] ? cmp_ex_search+0x1a/0x70 [ 296.385646][ T8688] ? bsearch+0x86/0xb0 [ 296.389705][ T8688] ? fault_in_readable+0x13e/0x1f0 [ 296.394815][ T8688] ? search_extable+0x8c/0xd0 [ 296.399513][ T8688] ? trim_init_extable+0x3b0/0x3b0 [ 296.404620][ T8688] ? mmap_read_lock_killable+0x1d/0x60 [ 296.410094][ T8688] down_read_killable+0x4c/0x340 [ 296.415030][ T8688] ? mmap_read_lock_killable+0x1d/0x60 [ 296.420478][ T8688] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 296.426454][ T8688] mmap_read_lock_killable+0x1d/0x60 [ 296.431731][ T8688] lock_mm_and_find_vma+0x2b1/0x2f0 [ 296.436922][ T8688] do_user_addr_fault+0x2e8/0xb20 [ 296.441939][ T8688] ? _raw_spin_unlock_irq+0x1f/0x40 [ 296.447127][ T8688] ? lockdep_hardirqs_on+0x94/0x140 [ 296.452321][ T8688] exc_page_fault+0x60/0x100 [ 296.456910][ T8688] asm_exc_page_fault+0x22/0x30 [ 296.461756][ T8688] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 296.467467][ T8688] Code: 18 2a c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 f7 29 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 da 29 [ 296.487066][ T8688] RSP: 0018:ffffc90005cb7ab0 EFLAGS: 00050287 [ 296.493125][ T8688] RAX: ffffffff81be1c89 RBX: 0000000000001000 RCX: 0000000000080000 [ 296.501091][ T8688] RDX: ffffc90005d59000 RSI: 000000000001abab RDI: 000000000001abac [ 296.509054][ T8688] RBP: 0000000000000000 R08: ffff88802c190000 R09: 0000000000000002 [ 296.517027][ T8688] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000108000 [ 296.525001][ T8688] R13: dffffc0000000000 R14: 0000200000106a80 R15: 0000200000107000 [ 296.532971][ T8688] ? fault_in_readable+0x139/0x1f0 [ 296.538086][ T8688] fault_in_iov_iter_readable+0xbf/0x2f0 [ 296.543716][ T8688] generic_perform_write+0x1f1/0x5c0 [ 296.549000][ T8688] ? generic_file_direct_write+0x330/0x330 [ 296.554804][ T8688] ? __file_remove_privs+0x5f0/0x5f0 [ 296.560090][ T8688] ? rwsem_write_trylock+0x135/0x1c0 [ 296.565381][ T8688] ? clear_nonspinnable+0x60/0x60 [ 296.570415][ T8688] ? generic_write_checks_count+0x363/0x440 [ 296.576303][ T8688] __generic_file_write_iter+0x148/0x2a0 [ 296.581932][ T8688] generic_file_write_iter+0xab/0x2e0 [ 296.587303][ T8688] vfs_write+0x482/0x9a0 [ 296.591543][ T8688] ? file_end_write+0x250/0x250 [ 296.596394][ T8688] ? __fget_files+0x3fc/0x460 [ 296.601073][ T8688] ? __fdget_pos+0x2ae/0x360 [ 296.605660][ T8688] ? ksys_write+0x70/0x260 [ 296.610073][ T8688] ksys_write+0x14d/0x260 [ 296.614405][ T8688] ? __ia32_sys_read+0x80/0x80 [ 296.619166][ T8688] ? lockdep_hardirqs_on+0x94/0x140 [ 296.624360][ T8688] do_syscall_64+0x4c/0xa0 [ 296.628773][ T8688] ? clear_bhb_loop+0x60/0xb0 [ 296.633443][ T8688] ? clear_bhb_loop+0x60/0xb0 [ 296.638114][ T8688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.643999][ T8688] RIP: 0033:0x7fb624f9e1d9 [ 296.648413][ T8688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.668012][ T8688] RSP: 002b:00007fb625e7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.676413][ T8688] RAX: ffffffffffffffda RBX: 00007fb625225fa0 RCX: 00007fb624f9e1d9 [ 296.684376][ T8688] RDX: 00000000fffffd96 RSI: 0000200000001a80 RDI: 0000000000000004 [ 296.692367][ T8688] RBP: 00007fb625035888 R08: 0000000000000000 R09: 0000000000000000 [ 296.700332][ T8688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.708289][ T8688] R13: 00007fb625226038 R14: 00007fb625225fa0 R15: 00007ffe878f2278 [ 296.716257][ T8688]